@HarlanPepper 

UPDATE:

With all extensions disabled on all Chrome browsers, I'm still getting lots of warnings that " 'User X' attempted to visit Wujie/UltraSurf" from various devices.  iPhones, iPads, Fire Tablets.

If any folks with network security knowledge have any thoughts I'd be so grateful for the help.  I'm hoping that the Deco Parental Controls are misreading something.  But the fac that I'm getting hits from all my devices makes me think there is some IP spoofing going on.  Is this possible?  What would the point be?  What is the easiest solution?   

@TP-Link_Deco 

I've attached both the message list and a sample log from the Deco app.  Please view this thread if you can and see if it makes some sense in diagnosing these likely false positives.  No one in the house is using Ultrasurf.  Seems likely that something fairly normal is making the controls think this is Ultrasurf.  

https://www.reddit.com/r/HomeNetworking/comments/j07rzy/mystery_wujieultrasurf_router_warningsmac_spoofing/

@TP-Link_Deco I am having the same issue on my network. Also a Mac running the latest software update. I don't have Chrome installed (only Safari) so no extension. I also did a clean install three days ago hoping it would solve the issue. I have installed minimal additional software. So please post the answer here. 

@TP-Link_Deco 

Hi.  I just replied to the last email to the engineers regarding this problem.

Here is what I wrote:

I have removed the Wujie/UltraSurf App/Website option as a filter from all the profiles that were triggering the warnings. 

As a result, there are no more warnings on users, even with Teen and Adult settings still in place.

Would you like me to re-add the Wujie/UltraSurf filter to some profiles and then disable the Antivirus service in order to isolate the triggering service (PC vs AV)?

@TP-Link_Deco 

I appreciate the engineers time and research in investigating this issue.  I am, unfortunately, not satisfied with this explanation.  No one is using this Wujie service.  And the odds that virtually every device in my home is triggering visit warnings would have to mean that very basic services (Instagram, Twitter, TikTok, Safari/Chrome browsing, etc.) are using Wujie as some sort of backend relay (right?).  I don't think it can be a browser extension because mobile devices generate the warnings as often as Chrome browsing.  I am tech savvy-ish, but am not an IT expert by any means, so I am very open to a more creative explanation, but it seems most likely that these are false positives generated for some other reason.

I am also not going to give this any more thought as it is not legitimate to my network security since it does not accurately describe user behavior.  My advice to others who are inundated by these warnings is to just remove the service as a filter option.