MovPod.in / gorillavid.in / daclips.in

[jimbob]

These all have a transparent overlay (that I couldn't block with the picker tool) that causes two popups to appear with base64 encoding that then loads spam websites. I tried blocking with a custom filter, and the same overlay was regenerated by some javascript.

Example: http://movpod.in/sxzqg677my2n

Code contained in http://movpod.in/sxzqg677my2n
The name of this file changes from site to site.

[jimbob]

Popups still triggering on

Code: Select all

http://gorillavid.in/cna/o8s2t2ynykbw

[mele]

add:

Code: Select all

@@||ajax.googleapis.com^$script,domain=movpod.in|daclips.in

|http://$script,third-party,xmlhttprequest,domain=movpod.in|daclips.in

|https://$script,third-party,xmlhttprequest,domain=movpod.in|daclips.in

Code: Select all

||$popup,domain=gorillavid.in|movpod.in|daclips.in

about:blank$popup,domain=gorillavid.in|movpod.in|daclips.in

You are working too hard...

Code: Select all

cloudfront.net/?tid$script,domain=gorillavid.in

This will remove the popup; better add this cloudfront chain as a generic role since all the websites with anti-adblock solution using it.

[smed79]

This will remove the popup;

go test on google chrome ...

Continue https://forums.lanik.us/viewtopic.php?f=62&t=33507