Is Website Unblocker safe?

Clean risk

Website Unblocker routes selected sites through embedded proxy servers using hardcoded shared credentials.

When the user enables unblocking for a site, the extension sets a PAC proxy rule that routes matching hosts through one of several embedded proxy endpoints. Its background script answers proxy authentication challenges with a shared username and password stored in the extension bundle; these are vendor proxy credentials, not passwords entered by the user.

EVOLVv1.0.0Chrome Web Store
3Risk
Who publishes it

Flashmaster, Innova8, Chandigarh, INDIA - 4 other listings from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
EVOLV
Declared legal entity
Flashmaster, Innova8, Chandigarh, INDIA
Registered address
Innova8, Chandigarh, INDIA, Chandigarh, Punjab 133301, INDIA
Registered contact
Dhanur Sehgal
Website
chromewebstore.google.com/detail/dipffgoiicbpobcagmnebidifhlipncj/support

Same store account

4 other listings published from this account, 102k+ users between them. 1 of them carries a finding.

Prompt Optimizer100k+HighUnblocked Games Premium1k+CleanUnblock Proxy372CleanChatgpt Unblocked251Clean

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

unblockd.org
Also called by 3 other listings, including Unblocked Websites, Youtube Unblocked
ahaa.app
Also called by 5 other listings, including Unblocked Websites, Youtube Unblocked, Unblocked Games 76

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Route all of your browsing through a server of its choosing

    proxy

  • Store data in your browser

    storage

  • Watch every request your browser makes

    webRequest

  • Run hidden pages in the background

    offscreen

  • Keep running in the background while your browser is open

    background

webRequestAuthProvider

Where it sends data

Destinations our analysis observed Website Unblocker contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • 161.0.0.206:20000

    Website Unblocker sends data to 161.0.0.206:20000. One other extension we have analysed sends data here.

  • 161.0.0.207:20000

    Website Unblocker sends data to 161.0.0.207:20000. One other extension we have analysed sends data here.

  • 188.42.15.245:20000

    Website Unblocker sends data to 188.42.15.245:20000. One other extension we have analysed sends data here.

  • 172.252.57.110:20000

    Website Unblocker sends data to 172.252.57.110:20000. No other extension we have analysed sends data here.

  • 172.252.57.111:20000

    Website Unblocker sends data to 172.252.57.111:20000. No other extension we have analysed sends data here.

  • 172.252.57.112:20000

    Website Unblocker sends data to 172.252.57.112:20000. No other extension we have analysed sends data here.

  • 172.252.57.113:20000

    Website Unblocker sends data to 172.252.57.113:20000. No other extension we have analysed sends data here.

  • 172.252.57.114:20000

    Website Unblocker sends data to 172.252.57.114:20000. No other extension we have analysed sends data here.