Is ClickFix Block safe?
ClickFix Block detects and blocks ClickFix social-engineering prompts on most web pages, and exposes its settings to any page via an open external-messaging channel.
The extension injects a content script into the majority of web pages (with a hardcoded exclusion list for trusted domains) to identify and suppress ClickFix copy-paste attack prompts. When a detection event occurs, the background script forwards the event — including the current page path and parameters — to links.eye.security. Any web page can also query the extension's current state (whether protection is enabled, whether block-all mode is active, and whether the caller's own domain is on the user's allowlist) by sending a message to the extension's open externally_connectable channel.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itEye Security B.V. - 2 other listings from the same operator, none carrying a finding
Eye Security B.V. - 2 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 45k+ users between them, none of them carrying a finding.
Shared hosts - 4 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed ClickFix Block contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- links.eye.security
ClickFix Block sends data to links.eye.security. No other extension we have analyzed sends data here.