My Deco M9 Plus system is creating a mystery that I can't solve.  Hoping others have seen this and have figured out the source.

Wujie/UltraSurf is getting requested by at least 2 laptops on my home network.  I know that it is a firewall bypass system that has it's own Chrome extension.  No one in my house has installed that extension.

I’ve created parental control profile for individual devices so I can track which device is making request that are getting flagged. Wujie/UltraSurf is still popping up even though none of the devices have that extension installed -- I have really reduced extensions to a minimum. One of the Devices is my own MacBook, so I know I am not trying to use that service intentionally.  

Is there a chance that some other extensions route through UltraSurf even if its own extension is not installed?  I've wondered if Netflix Party makes use of it.  But I don't have or use NP.

Could Deco Parental Controls be misreading some other service as UltraSurf?

Perhaps I should just uninstall ALL extensions, observe, and then turn them back on one by one to try and find the culprit.

Any help with this is greatly appreciated.
Thanks.