[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

AdBlocker Ultra Plus - free ad block

Version 1.5.2 View in Chrome Web Store

Last scanned: about 6 hours ago

Extension Details

Developer: newblocker.com

Rating: 4.5 ★ (46 ratings)

Users: 100,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors:

The extension has a moderate user base of 100,000 users and a decent 4.5-star rating, which suggests basic functionality. However, the limited number of reviews (46) relative to the user count raises questions about engagement authenticity. The developer "newblocker.com" lacks established reputation or transparency about their identity and practices.

Concerns:

The extension's permissions are extremely broad and concerning for an ad blocker. While legitimate ad blockers do require declarativeNetRequest permissions, the combination of tabs permission with broad host access creates significant privacy risks. The ability to inject content scripts into all websites means this extension can read, modify, or steal any data from every website you visit, including passwords, personal information, and financial data. The tabs permission allows monitoring of your browsing behavior across all sites.

Recommendations:

Given the high-risk profile, consider using well-established ad blockers like uBlock Origin or Adblock Plus instead. If you must use this extension, run it in a completely separate Chrome profile isolated from your main browsing activities, especially banking or sensitive sites. Regularly monitor your accounts for suspicious activity. The broad permissions significantly exceed what's necessary for basic ad blocking functionality, making this extension potentially dangerous for everyday use.

Findings

HIGH

Broad Content Script Injection

This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Raw Manifest

{
  "name": "__MSG_appName__",
  "icons": {
    "16": "images/icon16.png",
    "32": "images/icon32.png",
    "48": "images/icon48.png",
    "128": "images/icon128.png"
  },
  "action": {
    "default_icon": {
      "128": "images/icon-transparent.png"
    },
    "default_popup": "/popup/popup.html"
  },
  "version": "1.5.2",
  "background": {
    "type": "module",
    "service_worker": "background.js"
  },
  "options_ui": {
    "page": "/options/options.html",
    "open_in_tab": true
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "permissions": [
    "alarms",
    "storage",
    "tabs",
    "declarativeNetRequest",
    "declarativeNetRequestWithHostAccess"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "content_script.js"
      ],
      "run_at": "document_start",
      "matches": [
        "<all_urls>"
      ],
      "all_frames": true
    }
  ],
  "host_permissions": [
    "<all_urls>"
  ],
  "manifest_version": 3,
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'self'"
  },
  "declarative_net_request": {
    "rule_resources": [
      {
        "id": "ruleset_1",
        "path": "dnr/01.json",
        "enabled": true
      }
    ]
  },
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "info_popup/blocked.html",
        "data/*.json",
        "images/*.png"
      ],
      "use_dynamic_url": false
    }
  ]
}

by ✦ Astarte

https://cast2blok.com	https://clients2.google.com/service/update2/crx
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css	https://fonts.googleapis.com/css2?family=Inter:wght@300

AdBlocker Ultra Plus - free ad block

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Content Security Policy:

Embedded URLs (4 total):

Raw Manifest

Detections

Manifest Findings