[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Adblock for Youtube™

Version 7.1.1 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Rating: 4.4 ★ (371.2K ratings)

Users: 10,000,000

Context-Aware Verdict

CRITICAL

Overall Risk

Trust Factors:

The extension has significant legitimacy indicators with 10 million users and a solid 4.4-star rating from over 371,000 reviews, suggesting widespread user satisfaction. The name clearly indicates its purpose as a YouTube ad blocker, which aligns with user expectations. However, the lack of visible developer information raises some transparency concerns.

Concerns:

The permission set is extremely broad for a YouTube-focused ad blocker. The combination of tabs, webNavigation, webRequest, and <all_urls> host permissions grants extensive access to monitor and modify your entire browsing experience across all websites, not just YouTube. The webRequest permission allows intercepting and potentially modifying all web traffic, while webNavigation enables comprehensive tracking of your browsing patterns. These capabilities far exceed what's typically necessary for blocking YouTube ads specifically, creating potential for data collection or malicious activity beyond the stated purpose.

Recommendations:

Given the critical risk level, consider running this extension in a separate Chrome profile dedicated to YouTube usage only. Alternatively, explore YouTube ad blocking solutions with more limited permissions, such as browser-level ad blockers or YouTube Premium. If you continue using this extension, regularly review your browsing data and consider using it only when actively watching YouTube, disabling it for other browsing activities.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webNavigation

This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Raw Manifest

{
  "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/WmzFe8hcRH9QeTBEDo8cH/4IYaw4DpiYlK6lUlXUPmEX8kkFfugsFMjlqVqHJN44Vhhz0gEWpyxWDYMfMPaJo1lXVGp/PBkf22QjvSvfAeWTGzhCo9020ysg3FeEEztm7yK50qkSNCgqsdRSdZKgy8dqF6YSouJRcYB6y5CZhwIDAQAB",
  "name": "__MSG_extension_name__",
  "icons": {
    "16": "images/icon-16.png",
    "128": "images/icon-128.png"
  },
  "action": {
    "default_icon": {
      "19": "images/icon-19.png",
      "38": "images/icon-38.png"
    },
    "default_popup": "popup.html",
    "default_title": "Adblock for Youtube™"
  },
  "version": "7.1.1",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_extension_description__",
  "permissions": [
    "tabs",
    "storage",
    "unlimitedStorage",
    "scripting",
    "alarms",
    "declarativeNetRequest",
    "webNavigation",
    "webRequest"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "contentscript.js"
      ],
      "run_at": "document_start",
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "all_frames": true
    }
  ],
  "host_permissions": [
    "<all_urls>"
  ],
  "manifest_version": 3
}

by ✦ Astarte

https://chromewebstore.google.com/detail/	https://fonts.googleapis.com/css?family=Roboto:300
https://get.adblock-for-youtube.com	https://api.adblock-for-youtube.com
https://fonts.googleapis.com/css2?family=Montserrat:wght@400	http://www.w3.org/2000/svg
https://get.adblock-for-youtube.com/disable-adblockers	https://get.adblock-for-youtube.com/windows
https://get.adblock-for-youtube.com/android	https://get.adblock-for-youtube.com/iphone
https://clients2.google.com/service/update2/crx

Adblock for Youtube™

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (11 total):

Raw Manifest

Detections

Manifest Findings