Is "uBlock Origin" on Firefox Add-ons Safe to Install?

Raymond Hill · firefox · v1.70.0

uBlock Origin is <b>not</b> an "ad blocker", it's a wide-spectrum content blocker with CPU and memory efficiency as a primary feature. Out of the box, uBO blocks ads, trackers, coin miners, popups, etc. through the following lists of filters, enabled by default: EasyList (ads) EasyPrivacy (tracking) Peter Lowe’s Ad server list (ads and tracking) Online Malicious URL Blocklist uBO's own lists More lists are available for you to select if you wish: EasyList Cookie Fanboy Annoyances AdGuard Annoyances Dan Pollock’s hosts file And many others Additionally, you can point-and-click to block JavaScript locally or globally, create your own global or local rules to override entries from filter lists, and many more advanced features. Free. Open source with public license (GPLv3) For users by users. If ever you really do want to contribute something, think about the people working hard to maintain the filter lists you are using, which were made available to use by all for free. <ul> <li><a href=" https://github.com/gorhill/uBlock#ublock-origin ">Documentation</a> <li><a href=" https://github.com/gorhill/uBlock/releases ">Release notes</a> <li><a href=" https://www.reddit.com/r/uBlockOrigin/ ">Community support @ Reddit</a> <li><a href=" https://github.com/gorhill/uBlock/graphs/contributors ">Contributors @ GitHub<li><a href=" https://crowdin.net/project/ublock ">Contributors @ Crowdin</a> </ul>

Risk Assessment

Analyzed
100
out of 100
CRITICAL

167489 security findings detected across all analyzers

Firefox extension requesting 23 permissions

Severity Breakdown

0
Critical
793
High
166696
Medium
0
Low
0
Info

Finding Categories

790
Malware Signatures
3
Obfuscation
15
Network
190
IoC Indicators

YARA Rules Matched

19 rules(790 hits)
postinstall obfuscation postinstall system command postinstall crypto operations postinstall file manipulation DebuggerStatementsShouldNotBeUsed credential env files postinstall file download postinstall network communication postinstall persistence mechanism credential skype data credential steam data postinstall registry modification LocalStorageShouldNotBeUsed NoUseWeakRandom WarpStrings postinstall environment access +3 more

Requested Permissions

23 permissions
<all_urls>

Access and modify data on every website you visit

Dangerous
http://*/*
Dangerous
https://*/*
Dangerous
file://*/*
Dangerous
webRequest

Intercept, modify, and block all network requests

High
webRequestBlocking

Block network requests before they complete

High
tabs
Medium
alarms
Low
dns
Low
menus
Low
privacy
Low
storage
Low
unlimitedStorage
Low
webNavigation
Low
https://easylist.to/*
Low
https://*.fanboy.co.nz/*
Low
https://filterlists.com/*
Low
https://forums.lanik.us/*
Low
https://github.com/*
Low
https://*.github.io/*
Low
https://github.com/uBlockOrigin/*
Low
https://ublockorigin.github.io/*
Low
https://*.reddit.com/r/uBlockOrigin/*
Low

