Is Tubi Ad Skipper | Ad Blocker [QVI] safe?
Tubi Ad Skipper sends Tubi account identity, continue-watching data, and playback events to me3x.online.
On Tubi pages, the extension contacts me3x.online for commands and can upload Tubi profile identity and continue-watching results with account and profile identifiers. It also observes Tubi playback telemetry requests and forwards event details, content identifiers, and persistent extension and Tubi user identifiers to the same service.
Who publishes itHideApp - 66 other listings from the same operator, 15 of them carrying a finding
HideApp - 66 other listings from the same operator, 15 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
9 other listings published from this account, 120k+ users between them, none of them carrying a finding.
Same operator - 57 listings
Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Tubi playback events are sent to me3x.online with persistent IDs.
When you use Tubi, the extension observes playback telemetry URLs and forwards playback events to https://me3x.online/n/tubi/upload-event.
The payload includes content/playback URL details plus persistent extension and Tubi identifiers.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user watches or interacts with Tubi content.
The extension observes playback telemetry, adds persistent extension and Tubi user identifiers, copies playback URL parameters, and uploads the event data.
- Your viewing activityadStart
Playback event types and content details can describe what you watched and when playback events occurred.
- Playback telemetry URL detailshttps://www.tubitv.com/movies/123456/example-title
Copied query parameters from Tubi playback URLs can include page or playback context tied to a viewing session.
- Stored user identifiersd7f3a1b2-8c44-4a0e-9f2a-123456789abc
Persistent extension and Tubi user identifiers can link multiple playback events to the same browser profile or account.
Dynamic analysis confirmed that the extension observes Tubi playback telemetry resources, adds extension and Tubi user identifiers, copies playback URL parameters, and uploads the resulting event payload.
What it can do
Permissions this extension asks for, as declared in version 0.1.19. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 0.1.21, which we have not unpacked yet.
Read and change your data on tubitv.com
*://*.tubitv.com/*
Store data in your browser
storage
Where it sends data
Destinations our analysis observed Tubi Ad Skipper | Ad Blocker [QVI] contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- me3x.onlinewidely used
Tubi Ad Skipper | Ad Blocker [QVI] sends data to me3x.online. A widely used service: 46 other extensions we have analysed send data here.