Popup ad site, iframe window.open and avoidance measures - defeats popup-blocker

[JonasNo]

Example: https://www.iwatchonline.cr/episode/58490-wynonna-earp-s02e10

Click on the left white space side. It will redirect to an ad page and the popup will contain the previous site (the above one).

It use obfuscation and window.open, assume using an iframe to get the original function. I put event listener breakpoints on Mouse: click, mousedown, mouseup and contextmenu. You'll find the call to window.open in the function above where the breakpoint hits. (Expand the Closure and you'll see the open and text "admaven_pop_".

If you block IFRAME creation via createElement, the ad site opens in a new tab instead. Unknown how since window.open is hooked and disabled.

[schomery]

Is this on Firefox?

[JonasNo]

No this is in Chrome.

Firefox usually don't have these kinds of problems because its API doesn't hinder extension developers. Enables Adblock (and NoScript) to block such nastiness.

[schomery]

So without any adblocker I get this screen.zip

[JonasNo]

Those ads are sneaky that way, they change behavior and scripts. What software are you using to record that? Could be useful for demonstration in the future.

[JonasNo]

You did test it under incognito with devtools->Applications tab->Clear Storage->Clear site data button clicked, yes?