About This Extension

uBlock Origin is &lt;b&gt;not&lt;/b&gt; an "ad blocker", it's a wide-spectrum content blocker with CPU and memory efficiency as a primary feature. Out of the box, uBO blocks ads, trackers, coin miners, popups, etc. through the following lists of filters, enabled by default: <ul><li>EasyList (ads)</li><li>EasyPrivacy (tracking)</li><li>Peter Lowe’s Ad server list (ads and tracking)</li><li>Online Malicious URL Blocklist</li><li>uBO's own lists</li></ul> More lists are available for you to select if you wish: <ul><li>EasyList Cookie</li><li>Fanboy Annoyances</li><li>AdGuard Annoyances</li><li>Dan Pollock’s hosts file</li><li>And many others</li></ul> Additionally, you can point-and-click to block JavaScript locally or globally, create your own global or local rules to override entries from filter lists, and many more advanced features. Free. Open source with public license (GPLv3) For users by users. If ever you really do want to contribute something, think about the people working hard to maintain the filter lists you are using, which were made available to use by all for free. &lt;ul&gt; &lt;li&gt;&lt;a href="<a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/788d66e7299bdfb1da05832994551640d0ad441e148a3e29afe8dd0a5a90800c/https%3A//github.com/gorhill/uBlock%23ublock-origin" rel="nofollow">https://github.com/gorhill/uBlock#ublock-origin</a>"&gt;Documentation&lt;/a&gt; &lt;li&gt;&lt;a href="<a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/de148deb19b52874eb4c5726859834f3294a6057ed44e873c958acee4c920062/https%3A//github.com/gorhill/uBlock/releases" rel="nofollow">https://github.com/gorhill/uBlock/releases</a>"&gt;Release notes&lt;/a&gt; &lt;li&gt;&lt;a href="<a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/32c3d6819f5263e56c265042e8d34e2da4d974e73a7ad55a81786d8995cf65a9/https%3A//www.reddit.com/r/uBlockOrigin/" rel="nofollow">https://www.reddit.com/r/uBlockOrigin/</a>"&gt;Community support @ Reddit&lt;/a&gt; &lt;li&gt;&lt;a href="<a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/9bfaba4f3fe3310ae0a3189187f5fbab185097d85398752765e086889775079e/https%3A//github.com/gorhill/uBlock/graphs/contributors" rel="nofollow">https://github.com/gorhill/uBlock/graphs/contributors</a>"&gt;Contributors @ GitHub&lt;li&gt;&lt;a href="<a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/6a44868e1580018df8d4d87adf8e97cc74b71b962a73dd5a64604f99db767287/https%3A//crowdin.net/project/ublock" rel="nofollow">https://crowdin.net/project/ublock</a>"&gt;Contributors @ Crowdin&lt;/a&gt; &lt;/ul&gt;

