Is AAEBlocker safe to use?

AAEBlocker has a security risk score of 85/100 (CRITICAL risk). Our security analysis detected 162557 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of AAEBlocker?

Based on our automated security analysis, AAEBlocker presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Firefox Add-ons Verified

AAEBlocker

Name: AAEBlocker
Availability: InStock
Author: Abdullah Asım Ersin

by Abdullah Asım Ersin · 1 users

240e2f20-5d28-548e-bfc4-40671bd8a53e | v11.0.0

CRITICAL risk

No change since v1.74.0

Risk verdict

Do not install

Score-based assessment (critical risk, 85/100). No analyst review available.

Analysis record

Analysed: 4 days ago
Version: v11.0.0
Artifact: SHA256 38E…329
Source: Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

1000 detail rows

Showing 25 of 41 · highest severity first

YARA Rule Matches

18 rules

Severity	Rule	Hits	Files	Metadata
LOW	`credential env files`	85	venv/lib/python3.14/site-packages/pip/_vendor/msgpack/__init__.pyvenv/lib/python3.14/site-packages/pip/_vendor/distro/distro.pyvenv/lib64/python3.14/site-packages/pip/_vendor/platformdirs/__pycache__/android.cpython-314.pyc +82 more	-
LOW	`RedirectToUnknownPath`	4	venv/lib/python3.14/site-packages/pip/_vendor/requests/models.pyvenv/lib/python3.14/site-packages/pip/_vendor/requests/auth.pyvenv/lib64/python3.14/site-packages/pip/_vendor/requests/models.py +1 more	-
LOW	`WarpStrings`	1	assets/ublock/badware.min.txt	-
LOW	`Cerberus`	1	assets/ublock/filters.min.txt	-
LOW	`WeakSSLTLSProtocolsShouldNotBeUsed`	12	venv/lib64/python3.14/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pyvenv/lib/python3.14/site-packages/pip/_vendor/urllib3/contrib/_securetransport/__pycache__/low_level.cpython-314.pycvenv/lib/python3.14/site-packages/pip/_vendor/urllib3/__pycache__/connection.cpython-314.pyc +9 more	-
LOW	`credential skype data`	4	assets/ublock/filters.min.txtassets/ublock/privacy.min.txtassets/ublock/unbreak.min.txt +1 more	-
LOW	`postinstall persistence mechanism`	30	venv/lib/python3.14/site-packages/pip/_internal/pyproject.pyvenv/lib/python3.14/site-packages/pip/_vendor/packaging/licenses/_spdx.pyassets/thirdparties/easylist/easyprivacy.txt +27 more	-
LOW	`LocalStorageShouldNotBeUsed`	10	assets/ublock/quick-fixes.min.txtjs/3p-filters.jsjs/1p-filters.js +7 more	-
LOW	`DebuggerStatementsShouldNotBeUsed`	13	js/resources/prevent-addeventlistener.jsjs/resources/scriptlets.jsjs/static-dnr-filtering.js +10 more	-
LOW	`ScarhiknStrings`	1	assets/thirdparties/urlhaus-filter/urlhaus-filter-online.txt	-
LOW	`postinstall file download`	472	venv/lib/python3.14/site-packages/pip/_internal/commands/__pycache__/configuration.cpython-314.pycvenv/lib64/python3.14/site-packages/pip/_vendor/rich/default_styles.pyjs/filtering-engines.js +469 more	-
LOW	`NoUseWeakRandom`	14	js/lib/tfjs/tf.min.jsjs/aae-crowdsource.jsweb_accessible_resources/fingerprint3.js +11 more	-
LOW	`NoUseEval`	9	venv/lib64/python3.14/site-packages/pip/_vendor/pygments/formatters/__init__.pyvenv/lib64/python3.14/site-packages/pip/_vendor/rich/markup.pyjs/lib/tfjs/tf-tflite.min.js +6 more	-
LOW	`postinstall file manipulation`	22	venv/lib/python3.14/site-packages/pip/_vendor/pygments/lexers/python.pyvenv/lib/python3.14/site-packages/pip/_internal/req/req_set.pyvenv/lib64/python3.14/site-packages/pip/_vendor/pygments/__pycache__/token.cpython-314.pyc +19 more	-
LOW	`postinstall obfuscation`	192	venv/lib/python3.14/site-packages/pip/_vendor/requests/__pycache__/sessions.cpython-314.pycvenv/lib64/python3.14/site-packages/pip/_internal/cli/main.pyvenv/lib64/python3.14/site-packages/pip/_vendor/pygments/lexer.py +189 more	-
LOW	`postinstall registry modification`	53	venv/lib64/python3.14/site-packages/pip/_internal/cli/base_command.pyvenv/lib/python3.14/site-packages/pip/_vendor/pkg_resources/__init__.pyassets/ublock/filters.min.txt +50 more	-
LOW	`AlertStatementsShouldNotBeUsed`	2	js/aae-settings-ui.jsassets/ublock/filters.min.txt	-
LOW	`postinstall environment access`	34	venv/lib/python3.14/site-packages/pip/_internal/models/search_scope.pyvenv/lib/python3.14/site-packages/pip/_internal/models/index.pyvenv/lib64/python3.14/site-packages/pip/_internal/commands/freeze.py +31 more	-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

