Hot Take [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings

[Evjl's Rain]

Comparison between browser extensions

Test 29/12
Q&A - [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings

Test 24/11
Q&A - [Updated 24/11/2018] Browser extension comparison: Malwares and Phishings

Test 12/11
Q&A - [Updated 12/11/2018] Browser extension comparison: Malwares and Phishings

Test 7/11
Q&A - [Updated 7/11/2018] Browser extension comparison: Malwares and Phishings

Test 6/9
Q&A - [Updated 3/9/2018] Browser extension comparison: Malwares and Phishings

Test 3/9
Q&A - [Updated 3/9/2018] Browser extension comparison: Malwares and Phishings

Test 2/9
Q&A - [Updated 25/7/2018] Browser extension comparison: Malwares and Phishings

Test, quick 1/9
Q&A - [Updated 25/7/2018] Browser extension comparison: Malwares and Phishings

Fun test 25/7/2018
Q&A - [Updated 24/7/2018] Browser extension comparison: Malwares and Phishings

Updated 24/7/2018 (most comprehensive, as possible)
Q&A - [Updated 24/7/2018] Browser extension comparison: Malwares and Phishings

Updated 19/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings

Updated 18/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings

Updated 10/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings

Updated 7/6/2018
Q&A - [Updated 7/6/2018] Browser extension comparison: Malwares and Phishings

Updated 3/6/2018
Q&A - [Updated 3/6/18] Browser extension comparison: Malwares and Phishings

Updated 25/4/2018
Poll - [Updated 25/4/18] Browser extension comparison: Malwares and Phishings

Update: 23/3/2018
Poll - [Updated 23/3/18] Browser extension comparison: Malwares and Phishings


Browser: Google Chrome 65 x64
Malware and phishing links: 10 malc0de, 10 vxvault, 10 openphish, 10 verified phishtank, 10 unverified phishtank
Total: 50 links

Spoiler: Links

Dropbox - link test 17-3-2018.txt

Extensions: recently downloaded from Chrome Web Store
- Google Safe Browsing (built-in chrome's protection)
- AdGuard AdBlocker: default settings, uses Google Safe Browsing (delayed) and their own database
- Avira browser safety: default settings
- Norton Safe Web: default settings
- Bitdefender Trafficlight: default settings, it rarely blocks any malware links, just old ones
- Avast Online Security: default settings, only has phishing protection, expected to score 0 against malwares
- Netcraft Extension: default settings, only has phishing protection, expected to score 0 against malwares
- uBlock Origin with some additional filters

Spoiler: ublock origin filters

http://hosts-file.net/emd.txt
http://hosts-file.net/exp.txt
http://hosts-file.net/pup.txt
http://hosts-file.net/psh.txt
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
https://ransomwaretracker.abuse.ch/downloads/RW_DOMBL.txt
https://ransomwaretracker.abuse.ch/downloads/RW_IPBL.txt
https://ransomwaretracker.abuse.ch/downloads/RW_URLBL.txt

NOTE: the result can vary from day-to-day. Tomorrow with different links, the result can be very different. All are live links but they can be dead a few minutes after the test. No duplication

Results:

Winner: Google Safe Browsing

 

[HarborFront]

Anyone noticed this? Opera is using netcraft services to block out phishing sites
Aswell promotion: With built-in VPN & adblocker you only need noscript extension to have suberb browser:emoji_ok_hand:
View attachment 213819

It's actually mentioned on their website's faq

Quote

Your website is blocked by Netcraft, not Opera itself. We use their blacklist to protect Opera users from fraud attempt.

Mobile browsers FAQ - Opera Security Corner

 

[HarborFront]

Just tested Opera at openphish and phishtank sites.

I'll suggest user to install Netcraft extension to Opera as the blacklist in Opera by Netcraft protects only fraudulent sites

 

[HarborFront]

You can use PhishingFree by SafeToOpen extension for Chrome/FF as a complement to Netcraft extension

New Update - PhishingFree by SafeToOpen for Chrome/FF

PhishingFree by SafeToOpen extension for Chrome/FF PhishingFree by SafeToOpen® is a browser extension/addon that notifies you when visiting insecure or phishing websites. Fighting ever-growing phishing attacks is not easy without carefully analysing the content of new websites. PhishingFree...

malwaretips.com

 

[upnorth]

Opera use blacklists from both Phishtank and Netcraft for phishing and fraud, and malware blacklists from AVG and Yandex. Sounds IMO a bit redundant also using Netcrafts extension as when both Netcrafts extension, and Opera itself warn/flag at the same time on tested urls/links, I uninstalled the extension.

 

[Threadripper]

I'd use Opera if it was open source and I could disable its telemetry tbh.

 

[simmerskool]

perhaps off topic but this thread highly knowledgable.
Click&Clean -- worth installing in chrome?
I searched mwt and did not find it discussed, maybe I missed it. If there's a better place to post this, please advise or move.
/sk

 

[Gandalf_The_Grey]

perhaps off topic but this thread highly knowledgable.
Click&Clean -- worth installing in chrome?
I searched mwt and did not find it discussed, maybe I missed it. If there's a better place to post this, please advise or move.
/sk

I see that you use Privacy Eraser to clean Windows and browsers. So Click&Clean is not needed.
Each extension you add can be a security or privacy risk (not especially Click&Clean, don't know enough about this extension).
So the same applies for extensions as for stacking security software less is more
Stick to basics a good ad blocker, a password manager and depending of your config a security extension for phishing and malware blocking.

