kissmanga.com

[smed79]

popup

Code: Select all

|blob:$domain=kissmanga.com
$websocket,domain=kissmanga.com

http://kissmanga.com/Manga/Sodatechimaou/Vol-002-Ch-020--Magical-Beast-Rodeo?id=372519

[fgsfdss1]

http://kissmanga.com/

Since a few days, kissmanga seems to have a new script to produce invisible overlay ads across the entire page, from seemingly randomly generated domains such as cl96rwprue.com (these vary), which then redirect to other domains for some porn browser game for example.

Tried my hardest to block the script myself to no avail.

I found this inline script in the source code:

Code: Select all

<script type='text/javascript' src='//3phzb1pbij.com/9b/ba/a9/9bbaa9f1127c9f2b25c9fe6ca2d0fa62.js'></script>

which I thought to be the culprit, but at least in my attempts it didn't appear to be. May however also be a different malicious script. Any information on this script would also be appreciated.

This is on the latest Firefox with the latest version of uBO.

Thanks.

[intense]

Did you update ublock filters ?

[smed79]

popup + anti adblock

Code: Select all

@@||kissmanga.com^$generichide
|http://$script,third-party,domain=kissmanga.com
|https://$script,third-party,domain=kissmanga.com

[fgsfdss1]

Did you update ublock filters ?

Yes sir.

popup + anti adblock

Code: Select all

@@||kissmanga.com^$generichide
|http://$script,third-party,domain=kissmanga.com
|https://$script,third-party,domain=kissmanga.com

Thanks. This works, but it also breaks the script opening Disqus at the bottom of each chapter page, and I believe hinders loading of account preferences as well.

Any idea about the inline '3phzb1pbij'-script?

[smed79]

breaks the script opening Disqus

For disqus add

Code: Select all

@@||disqus.com/embed.js$script,domain=kissmanga.com
@@||disquscdn.com^$script,domain=kissmanga.com

I believe hinders loading of account preferences as well

Example?

Any idea about the inline '3phzb1pbij'-script?

admeasures revolving adservers
viewtopic.php?p=120362#p120362

You can replace the above filters by

Code: Select all

@@||kissmanga.com^$generichide
/^((?!(^https?):\/\/(ajax\.googleapis\.com|apis\.google\.com|cdnjs\.cloudflare\.com|([a-z])\.disquscdn\.com||([0-9a-z]+\.)?disqus\.com|www\.facebook\.com)\/).)*$/$script,subdocument,third-party,domain=kissmanga.com

or

Code: Select all

@@||kissmanga.com^$generichide
/^https?:\/\/([a-z0-9]{8,10}\.)?[a-z0-9]{5,14}\.(com|bid|online|top|club)\/([a-z0-9]{2}\/){3}[a-f0-9]{32}\.js$/$script,third-party

[fgsfdss1]

For disqus add

Code: Select all

@@||disqus.com/embed.js$script,domain=kissmanga.com
@@||disquscdn.com^$script,domain=kissmanga.com

admeasures revolving adservers
viewtopic.php?p=120362#p120362

You can replace the above filters by

Code: Select all

@@||kissmanga.com^$generichide
/^((?!(^https?):\/\/(ajax\.googleapis\.com|apis\.google\.com|cdnjs\.cloudflare\.com|([a-z])\.disquscdn\.com||([0-9a-z]+\.)?disqus\.com|www\.facebook\.com)\/).)*$/$script,subdocument,third-party,domain=kissmanga.com

Applied all of these. Seems to work fine now.

Example?

When I applied the filters my preference reset to one-page view. Might have been a coincidence in timing with the website pushing one-page as default view now to get more clicks on their new ads, perhaps. I changed it back and it's stayed that way so it isn't really an issue.

Thanks for your help.

[fgsfdss1]

More trouble at KissManga. They now block IPs of people who visit their site with an adblocker on, and redirect them to a fake maintenance page. I'm not sure if I should be reporting this here though. If not, please redirect me to the right place.

--
Correction: not an IP block as I can access it from different browsers. Clearing cookies doesn't work though, so I'm not sure what it would be.

[fgsfdss1]

Code: Select all

kissmanga.com##script:inject(bab-defuser.js)

This seemed to have worked for me. Though there is another script which I haven't found that clears the reader of images after one minute.
I tried these filters:

Code: Select all

kissmanga.com##script:inject(jquery17.min.js)
kissmanga.com##script:inject(ca.js)
kissmanga.com##script:inject(lo.js)

as well for trial and error purposes, without success.
I found an inline script (applied to all reader pages, just go to a random chapter of any manga) containing functions "HATEDBSDIDSY" and "NGASTQBASMS" which may be the culprit, though I can't test as I don't know how to block inline scripts.
Any help with finding the script causing the page to clear, or any other malicious scripts appreciated.