Detailed Findings

810 total

YARA Rule Matches

19 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

IP Addresses
2
Domains
190
Strings
190

All Indicators · 190

Domain
detected Domain: solar.sunpowercorp.com

XIOC detected Domain: solar.sunpowercorp.com

extracted_from_files

Domain
detected Domain: pages.wardsintelligence.informa.com

XIOC detected Domain: pages.wardsintelligence.informa.com

extracted_from_files

Domain
detected Domain: pages.usviolifeprofessional.mktg-upfield.com

XIOC detected Domain: pages.usviolifeprofessional.mktg-upfield.com

extracted_from_files

Domain
detected Domain: pages.uchicagomedicine.org

XIOC detected Domain: pages.uchicagomedicine.org

extracted_from_files

Domain
detected Domain: pages.titanmachinery.com

XIOC detected Domain: pages.titanmachinery.com

extracted_from_files

Domain
detected Domain: pages.siemens.com

XIOC detected Domain: pages.siemens.com

extracted_from_files

Domain
detected Domain: partnerwith.us.streetbond.com

XIOC detected Domain: partnerwith.us.streetbond.com

extracted_from_files

Domain
detected Domain: partnersuccessmetrics.cisco.com

XIOC detected Domain: partnersuccessmetrics.cisco.com

extracted_from_files

Domain
detected Domain: partnersuccess.cisco.com

XIOC detected Domain: partnersuccess.cisco.com

extracted_from_files

Domain
detected Domain: partners.singularlogic.eu

XIOC detected Domain: partners.singularlogic.eu

extracted_from_files

Domain
detected Domain: partners.redbull.racing

XIOC detected Domain: partners.redbull.racing

extracted_from_files

Domain
detected Domain: partners.avaya.com

XIOC detected Domain: partners.avaya.com

extracted_from_files

Domain
detected Domain: partnermktg.symantec.com

XIOC detected Domain: partnermktg.symantec.com

extracted_from_files

Domain
detected Domain: pet-recycling.husky.ca

XIOC detected Domain: pet-recycling.husky.ca

extracted_from_files

Domain
detected Domain: pd.bppeloqua.com

XIOC detected Domain: pd.bppeloqua.com

extracted_from_files

Domain
detected Domain: pcs.capgroup.com

XIOC detected Domain: pcs.capgroup.com

extracted_from_files

Domain
detected Domain: pcm.symantec.com

XIOC detected Domain: pcm.symantec.com

extracted_from_files

Domain
detected Domain: pci.aon.com

XIOC detected Domain: pci.aon.com

extracted_from_files

Domain
detected Domain: payroll.smartsalary.com.au

XIOC detected Domain: payroll.smartsalary.com.au

extracted_from_files

Domain
detected Domain: payments.americanexpress.co.uk

XIOC detected Domain: payments.americanexpress.co.uk

extracted_from_files

Domain
detected Domain: phcbi-solution.phchd.com

XIOC detected Domain: phcbi-solution.phchd.com

extracted_from_files

Domain
detected Domain: phadia.thermofisher.com

XIOC detected Domain: phadia.thermofisher.com

extracted_from_files

Domain
detected Domain: phadia.thermo.com

XIOC detected Domain: phadia.thermo.com

extracted_from_files

Domain
detected Domain: pgs.farmprogress.com

XIOC detected Domain: pgs.farmprogress.com

extracted_from_files

Domain
detected Domain: pgs.corporatetravelcommunity.com

XIOC detected Domain: pgs.corporatetravelcommunity.com

extracted_from_files

Domain
detected Domain: pgs.centreforaviation.com

XIOC detected Domain: pgs.centreforaviation.com

extracted_from_files

Domain
detected Domain: pgs.aviationweek.com

XIOC detected Domain: pgs.aviationweek.com

extracted_from_files

Domain
detected Domain: plongezdanslabdkj.carte-gr.total.fr

XIOC detected Domain: plongezdanslabdkj.carte-gr.total.fr

extracted_from_files

Domain
detected Domain: plbusiness.samsung.com

XIOC detected Domain: plbusiness.samsung.com

extracted_from_files

Domain
detected Domain: playbook.convio.com

XIOC detected Domain: playbook.convio.com

extracted_from_files

Domain
detected Domain: platformsolutions.shutterstock.com

XIOC detected Domain: platformsolutions.shutterstock.com

