uBlockOrigin / uAssets

Resources for uBlock Origin, uMatrix: static filter lists, ready-to-use rulesets, etc.
GNU General Public License v3.0
4.03k stars 758 forks source link

oxy.st: ads #20704

Closed punisher018 closed 10 months ago

punisher018 commented 10 months ago

Prerequisites

URL address of the web page

https://oxy.st/d/kZqh

Category

ads

Description

When you click download button, Opera browser ad appears.

Other extensions used

-

Screenshot(s)

Screenshot(s)

Configuration

```yaml uBlock Origin: 1.53.0 Chromium: 119 filterset (summary): network: 126002 cosmetic: 186841 scriptlet: 31843 html: 0 listset (total-discarded, last-updated): added: https://easylist-downloads.adblockplus.org/abp-filters-anti-cv.txt: 0-0, now https://easylist-downloads.adblockplus.org/cntblock.txt: 1670-0, now https://easylist.to/easylist/fanboy-annoyance.txt: 61950-112, now https://filters.adtidy.org/extension/ublock/filters/14.txt: 75162-5169, now https://raw.githubusercontent.com/MasterKia/PersianBlocker/main/Soft98/Soft98NoAds.txt: 18-0, now https://raw.githubusercontent.com/Spam404/lists/master/adblock-list.txt: 7253-0, 1h.11m https://raw.githubusercontent.com/xxcriticxx/.pl-host-file/master/hosts.txt: 412-1, now https://secure.fanboy.co.nz/fanboy-annoyance_ubo.txt: 94703-78333, now adguard-cookies: 28067-28067, now fanboy-cookiemonster: 48861-48843, now fanboy-social: 16199-16199, now fanboy-thirdparty_social: 69-15, now [3 lists not shown]: [too many] default: user-filters: 984-1, never TUR-0: 13811-13, now easylist: 75315-138, now easyprivacy: 32878-512, now plowe-0: 3724-1089, now ublock-badware: 7522-144, now ublock-filters: 35593-517, now ublock-privacy: 680-14, now ublock-unbreak: 2150-37, now urlhaus-1: 11300-0, now filterset (user): [array of 982 redacted] trustedset: added: [array of 18 redacted] removed: chrome-extension-scheme chrome-scheme edge-scheme wyciwyg-scheme switchRuleset: added: [array of 4 redacted] hostRuleset: removed: behind-the-scene * * noop behind-the-scene * image noop behind-the-scene * 3p noop behind-the-scene * inline-script noop behind-the-scene * 1p-script noop behind-the-scene * 3p-script noop behind-the-scene * 3p-frame noop userSettings: advancedUserEnabled: true cloudStorageEnabled: true hiddenSettings: [none] supportStats: allReadyAfter: 1307 ms maxAssetCacheWait: 810 ms popupPanel: blocked: 6 network: adlook.me: 1 media.net: 1 system-notify.app: 1 themoneytizer.com: 2 yadro.ru: 1 extended: ###cookies.cookies ###divdownload > div[data-template][data-source_url] ##img[src*="//counter.yadro.ru/"] ##+js(abort-current-script, $, localStorage) ##+js(no-setInterval-if, .hide) ```
gorhill commented 10 months ago

Unable to reproduce with default settings/lists. You have heavily customized uBO as per troubleshooting, including nearly a thousand custom filters, you will have to investigate and sort this out on your side.

punisher018 commented 10 months ago

yes I have done a lot of customization but I test it from a clean profile before reporting a problem here. this log from firefox with default settings

