Is Blockify safe?

Question

Is Blockify safe?

Accepted Answer

Blockify is high risk. Every time you navigate to a new page in any browser tab, Blockify sends the full URL you visited, the URL you came from, a persistent unique ID linked to your install, your operating system, browser name and version, timezone, and user-agent string to insights.getblockify.com. Our dynamic analysis captured this in a live session: 5 POST requests to /process were observed, each containing an AES-GCM encrypted payload. The encryption key is hardcoded in analytics.js — meaning anyone with the extension source can decrypt every request. Every 60 minutes, Blockify fetches a configuration file from blockify.b-cdn.net that controls key aspects of the extension's behavior: which ad blocking features are active, which websites are exempt from ad blocking, and whether custom network filtering rules are in effect. Our dynamic analysis confirmed this fetch live — the server returned a JSON object with all claimed fields, including custom_dynamic_dnr and forced_exclusions. The forced_exclusions field allows the server to add any domain to your ad-blocking exception list. The custom_dynamic_dnr field allows the server to inject arbitrary declarativeNetRequest rules into the extension, which can allow or block any network request.

Is Spotify Ad Blocker - Blockify safe?

Findings