[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

uBlock Origin Scope

Version 1.5.0 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Rating: 4.3 ★ (46 ratings)

Users: 50,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors:

The extension has a moderate user base of 50,000 users and a decent rating of 4.3 stars, suggesting some level of community acceptance. However, the lack of clear author information and developer details raises transparency concerns. The name suggests it's related to uBlock Origin, a well-known ad blocker, but without official verification, this could be misleading or impersonation.

Concerns:

The extension's permission set is extremely powerful and concerning for its stated purpose. The combination of webRequest and webNavigation permissions allows complete monitoring and modification of all web traffic. The broad host permissions across all HTTP/HTTPS and WebSocket protocols grant access to every website you visit. These permissions far exceed what most legitimate extensions require and create significant privacy and security risks. The storage permission, while common, adds to the concern when combined with the extensive data collection capabilities.

Recommendations:

Given the high-risk nature, avoid installing this extension unless absolutely necessary. If you must use it, run it in a completely separate Chrome profile isolated from your main browsing activities. Regularly audit what data it might be collecting through Chrome's extension management settings. Consider using the official uBlock Origin instead, which has established credibility and transparency. Monitor your network traffic for unusual activity if installed. The broad permissions make this extension capable of intercepting sensitive information like passwords, financial data, and personal communications across all websites.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: webNavigation

This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

activeTab
scripting
storage
webNavigation
webRequest

Host Permissions:

https://*/*
http://*/*
wss://*/*
ws://*/*

Embedded URLs (2027 total):

http://fsf.org/	http://www.gnu.org/licenses/
http://www.gnu.org/philosophy/why-not-lgpl.html	https://mozilla.org/MPL/2.0/.
https://publicsuffix.org/list/public_suffix_list.dat	https://publicsuffix.org/list/.
http://nic.ac/rules.htm	https://www.iana.org/domains/root/db/ad.html
https://www.iana.org/domains/root/db/ae.html	https://information.aero/registration/policies/dmp
https://www.nic.af/domain-price	http://www.nic.ag/prices.htm
http://nic.com.ai/	http://www.ert.gov.al/ert_alb/faq_det.html?Id=31
https://www.amnic.net/policy/en/Policy_EN.pdf	https://www.iana.org/domains/root/db/ao.html
https://www.dns.ao/ao/	https://www.iana.org/domains/root/db/aq.html
https://nic.ar/es/nic-argentina/normativa	https://www.iana.org/domains/root/db/arpa.html
https://www.iana.org/domains/root/db/as.html	https://www.iana.org/domains/root/db/asia.html
https://www.iana.org/domains/root/db/at.html	https://www.iana.org/domains/root/db/au.html
https://www.auda.org.au/	https://www.auda.org.au/au-domain-names/the-different-au-domain-names/state-and-territory-domain-names/
https://www.iana.org/domains/root/db/aw.html	https://www.iana.org/domains/root/db/ax.html
https://www.iana.org/domains/root/db/az.html	https://whois.az/?page_id=10
https://whois.az/?page_id=783	https://www.iana.org/domains/root/db/ba.html
https://www.iana.org/domains/root/db/bb.html	https://www.iana.org/domains/root/db/bd.html
https://www.iana.org/domains/root/db/be.html	https://www.iana.org/domains/root/db/bf.html
https://www.iana.org/domains/root/db/bg.html	https://www.register.bg/user/static/rules/en/index.html
https://www.iana.org/domains/root/db/bh.html	https://www.iana.org/domains/root/db/bi.html
http://whois.nic.bi/	https://www.iana.org/domains/root/db/biz.html
https://nic.bj/bj-suffixes.txt	https://www.bermudanic.bm/domain-registration/index.php
http://www.bnnic.bn/faqs	https://nic.bo
http://registro.br/dominio/categoria.html	https://en.wikipedia.org/wiki/States_of_Brazil
http://www.nic.bs/rules.html	https://www.iana.org/domains/root/db/bt.html
https://www.iana.org/domains/root/db/bw.html	https://nic.net.bw/bw-name-structure
https://www.iana.org/domains/root/db/by.html	http://tld.by/rules_2006_en.html
http://hoster.by/	https://www.iana.org/domains/root/db/bz.html
http://www.belizenic.bz/	https://www.iana.org/domains/root/db/ca.html
https://en.wikipedia.org/wiki/.gc.ca	http://registry.gc.ca/en/SubdomainFAQ
https://www.iana.org/domains/root/db/cat.html	https://www.iana.org/domains/root/db/cc.html
https://www.iana.org/domains/root/db/cd.html	https://www.nic.cd
https://www.iana.org/domains/root/db/cf.html	https://www.iana.org/domains/root/db/cg.html
https://www.iana.org/domains/root/db/ch.html	https://www.iana.org/domains/root/db/ci.html
https://www.iana.org/domains/root/db/ck.html	https://www.nic.cl
https://www.iana.org/domains/root/db/cm.html	https://www.iana.org/domains/root/db/cn.html
https://www.iana.org/domains/root/db/co.html	https://www.cointernet.com.co/como-funciona-un-dominio-restringido
https://www.iana.org/domains/root/db/com.html	https://www.iana.org/domains/root/db/coop.html
https://nic.cr/capitulo-1-registro-de-un-nombre-de-dominio/	https://www.iana.org/domains/root/db/cu.html
https://www.iana.org/domains/root/db/cv.html	https://ola.cv/domain-extensions-under-cv/

Page 1 of 26

Raw Manifest

{
  "name": "uBlock Origin Scope",
  "icons": {
    "16": "img/browsericons/logo16.png",
    "32": "img/browsericons/logo32.png",
    "64": "img/browsericons/logo64.png",
    "128": "img/browsericons/logo128.png",
    "256": "img/browsericons/logo256.png",
    "512": "img/browsericons/logo512.png",
    "1024": "img/browsericons/logo1024.png"
  },
  "action": {
    "default_icon": {
      "16": "img/browsericons/logo16.png",
      "32": "img/browsericons/logo32.png",
      "64": "img/browsericons/logo64.png",
      "128": "img/browsericons/logo128.png"
    },
    "default_popup": "popup.html",
    "default_title": "uBO Scope"
  },
  "author": "Raymond Hill",
  "version": "1.5.0",
  "background": {
    "type": "module",
    "service_worker": "/js/background.js"
  },
  "short_name": "uBO Scope",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "A tool which reports remote server connections",
  "permissions": [
    "activeTab",
    "scripting",
    "storage",
    "webNavigation",
    "webRequest"
  ],
  "host_permissions": [
    "https://*/*",
    "http://*/*",
    "wss://*/*",
    "ws://*/*"
  ],
  "manifest_version": 3,
  "minimum_chrome_version": "122.0"
}

by ✦ Astarte

uBlock Origin Scope

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (2027 total):

Raw Manifest

Detections

Manifest Findings