extracted_from_files

Domain
detected Domain: pl-go.experian.com

XIOC detected Domain: pl-go.experian.com

extracted_from_files

Domain
detected Domain: pkg.balluff.com

XIOC detected Domain: pkg.balluff.com

extracted_from_files

Domain
detected Domain: picis.optum.com

XIOC detected Domain: picis.optum.com

extracted_from_files

Domain
detected Domain: podbooth.martela.no

XIOC detected Domain: podbooth.martela.no

extracted_from_files

Domain
detected Domain: podbooth.martela.com

XIOC detected Domain: podbooth.martela.com

extracted_from_files

Domain
detected Domain: poczta.carte-gr.total.fr

XIOC detected Domain: poczta.carte-gr.total.fr

extracted_from_files

Domain
detected Domain: pm.eu.viatrisconnect.it

XIOC detected Domain: pm.eu.viatrisconnect.it

extracted_from_files

Domain
detected Domain: pm.eu.viatrisconnect.de

XIOC detected Domain: pm.eu.viatrisconnect.de

extracted_from_files

Domain
detected Domain: pm.eu.viatrisconnect.com

XIOC detected Domain: pm.eu.viatrisconnect.com

extracted_from_files

Domain
detected Domain: plusavecmoins.adp.ca

XIOC detected Domain: plusavecmoins.adp.ca

extracted_from_files

Domain
detected Domain: posgrados-unisabana-edu-co-1207474081.p04.elqsandbox.com

XIOC detected Domain: posgrados-unisabana-edu-co-1207474081.p04.elqsandbox.com

extracted_from_files

Domain
detected Domain: portal.krollontrack.co.uk

XIOC detected Domain: portal.krollontrack.co.uk

extracted_from_files

Domain
detected Domain: porsche.nabooda-auto.com

XIOC detected Domain: porsche.nabooda-auto.com

extracted_from_files

Domain
detected Domain: pop3.carte-gr.total.fr

XIOC detected Domain: pop3.carte-gr.total.fr

extracted_from_files

Domain
detected Domain: pop.dmglobal.com

XIOC detected Domain: pop.dmglobal.com

extracted_from_files

Domain
detected Domain: pop.carte-gr.total.fr

XIOC detected Domain: pop.carte-gr.total.fr

extracted_from_files

Domain
detected Domain: podbooth.martela.se

XIOC detected Domain: podbooth.martela.se

extracted_from_files

Domain
detected Domain: pr.prnewswire.co.uk

XIOC detected Domain: pr.prnewswire.co.uk

extracted_from_files

Domain
detected Domain: pr.cision.fi

XIOC detected Domain: pr.cision.fi

extracted_from_files

Domain
detected Domain: pr.cision.com

XIOC detected Domain: pr.cision.com

extracted_from_files

Domain
detected Domain: pr.cision.co.uk

XIOC detected Domain: pr.cision.co.uk

extracted_from_files

Domain
detected Domain: pp.scorecardrewards.com

XIOC detected Domain: pp.scorecardrewards.com

extracted_from_files

Domain
detected Domain: post.carte-gr.total.fr

XIOC detected Domain: post.carte-gr.total.fr

extracted_from_files

Domain
detected Domain: posgrados.unisabana.edu.co

XIOC detected Domain: posgrados.unisabana.edu.co

extracted_from_files

Domain
detected Domain: preferencecentre.americanexpress.co.uk

XIOC detected Domain: preferencecentre.americanexpress.co.uk

extracted_from_files

Domain
detected Domain: preferencecenter.fticonsulting.com

XIOC detected Domain: preferencecenter.fticonsulting.com

extracted_from_files

Domain
detected Domain: preference.nuance.com

XIOC detected Domain: preference.nuance.com

extracted_from_files

Domain
detected Domain: preference.motorolasolutions.com

XIOC detected Domain: preference.motorolasolutions.com

extracted_from_files

Domain
detected Domain: pre-employmentservices.adp.com

XIOC detected Domain: pre-employmentservices.adp.com

extracted_from_files

Domain
detected Domain: praluent-e.regeneron.com

XIOC detected Domain: praluent-e.regeneron.com

extracted_from_files

Domain
detected Domain: pr.prnewswire.com

XIOC detected Domain: pr.prnewswire.com

extracted_from_files

Domain
detected Domain: preferences.deloitte.ca

XIOC detected Domain: preferences.deloitte.ca

extracted_from_files

Domain
detected Domain: preferences.definitivetechnology.com

