general_url.txt

!
! This section contains the list of generic blocking rules.
!
! Good: .org/ads/
! Bad: .org/ads/$domain=example.org (for instance, should be in speficic.txt)
!
!
! This is an interesting case.
! This is a part of the URL used by an Indian ISP called BSNL
! to inject ads into HTTP pages
! Example URL: http://117.254.84.212:3000/getjs?nadipdata=%7B%22url%22%3A%22%2F%22%2C%22referer%22%3A%22%22%2C%22host%22%3A%22h2020.myspecies.info%22%2C%22categories%22%3A%5B100%5D%2C%22reputations%22%3A%5B1%5D%2C%22nadipdomain%22%3A1%2C%22policyid%22%3A0%7D&screenheight=1120&screenwidth=1792&tm=1603925840327&lib=true&method2=true
/getjs?nadipdata$third-party,replace=/[\s\S]+openOriginalUrl[\s\S]+/openOriginalUrl()/
!
! https://github.com/AdguardTeam/AdguardFilters/commit/76971ea821a06ab04ada21f1291e6081ad54c428#commitcomment-104226681
/asset/angular.min.js?t=$xmlhttprequest,~third-party
/asset/jquery/slim-3.2.min.js?*&t=$xmlhttprequest,~third-party
! TODO: remove 20.03.2023 if generic rules will not cause problems
! /asset/angular.min.js$domain=avple.video|javhdfree.icu|nekolink.site|mambast.tk|netflav.com|fembed-hd.com|ndrama.xyz|pornhole.club|ffem.club|jvembed.com|dzmdplay.xyz|jav247.top|yuistream.xyz|javfu.net|iframe2videos.xyz|viplayer.cc|watchjavnow.xyz|cdn-myhdjav.info|embed-media.com|fembed9hd.com|cloudrls.com|vidgo.top
! /asset/jquery/slim-3.2.min.js$domain=avple.video|javhdfree.icu|nekolink.site|mambast.tk|netflav.com|fembed-hd.com|ndrama.xyz|pornhole.club|ffem.club|jvembed.com|dzmdplay.xyz|jav247.top|yuistream.xyz|javfu.net|iframe2videos.xyz|viplayer.cc|watchjavnow.xyz|cdn-myhdjav.info|embed-media.com|fembed9hd.com|cloudrls.com|vidgo.top
!
!
! https://github.com/AdguardTeam/AdguardFilters/issues/185532
! Example: https://sheegiwo.com/tag.min.js
!          https://alwingulla.com/88/tag.min.js
/^https:\/\/[a-z]{8,15}\.(?:(com|net)\/(?:\d{1,3}\/)?tag\.min\.js$)/$script,third-party
! ex. https://jzjj.jeoawamjbbzjy.top/kljyjjeajazry/mevjvz?d=1
/^https:\/\/[a-z]{3,5}\.[a-z]{10,14}\.top\/[a-z]{10,16}\/[a-z]{5,6}(?:\?d=\d)?$/$script,third-party,match-case
! https://github.com/AdguardTeam/AdguardFilters/issues/182734
.click/?token=*&sessionUser=*&amzId=*&tilTime=*&s=|$all
.cfd/?siteId=*&sessionId=*&cookiesValue=$all
! ex. https://gutazngipaf.com/en/olrod?id=2013574
/^https:\/\/[a-z]{10,12}\.com\/[a-z\/]{2,}\?id=[12]\d{6}$/$script,third-party,match-case
! ex. https://fiveyardlab.com/z-7131650
/^https:\/\/[0-9a-z]{5,}\.[a-z]{2,3}\/z-[5-9]\d{6}$/$script,~third-party
! https://github.com/AdguardTeam/AdguardFilters/pull/175819
/^https:\/\/www\.[a-z]{8,16}\.com\/(?:[A-Za-z]+\/)*(?:[_0-9A-Za-z]{1,20}[-.])*[_0-9A-Za-z]{1,20}\.js$/$script,third-party,match-case,header=popads-node
/^https:\/\/www\.[a-z]{8,16}\.com\/(?:[A-Za-z]+\/)*(?:[_0-9A-Za-z]{1,20}[-.])*[_0-9A-Za-z]{1,20}\.js$/$script,third-party,match-case,header=link:/adsco\.re\/>;rel=preconnect/
://www.*.com/*.css|$script,third-party,header=popads-node
://www.*.com*/images/*.min.js|$script,third-party,header=popads-node
://www.*.com/css/$script,third-party,header=popads-node
