Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

exego.app: detection #21895

Closed
8 of 9 tasks
Hazuki-san opened this issue Jan 11, 2024 · 19 comments
Closed
8 of 9 tasks

exego.app: detection #21895

Hazuki-san opened this issue Jan 11, 2024 · 19 comments
Labels

Comments

@Hazuki-san
Copy link

Hazuki-san commented Jan 11, 2024

Prerequisites

  • This is NOT a YouTube, Facebook or Twitch report.
  • I read and understand the policy about what is a valid filter issue.
  • I verified that this issue is not a duplicate. (Search here to find out.)
  • I did not remove any of the default filter lists, or I have verified that the issue was not caused by removing any of the default lists.
  • I did not enable additional filter lists, or I have verified that the issue still occurs without enabling additional filter lists.
  • I do not have custom filters/rules, or I have verified that the issue still occurs without custom filters/rules.
  • I am not using uBlock Origin (uBO) along with other content blocker extensions.
  • I have verified that the web browser's built-in blocker or DNS blocking (standalone or through a VPN) is not causing the issue.
  • I did not answer truthfully to ALL the above checkpoints.

URL(s) where the issue occurs.

https://exego.app/H0fOmv

Description

The site detects ad-blockers.

Other extensions used

none

Screenshot(s)

Screenshot(s)

image

Configuration

Details
uBlock Origin: 1.55.0
Chromium: 120
filterset (summary):
 network: 135494
 cosmetic: 84289
 scriptlet: 37534
 html: 0
listset (total-discarded, last-updated):
 added:
  THA-0: 1468-3, now
  adguard-generic: 81526-490, now
 default:
  user-filters: 9-1, never
  easylist: 76982-1680, 1h.35m Δ
  easyprivacy: 43408-128, 1h.35m Δ
  plowe-0: 3787-1178, now
  ublock-badware: 7774-317, 7m
  ublock-filters: 36396-3427, 7m
  ublock-privacy: 963-7, 7m
  ublock-quick-fixes: 187-50, 7m
  ublock-unbreak: 2187-98, 7m
  urlhaus-1: 10325-0, now
filterset (user): [array of 9 redacted]
trustedset:
 added: [array of 11 redacted]
switchRuleset:
 added: [array of 1 redacted]
userSettings:
 advancedUserEnabled: true
hiddenSettings: [none]
supportStats:
 allReadyAfter: 434 ms (selfie)
 maxAssetCacheWait: 233 ms
 cacheBackend: browser.storage.local
popupPanel:
 blocked: 5
 network:
  arglingpistole.com: 1
  asacdn.com: 1
  demand.supply: 1
  doubleclick.net: 1
  googletagmanager.com: 1
 extended:
  ##.steps-to-earn, .flex.share-icons-container, .register-banner,…
  ##+js(no-fetch-if, pagead2.googlesyndication.com)
  ##+js(abort-current-script, document.createElement, break;case $…
  ##+js(addEventListener-defuser, click, handleClick)
  ##+js(abort-on-stack-trace, Object, /(?=^(?!.*(https)))/)
  ##+js(set-constant, blurred, false)
@Hazuki-san
Copy link
Author

Is there something I need to add about this?

Yuki2718 added a commit that referenced this issue Jan 11, 2024
@Yuki2718
Copy link
Contributor

Is there something I need to add about this?

Your Configuration is empty. Provide them.

@Hazuki-san
Copy link
Author

My configuration is default config. Using the stock one.

@Yuki2718
Copy link
Contributor

Yuki2718 commented Jan 11, 2024

The destination says

Your link has been generated by another IP address. Please use the same IP.

Is it possible I have to use the same IP? Registered and generated a link, still no detection.

@Hazuki-san
Copy link
Author

That's weird, I've tried with multiple IPs. I can still access fine. Is there any error screen I can see?

@Yuki2718
Copy link
Contributor

Please copy and paste Troubleshooting info in case.

@Hazuki-san
Copy link
Author

uBlock Origin: 1.55.0
Chromium: 120
filterset (summary):
 network: 135494
 cosmetic: 84289
 scriptlet: 37534
 html: 0
listset (total-discarded, last-updated):
 added:
  THA-0: 1468-3, now
  adguard-generic: 81526-490, now
 default:
  user-filters: 9-1, never
  easylist: 76982-1680, 1h.35m Δ
  easyprivacy: 43408-128, 1h.35m Δ
  plowe-0: 3787-1178, now
  ublock-badware: 7774-317, 7m
  ublock-filters: 36396-3427, 7m
  ublock-privacy: 963-7, 7m
  ublock-quick-fixes: 187-50, 7m
  ublock-unbreak: 2187-98, 7m
  urlhaus-1: 10325-0, now
filterset (user): [array of 9 redacted]
trustedset:
 added: [array of 11 redacted]
switchRuleset:
 added: [array of 1 redacted]
userSettings:
 advancedUserEnabled: true
hiddenSettings: [none]
supportStats:
 allReadyAfter: 434 ms (selfie)
 maxAssetCacheWait: 233 ms
 cacheBackend: browser.storage.local
popupPanel:
 blocked: 5
 network:
  arglingpistole.com: 1
  asacdn.com: 1
  demand.supply: 1
  doubleclick.net: 1
  googletagmanager.com: 1
 extended:
  ##.steps-to-earn, .flex.share-icons-container, .register-banner,…
  ##+js(no-fetch-if, pagead2.googlesyndication.com)
  ##+js(abort-current-script, document.createElement, break;case $…
  ##+js(addEventListener-defuser, click, handleClick)
  ##+js(abort-on-stack-trace, Object, /(?=^(?!.*(https)))/)
  ##+js(set-constant, blurred, false)

