Search found 9 matches

by nhjm449
Tue Aug 09, 2016 2:12 pm
Forum: Report unblocked content
Topic: openclose.click
Replies: 5
Views: 1030

Re: openclose.click

Thank you, fanboy. Looks like it was added August 5.
by nhjm449
Tue Aug 09, 2016 7:14 am
Forum: Report unblocked content
Topic: 2ddl.ag
Replies: 51
Views: 9684

Re: 2DLL.cc

Hi smed79, I appreciate both your help and your patience. I have no doubt that sifting through all these submissions is a daunting task, and if I'm making that any harder for you, I do apologize. Regarding https://forums.lanik.us/viewtopic.php?f=62&t=31805 https://forums.lanik.us/viewtopic.php?f...
by nhjm449
Tue Aug 09, 2016 6:00 am
Forum: Report unblocked content
Topic: Several 8-letter popads.net domains
Replies: 1
Views: 555

Several 8-letter popads.net domains

These domains serve popads.net popunder JavaScript that attaches itself to links on domains such as 2ddl.ag and linx.2ddl.ag. Example script: <!-- PopAds.net Popunder Code for linx.2ddl.ag | 2016-08-09,1295651,0,0 --> <script type="text/javascript" data-cfasync="false"> (function...
by nhjm449
Tue Aug 09, 2016 5:40 am
Forum: Report unblocked content
Topic: mrperfect.in, dubshub.com
Replies: 3
Views: 800

Re: mrperfect.in, dubshub.com

Sorry about that. It's popunder code that attaches itself to every link on the page. Originally found on 2ddl.ag and linx.2ddl.ag. The scripts used on those domains have since changed and now point to different domains, so it's no longer possible to provide a working example, but I assume that the d...
by nhjm449
Tue Aug 09, 2016 5:40 am
Forum: Report unblocked content
Topic: openclose.click
Replies: 5
Views: 1030

Re: openclose.click

Sorry about that. It's popunder code that attaches itself to every link on the page. Originally found on 2ddl.ag and linx.2ddl.ag. The scripts used on those domains have since changed and now point to different domains, so it's no longer possible to provide a working example, but I assume that the d...
by nhjm449
Fri Jul 29, 2016 6:13 am
Forum: Report unblocked content
Topic: mrperfect.in, dubshub.com
Replies: 3
Views: 800

mrperfect.in, dubshub.com

Requesting

Code: Select all

||mrperfect.in^$third-party
||dubshub.com^$third-party
I've seen popunder scripts from both.
by nhjm449
Fri Jul 29, 2016 6:07 am
Forum: Report unblocked content
Topic: openclose.click
Replies: 5
Views: 1030

openclose.click

Requesting ||openclose.click^$third-party Domain registered 2016-07-25. From <script type="text/javascript">!function(e,c,t,r,n){function i(){if(!o){o=!0;var e=document.createElement("script");e.src=""+w+"op"+q+c+p+m+"/"+d+p+l,n||"loading"!...
by nhjm449
Fri Oct 25, 2013 3:22 pm
Forum: Report unblocked content
Topic: dictionary.com
Replies: 5
Views: 2479

Re: dictionary.com

Where do you have these domains from? Website contains: <script type='text/javascript'>try{(function(S){var h="hdqrfBrsieoteaqrqnsq-TqerhqmNaysnmltgticqnmlearqmcpjm/ptqs.]_-ZA-[=Clgqcaqiocs.qmcq/ptqirqsCeooqeagaqgunLeutsfeoeitgtgeqtiqersdurxfrFfxdihgeqqipqit eu ma ug lw nu wh sn lv cu to ulwwr...
by nhjm449
Mon Oct 21, 2013 3:15 am
Forum: Report unblocked content
Topic: dictionary.com
Replies: 5
Views: 2479

Re: dictionary.com

Their obfuscated JavaScript loader tries to load an ad script from a list of domains. The actual domain used is dependent on "random" information about the user such as browser, screen size, timezone, and language. Domains include: azorbe.com durtz.com losomy.com oodode.com glical.com eptu...