://www.*.com/js/css/$script,third-party,header=popads-node
://www.*.com/*.css|$script,third-party,header=link:/adsco\.re\/>;rel=preconnect/
://www.*.com*/images/*.min.js|$script,third-party,header=link:/adsco\.re\/>;rel=preconnect/
://www.*.com/css/$script,third-party,header=link:/adsco\.re\/>;rel=preconnect/
://www.*.com/js/css/$script,third-party,header=link:/adsco\.re\/>;rel=preconnect/
! https://github.com/uBlockOrigin/uAssets/issues/9139#issuecomment-1945860142
/tds/ae?*&clickid=$document
.com/api/users*^in=false&token=$document
.com/api/users*^pii=&in=false^$document
.com/api/users*^in=false&pii=$document
! https://github.com/AdguardTeam/AdguardFilters/issues/158316
://trk.*.run^$document
! https://github.com/AdguardTeam/AdguardFilters/issues/156603
! Fake dating sites
?aff_pg=PPU&aff_id=$all
?subPublisher=popunder:$all
! push notification scam
/?clck=*&sid=$document
/?pl=*&sm=$document
! Lucky visitor and video scam ex. https://1821.antbenjaw.live/jiehxxgr/?u=1nup806&o=0wywy2l&t=...
.live/web/?sid=t*~$document
! https://urlscan.io/result/fb21aa1b-9c79-4ac4-8e82-386403964206/
/?u1=*&o1=*&sid=t*~$document
/^https?:\/\/[0-9a-z]*\.?[-0-9a-z]{4,}\.[a-z]{2,11}\.?[a-z]{0,7}\/(?:[0-9a-z]{6,10}\/)?\/?(?:article\d{4}\.doc)?\?(?:cid=[0-9a-z]+&)?[ou]=[0-9a-z]{7}(?:&t=\d+)?&[ou]=[0-9a-z]{7}/$document,match-case
!+ PLATFORM(ios, ext_safari)
/^https?:\/\/[0-9a-z]*\.?[-0-9a-z][-0-9a-z][-0-9a-z][-0-9a-z]+\.[a-z][a-z]+\.?[a-z]*\/([0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z]+\/)?\/?(article[0-9][0-9][0-9][0-9]\.doc)?\?(cid=[0-9a-z]+&)?[ou]=[0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z](&t=[0-9]+)?&[ou]=[0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z]/$document,match-case
!
! PopAds
.com/*=3&*,1|$script,third-party
.com/*=3&*,0|$script,third-party
.com/*=e3&*,1|$script,third-party
.com/*=e3&*,0|$script,third-party
!
.com/1?z=$script,third-party
.com/2?z=$script,third-party
.net/1?z=$script,third-party
.net/2?z=$script,third-party
/pub?id=$script,third-party
/in/p/?spot_id=$subdocument,third-party
&request_ab*&zoneid=$all
&campid=*&did=$all
&zoneid=*&request_ab$all
! https://help.zeydoo.com/en/articles/4362747
/?l=*&campid=*&ymid=$all
! AaDetector
/loadmez/com/coldvain/*.js
/loadme/com/coldvain/*.js
/loadme/com/lazymolecule/*.js
/heyboy/com/lazymolecule/*.js
! sadbl
/script/suv5.js|$script
/script/q91a.js|$script
/script/frustration.js|$script
/d3.php?*=s*&*&sadbl=
/deity.php?*=s*&*&sadbl=
/script/pop_packcpm.php
! Porn banners
.com/ablck/250-300/
&type=dynamic_banner$subdocument,third-party
! Ad redirects on visit abandoned domains
/?tm=1&subid4=*&kw=$all
/page/bouncy.php?&bpae=*&redirectType=js&inIframe=$all
! https://github.com/AdguardTeam/AdguardFilters/issues/131024
&siteid=*&adid=$removeparam
! Vidstream
/mellowpresence.com^$script
! https://github.com/easylist/easylist/pull/9330
! Example URL: https://2fe5885777.b370db8cb7.com/75ef9b49bd156e7615885ad2fbc87f82.js
/^https:\/\/[0-9a-f]{10}\.[0-9a-f]{10}\.com\/[0-9a-f]{32}\.js$/$script,third-party
!