159,204 total

...

Network indicators are queued for lazy loading

Scroll this section into view to load the detailed rows.

Publisher Evidence

Limited evidence

Abdullah Asım Ersin

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Firefox does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

Noisy-finding weight

x1.00

Publisher domain

lafolsun.com

Observed

Store verification signal

Limited signal

Limited

Extension portfolio

Portfolio

13 evidence rows available.

Finding Categories

Obfuscation

Network

159,204

IoC Indicators

YARA Rules Matched

18 rules(959 hits)

credential env files RedirectToUnknownPath WarpStrings Cerberus WeakSSLTLSProtocolsShouldNotBeUsed credential skype data postinstall persistence mechanism LocalStorageShouldNotBeUsed DebuggerStatementsShouldNotBeUsed ScarhiknStrings postinstall file download NoUseWeakRandom NoUseEval postinstall file manipulation postinstall obfuscation postinstall registry modification +2 more

Requested Permissions

23 permissions

<all_urls>

Access and modify data on every website you visit

Dangerous

http://*/*

Dangerous

https://*/*

Dangerous

file://*/*

Dangerous

webRequest

Intercept, modify, and block all network requests

High

webRequestBlocking

Block network requests before they complete

High

tabs

Medium

alarms

Low

dns

Low

menus

Low

privacy

Low

storage

Low

unlimitedStorage

Low

webNavigation

Low

https://easylist.to/*

Low

https://*.fanboy.co.nz/*

Low

https://filterlists.com/*

Low

https://forums.lanik.us/*

Low

https://github.com/*

Low

https://*.github.io/*

Low

https://github.com/AAEConsole/*

Low

https://aaeconsole.team/*

Low

https://*.reddit.com/r/AAEBlocker/*

Low

Security Analysis Summary

Security Analysis Overview

AAEBlocker is a Firefox Add-ons extension published by Abdullah Asım Ersin. Version 11.0.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 85/100 (CRITICAL risk) based on 162557 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

High: 7 finding(s)
Medium: 159238 finding(s)
Low: 3312 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

AAEBlocker is published by Abdullah Asım Ersin on the Firefox Add-ons marketplace. The extension has approximately 1 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Firefox version history

Risk trend by version

2 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected

Change since first

No change

Change from previous

No change

Versions:

First analyzed version

1.74.0

Sep 9, 2026

Risk range

85 to 85

Across analyzed versions

Latest analyzed version

11.0.0

Sep 16, 2026

Selected version

critical

Version

v11.0.0

4 days ago

Risk score

Findings

162557

Change vs previous

No change

Pick any point on the chart to explore that version's code below.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

