[Adblock Plus 2.0]
! Title: Ascent filters
! Description: Ads, trackers and pop-under networks the public lists let through on the sites Ascent's readers use.
! Homepage: https://rltools.app/ascent/adblocking/
! Expires: 6 hours
! Version: 2026100502
!
! Every Ascent browser fetches this file from https://rltools.app/ascent/filters.txt
! a few times a day and applies it beside EasyList, EasyPrivacy, AdGuard's mobile
! list, the anti-circumvention list and Peter Lowe's. It is how a new ad network
! is blocked on every phone without a new version of the app.
!
! It is published by site/build_site.py, which refuses to write it unless
! scripts/adwatch/filterlint.py passes. docs/ad-watch.md says how rules get here.
!
! What the browser understands, and nothing else:
!   ||host^                      block every request to a host
!   ||host/path$third-party      EasyList options: third-party, domain=, script, image, ...
!   part-of-an-address$third-party   the same for any host: what a network that
!                                changes its domains every hour cannot change
!   ||site/path$~third-party     a site's own ad files (Shields Standard needs the option)
!   ||host^$popup                an advertising destination: windows opened to it are
!                                refused, and so is a tab being sent there from another site
!   part-of-an-address$popup     the same for any host
!   $popup,domain=site.example   every window that site opens to another site is
!                                refused, and so is one it opens on its own pages
!                                and sends away before the reader has touched it.
!                                Its links still work in the tab they are in; one
!                                that asks for a new tab gets the "Pop-up blocked"
!                                bar, where "Always show" lets that site's windows
!                                through. For sites whose pop-unders nothing else
!                                stops; except what the site opens on purpose.
!   @@||host^                    an exception, when one of the lists breaks a site
!   @@||host^$popup              a window one of the lists refuses and should not
!   site.example##.selector      hide an element, on the sites named
!
! Read by Ascent 1.0.13 and later; older versions do not fetch this file.
!
! To withdraw every rule at once, publish this file with only its header - or
! delete it from the server, which the browser treats the same way.
!
! --- request rules -----------------------------------------------------------

! A pop-under network on throwaway domains. Sweeps of 2026-10-02: on animexin.dev,
! anisnatch.to, aniwaves.ru, kagane.to, kaliscan.io, mangahub.io and onisaga.com
! a loader script, a "cuid" call naming the site and a "gd" call describing the
! phone, after which the first tap opened a betting site. The hosts changed
! between two sweeps an hour apart - .cfd, then .cyou, then .com - and the two
! calls did not, so the calls are what is written here. EasyList has the same
! pair for the .click, .shop and .top domains the network used before.
^cuid/?f=http$third-party
^gd/*?md=ey$third-party
! The same network's loaders, as seen. Good for as long as each host lasts.
||meatusbyway.cfd^
||67o3ee9ywrp69eqz7w.cfd^
||crainbelaud.cfd^
||mochicadermis.cyou^
||pumpsblanked.com^
||finestcertose.com^
||bepresshoaxed.com^

! asiaflix.net and anime.uniquestream.net, 2026-10-02: a network that asks for
! its banners and its windows from a host that is new every hour, with what it
! knows about the page packed into one base64 value. The value always starts
! the same way, whatever the host and whatever the name in front of it:
! "adbv=3", "ufp=Linux", "sadbl=", "cbdescription=", "cbkeywords=",
! "chp=Android" and "cbpage=https", in that order.
=YWRidj0z$third-party
=dWZwPUxpbnV4$third-party
=c2FkYmw9$third-party
=Y2JkZXNjcmlwdGlvbj$third-party
=Y2JrZXl3b3Jkcz0$third-party
=Y2hwPUFuZHJvaWQ$third-party
=Y2JwYWdlPWh0dHBz$third-party
! The script behind asiaflix.net's casino windows: the names in its address
! change with the host, the numbers (its account, 5196992) do not.
=3&*=4&*=5196992&*=0.0003&$script,third-party