XIOC detected Domain: preferences.definitivetechnology.com

extracted_from_files

Domain
detected Domain: preferences.darglobal.co.uk

XIOC detected Domain: preferences.darglobal.co.uk

extracted_from_files

Domain
detected Domain: preferences.bowerswilkins.com

XIOC detected Domain: preferences.bowerswilkins.com

extracted_from_files

Domain
detected Domain: preferences.acspubs.org

XIOC detected Domain: preferences.acspubs.org

extracted_from_files

Domain
detected Domain: preferencecentre.americanexpress.se

XIOC detected Domain: preferencecentre.americanexpress.se

extracted_from_files

Domain
detected Domain: preferencecentre.americanexpress.es

XIOC detected Domain: preferencecentre.americanexpress.es

extracted_from_files

Domain
detected Domain: preferences.marketone.com

XIOC detected Domain: preferences.marketone.com

extracted_from_files

Domain
detected Domain: preferences.marantz.com

XIOC detected Domain: preferences.marantz.com

extracted_from_files

Domain
detected Domain: preferences.lakersgaming.com

XIOC detected Domain: preferences.lakersgaming.com

extracted_from_files

Domain
detected Domain: preferences.la-lakers.com

XIOC detected Domain: preferences.la-lakers.com

extracted_from_files

Domain
detected Domain: preferences.heatexperience.com

XIOC detected Domain: preferences.heatexperience.com

extracted_from_files

Domain
detected Domain: preferences.dtlphx.net

XIOC detected Domain: preferences.dtlphx.net

extracted_from_files

Domain
detected Domain: preferences.denon.com

XIOC detected Domain: preferences.denon.com

extracted_from_files

Domain
detected Domain: preview.fi-institutional.com.au

XIOC detected Domain: preview.fi-institutional.com.au

extracted_from_files

Domain
detected Domain: premierbuyer.edm.globalsources.com

XIOC detected Domain: premierbuyer.edm.globalsources.com

extracted_from_files

Domain
detected Domain: pregrados.javeriana.edu.co

XIOC detected Domain: pregrados.javeriana.edu.co

extracted_from_files

Domain
detected Domain: preferenza.nposistemi.it

XIOC detected Domain: preferenza.nposistemi.it

extracted_from_files

Domain
detected Domain: preferences.sb-lakers.com

XIOC detected Domain: preferences.sb-lakers.com

extracted_from_files

Domain
detected Domain: preferences.polkaudio.com

XIOC detected Domain: preferences.polkaudio.com

extracted_from_files

Domain
detected Domain: preferences.oakstreethealth.com

XIOC detected Domain: preferences.oakstreethealth.com

extracted_from_files

Domain
detected Domain: product.cloud.travelport.com

XIOC detected Domain: product.cloud.travelport.com

extracted_from_files

Domain
detected Domain: prod.tracking.refinitiv.com

XIOC detected Domain: prod.tracking.refinitiv.com

extracted_from_files

IP
detected Domain: procurement.cipscomms.org

XIOC detected Domain: procurement.cipscomms.org

extracted_from_files

Domain
detected Domain: processusmetier.ricoh.fr

XIOC detected Domain: processusmetier.ricoh.fr

extracted_from_files

Domain
detected Domain: process.global360.com

XIOC detected Domain: process.global360.com

extracted_from_files

Domain
detected Domain: pro.stormwindstudios.com

XIOC detected Domain: pro.stormwindstudios.com

extracted_from_files

Domain
detected Domain: primary.hasegawa.jp

XIOC detected Domain: primary.hasegawa.jp

extracted_from_files

Domain
detected Domain: products.ricoh.ch

XIOC detected Domain: products.ricoh.ch

extracted_from_files

Domain
detected Domain: products.ricoh-europe.com

XIOC detected Domain: products.ricoh-europe.com

extracted_from_files

Domain
detected Domain: products.forddirectdealers.com

XIOC detected Domain: products.forddirectdealers.com

extracted_from_files

Domain
detected Domain: productivity-s.yale.com

XIOC detected Domain: productivity-s.yale.com

extracted_from_files

Domain
detected Domain: productionprinting.ricoh.ie

