Page 1 of 1

Streamango Script

PostPosted: Fri May 26, 2017 4:30 pm
by Arion
Hiya I found this script while going to the embedded site from https://solarmoviez.to/
The embedded stream provider links to the site https://streamango.com/
eg link being https://streamango.com/embed/aotdcpnfnseanqep/13_Reasons_Why_S01E02_WEBRip_x264-FS_mp4

Now upon inspecting the elements from the Developer tools I found a pop under script
Code: Select all
window.noPopunder = false;
if( !BetterJsPop.Browser.popunderAvailable||BetterJsPop.Browser.isIOS||BetterJsPop.Browser.isAndroid||BetterJsPop.Browser.isMobile||(typeof navigator.userAgent != "undefined" && /TV/.test(navigator.userAgent))) noPopunder = true;
if(!(BetterJsPop.Browser.isChrome||BetterJsPop.Browser.isFirefox||BetterJsPop.Browser.isSafari||BetterJsPop.Browser.isIE)) noPopunder=true;
BetterJsPop.config({
    perpage:99999999,
    delay:0,
    popFallbackOptions:{ under: false, newTab: false },
    noOpenerHijacking: true
});
if(!window.turnoff){
    var inventoryChecked = false;
(function(){
var fired = false;
BetterJsPop.add("http://serve.popads.net/checkInventory.php?v=direct&siteId=1846599&dfu=http%3a%2f%2fprestoris.com%2fafu.php%3fzoneid%3d1061308", {
    under: !noPopunder,
    newTab: false,
    forceUnder:true,
    shouldFire:function(){return !fired && !inventoryChecked;},
    cookieExpires:-1,
    afterOpen:function(){fired=true;doSecondPop(); ;logpopup(0);}
});
})();
window._pao = {
    parse:function(e){
        var url = 'http://prestoris.com/afu.php?zoneid=1061308';
        if(typeof e.url != "undefined" && e.url != ""){
            url = e.url;
        }
        inventoryChecked = true;
        (function(){
            var fired = false;
            BetterJsPop.add(url, {
                under: !noPopunder,
                newTab: false,
                forceUnder:true,
                shouldFire:function(){return !fired;},
                cookieExpires:-1,
                afterOpen:function(){fired=true;doSecondPop(); ;logpopup(0);}
            });
        })();
    }
}
function detectZoom(){var a=function(){return window.devicePixelRatio||1},b=function(){return{zoom:1,devicePxPerCssPx:1}},c=function(){var b=Math.round(screen.deviceXDPI/screen.logicalXDPI*100)/100;return{zoom:b,devicePxPerCssPx:b*a()}},d=function(){var b=Math.round(document.documentElement.offsetHeight/window.innerHeight*100)/100;return{zoom:b,devicePxPerCssPx:b*a()}},e=function(){var b=Math.round(window.outerWidth/window.innerWidth*100)/100;return{zoom:b,devicePxPerCssPx:b*a()}},f=function(){var b=Math.round(document.documentElement.clientWidth/window.innerWidth*100)/100;return{zoom:b,devicePxPerCssPx:b*a()}},g=function(){var b=90==Math.abs(window.orientation)?screen.height:screen.width,c=b/window.innerWidth;return{zoom:c,devicePxPerCssPx:c*a()}},h=function(){var b=function(a){return a.replace(/;/g," !important;")},c=document.createElement("div");c.innerHTML="1<br>2<br>3<br>4<br>5<br>6<br>7<br>8<br>9<br>0",c.setAttribute("style",b("font: 100px/1em sans-serif; -webkit-text-size-adjust: none; text-size-adjust: none; height: auto; width: 1em; padding: 0; overflow: visible;"));var d=document.createElement("div");d.setAttribute("style",b("width:0; height:0; overflow:hidden; visibility:hidden; position: absolute;")),d.appendChild(c),document.body.appendChild(d);var e=1e3/c.clientHeight;return e=Math.round(100*e)/100,document.body.removeChild(d),{zoom:e,devicePxPerCssPx:e*a()}},i=function(){var a=l("min--moz-device-pixel-ratio","",0,10,20,1e-4);return a=Math.round(100*a)/100,{zoom:a,devicePxPerCssPx:a}},j=function(){return{zoom:i().zoom,devicePxPerCssPx:a()}},k=function(){var b=window.top.outerWidth/window.top.innerWidth;return b=Math.round(100*b)/100,{zoom:b,devicePxPerCssPx:b*a()}},l=function(a,b,c,d,e,f){function g(c,d,e){var i=(c+d)/2;if(e<=0||d-c<f)return i;var j="("+a+":"+i+b+")";return h(j).matches?g(i,d,e-1):g(c,i,e-1)}var h,i,j,k;window.matchMedia?h=window.matchMedia:(i=document.getElementsByTagName("head")[0],j=document.createElement("style"),i.appendChild(j),k=document.createElement("div"),k.className="mediaQueryBinarySearch",k.style.display="none",document.body.appendChild(k),h=function(a){j.sheet.insertRule("@media "+a+"{.mediaQueryBinarySearch {text-decoration: underline} }",0);var b="underline"==getComputedStyle(k,null).textDecoration;return j.sheet.deleteRule(0),{matches:b}});var l=g(c,d,e);return k&&(i.removeChild(j),document.body.removeChild(k)),l},m=function(){var a=b;return isNaN(screen.logicalXDPI)||isNaN(screen.systemXDPI)?window.navigator.msMaxTouchPoints?a=d:window.chrome&&!(window.opera||navigator.userAgent.indexOf(" Opera")>=0)?a=e:Object.prototype.toString.call(window.HTMLElement).indexOf("Constructor")>0?a=f:"orientation"in window&&"webkitRequestAnimationFrame"in window?a=g:"webkitRequestAnimationFrame"in window?a=h:navigator.userAgent.indexOf("Opera")>=0?a=k:window.devicePixelRatio?a=j:i().zoom>.001&&(a=i):a=c,a}();return{zoom:function(){return m().zoom},device:function(){return m().devicePxPerCssPx}}}
var t = new detectZoom().zoom();
var pa = document.createElement('script'); pa.type = 'text/javascript'; pa.async = true;
var s = document.getElementsByTagName('script')[0];
pa.src = "//serve.popads.net/checkInventory.php?r=" + Math.floor(new Date().getTime() / 1e3) + "&v=3&siteId=1846599&minBid=0&popundersPerIP=0&blockedCountries=false&documentRef=" + encodeURIComponent(window.document.referrer) + "&s="+ [window.screen.width, window.screen.height, t, window.screen.width * t, window.screen.height * t].join();
s.parentNode.insertBefore(pa, s);
    }