[intense]

remove those filters, update ublock filters, test again.

(what are the last 3 filters ? You can use only scriptlets in resources library)

for uBo specific filters report here (always after updating ublock filters):
https://github.com/uBlockOrigin/uAssets/issues

[fgsfdss1]

I see. I misunderstood script:inject and thought it was used to block the script by name specified, hence my attempts. Clearly I have no idea what I'm doing, hence trial and error. I'm not experienced, just attempting to fix things myself.

Removed them, updated my filters and it seems to work again.

If you don't mind me asking for future reference, where did you find the scripts that caused the page removal and anti-adblock?

Thanks.

[fgsfdss1]

Well, this worked for about a day. Seems they already countered. Pages don't load at all now.

I assume it's as simple as just blocking a script. I'd much appreciate if anyone could point me in the direction of a knowledge base of some sort on how to possibly tackle this myself.

[fgsfdss1]

Update: I managed to fix this by triggering:

Code: Select all

$('#divImage').show()

externally with a script. There is a similar function:

Code: Select all

$('#divImage').hide()

in an inline script (still the 'HATEDBSDIDSY' one), so I assume blocking that so it doesn't trigger in the first place would fix it as well, though I don't know how to do that.

Sorry for the many double-posts, editing gets disabled after a short time.

[intense]

Update all your lists and test again, no isssue for me.

[fgsfdss1]

Just tried that, but no luck. I can see the pages for about a second now, then they are immediately removed again, similar to my post from yesterday except instantaneous rather than the minute delay.
This is with the latest versions of Firefox, uBO and EasyList.

[STR8_AN94BALLER]

Update all your lists and test again, no isssue for me.

Just tried that, but no luck. I can see the pages for about a second now, then they are immediately removed again, similar to my post from yesterday except instantaneous rather than the minute delay.
This is with the latest versions of Firefox, uBO and EasyList.

Still get you 'banned' from the site fyi, you need to load a few manga chapter with "all images" option and wait a bit before getting banned.

[oneirosu]

A new kind of video add is not caught by Adblock on Mangaonline. See

Code: Select all

https://mangaonline.fun/chapter/one-piece_118/chapter-921

for an example. It appears part way down the page and then will remain shown in the lower corner until closed. I have properly checked without other extensions and the problem appears in both Google Chrome and Firefox.

[intense]

add

Code: Select all

||truvidplayer.com^$script,domain=mangaonline.fun
mangaonline.fun##.ads-container
mangaonline.fun###adblock-notice

[smed79]

Code: Select all

/iframe/*&adId=
##.ads-container
##.ads-container-1
##.ads-container-2
||mangaonline.fun/iframe/*
||truvidplayer.com^*&widget_id=$third-party

for the adblock notice subscribe to "Adblock Warning Removal List" https://adblockplus.org/subscriptions#type_anti-adblock

[STR8_AN94BALLER]

Example url:

Code: Select all

https://kissmanga.com/Manga/Blame

If adblock is detected, the website will display a fake maintenance page.

Clearing kissmanga cookies will restart the detection process if you visit the site again.

Is there a way around this? The userscript posted here doesn't work either.

@smed79 suggested to use "adblock warning removal list" but that doesn't work either.

Filter list currently used: https://i.imgur.com/WctPXpL.png

[intense]

I get The site is under maintenance. Please come back later. even disabling uBo

adblock warning removal list => it's only for very light (not blocking) warning anti adb messages, completely useless

[smed79]

If adblock is detected, the website will display a fake maintenance page.

I am able to reproduce the issue (the website display the fake maintenance page only if Adblock Plus is enabled)
can be fixed by adding

Code: Select all

@@||kissmanga.com^$generichide
@@||kissmanga.com/ads/adprotect300-$subdocument,~third-party

[STR8_AN94BALLER]

If adblock is detected, the website will display a fake maintenance page.

I am able to reproduce the issue (the website display the fake maintenance page only if Adblock Plus is enabled)
can be fixed by adding

Code: Select all

@@||kissmanga.com^$generichide
@@||kissmanga.com/ads/adprotect300-$subdocument,~third-party

Sorry for the bump of old thread, but has this been integrated into easylist or still must be manually added?

[intense]

Use uBo, the comments button is enabled now

[STR8_AN94BALLER]

Use uBo, the comments button is enabled now

Yes I do have uBo, was wondering if the fix made it into any of the supplied default filterlist on uBo (I assume it did but just want to make sure)