XIOC detected Domain: productionprinting.ricoh.ie

extracted_from_files

Domain
detected Domain: productionprinting.ricoh.co.uk

XIOC detected Domain: productionprinting.ricoh.co.uk

extracted_from_files

Domain
detected Domain: productionprinting.ricoh.ch

XIOC detected Domain: productionprinting.ricoh.ch

extracted_from_files

Domain
detected Domain: profiling.afry.com

XIOC detected Domain: profiling.afry.com

extracted_from_files

Domain
detected Domain: profile.marketone.com

XIOC detected Domain: profile.marketone.com

extracted_from_files

Domain
detected Domain: produktionsdruck.ricoh.de

XIOC detected Domain: produktionsdruck.ricoh.de

extracted_from_files

Domain
detected Domain: produkte.ricoh.de

XIOC detected Domain: produkte.ricoh.de

extracted_from_files

Domain
detected Domain: produkte.ricoh.at

XIOC detected Domain: produkte.ricoh.at

extracted_from_files

Domain
detected Domain: products.ricoh.ie

XIOC detected Domain: products.ricoh.ie

extracted_from_files

Domain
detected Domain: products.ricoh.co.uk

XIOC detected Domain: products.ricoh.co.uk

extracted_from_files

Domain
detected Domain: profiling.ruukki.com

XIOC detected Domain: profiling.ruukki.com

extracted_from_files

Domain
detected Domain: profiling.plannja.com

XIOC detected Domain: profiling.plannja.com

extracted_from_files

Domain
detected Domain: profiling.outokumpu.com

XIOC detected Domain: profiling.outokumpu.com

extracted_from_files

Domain
detected Domain: profiling.normet.com

XIOC detected Domain: profiling.normet.com

extracted_from_files

Domain
detected Domain: profiling.martela.com

XIOC detected Domain: profiling.martela.com

extracted_from_files

Domain
detected Domain: profiling.idbbn.com

XIOC detected Domain: profiling.idbbn.com

extracted_from_files

Domain
detected Domain: profiling.eurofins.fi

XIOC detected Domain: profiling.eurofins.fi

extracted_from_files

Domain
detected Domain: promo.fiat.com

XIOC detected Domain: promo.fiat.com

extracted_from_files

Domain
detected Domain: promo.batesville.com

XIOC detected Domain: promo.batesville.com

extracted_from_files

Domain
detected Domain: promo.alfaromeo.it

XIOC detected Domain: promo.alfaromeo.it

extracted_from_files

Domain
detected Domain: programs.mellanox.com

XIOC detected Domain: programs.mellanox.com

extracted_from_files

Domain
detected Domain: programmes-skema.skema.edu

XIOC detected Domain: programmes-skema.skema.edu

extracted_from_files

Domain
detected Domain: programmes-skema.skema-bs.fr

XIOC detected Domain: programmes-skema.skema-bs.fr

extracted_from_files

Domain
detected Domain: profit.edc.ca

XIOC detected Domain: profit.edc.ca

extracted_from_files

Domain
detected Domain: promotion.sedo.com

XIOC detected Domain: promotion.sedo.com

extracted_from_files

Domain
detected Domain: promotion.lindt.pa

XIOC detected Domain: promotion.lindt.pa

extracted_from_files

Domain
detected Domain: promotion.lindt.gt

XIOC detected Domain: promotion.lindt.gt

extracted_from_files

Domain
detected Domain: promotion.lindt.cr

XIOC detected Domain: promotion.lindt.cr

extracted_from_files

Domain
detected Domain: promotion.lindt.az

XIOC detected Domain: promotion.lindt.az

extracted_from_files

Domain
detected Domain: promotion.lginnotek.com

XIOC detected Domain: promotion.lginnotek.com

extracted_from_files

Domain
detected Domain: promos.thermoscientific.com

XIOC detected Domain: promos.thermoscientific.com

extracted_from_files

Domain
detected Domain: promotions.thermofisher.com

XIOC detected Domain: promotions.thermofisher.com

extracted_from_files

Domain
detected Domain: promotions.la-z-boy.com

XIOC detected Domain: promotions.la-z-boy.com

extracted_from_files

Domain
detected Domain: promotions.kangan.edu.au

XIOC detected Domain: promotions.kangan.edu.au

extracted_from_files

Domain
detected Domain: promotions.hot.net.il

