Uassets: 2ddl.io, ganool.im & ancensored.com

[salam2009]

URL(s) where the issue occurs

2ddl.io, ganool.im & ancensored.com

Describe the issue

Every time those sites are opened, the popups show up as soon as we click anywhere in the page.
2ddl & ganool change their domain from time to time. So, is it possible to keep their ads blocked from my side since it's hard for you to keep updated with their new links?
Thank you guys so much for the efforts!

Screenshot(s)

No need.

Versions

• Browser/version: FF 60.0.1
• uBlock Origin version: 1.16.6

Settings

https://i.imgur.com/BMT45VK.jpg
https://i.imgur.com/nzkh3JX.jpg

Notes

None.

[okiehsch]

Do 2ddl & ganool only change their top level domain?

[salam2009]

@okiehsch
2ddl sometimes change the main domain but they've been only changing their TLD in the recent months.
ganool only change their TLD.
Thanks for the quick update :)

[okiehsch]

Ok, changing their TLD will not have any effect with the filter I added, so as long as they don't change their main domain, or use a different popup script, you should be fine.

[smed79]

Do 2ddl & ganool only change their top level domain?

2ddl.download
2ddl.io
2ddl.ooo
2ddl.org
2ddl.pro
ddl2.org
iiddl.net
tddl.tv
twoddl.co

[salam2009]

@okiehsch Ganool ads are came back for some reason.

[salam2009]

@okiehsch 2ddl ads are came back & they changed their TLD to .ws now. Thanks for any update :)

[okiehsch]

I do not get any popups at http://2ddl.ws. Could you be more specific?

Edit: The site uses popads, but this is already blocked by EasyList on my end.
I can add 2ddl.*##script:inject(abort-on-property-write.js, _pop) to disable it entirely.

Is your issue fixed if you add
2ddl.*##script:inject(abort-on-property-write.js, _pop)
to your filter list?

[salam2009]

yea, I'm not getting any ads now for some reason (maybe temporarily) but 20 minutes ago it got me an ad like this one: ydeoxwomjpvxoz.com

[okiehsch]

That is a popads domain, I will add 2ddl.*##script:inject(abort-on-property-write.js, _pop).

[salam2009]

Does that mean it pops up at different times?

[okiehsch]

popads uses random domains like ydeoxwomjpvxoz.com to trigger popups, if this domain is blocked by EasyList no popup occurs until popads uses a different domain.
2ddl.*##script:inject(abort-on-property-write.js, _pop) disables the popads-script, so there will be no random domains.

[salam2009]

@okiehsch ok, now it uses this popad for some reason: sgmneqaebkzjug.com (yesterday was jgvjzbrnjmxoq.com)
It pops up at random times though.

[okiehsch]

I can't reproduce.

Example link: http://2ddl.ws
Can you post a screenshot of your logger output?

[salam2009]

That's because popads aren't active right now, so I'm not getting it either.
What do you mean by logger output btw?

[okiehsch]

Open the logger, then load http://2ddl.ws and post a screenshot of the ouput.

My output, I filtered all image requests by adding ! image:

[salam2009]

Here you go:

[okiehsch]

Ok, for some reason 2ddl.*##script:inject(abort-on-property-write.js, _pop) has not been injected on your end.
Please update your uBO-filter list then post another screenshot this time filtered to only show the dom requests.
Looks like this for me.

You should see four script:inject entries.

[okiehsch]

I can also see that you are using kaspersky which injects it's own script into every webpage you visit, which could potentially lead to conflicts with uBO.

The issue you see on your end is fixed with a default setup and up to date filters.
The c1/c2.popads.net requests in your screenshot are never fired because of the
2ddl.*##script:inject(abort-on-property-write.js, _pop) filter, as you can see if you look at my first screenshot.

[salam2009]

Ok, here's what I get after updating uBO-filter:

Is there one more step to do?

[okiehsch]

Do you still see the c1/c2.popads.net requests of your first screenshot?
You have to remove the "dom" filter.

[salam2009]

Nope :)

[okiehsch]

Then your issue is fixed.

[salam2009]

btw, ganool.im has become ganol.ru.

[Alhaitham]

The fix breaks some functions of ancensored.com like real time search and adding celebs to favorites.

[okiehsch]

Thanks.
Real time search should work after you update your uBO-filter list.

[salam2009]

@okiehsch
Even though ganol.ru is now ganol.si, the site has been showing popads for some reason.

[okiehsch]

Should be fixed if you update your uBO-filters list.

[salam2009]

I just did & you're fast & awesome as always :)

[salam2009]

@okiehsch
2ddl is now invictus.ws & it's been using popads when the user clicks on the page or the links.

[salam2009]

@mapx-
ganol.si is now ganool123.com with popads.

[salam2009]

@mapx- @okiehsch
2ddl.io is now onceddl.net with popads.

[salam2009]

@mapx-
onceddl.net has become onceddl.com & the popads came back.
Thanks so much for your efforts!

[salam2009]

@mapx-
onceddl.com is now onceddl.org & the popads have returned.
I can't thank you enough for your continuous support! :)

[mapx-]

The current filter covers already any TLD
onceddl.*,twoddl.*##+js(aopw, _pop)

I cannot reproduce in FF / chrome / opera

@llacb47 do you get any popup ?

[llacb47]

Yes, unblocked zfgloaded popunder opens in new tab.

[okiehsch]

What browser? I can't reproduce and the zfgloaded script is commented out in the source on my end.

Edit: The added filter can't hurt. 😉

[salam2009]

ok, it seems the new popup gone after you updated the filters. Thanks guys! 🙂

[salam2009]

@mapx- @okiehsch
onceddl.com is now 2ddl.ms & the popads occasionally open up.
Thanks for the update in advance! 😊