Add Pro Ad Blocker

Version 1.4 View in Chrome Web Store

Last scanned: about 1 month ago | force re-scan

Extension Details

Rating: 4.7 ★ (15 ratings)

Users: 5,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors:

The extension has a relatively small user base of 5,000 users, which limits community validation. While it maintains a high rating of 4.7 stars, this is based on only 15 reviews, making the sample size too small for reliable assessment. The lack of developer information and company details raises transparency concerns. The generic name "Add Pro Ad Blocker" could indicate a potentially opportunistic extension trying to capitalize on popular ad-blocking functionality.

Concerns:

The most significant concern is the broad host permissions (<all_urls>) combined with scripting capabilities, which grants the extension access to all websites and the ability to modify their content. While these permissions are technically necessary for ad-blocking functionality, they create substantial potential for abuse. The declarativeNetRequestWithHostAccess permission, while appropriate for blocking network requests, amplifies the risk when combined with universal site access. The storage permission allows data collection and retention, which could be problematic without clear privacy policies.

Recommendations:

Consider running this extension in a separate Chrome profile to isolate potential risks from your main browsing activities. Alternatively, use well-established ad blockers like uBlock Origin or AdBlock Plus, which have larger user bases, transparent development teams, and proven track records. If you choose to keep this extension, regularly monitor your browsing behavior for unusual activity and avoid using it while accessing sensitive websites like banking or personal accounts.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

declarativeNetRequestWithHostAccess
scripting
activeTab
storage

Host Permissions:

<all_urls>

Embedded URLs (742 total):

https://docs.google.com/forms/d/e/1FAIpQLSdi3_m1C4Wf_6ndoGA1djD3tgBpousHTvClrtU08AtUQv11Zw/viewform?usp=header	https://forums.lanik.us/
https://easylist.to/	https://easylist.to/pages/licence.html
https://github.com/easylist/easylist/issues	https://github.com/easylist/easylist/pulls
https://github.com/easylist/easylist/issues/11123	https://github.com/easylist/easylist/commit/6295313
https://github.com/easylist/easylist/issues/5054	https://github.com/NanoMeow/QuickReports/issues/198
https://github.com/uBlockOrigin/uAssets/issues/2364	https://jdrucker.com/gold
https://ourgoldguy.com/contact/	http://clicks.totemcash.com/
http://mypillow.com/	http://www.mypillow.com/
https://aads.com/campaigns/	https://ad.admitad.com/
https://ad1.adfarm1.adition.com/	https://affiliate.fastcomet.com/
https://antiagingbed.com/discount/	https://ap.octopuspop.com/click/
https://awbbjmp.com/	https://charmingdatings.life/
https://clicks.affstrack.com/	https://cpa.10kfreesilver.com/
https://glersakr.com/	https://go.xlrdr.com
https://ilovemyfreedoms.com/landing-	https://istlnkcl.com/
https://join.girlsoutwest.com/	https://join.playboyplus.com/track/
https://join3.bannedsextapes.com	https://mylead.global/stl/
https://mypatriotsupply.com/	https://mypillow.com/
https://mystore.com/	https://noqreport.com/
https://optimizedelite.com/	https://rapidgator.net/article/premium/ref/
https://shiftnetwork.infusionsoft.com/go/	https://track.aftrk1.com/
https://track.fiverr.com/visit/	https://turtlebids.irauctions.com/
https://url.totaladblock.com/	https://wct.link/click?
https://wwp.hoqodd.com/redirect-zone/	https://www.avantlink.com/click.php
https://www.brighteonstore.com/products/	https://www.cloudways.com/en/?id
https://www.herbanomic.com/	https://www.hostg.xyz/
https://www.mypatriotsupply.com/	https://www.mypillow.com/
https://www.profitablegatecpm.com/	https://www.restoro.com/
https://www.targetingpartner.com/	https://zone.gotrackier.com/
https://zstacklife.com/	https://1337x.vpnonly.site/
http://ads.trafficjunky.net/	https://vulpix.bet/?ref=
https://www.friendlyduck.com/AF_	http://adultfriendfinder.com/go/
http://annulmentequitycereals.com/	http://avthelkp.net/
http://bongacams.com/track?	http://cam4com.go2cloud.org/aff_c?
http://coefficienttolerategravel.com/	http://com-1.pro/
http://eslp34af.click/	http://handgripvegetationhols.com/
http://li.blogtrottr.com/click?	http://muzzlematrix.com/
http://partners.etoro.com/	http://premonitioninventdisagree.com/
http://revolvemockerycopper.com/	http://roadcontagion.com/
http://sarcasmadvisor.com/	http://stickingrepute.com/

Page 1 of 10

Raw Manifest

{
  "name": "__MSG_appName__",
  "icons": {
    "16": "icons/icon16.png",
    "32": "icons/icon32.png",
    "48": "icons/icon48.png",
    "96": "icons/icon96.png",
    "128": "icons/icon128.png"
  },
  "action": {
    "default_icon": {
      "16": "icons/icon16.png",
      "32": "icons/icon32.png",
      "48": "icons/icon48.png",
      "96": "icons/icon96.png",
      "128": "icons/icon128.png"
    },
    "default_popup": "popup.html"
  },
  "version": "1.4",
  "background": {
    "type": "module",
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "permissions": [
    "declarativeNetRequestWithHostAccess",
    "scripting",
    "activeTab",
    "storage"
  ],
  "default_locale": "en",
  "host_permissions": [
    "<all_urls>"
  ],
  "manifest_version": 3,
  "declarative_net_request": {
    "rule_resources": [
      {
        "id": "server_rules",
        "path": "server_rules.json",
        "enabled": true
      }
    ]
  }
}

by ✦ Astarte