XIOC detected Domain: promotions.hot.net.il

extracted_from_files

Domain
detected Domain: promotions.eq.delwebb.com

XIOC detected Domain: promotions.eq.delwebb.com

extracted_from_files

Domain
detected Domain: promotions.centex.com

XIOC detected Domain: promotions.centex.com

extracted_from_files

Domain
detected Domain: promotions.batesville.com

XIOC detected Domain: promotions.batesville.com

extracted_from_files

Domain
detected Domain: pubstr.chemrxiv.org

XIOC detected Domain: pubstr.chemrxiv.org

extracted_from_files

Domain
detected Domain: pubstr.acspubs.org

XIOC detected Domain: pubstr.acspubs.org

extracted_from_files

Domain
detected Domain: pubstr.acs.org

XIOC detected Domain: pubstr.acs.org

extracted_from_files

Domain
detected Domain: publicidad.davivienda.com.pa

XIOC detected Domain: publicidad.davivienda.com.pa

extracted_from_files

Domain
detected Domain: pt.balluff.com

XIOC detected Domain: pt.balluff.com

extracted_from_files

Domain
detected Domain: pruebascol.arin-innovation.com

XIOC detected Domain: pruebascol.arin-innovation.com

extracted_from_files

Domain
detected Domain: property.aon.com

XIOC detected Domain: property.aon.com

extracted_from_files

Domain
detected Domain: ratings-events.standardandpoors.com

XIOC detected Domain: ratings-events.standardandpoors.com

extracted_from_files

Domain
detected Domain: radio.moodybible.org

XIOC detected Domain: radio.moodybible.org

extracted_from_files

Domain
detected Domain: r2r.utas.edu.au

XIOC detected Domain: r2r.utas.edu.au

extracted_from_files

Domain
detected Domain: qr.dwtc.com

XIOC detected Domain: qr.dwtc.com

extracted_from_files

Domain
detected Domain: qago.qiagen.com

XIOC detected Domain: qago.qiagen.com

extracted_from_files

Domain
detected Domain: q.nasdaq.com

XIOC detected Domain: q.nasdaq.com

extracted_from_files

Domain
detected Domain: purple.mongodb.com

XIOC detected Domain: purple.mongodb.com

extracted_from_files

Domain
detected Domain: ready.curriculumassociates.com

XIOC detected Domain: ready.curriculumassociates.com

extracted_from_files

Domain
detected Domain: read.telecoms.com

XIOC detected Domain: read.telecoms.com

extracted_from_files

Domain
detected Domain: read.lightreading.com

XIOC detected Domain: read.lightreading.com

extracted_from_files

Domain
detected Domain: reach.terumo-bct.com

XIOC detected Domain: reach.terumo-bct.com

extracted_from_files

Domain
detected Domain: reach.ironmountain.com

XIOC detected Domain: reach.ironmountain.com

extracted_from_files

Domain
detected Domain: rc.visionsolutions.com

XIOC detected Domain: rc.visionsolutions.com

extracted_from_files

Domain
detected Domain: rc.precisely.com

XIOC detected Domain: rc.precisely.com

extracted_from_files

Domain
detected Domain: realtors.eq.delwebb.com

XIOC detected Domain: realtors.eq.delwebb.com

extracted_from_files

Domain
detected Domain: realsolutions.americanexpress.se

XIOC detected Domain: realsolutions.americanexpress.se

extracted_from_files

Domain
detected Domain: realsolutions.americanexpress.it

XIOC detected Domain: realsolutions.americanexpress.it

extracted_from_files

Domain
detected Domain: realsolutions.americanexpress.fr

XIOC detected Domain: realsolutions.americanexpress.fr

extracted_from_files

Domain
detected Domain: realeducation.kangan.edu.au

XIOC detected Domain: realeducation.kangan.edu.au

extracted_from_files

Domain
detected Domain: realbusiness.americanexpress.com

XIOC detected Domain: realbusiness.americanexpress.com

extracted_from_files

Domain
detected Domain: ready.nerdery.com

XIOC detected Domain: ready.nerdery.com

extracted_from_files

Domain
detected Domain: reg.hdiconference.com

XIOC detected Domain: reg.hdiconference.com

extracted_from_files

Domain
detected Domain: reg.gdconf.com

XIOC detected Domain: reg.gdconf.com

extracted_from_files

