← Campaigns
vpn-naruzhu
StreamTube Proxy routes all YouTube traffic through a hardcoded proxy (193.233.165.68:63228) whose server list and API base can be changed remotely by the operator, giving them visibility into users' YouTube activity; remove the extension if you don't trust the operator.
- Extensions
- 2
- Stores
- Chrome
- Updated
- 2026-10-14
- Disclosed
- 2026-07-12
- Last observed
- 2026-10-07
Member extensions
2 extensions| Extension | Store | Reported versions | Current risk |
|---|---|---|---|
| StreamTube Proxyepkcfhiniijndongcpclcfogmbpphfga | Chrome | Not specified | 47.88MEDIUM |
| 360 Filtergobmoeddfnndeoeeilijfconmieoffdf | Chrome | 0.9.2 | 43.58MEDIUM |
Indicators
Download STIX →Browse 4 indicators
| Type | Value & evidence |
|---|---|
| sha256 | e87abbdb2de65b2d58f3da6e969345c3211672977ef1d10c3015132b0bee14b3full CRX, analysed build archived in R2 (360 Filter 0.9.2) |
| ip | 193.233.165.68Hardcoded proxy server for YouTube/ytimg/gemini domains |
| url | https://raw.githubusercontent.com/vpn-naruzhu/public/main/uboost-extensionRemote config file controlling proxy server list and apiBaseUrl |
| domain | uubb.websiteAPI base URL returned by remote config; operator's backend |