About This Extension

AAEBlocker is a smart shield and defense system redesigned from the ground up for the modern web, where classic ad blockers fall short. Instead of relying on static rules, it acts like an "Artificial Intelligence", analyzing page elements to recognize ads dynamically. ⚡ KEY FEATURES: AI Engine (Skynet): Detects hidden sponsored content, Anti-Adblock warnings, and phishing attempts directly from the DOM structure using neural networks. Federated Learning Network: Newly discovered ad selectors by AAEBlocker users worldwide are collected anonymously in the cloud and securely synchronized to your device. Autonomous Idle Trainer: The extension continuously trains its neural network in the background when your browser is idle (consuming <1% CPU and <1MB RAM) without slowing you down. Cyber Terminal HUD: Monitor the AI's operations, memory consumption, and learning loops in real-time with a stunning Matrix-themed Cyber Terminal in the settings. Multi-language Support: Automatically switches to English or Turkish based on your browser's default language settings! Contact & Community (Open Source): 🔗 Source Code (GitHub): <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/b5eb178ff1c3f830074a5e6a31f93f186eb2ddf7929dd8bffe8eff44ca2975c3/https%3A//github.com/Abdullaherain0131/AAEBlocker" rel="nofollow">https://github.com/Abdullaherain0131/AAEBlocker</a> 🐛 Report Bugs (Issues): <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/63858c815c0305f0dca1438b626f9a5229070e643dabe6290a64cd996b38535c/https%3A//github.com/Abdullaherain0131/AAEBlocker/issues" rel="nofollow">https://github.com/Abdullaherain0131/AAEBlocker/issues</a> 💬 Community & Patches (Discussions): <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/93fcf3df5f86c2e865813b84f9fbec78ebf1ca900722aab1c88af06e6cfc7bca/https%3A//github.com/Abdullaherain0131/AAEBlocker/discussions" rel="nofollow">https://github.com/Abdullaherain0131/AAEBlocker/discussions</a> (Share your own patches and rules here) 📧 Support Email: <a href="/" rel="nofollow">[email protected]</a>

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

VaultysHub extension

Vaultys

CRITICAL 1 users

Kindredly - A safer, private web for families

Kindredly.ai

CRITICAL 5 users

VHS - Dev Tools

Vihat Software

CRITICAL

AdBlock for Firefox

AdBlock

CRITICAL 1.3M users

Wikidata

Shisma

CRITICAL 96 users

Canvas Refined

Guy

CRITICAL 43 users

AAEBlocker

Analysis record

Evidence ledger

OBFUSCATION-UNICODE_HEAVY-js/popup-fenix.js-70

OBFUSCATION-INVISIBLE_ZERO_WIDTH-assets/ublock/filters.min.txt-0

OBFUSCATION-UNICODE_HEAVY-lib/codemirror/lib/codemirror.js-288

OBFUSCATION-INVISIBLE_ZERO_WIDTH-_locales/fa/messages.json-0

OBFUSCATION-INVISIBLE_ZERO_WIDTH-_locales/si/messages.json-0

OBFUSCATION-INVISIBLE_ZERO_WIDTH-_locales/te/messages.json-0

OBFUSCATION-INVISIBLE_ZERO_WIDTH-_locales/ml/messages.json-0

NET-FETCH-js/code-viewer.js-102

NET-XMLHTTPREQUEST-js/cloud-ui.js-189

NET-FETCH-js/storage.js-1206

NET-XMLHTTPREQUEST-js/resources/utils.js-295

NET-FETCH-js/lib/tfjs/tflite_web_api_client.js-2710

NET-FETCH-js/aae-skynet.js-377

NET-XMLHTTPREQUEST-js/assets.js-249

NET-FETCH-js/start.js-313

NET-FETCH-js/aae-crowdsource.js-110

NET-FETCH-js/assets.js-361

NET-FETCH-lib/lz4/lz4-block-codec-wasm.js-139

MANIFEST-SENSITIVE-PERM-<ALL_URLS>

NET-FETCH-js/lib/tfjs/tflite_web_api_client.js-2676

MANIFEST-SENSITIVE-PERM-TABS

NET-FETCH-js/lib/tfjs/tflite_web_api_client.js-2694

NET-FETCH-js/resources/json-edit.js-1255

NET-FETCH-js/resources/scriptlets.js-1252

NET-FETCH-js/aae-background.js-162

YARA Rule Matches

Network Indicators

Publisher Evidence

Finding Categories

YARA Rules Matched

Requested Permissions

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

Risk trend by version

About This Extension

Frequently Asked Questions

Similar Extensions

VaultysHub extension

Kindredly - A safer, private web for families

VHS - Dev Tools

AdBlock for Firefox

Wikidata

Canvas Refined