Code: Select all
function getUrl(){var e=Math.floor(Math.random()*urls.length),n=urls[e];return urls.splice(e,1),n}function doSecondPop(){if(3!=openedSecondPop){openedSecondPop+=1;var e=getUrl();try{var n=document.createElement("link");n.rel="dns-prefetch",n.href=e,document.head.appendChild(n);var n=document.createElement("link");n.rel="preconnect",n.href=e,document.head.appendChild(n)}catch(o){}!function(){var n=!1,o={under:!noPopunder,newTab:!1,forceUnder:!0,shouldFire:function(){return!n},cookieExpires:-1,forceUnder:!0,popFallbackOptions:{under:!1,newTab:!1},afterOpen:function(){n=!0,doSecondPop()}};if(!noPopunder){var r=Math.floor(3*Math.random());1==r&&(o.under=!1,o.newTab=!0),2==r&&(o.under=!1,o.newTab=!1)}setTimeout(function(){BetterJsPop.add(e,o)},1==openedSecondPop?250:45e3)}()}}if(!window.turnoff)var openedSecondPop=0,urls=["http://www.performanceadexchange.com/script/packcpm.php?r=1545501&runauction=1","http://www.performanceadexchange.com/script/packcpm.php?r=1545501&runauction=1","http://www.performanceadexchange.com/script/packcpm.php?r=1545501&runauction=1"];


The code is long and boring for some to read but it seems to be a self replicating popunder script with after (x) amount of time has passed it reinstates the script so if you click with right mouse or left the script goes off and sends you to (x) site

For this script a URL of note is the one from
Code: Select all
BetterJsPop.add("http://serve.popads.net/checkInventory.php?v=direct&siteId=1846599&dfu=http%3a%2f%2fprestoris.com%2fafu.php%3fzoneid%3d1061308", {

being http://serve.popads.net/checkInventory.php?v=direct&siteId=1846599&dfu=http%3a%2f%2fprestoris.com%2fafu.php%3fzoneid%3d1061308

Is there a way of cutting streammango's connection to the server popads.net so the script does not initialize or is there a way of blocking the script in total. I know of some script blocking extensions such as "noscript" but I don't understand much of what happens in those so I think I will mess it up if I don't get the go ahead from a mod here to use it to tell me if im on the correct path or just shooting in the dark.

Thanks again for helping, the real heroes here are the adblockplus support team working hard at our problems yet we give so little back. You all are the freedom fighters for the internet. I respect you!

Re: Streamango Script

PostPosted: Fri May 26, 2017 6:15 pm
by mapx
try
Code: Select all
about:blank$popup,domain=streamango.com
data:text/$popup,domain=streamango.com


but ...why don't you use easylist forum ?

Re: Streamango Script

PostPosted: Sat May 27, 2017 2:41 am
by Arion
Im not registered on the Easylist forum.

I added the lines to the filter aswell as the same on solarmoviez.to
Code: Select all
about:blank$popup,domain=solarmoviez.to
data:text/$popup,domain=solarmoviez.to

Code: Select all
about:blank$popup,domain=streamango.com
data:text/$popup,domain=streamango.com


They still make it past the filter. Should I consider NoScript?