[Ads, Bundled Download] douploads.com, uplod.org

[jspenguin2017]

https://douploads.com/otqrbgqeyohu
Untick the Download our offers by default, because it's just ads.

See also: jspenguin2017/uBlockProtector#949

[jspenguin2017]

@okiehsch Would you consider the checkbox to be ads or annoyance?

[okiehsch]

It is adware or malware in my opinion, so I would add a working filter to uBO-badware

[okiehsch]

I have never seen a bundled download offer that any sane person would see and say:
That was useful.

[okiehsch]

As a side note this is another site that uses example.com/sw.js to pull

https://evantative.top/MzAya1VoEgVZYwYEAUl5ERIeSWMAUwAJYwYEHw9lClMfX2QCBR9SbQRUH1w0UAgBCWBRCQVaMBEcEF5sUQYKWWJXHVNaMwIdBlJtAx1TXWUAHQRYMQsDAlpnAlZRXncfEkEcdx8SVx00XURTHzxFVRwfOkMSHklhHQgQNg

I am not sure what that script actually does, do you have any idea?

[jspenguin2017]

Actually, unchecking a checkbox can be done in uBO:

douploads.com##+js(remove-attr.js, checked, #chkIsAdd)
douploads.com##a[rel="nofollow"]

[jspenguin2017]

The script adds these event listeners:

Looks like a library for notification ads.

[okiehsch]

Can you download a file?

I tried a few links and this is the result with all of them on my end.

[jspenguin2017]

Eh, I would count this as works...

[okiehsch]

I get the 404 error after I click "Download Now"

[jspenguin2017]

It works for me.

[okiehsch]

OK, I will add the fix.

[okiehsch]

Added, thx.

[jspenguin2017]

Even if I don't use the rule or turn off uBO completely, I get the same file (that is flagged as dangerous).

Also, there is a hidden input that caught my attention, I'm not sure if they are just collecting statistics or it will change the downloaded file.

[jspenguin2017]

I think it is worth to whitelist .adsbox. Or generichide.

[okiehsch]

Well, I do not get any file, but adding
@@||douploads.com^$generichide
can't hurt.

[okiehsch]

uBlockOrigin/uAssets@41d929e

[jspenguin2017]

@okiehsch Also uplod.org, same rule should work. Test link:

https://uplod.org/qepvecnvy7qf

[okiehsch]

Added, thx.