Logger output ``` +5 oxy.st 3 get xhr https://smelel.icu/sm/stat?landID=40&nameBlock=sl0&uuid=b6550a24-8d0b-4ef8-abf0-de28a119c808&apiKey=b68c106c3df6f586f8cb1f48c5036112&action=30&rfr=https%3A%2F%2Foxy.st%2Fd%2FkZqh ``` ``` +1 oxy.st 1 get image https://oxy.st/images/icon.png ``` ``` +1 oxy.st 1 get image https://oxy.st/slake/asset/img/favicon/apple-touch-icon.png ``` ``` +1 ###divdownload > div[data-template][data-source_url] oxy.st get dom https://oxy.st/d/kZqh ``` ``` +1 ://ads.$~image,from=~ads.8designers.com|~ads.ac.uk|~ads.adstream.com.ro|~ads.allegro.pl|~ads.am|~ads.amazon|~ads.apple.com|~ads.atmosphere.copernicus.eu|~ads.band|~ads.bestprints.biz|~ads.bikepump.com|~ads.brave.com|~ads.buscaempresas.co|~ads.cafebazaar.ir|~ads.colombiaonline.com|~ads.comeon.com|~ads.cvut.cz|~ads.doordash.com|~ads.dosocial.ge|~ads.dosocial.me|~ads.elevateplatform.co.uk|~ads.finance|~ads.google.com|~ads.gree.net|~ads.gurkerl.at|~ads.harvard.edu|~ads.instacart.com|~ads.jiosaavn.com|~ads.kaipoke.biz|~ads.kazakh-zerno.net|~ads.kifli.hu|~ads.knuspr.de|~ads.lapalingo.com|~ads.listonic.com|~ads.magalu.com|~ads.mba|~ads.mercadolivre.com.br|~ads.mgid.com|~ads.microsoft.com|~ads.midwayusa.com|~ads.mobilebet.com|~ads.msstate.edu|~ads.mst.dk|~ads.mt|~ads.nc|~ads.nipr.ac.jp|~ads.olx.pl|~ads.pinterest.com|~ads.quasaraffiliates.com|~ads.red|~ads.rohlik.cz|~ads.route.cc|~ads.safi-gmbh.ch|~ads.scotiabank.com|~ads.selfip.com|~ads.shopee.cn|~ads.shopee.co.th|~ads.shopee.com.br|~ads.shopee.com.mx|~ads.shopee.com.my|~ads.shopee.kr|~ads.shopee.ph|~ads.shopee.pl|~ads.shopee.sg|~ads.shopee.tw|~ads.shopee.vn|~ads.smartnews.com|~ads.snapchat.com|~ads.socialtheater.com|~ads.spotify.com|~ads.studyplus.co.jp|~ads.taboola.com|~ads.tiktok.com|~ads.twitter.com|~ads.typepad.jp|~ads.us.tiktok.com|~ads.viksaffiliates.com|~ads.vk.com|~ads.watson.ch|~badassembly.com|~caravansforsale.co.uk|~fusac.fr|~memo2.nl|~reempresa.org|~satmetrix.com|~seriouswheels.com -- oxy.st 3 get xhr https://ads.adlook.me/vast?id=5344&w=1903&h=1070&mult=1&rw=0&ref=&loc=https%3A%2F%2Foxy.st%2Fd%2FkZqh&top=&_ts=1700067207233 ``` ``` +1 oxy.st 3 get frame https://cl-7c56f4b3.edgecdn.ru/ aliasURL=https://cdn.adlook.me/u/cds.html ``` ``` +1 oxy.st 3 get frame https://cdn.adlook.me/u/cds.html ``` ``` +1 oxy.st 3 get font https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 ``` ``` +1 oxy.st 1 get image https://oxy.st/images/sprite3.png ``` ``` +1 oxy.st 1 get image https://oxy.st/slake/asset/slice_white.png ``` ``` +1 ||system-notify.app^ -- oxy.st 3 get script https://system-notify.app/f/sdk.js?z=651407 ``` ``` +1 oxy.st 3 get xhr https://smelel.icu/sm/stat?uuid=b6550a24-8d0b-4ef8-abf0-de28a119c808&apiKey=b68c106c3df6f586f8cb1f48c5036112&action=80&rfr=https%3A%2F%2Foxy.st%2Fd%2FkZqh ``` ``` +1 ||yadro.ru^ -- oxy.st 3 get image https://counter.yadro.ru/hit?t52.6;r;s1920*1080*24;uhttps%3A//oxy.st/d/kZqh;hDownload%20file%20Stardock.Start11-2.0.1.zip%20on%20Oxy.Cloud;0.5149141858045918 ``` ``` +0 ||themoneytizer.com^ -- oxy.st 3 get script https://ads.themoneytizer.com/s/requestform.js?siteId=85433&formatId=2 ``` ``` +0 oxy.st 3 get font