! Clickunders in the players on porn sites
/assets/jquery/api.js?type=adult$~third-party
/assets/jquery/api.js?type=mainstream$~third-party
/assets/jquery/app100.js?type=$~third-party
/assets/jquery/api100.js?type=$~third-party
/assets/jquery/adult100.js?v=$~third-party
/assets/jquery/main100.js?v=$~third-party
/assets/jquery/jquery-1.4.1.min.js?v=2&type=adult
/assets/jquery/jquery-1.4.2.min.js?v=2&type=adult
/assets/jquery/jquery-1.4.3.min.js?v=2&type=adult
/assets/jquery/jquery-2.4.3.min.js?v=2&type=adult
/assets/jquery/jquery-3.2.min.js?v=2&type=adult
!
/?z=*&syncedCookie=true&rhd=false$all
errx01USAHTML/?bcda=$document
&js_build=iclick-$all
&subAffId={SUBAFFID}^$script,subdocument,third-party
&subAffId=tall^$script,subdocument,third-party
/?rb=*&zoneid=$all,third-party
&rb=*&zoneid=$all
&zoneid=*&rb=$all,third-party
/?request_ab*&zoneid=*&rb=$all
/avo/includes/js/jquery.js
/?uclick=*&uclickhash=$all
.com/click/?ct=*&cu=$all
/prepare/ads^
_clickunder&pb=$popup
/contents/images-banners/*
/go/*?ident=*&id_site=$~third-party
%3Faf_prt%3D*%26af_siteid%3D1*%26clickid%3D$all
/rtb/r/?token=$script
.com/pw/waWQiOjEw
! Clickadu
! ex. https://kaqppajmofte.com/en/owh/avw?spfrctux=ude&qdsp=jzub&dce=808204&jvkcce=391260&iilmwn=auge&id=1971897
/^https:\/\/[a-z]{8,12}\.com\/en\/(?:[a-z]{2,5}\/){0,2}[a-z]{2,}\?(?:[a-z]+=(?:\d+|[a-z]+)&)*?id=[12]\d{6}/$script,third-party,match-case,header=etag
?zoneid=*&ab=1|$script,third-party
/get/*?zoneid=*&jp=$script
! https://github.com/AdguardTeam/AdguardFilters/pull/83787
/c-hive.min.js$script,~third-party
/shrinker/js/ionqsnwx1.js$script,~third-party
/shrinker/js/ionqsnwx2.js$script,~third-party
!
! common TXXX network scripts
/assets/jwplayer-*/vast.js$script,~third-party
/duayn7.$script,~third-party
/howone7.$script,~third-party
/ytrek7.$script,~third-party
/lemon7.$script,~third-party
/teo7.$script,~third-party
/nofa7.$script,~third-party
/afon7.$script,~third-party
/rass7.$script,~third-party
/huyass7.$script,~third-party
/kzdh7.$script,~third-party
/klesd7.$script,~third-party
!
! https://github.com/AdguardTeam/AdguardFilters/pull/136624
! PropellerAds
/^https:\/\/[a-z-]{8,15}\.(?:com|net|tv|xyz)\/(?:40[01]|50?0?)\/\d{6,7}\??\S*$/$script,xmlhttprequest,third-party
! Popular on Japanese sites but seen in other countries too
! https://github.com/AdguardTeam/AdguardFilters/issues/58587#issuecomment-656098019
! Sample URL: ||js.passaro-de-fogo.biz/t/113/750/a1113750.js
/\/t\/[0-9]{3}\/[0-9]{3}\/a[0-9]{4,9}\.js$/$script
!
! ex. https://d3a00ifauhjdp.cloudfront.net/?afiad=933423
/^https?:\/\/[0-9a-z]{13,14}\.cloudfront\.net\/\?[a-z]{3,5}=\d{6,7}$/$script,xmlhttprequest,third-party
!
/js/fpu3/pu4.min.js
/cb/cb.ta.js?v=
/cb/cb.xb.js?v=
/ab/thejsfile.js
.xyz/1clkn/
.club/1clkn/
!+ PLATFORM(ios, ext_safari)
/\/[0-9][0-9][0-9][0-9][0-9]\?version_name=[a-z]$/$xmlhttprequest
! https://github.com/AdguardTeam/AdguardFilters/issues/65588
!+ PLATFORM(ios, ext_safari)
.adriver.$domain=~adriver.co
! https://github.com/AdguardTeam/AdguardFilters/issues/44105
.com/*?*&refer=*fmovies.*&adb=$all
!+ PLATFORM(ios, ext_safari, ext_android_cb)
.com/*?*&refer=*fmovies.*&adb=
! PopAds redirects
!+ PLATFORM(ios, ext_safari, ext_android_cb)
.com/s?cid=*&iuid=*&ts=*&ps=*&pw=*&pl=*&r=
! ads on the porn sites
/s/s/js/m/custom.js?