@Yuki2718
Copy link
Contributor

Yuki2718 commented Jan 11, 2024

adguard-generic is not default. But I can reproduce if I disable redirection of pagead2.googlesyndication.com/pagead/js/adsbygoogle.js xhr. Actually, exego.app##+js(no-fetch-if, pagead2.googlesyndication.com) in AG Base is causing detection.

@Hazuki-san
Copy link
Author

Alright, I wiped everything to factory settings. It seems to be working fine now.

@ItsProfessional ItsProfessional closed this as not planned Won't fix, can't repro, duplicate, stale Jan 11, 2024
Yuki2718 added a commit to AdguardTeam/AdguardFilters that referenced this issue Jan 11, 2024
@Yuki2718
Copy link
Contributor

Yuki2718 commented Jan 11, 2024

@gorhill exego.app##+js(no-fetch-if, pagead2.googlesyndication.com) causes detection only on Chromium with uBO, but with AG it doesn't. Is this related to gorhill/uBlock@e1ae17e ?

@gorhill
Copy link
Member

gorhill commented Jan 11, 2024

The following filter is causing the prevent-fetch scriptlet to throw:

exego.app##+js(aost, Object, /(?=^(?!.*(https)))/)

Solution is to use safe Object_defineProperty, which is already declared. It's unrelated to the commit you mention, the exception occurs when setting the url property which has been there since long.


That filter is actually breaking quite a lot of other scriptlets since many of them still use unsafe Object.[...], so they end up throwing.

ghajini added a commit that referenced this issue Jan 11, 2024
Yuki2718 added a commit to AdguardTeam/AdguardFilters that referenced this issue Jan 12, 2024
@rrrcabral
Copy link

i also have problem is this site

@detyso
Copy link

detyso commented Aug 24, 2024

still ads After Clicking im not a robot it gets redirected to other sites https://exego.app/GdvGUG

@ghajini
Copy link
Collaborator

ghajini commented Aug 24, 2024

URL = https://exego.app/GdvGUG

there is script on page; In final page that opens popups

<script>
window.shouldOpenPopUp = true;
function openPopup(event) {
  if (window.shouldOpenPopUp) {
    event.preventDefault();
    event.stopImmediatePropagation();
    window.shouldOpenPopUp = false;
    setTimeout(() => {
      window.shouldOpenPopUp = true;
    }, 12000)    // Create and click the link
    const a = document.createElement('a');
    a.href = 'https://cvrtu6ee.pro/?aD1jNzViM2EyYWNiYjdlYWZlYjVjNTQyMGY4ZDg4YjBiMyZ1c2VyPTE5NCZzaWQ9OTImdHlwZT1jJmFkY29kZT0yJnRtcD01&file=exe';
    a.target = '_blank';
    a.style.display = 'none';
    document.body.appendChild(a);
    a.click();
    document.body.removeChild(a);
  }
}
document.body.addEventListener('click', openPopup);
</script>

add

exego.app##+js(acs, navigator, FingerprintJS)
exego.app##+js(aeld)

On firefox , the event listener is not logged
on chrome exego.app##+js(aeld, click, open) or exego.app##+js(aeld, click, openPopup) work but not on firefox

@gorhill sorry can you see on firefox ?

@gorhill
Copy link
Member

gorhill commented Aug 25, 2024

Maybe I am too late to investigate but I am not seeing a difference when following the steps.

@ghajini
Copy link
Collaborator

ghajini commented Aug 25, 2024

on firefox following filters does not work
exego.app##+js(aeld, click, open) or exego.app##+js(aeld, click, openPopup)

on chrome it work

@gorhill
Copy link
Member

gorhill commented Aug 25, 2024

In neither Chromium or Firefox do I see a match for open when I use exego.app##+js(aeld).

@ghajini
Copy link
Collaborator

ghajini commented Aug 25, 2024

you are unable to see match because of fix over here af23131

STR=

  • add
exego.app##+js(acs, navigator, FingerprintJS)
exego.app##+js(aeld)
exego.app#@#+js(remove-node-text, script, /popup/i)
exego.app#@#^script:has-text(/popup/i)
  • visit https://exego.app/GdvGUG, after captcha verfication ,popup arises

@D4niloMR
Copy link
Contributor

On my end that script is commented out

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

8 participants