Is uBlacklist safe?

Low risk

uBlacklist filters search results on Google and other engines using user-maintained or subscription blocklists.

The extension injects into Google Search pages (and optionally Bing, DuckDuckGo, and others) to hide results matching domains or patterns the user has blocked. Users can sync their blocklist via Google Drive or Dropbox. The extension bundle ships Dropbox and Google Drive OAuth client secrets in plaintext, meaning anyone who obtains the XPI file can read those credentials.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

ioratev10.1.2Firefox Add-ons
15Risk
Who publishes it

iorate - no other listings under this identity, 3 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
iorate

Shared hosts - 3 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

a.b.example.fr.com
Also called by 1 other listing: uBlacklist
a.b.example.uk.com
Also called by 1 other listing: uBlacklist
a.b.exemplo.com.br
Also called by 1 other listing: uBlacklist

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 10.1.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Act on the current tab, but only after you click the extension

    activeTab

  • Schedule its own background tasks

    alarms

  • Sign you in with your Google account

    identity

  • Run its own code inside the pages you visit

    scripting

  • Store data in your browser

    storage

  • Store an unlimited amount of data in your browser

    unlimitedStorage

declarativeNetRequestWithHostAccess
Updated 2 November 2026amo-1478481