/s/s/js/m/custom_advanced.js?
/s/s/js/ssu.v2.
/_xa/ads_batch?ads=$xmlhttprequest,script
/a/ipn/js/*
/a/pop/js/*
/s/s/supc.php
/s/su.php?t=
/s/js/ssu.v2.js?v=
/xvideo.js|
! Adman System popunderp
/_a_ta/s/s/*
/local_p.js^
/local_su.js?t=
/ab-a.js?v=
/local_ssu.js|
/s/s/suo.php
!
.pro/v1/a/*.js|
.pro/v1/a/*/js?subid=awn|
.pro/v1/a/*/js?container=
.pro/v2/a/ban/
!
!
/?scontext_r=*&nrb=$all
&pbsubid=*&noads=$all
.com/script/utils.js|$third-party
.icu/*?zoneid=*&visitor_id=$all
/?pid=*&subid=*&clickid=$popup
/?tag=*&clickid=*&subid=$popup
/pu/?psid=
! Popular ExoClick script name
.com/f_lo.js|$script,~third-party
/flo.js|
! Block some clickunders
!+ PLATFORM(ios, ext_safari, ext_android_cb)
.com/watch?key=
!+ PLATFORM(ios, ext_safari, ext_android_cb)
.click/?ip=$popup
! for a lot of porn sites
porn*.me/bees.js|
porn*.com/bees.js|
porn*.net/bees.js|
!
!+ NOT_OPTIMIZED
_ad_content.
!+ NOT_OPTIMIZED
/getAditem
!+ NOT_OPTIMIZED
/getMultiAdsStrategy
!+ NOT_OPTIMIZED
/getStartPageAds
!+ NOT_OPTIMIZED
/getads?
!+ NOT_PLATFORM(ext_safari, ios)
/tghr.js$script
!
/submit.min.js?abvar=$all
/dupa.gif?z=
?ab=*&rl=1|$all
?dovr=true|$document,popup
%3C?php%20echo%20substr(md5(microtime())$popup
.com/C.ashx|$third-party
/zone/*?frame=0&ancestorOrigins=$all
/direct-link?pubid=$all
.com/redirect-zone/$all
.com/afu.php?zoneid=$all
://creative.*/widgets/Spot/lib.js$third-party
://creative.*/widgets/v4/Universal?$subdocument,third-party
/?oo=1&aab=1|$script,third-party,xmlhttprequest
/?oo=1&aab=1|$script,third-party,xmlhttprequest,redirect=noopjs
/images/static/github-org-members.min.js
.com/sha512.min.js
/api/imagine.min.js$third-party
.doc?t=popunder$all
/?t=popunder&$all
.doc?f=1&sid=$all
/[0-9a-f]{32}\/invoke\.js/$script,third-party,redirect-rule=noopjs
.com/invoke.js$script,third-party,redirect-rule=noopjs
/api/ipv4check?$xmlhttprequest,third-party
/api/senddata?$xmlhttprequest,third-party
/ads/300.html
.com/aS/feedclick?s=$all,match-case
/js/re-ads-
/_xa/ads_
/image/affiliate/*
/_adslot/*
/ad-provider.
/sdk/push_web/?zid=
.com/api/senddata/*&format=iosSystemMessage-modal-
/?publisherId=*&hostId=$all
.com/1?z=$script,third-party
/systemerror-mac/?$document
/s/s/js/i-top.js?v=
.online/*/eeeekayresrsammicraaajkaschhoilsebadhiyakuchtanahiaayaajturuionmeebbat/$document
/Win0xixm07/?phone=$document
/attractivebuilt.com/*$script
/rndskittytor.com/*$script
/itespurrom.com/*$script
/pioneersuspectedjury.com/*$script
/theologicalpresentation.com/*$script
/asdfghjkl.tech/index.html$document
/mooncars/rover/chasra*/index.php$document
/W*ity0*00Er00*/index.$document
/merrx01/^$document
/werrx01/^$document
_dating3/index.html?aref=$all
/nb/thejsfile.js
?adl=1&id=$subdocument,script,~third-party
/common-js/exit/om2.min.js
/vppdzdrw.js
/push/p.js?u=$third-party
/grgfbigo.js
/nbk/frnd_ld.js
/pwafeeds/amazon_$subdocument
/uthnafrwy.js
/fret/meow4/*$script,third-party
/display/items.php?$script,third-party
/s/s/sum.php
/vhdpoppingmodels/*$script
.popup_im.