! lmanime.com and toonily.com: banner frames. Their host was altkamamhab.in on
! 2026-10-02, which EasyList names, and ckioqjoswa.in the morning after, which
! nothing did. Every path was the same on both, so the paths are the rule: the
! two loaders, what they report to, and the pictures and films of the banners.
^ntega/pfe/wc?$third-party
.in/bhitif|$script,third-party
.in/badavxl|$subdocument,third-party
^atp/pihxhoap?$third-party
^static/image/bn/$image,third-party
^static/video/bn/$media,third-party

! manhuarmtl.com, 2026-10-05: not an advertisement - a question. Before the site
! shows its "Install Ascent Browser" box it asks for this address, a picture
! that comes with WordPress. Any other browser loads it; refused at once means
! the browser is Ascent, and the box stays away - in a custom tab and in a tab
! that is not on screen too, which the hiding rule at the end of this file
! never reached through 1.0.17. The site's half, and why this address, is in
! docs/install-prompt/. Take this rule out and the box comes back in those.
||manhuarmtl.com/wp-includes/images/w-logo-blue.png?ver=ascent-probe$~third-party

! --- advertising destinations (pop-ups, pop-unders, redirects) ---------------

! What a window was opened to, or where the tab was sent, on the first tap.
! Sweeps of 2026-10-02. The public lists already describe the commonest of
! these ("/afu.php?", "/api/users?token="); these are the ones they do not.

! animexin.dev, onisaga.com and comix.to: betting sites, a different mirror of
! each every week, always with the affiliate's tag in the same form.
^tag=d_*m_*c_$popup
! comix.to: the host its "direct link" windows are opened on (/4/ and a
! number), the same in three sweeps over four hours. animexin.dev: where the
! same kind of link took the tab, once.
||araplhn.org^$popup
||omg10.com^$popup
! animexin.dev: the tab was taken to dt.powdrycycas.qpon in the first sweep, and
! the same network's calls were on ains.pissflightaurae.qpon in the third. A
! whole top-level domain: nothing a reader follows a link to is served from it.
.qpon/$popup
! kaa.lt: pop-unders bought as such, and one advertiser's landing pages.
^utm_campaign=pu_$popup
^pid=hooligapps^$popup
||bootyheroes.com^$popup
! asiaflix.net: a casino.
||mcwcasino.fun^$popup

! Sites where every window opened to another site, in three sweeps, was
! advertising, on hosts and with addresses that had nothing in common from one
! to the next. asiaflix.net sends its own through a redirector on its own
! domain (api.asiaflix.net/noesc), which only this kind of rule can follow.
$popup,third-party,domain=asiaflix.net|anisnatch.to
! What asiaflix.net opens on purpose: signing in with Google, through Firebase.
! (The public lists already except accounts.google.com.)
@@||firebaseapp.com/__/auth/$popup

! --- element hiding ----------------------------------------------------------

! lmanime.com, 2026-10-02: the boxes its banner frames sat in.
lmanime.com##[id^="__clb-spot_"]
! uniquestream.net, 2026-10-02: the empty slot left when its banner is refused.
uniquestream.net##.ad-slot
! manhuarmtl.com, 2026-10-04: the site's "Ascent Browser" install box (#mrm-ap),
! at the owner's request, who runs the site. The rule depends on the site's
! script: opening the box locks the page's scrolling (overflow: hidden on
! <html>) and only the box's own buttons unlock it. Hidden, the box used to
! leave the page frozen; the script was changed the same day to stop before the
! lock when the box is not displayed, and with this rule's CSS in place the
! live site then scrolled as usual. If readers report a page there that will
! not scroll, that check has gone from the site and this is the rule to take out.
! Either spelling of the selector is read - "###mrm-ap" too: the parser splits at
! the first "##". When the owner still saw the box, on 4 and on 5 October, it
! was for two other reasons, both measured on 1.0.17 on the 5th: a phone asks
! for this list again only once its copy is six hours old, so a rule uploaded a
! minute ago is on no phone yet; and the hiding sheet went only into the tab on
! screen, so a page that loaded behind the tab switcher or in a background tab
! showed the box six seconds later. 1.0.18 hides in every tab and carries this
! rule itself; the request rule above ("ascent-probe") covers the versions
! before it.
manhuarmtl.com##div[id="mrm-ap"]