BadBlocker Adblock-for-YouTube scripletsRules Remote API Fetch

Ibrahim Saud@tektrix

•updated Jun 25, 2026•0•0•3

Detects network connections from a host to the api.adblock-for-youtube.com domain at the /api/v2/rules endpoint. This behavior is associated with the 'Adblock for YouTube' browser extension (cmedhionkhpnakcndndgjdbohmhepckk) as it retrieves remote JavaScript scriplets for rule updates, which can be a vector for unauthorized code execution if the domain is compromised or used maliciously.