/728xx90.jpg?sid=
/?c=propeller&lpid=$all
/xstat/ppjs?
/hillpop.php|$script,~third-party
/eroclick.js
/ts.php?q=$xmlhttprequest,third-party
/ts.php?z=$xmlhttprequest,third-party
/script/atga.js$third-party
/rtbfeed.php?$image,third-party
/gofd_fl.js
/j/m/qqqq.js?
/script/su.js$script,third-party
/javascript/fropo.js
/pub/js_min.js|
/askrej/*$script,~third-party
/nb/f_ls.js
/askdrej/*$script,~third-party
/bannerpop/uploads/*
/xxx.js|$script,~third-party
.systems/signup?ad_domain=$all
/ld/ifk?zoneid=
/asset/default/player/plugins/vast-*.js
.com/1clkn/
.php?*&v=direct&siteId=*&minBid=*&popundersPerIP=
/cdn-cgi/pe/bag2?r[]=*ssp.zryydi.com
/cdn-cgi/pe/bag2?r[]=*d27x580xb9ao1l.cloudfront.net
/cdn-cgi/pe/bag2?r[]=*.popmajor.com
/cdn-cgi/pe/bag2?r[]=*.mgid.com
/cdn-cgi/pe/bag2?r[]=*party-vqgdyvoycc.now.sh
/static/js/amvn.js
://*.*.biz/*?*!&bid=$third-party
/phantomPopunder.js|
.com/ad_js/
/cdn-cgi/pe/bag2?r[]=*syndication.exoclick.com
/js/popunderjs/init.js^
.space/?tid=
.baidu.com/cpro/
.baidu.com/ecom
.baidu.com/h.
.baidu.com/union/
/?track=ad:$third-party
/_ra_lib.js
/_ra_lib.php
/abdetect.min.js^
/ads.criteo.com.js
/adsadclient
/adsen.php
/adwolf.$domain=~adwolf.ru
/anti-ad-buster.js
/banners*swf
/cdn-cgi/pe/bag2?r[]=*cdn.plopx.com
/cdn-cgi/pe/bag2?r[]=*securepubads.g.doubleclick.net
/cdn-cgi/pe/bag2?r[]=*bontent.powvideo.net
/cdn-cgi/pe/bag2?r[]=*dacash.powvideo.net
/cdn-cgi/pe/bag2?r[]=*.poptm.com
/cdn-cgi/pe/bag2?r[]=*cpmstar.com
/cdn-cgi/pe/bag2?r[]=*prscripts.com
/cdn-cgi/pe/bag2?r[]=http%3A%2F%2Fhilltopads.net
/cu.php?s=$popup
/di3asdadasdadas.di3asdsa.js
/fiets-banner_
/filejoker.$image
/hitfile_730_90.png
/im/im.js?sk=
/index.php?op=ad_click
/mobiquo/smartbanner/ads.js^
/player_embed_cu.php?s=$popup
/redirect-ads.php
/tc-under.min.js
_200x250.png
Banner468x60
http://www.ads.$third-party
!
! https://forum.adguard.com/index.php?threads/22268/
/file?type=script&n=1&k=*&int=60&cl=$script
! RoughTed malvertising servers
! https://blog.malwarebytes.com/cybercrime/2017/05/roughted-the-anti-ad-blocker-malvertiser/
!
! PPU clickunder
.com/?zoneid=*&xref=*&uuid=$redirect=nooptext,important
! AdMaven
&abt=0&red=1*&tid=
&tid=*&red=1&abt=$redirect=nooptext,important
?tid=*&red=1&*&abt=$redirect=nooptext,important
/?&pid=*&subid=$redirect=nooptext,important
/?&subid=*&pid=$redirect=nooptext,important
!+ PLATFORM(ios, ext_safari)
&tid=*&red=1&abt=
!+ PLATFORM(ios, ext_safari)
?tid=*&red=1&*&abt=
!+ PLATFORM(ios, ext_safari)
/?&pid=*&subid=
!+ PLATFORM(ios, ext_safari)
/?&subid=*&pid=