 

[upnorth]

Click&Clean -- worth installing in chrome?

Member @LDogg seems to use/d it. Probably can advice the best.

I do agree with @Gandalf_The_Grey that if you use Privacy Eraser ( PE from Cybertron ) for cleaning browsers it's not really needed but, that depends if PE been set to clean automatic when the browser is closed. Click & Clean also got that option.

Personal I would hesitate use PE, because I had to purchase the PRO version to be able erase files other then 1 pass ( zero fill ). Privazer is a much better option IMO.

Free PC cleaner & Privacy tool

Free PC cleaner & Privacy tool

privazer.com

 

[simmerskool]

I see that you use Privacy Eraser to clean Windows and browsers. So Click&Clean is not needed.
Each extension you add can be a security or privacy risk (not especially Click&Clean, don't know enough about this extension).
So the same applies for extensions as for stacking security software less is more
Stick to basics a good ad blocker, a password manager and depending of your config a security extension for phishing and malware blocking.

Thanks, good input! I put Clean&Click on a chromebook just to test it.

Member @LDogg seems to use/d it. Probably can advice the best.

I do agree with @Gandalf_The_Grey that if you use Privacy Eraser ( PE from Cybertron ) for cleaning browsers it's not really needed but, that depends if PE been set to clean automatic when the browser is closed. Click & Clean also got that option.

Personal I would hesitate use PE, because I had to purchase the PRO version to be able erase files other then 1 pass ( zero fill ). Privazer is a much better option IMO.

Free PC cleaner & Privacy tool

Free PC cleaner & Privacy tool

privazer.com

thanks for the feedback. I used privazer early on at least a year ago, maybe 2+, but dropped it, something buggy on my end back then -- don't remember why or what. PE has worked aok for me. I think pro version using 1 pass. At the moment my primary computer has a hardware bug, ugh!, so my wife lets me use her pc when she's sleeping, ie, if I'm not using my chromebook.

 

[Moonhorse]

@Evjl's Rain still using abuse.ch URLhaus Malicious URL Blocklist ?

Suddenly it has 64k webfilters, while it had just 2k before

 

[Evjl's Rain]

@Evjl's Rain still using abuse.ch URLhaus Malicious URL Blocklist ?

Suddenly it has 64k webfilters, while it had just 2k before

yes, I'm still using it. It might be worth for someone because it has one of the most uptodate lists
but maybe I don't need it since I haven't seen it blocking anything

 

[Moonhorse]

Bit curious but friend of mine just found weird thing

Rockfest 2025 järjestetään Turussa - Rockfest - Suomen suurin rock-festivaali Turussa

Suomen suurin rock-festivaali Rockfest järjestetään ensi kesänä Turussa torstaista lauantaihin 12.-14.6.2025. Tapahtumapaikkana toimii Artukaisten kenttä, joka sijaitsee Gatorade Centerin ja Turun Messu- ja Urheilukeskuksen välittömässä läheisyydessä noin viiden kilometrin päässä Turun...

rockfest.fi

On firefox that site will lead to iphone scams/other scams
On google chrome that site will lead to legit site

how?

 

[upnorth]

It does act a bit odd on different browsers.

Seems to be a Wordpress site. If very unlucky it's infected through one of many reported issues with plugins for WP. Personal I would not buy anything on that site, but try elsewhere if possible.

 

[songoku316]

bitdefender traffic light is very good highly recommended

 

[Evjl's Rain]

just did a new test to see how the extensions are developing, 20 links from urlhaus

Spoiler: links

malware links 16/6/2019 - Pastebin.com

pastebin.com

chrome 16/20
Avira 10/20
emsisoft 9/20 but 1 downloaded
malwarebytes 13/20
norton 6/20
BD trafficlight (BDTL) 12/20
WDBP 16/20 but some downloaded

late test:
adguard chrome extension (malware protection: on, default settings): 1/20

Chrome+WDBP 18/20
chrome+WDBP+BDTL 20/20 => my recommended combo worked perfectly

 

[Evjl's Rain]

I had been running emsisoft extension for several months and it hadn't blocked anything, not a single link
I just switched to BDTL for 2 weeks, it has been blocking a few links => goodbye emsisoft
WDBP has been working great

something can be good in theory but in reality and in some specific countries, others are better. BD has much larger user database than emsisoft in my country which can explain why it's better

 

[TairikuOkami]

just did a new test to see how the extensions are developing, 20 links from urlhaus

DNS for comparison, not bad at all:

Cleanbrowsing - 13/20
Neustar Threat - 15/20
Yandex/Sophos - 1/20
Quad9 - 0/20

Wow, Quad9 totally shocked me, going back to Neustar.

 

[toto_10]

Is 'Application Guard Extension' for Firefox same as WDBP?

They don't have same versions

 

[Brie]

Is 'Application Guard Extension' for Firefox same as WDBP?

They don't have same versions

no

 

[HarborFront]

DNS for comparison, not bad at all:

Cleanbrowsing - 13/20
Neustar Threat - 15/20
Yandex/Sophos - 1/20
Quad9 - 0/20

Wow, Quad9 totally shocked me, going back to Neustar.

Can you also try testing KeweonDNS and nextDNS?

Thanks