app3947.bubblelife68.life

[adguard-bot]

Issue URL (Ads)

http://app3947.bubblelife68.life/

Comment

Username: @SouthernDevGirl

Although the URL is not entirely relevant to this report -- here is some background:

This is an example of a spammy "iPhone Giveaway" site that is redirected by Javascript from unknowing webmasters.

I prefer to block the site entirely; however, for some reason the main HTML is displayed, no matter what I use (and as you can see in the screenshots, my filter is being applied). The problem is simply that nothing (not $empty or adding $important) will stop the base HTML page.

In the attached examples, I use wildcards because they change domains so often. I know this may not be ideal, but that's not relevant to my question -- I've tried it with explicit rules that I've verified match (based on filtering report).

I searched the forums but I didn't see anything that claimed the main HTML page cannot be blocked. Everything states that $empty should block this altogether?

Screenshots

Screenshot 1


Screenshot 2


System configuration

Information	value
Platform:	Ext
AdGuard version:	3.0.13
Browser:	Chrome
Stealth mode options:	Hide your search queries, Self-destructing third-party cookies ()
Filters:	AdGuard Base, AdGuard Annoyances, AdGuard Simplified domain names, Fanboy's Annoyances, Adblock Warning Removal List, NoCoin Filter List

[BlazDT]

If those sites popunder for you without doing any click or visiting a site (so only browser is open with no page), then please check your device for virus and your browser for shady extension. If it happens on a specific site, we need that page.

According to nick this is the reporter: https://forum.adguard.com/index.php?members/southerndevgirl.21373/

[rkmfl]

No issue with virus/adware redirects, DNS hijacks, etc, etc.

To clarify, if I type that URL directly into a browser URL address bar, the results you see, are what I get.

If you prefer to be redirected nefariously in a more organic fashion, you can do that as well, using: http://www.skayrim5.ru/vidos/bjRNRFJtMnlBSmc/

(in approximately 3 seconds you'll be redirected by js; however, the URL will be slightly different, as I explained, they use wildcard host records and obfuscated host/domains that constantly change).

However, this is really a more generalized question (despite the fact there are literally tens of thousands of those hijack sites, they really are not the source of the issue as to what I am doing wrong in not being able to block the source HTML).

Thanks in advance!

[BlazDT]

Site has sadly not enough visitors for filters, so rule is only for user filter:

||skayrim5.ru/wp-includes/post.php

Added to English filter, so the redirect page itself is blocked and you won't see those stupid popups on other sites (empty page then): ||check-prizes-now*.life^$empty ||bubble*life$empty

The site itself got opened as you set ^ in your first rule.

[rkmfl]

I think I miscommunicated in some way.

I wasn't hoping you would add any filters, and I am not at all concerned with that specific site, the redirect, etc. There are thousands of those sorts of spam sites on long-tail keywords in Google and we'd never get them all.

Instead, what I was asking is why the $empty or $important (etc) directives do not work the way they are claimed to work, in that the HTML page is still delivered despite the filter matching (as you can see in the logs)?

Is there something I'm doing wrong?

Again, I do not care about rules for this specific example, I only provided them to comply with your issue-posting requests. My concern is much, much simpler -- but I didn't want to submit it without examples, which again, is the only reason I posted those.

Thank you in advance.

[BlazDT]

Extension opens the page unlike AdGuard for Windows (with same rule). https://github.com/AdguardTeam/AdguardBrowserExtension/issues/837

[rkmfl]

Thank you. Just to clarify for anyone else stopping by...

The link you referred, mentioned AdGuard cannot block redirects.

In this case, I'm explaining that it won't block any form of the HTML page. Whether I type it into the URL line, or whether I link it (for example: http://app2507.bubblelife61.agency

(don't worry about that link being an issue, these URL's cycle/die within an hour; this is why I wrote my personal rule as bubblelife.^ despite it being too far-ranging for a public rule).

If AdGuard cannot block pages, either by opening directly or links, that's fine. That's just different than what I had read in the forums and I thought I was doing something wrong or there was some sort of error/bug.

Thanks again!

[BlazDT]

AdGuard for Windows can block them completely from opening when using $empty, Extension not yet.