https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 ``` ``` +0 oxy.st 3 get font https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2 ``` ``` +0 oxy.st 3 get font https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 ``` ``` +0 oxy.st 3 get font https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 ``` ``` +0 ||themoneytizer.com^ -- oxy.st 3 get script https://ads.themoneytizer.com/s/gen.js?type=2 ``` ``` +0 ##+js(no-setInterval-if, .hide) oxy.st get scriptlet https://oxy.st/d/kZqh ``` ``` +0 ##+js(abort-current-script, $, localStorage) oxy.st get scriptlet https://oxy.st/d/kZqh ``` ``` +0 oxy.st 1 get script https://oxy.st/slake/asset/js/ajax-subscribe.js ``` ``` +0 oxy.st 1 get script https://oxy.st/slake/asset/js/ajax-mail.js ``` ``` +0 oxy.st 1 get script https://oxy.st/slake/asset/js/main.js ``` ``` +0 oxy.st 1 get script https://oxy.st/slake/asset/js/plugins.js ``` ``` +0 oxy.st 1 get script https://oxy.st/slake/asset/js/jquery.mCustomScrollbar.concat.min.js ``` ``` +0 oxy.st 1 get script https://oxy.st/slake/asset/js/bootstrap.min.js ``` ``` +0 oxy.st 3 get script https://cl-7c56f4b3.edgecdn.ru/ aliasURL=https://cdn.adlook.me/js/rlf.js ``` ``` +0 oxy.st 3 get script https://cdn.adlook.me/js/rlf.js ``` ``` +0 oxy.st 3 get script https://smatr.net/sm/getcode?apiKey=b68c106c3df6f586f8cb1f48c5036112 ``` ``` +0 ||themoneytizer.com^ -- oxy.st 3 get script https://ads.themoneytizer.com/s/requestform.js?siteId=85433&formatId=2 ``` ``` +0 ||themoneytizer.com^ -- oxy.st 3 get script https://ads.themoneytizer.com/s/gen.js?type=2 ``` ``` +0 oxy.st 1 get script https://oxy.st/js/jquery.cookie.min.js ``` ``` +0 oxy.st 1 get script https://oxy.st/slake/asset/js/jquery.min.js ``` ``` +0 oxy.st 1 get css https://oxy.st/slake/asset/css/elements.css?1 ``` ``` +0 ||media.net^ -- oxy.st 3 get script https://contextual.media.net/dmedianet.js?cid=8CU7BC15F ``` ``` +0 oxy.st 1 get doc https://oxy.st/d/kZqh ``` ``` +0 https://oxy.st/d/kZqh ```

https://github.com/uBlockOrigin/uAssets/assets/51531027/b76a547d-a3c8-4c80-9d6a-94f164540b5d

gorhill commented 10 months ago

Also unable to reproduce in Firefox.


Maybe it depends where you are located.

gorhill commented 10 months ago

I will let other people try if they can reproduce.

punisher018 commented 10 months ago

Did you click blue "Download For" button? I don't know I used vpn for two different countries in case it was geographical type but it still showed. Thanks anyway

gorhill commented 10 months ago

I clicked Download for, after which I was given a choice and I clicked or via browser, then the file downloaded. I used the logger to confirm that no popups were created.


Maybe post a screenshot of how the ad is supposed to look.

punisher018 commented 10 months ago

The video of ad's appearing

https://clipchamp.com/watch/AveTcK457lf

this one solved my problem

||smatr.net/sm/getcode$script,domain=oxy.st

BlazeFTL commented 10 months ago

PR Pushed https://github.com/uBlockOrigin/uAssets/pull/20706

mapx- commented 10 months ago

https://github.com/uBlockOrigin/uAssets/commit/b637f8052dafc97ed50b9b594421a6e4218d45d8