Domain
detected Domain: reg.enterpriseconnect.com

XIOC detected Domain: reg.enterpriseconnect.com

extracted_from_files

Domain
detected Domain: referafriend.box.com

XIOC detected Domain: referafriend.box.com

extracted_from_files

Domain
detected Domain: redwingforbusiness.redwingsafety.com

XIOC detected Domain: redwingforbusiness.redwingsafety.com

extracted_from_files

Domain
detected Domain: recruiting.dukekunshan.edu.cn

XIOC detected Domain: recruiting.dukekunshan.edu.cn

extracted_from_files

IP
detected Domain: recruit.go.apprenticeshipcommunity.com.au

XIOC detected Domain: recruit.go.apprenticeshipcommunity.com.au

extracted_from_files

Domain
detected Domain: reg.vrdconf.com

XIOC detected Domain: reg.vrdconf.com

extracted_from_files

Domain
detected Domain: reg.theaisummit.com

XIOC detected Domain: reg.theaisummit.com

extracted_from_files

Domain
detected Domain: reg.techweb.com

XIOC detected Domain: reg.techweb.com

extracted_from_files

Domain
detected Domain: reg.nojitter.com

XIOC detected Domain: reg.nojitter.com

extracted_from_files

Domain
detected Domain: reg.iotworldtoday.com

XIOC detected Domain: reg.iotworldtoday.com

extracted_from_files

Domain
detected Domain: reg.insecurity.com

XIOC detected Domain: reg.insecurity.com

extracted_from_files

Domain
detected Domain: reg.informationweek.com

XIOC detected Domain: reg.informationweek.com

extracted_from_files

Domain
detected Domain: register.harley-davidson.com

XIOC detected Domain: register.harley-davidson.com

extracted_from_files

Domain
detected Domain: register.dnv.com

XIOC detected Domain: register.dnv.com

extracted_from_files

Domain
detected Domain: register.denovo-us.com

XIOC detected Domain: register.denovo-us.com

extracted_from_files

Domain
detected Domain: register.compellent.com

XIOC detected Domain: register.compellent.com

extracted_from_files

Domain
detected Domain: register-implants.dentsplysirona.com

XIOC detected Domain: register-implants.dentsplysirona.com

extracted_from_files

Domain
detected Domain: reg.xrdconf.com

XIOC detected Domain: reg.xrdconf.com

extracted_from_files

Domain
detected Domain: reg.workspace-connect.com

XIOC detected Domain: reg.workspace-connect.com

extracted_from_files

Domain
detected Domain: relacionamento.edpcomunicacao.com.br

XIOC detected Domain: relacionamento.edpcomunicacao.com.br

extracted_from_files

Domain
detected Domain: regmdr.pref.ims.dialog-direct.com

XIOC detected Domain: regmdr.pref.ims.dialog-direct.com

extracted_from_files

Domain
detected Domain: registro.omegacrmconsulting.com

XIOC detected Domain: registro.omegacrmconsulting.com

extracted_from_files

Domain
detected Domain: registration.promatis.com

XIOC detected Domain: registration.promatis.com

extracted_from_files

Domain
detected Domain: register.redhat.com

XIOC detected Domain: register.redhat.com

extracted_from_files

Domain
detected Domain: register.purina.com

XIOC detected Domain: register.purina.com

extracted_from_files

Domain
detected Domain: register.markit.com

XIOC detected Domain: register.markit.com

extracted_from_files

Domain
detected Domain: renting.aldautomotive.es

XIOC detected Domain: renting.aldautomotive.es

extracted_from_files

Domain
detected Domain: rent.mgrc.com

XIOC detected Domain: rent.mgrc.com

extracted_from_files

Security Analysis Summary

Security Analysis Overview

uBlock Origin is a Firefox Add-ons extension published by Raymond Hill. Version 1.70.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 167489 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 793 finding(s)
  • Medium: 166696 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

uBlock Origin is published by Raymond Hill on the Firefox Add-ons marketplace. The extension has approximately 10.5M users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions