Pop Under Script Question(s)

by kevinclanton Posted: 14 years ago 9 replies

I was wondering if anyone had an example of a good under pop script.

I am just curious about how skeezey sites that use them, get around pop up blockers.

While I do not think i would put it on anything that i owned.
I am curious how the mechanism is written.

I am doubtful that they are even very effective, but if anyone has any information on them i would be appreciative.
Thanks in advance...

#programming #pop #questions #script

Brandon Tanner 14 years ago

I don't use them, but it's a trivial matter to open a new browser window in Javascript (window.open). But a lot of browsers block popunders now, so if you want something unblockable, then you have to get a bit more creative and do something like this...

Unblockable Pop Under Script | Make Money Blogging Tips For Free
- [ 1 ] Thanks
Dan Grossman 14 years ago

The gist of it is that popup blockers don't block windows that open as a result of user interaction -- users should still be able to click on a link that opens a popup or open a link in a new window -- so you attach your popup code to the click event of the document or body tag. Then when anything on the page gets clicked, your popup opens along with whatever the user wanted to click, and the popup blocker has to let it through because it can't tell whether you intended that popup to happen or if it was an ad.
- [ 1 ] Thanks
kevinclanton 14 years ago

Very interesting. Thanks for the reply on that.
I feel sorta dirty for asking for that, but i was genuinely interested on how people get around popup blockers.

Thanks guys
dwoods 14 years ago

Here's an example of a basic pop under that works in most major browsers.
Example Pop-under ad

Just view the source to see how it's done.
- [1] reply
- Dan Grossman 14 years ago
  
  That doesn't do anything to evade popup blockers, which is what he asked about.

dwoods 14 years ago

Dan interesting, l'm using the most recent version of FF and the popup fires for me no problem.

Weird.

[1] reply

Dan Grossman 14 years ago

There's nothing weird about Firefox's built-in popup blocker blocking a simple window.open set to trigger onload. That's what it exists to do, and this website has no code that attempts to evade it. You have it turned off.

Here's an example of actual popunder ad network code that contains the evasion techniques:

Code:

function goAd(code, aV1xf, aV1xc) {
    var aV1xg = aV1xz();
    if (!aV1xg) {
        return;
    }
    if (aV1xc < 1) {
        aV1xc = 1;
    }
    if (aV1xc > 15) {
        aV1xc = 15;
    }
    if (aV1xf == 3) {
        aV1xc = aV1xc * 2;
    }
    if ((aV1xf == 1) || (aV1xf == 3)) {
        var aV1xv = aV1xw(window.onload, function () {
            aV1xK(code, aV1xc);
        });
        window.onload = aV1xv;
        aV1xM();
    }
};

function aV1xM() {
    if (navigator.appName == "x4dix63rosx6fft Interx6eetx20Explorer") {
        var aV1xE = document.body
            .onclick;
        document.body
            .onclick = function () {
            aV1xL(event);
            if (aV1xE != null) {
                aV1xE();
            }
        }
    } else {
        document.onclick = aV1xL;
    }
};

function initAd(aV1xD, aV1xf) {
    var aV1xg = aV1xz();
    if (!aV1xg) {
        return;
    }
    aV1xc = 15;
    code = aV1xD;
    var aV1xv = aV1xw(window.onload, function () {
        aV1xK(aV1xD, aV1xc);
    });
    window.onload = aV1xv;
    aV1xM();
};

function aV1xK(code, aV1xc) {
    var domain = window.location
        .hostname;
    domain = domain.replace(/www./ig, '');
    domain = domain.toLowerCase();
    var anchors = document.getElementsByTagName("a");
    for (var i = 0; i < anchors.length; i++) {
        var aV1xt = anchors[i].getAttribute("x68ref");
        var aV1xp = false;
        if ((aV1xt == null || aV1xt == "")) {
            aV1xp = true;
        } else {
            var aV1xQ = aV1xt.toLowerCase();
            var aV1xN = (aV1xQ.search(/http/) > -1);
            var aV1xam = (aV1xQ.search(domain) > -1);
            if (!aV1xN) aV1xp = true;
            if (aV1xN && aV1xam) aV1xp = true;
        }
        if (anchors[i].className
            .indexOf("advminilnks") > -1) {
            aV1xp = false;
        }
        if (aV1xp) {
            anchors[i].onclick = aV1xw(anchors[i].onclick, function () {
                aV1xR(code, aV1xc);
            });
        }
    }
};

function aV1xL(event) {
    var aV1xq;
    var aV1xx;
    var aV1xG = event || window.event;
    if (!aV1xG.target) {
        aV1xq = event.srcElement
            .tagName;
        aV1xx = event.srcElement
            .id;
    } else {
        aV1xq = event.target
            .tagName;
        aV1xx = event.target
            .id;
    }
    var aV1xI = 1;
    if (navigator.userAgent
        .indexOf("Fx69refox") != -1) {
        if (aV1xG.which != 1) {
            aV1xI = 0;
        }
    }
    if (((aV1xq != "A") && (aV1xq != "a") && (aV1xx.indexOf("adv_logo_id6321") == -1))) {
        if (aV1xI == 1) {
            var aV1xb = aV1xe(code + "Clix63ks");
            var aV1xm = aV1xe(code + "Dx61te");
            var aV1xU = aV1xe(code + "DC");
            if (aV1xU != null) return;
            if (aV1xm == null) {
                var aV1xa = new Date();
                aV1xa.setTime(aV1xa.getTime() + 1000 * 60 * 30);
                aV1xb = 1;
                aV1xd(code + "Dx61te", "OK", aV1xa);
                aV1xd(code + "Clix63ks", aV1xb, aV1xa);
            } else {
                var aV1xa = new Date();
                aV1xa.setTime(aV1xa.getTime() + 1000 * 60 * 30);
                aV1xb = Number(aV1xb) + 1;
                aV1xd(code + "Clix63ks", aV1xb, aV1xa);
            }
            if (aV1xb <= aV1xc) {
                var aV1xa = new Date();
                aV1xa.setTime(aV1xa.getTime() + 1000 * 20);
                aV1xd(code + "DC", "Bx4cOCK", aV1xa);
                var aV1xn = aV1xy(1, '1d', code);
                var w = screen.availWidth + 1;
                var h = screen.availHeight + 1;
                var aV1xr = window.open(aV1xn, "", "x74x69tx6cebar=0,x74oox6cbar=0x2cx6cocation=x30x2cmenubax72=0x2cscrox6clx62arsx3d1,resx69x7aabx6ce=1,x63hanx6eelmode=0,x64irx65ctx6fries=0,status=0x2cleft=0,x74op=0x2cwidth=" + w + ",hx65x69ght=" + h);
                aV1xr.blur();
                window.focus();
            }
        }
    }
};

function aV1xR(code, aV1xc) {
    var aV1xb = aV1xe(code + "Clicx6bs");
    var aV1xm = aV1xe(code + "Datx65");
    var aV1xA = aV1xe(code + "QC");
    if (aV1xA != null) return;
    if (aV1xm == null) {
        var aV1xa = new Date();
        aV1xa.setTime(aV1xa.getTime() + 1000 * 60 * 30);
        aV1xb = 1;
        aV1xd(code + "Dax74e", "OK", aV1xa);
        aV1xd(code + "x43licks", aV1xb, aV1xa);
    } else {
        var aV1xa = new Date();
        aV1xa.setTime(aV1xa.getTime() + 1000 * 60 * 30);
        aV1xb = Number(aV1xb) + 1;
        aV1xd(code + "Clicx6bs", aV1xb, aV1xa);
    }
    if (aV1xb <= aV1xc) {
        var aV1xa = new Date();
        aV1xa.setTime(aV1xa.getTime() + 1000 * 2);
        aV1xd(code + "QC", "Bx4cOCK", aV1xa);
        var aV1xn = aV1xy(1, 1, code);
        var w = screen.availWidth + 1;
        var h = screen.availHeight + 1;
        var aV1xr = window.open(aV1xn, "", "titlex62ar=x30x2ctx6folbar=0,locx61tion=0,menubar=0x2cscrollbax72sx3d1,resizabx6ce=1,chax6enelx6dox64x65x3d0x2cdirex63tories=0x2cx73tax74ux73=0,lefx74=x30,top=x30x2cwix64th=" + w + ",hx65igx68t=" + h);
        aV1xr.blur();
        window.focus();
    }
};

function aV1xy(aV1xab, aV1xaj, aV1xak) {
    var aV1xl = window.location
        .hostname;
    aV1xl = aV1xl.replace(/www./ig, '');
    aV1xl = aV1xl.toLowerCase();
    var aV1xaf = aV1xaa(aV1xl);
    var aV1xS = "www1.";
    var aV1xX = "gatx65way";
    var aV1xZ = "/px65rl";
    var aV1xac = "htx74p://";
    var aV1xY = "x61dx76-ax64server.com";
    var aV1xW = "x2ftservx65/";
    var aV1xV = ".cgix3f";
    var fm = 0;
    var refdom = "";
    if (top.location != location) {
        fm = 1;
        var refurl = document.referrer;
        refdom = refurl.match(/://(.[^/]+)/)[1];
    }
    var sl = 0;
    if ('https:' == document.location
        .protocol) {
        sl = 1;
    }
    sl = 0;
    if (sl == 1) {
        aV1xac = "htx74ps://";
    }
    var aV1xn = aV1xac + aV1xS + aV1xY + aV1xZ + aV1xW + aV1xX + aV1xV + "px72=" + aV1xak + "&acx3d" + aV1xab + "&x78y=" + aV1xaf + "x26sc=6b7b75bb27bbd822b76cfa8630401d8d" + "&qx71=" + aV1xaj + "&fm=" + fm + "&sl=" + sl + "&rd=" + refdom;
    return aV1xn;
};

function aV1xaa(aV1xal) {
    var a = aV1xal;
    var b = "abcdefgx68x69x6akx6cmx6eopqx72stuvx77xyz123x34567890-.";
    var aV1xi = Math.floor(Math.random() * 6);
    var aV1xh;
    if (aV1xi == 0) {
        var aV1xj = "Zx58WYUVSTx5fROx50MNKLIx4ax47HEFx43DB0A31x34x3257689]Q";
        aV1xh = "A";
    } else if (aV1xi == 1) {
        var aV1xj = "Zx5fQ1x58SWx5bCDE3x56Fx52x34BGT5NHY6MJU7Kx498LOx39P0A2";
        aV1xh = "V";
    } else if (aV1xi == 2) {
        var aV1xj = "x4dZ_NXB9x43V1A4Lx53K3D7:JFHGQP2x4f6x57x495EURx5dY8x54";
        aV1xh = "7";
    } else if (aV1xi == 3) {
        var aV1xj = "P[Qx419ZLMKx38OXx37x53W5Ex496DJx34NC_2x56B3FH1RUT0Yx47";
        aV1xh = "]";
    } else if (aV1xi == 4) {
        var aV1xj = "ZXCx56x32]Fx443Sx411Qx575ER4Tx478BNx486x59U7J_M0PLI9KO";
        aV1xh = ":";
    } else if (aV1xi == 5) {
        var aV1xj = "R0YFVx31HNTx32Bx5bGU3EJx444CMx495_x4bXx53x36WOP7QAL8Z9";
        aV1xh = "Q";
    }
    var aV1xH;
    var h;
    var i;
    var aV1xP = "";
    var aV1xag = a.length;
    var e = 0;
    var aV1xJ = 1;
    var aV1xO;
    while (e != aV1xag) {
        aV1xH = a.substring(e, aV1xJ);
        h = b.indexOf(aV1xH);
        i = aV1xj.charAt(h);
        e++;
        aV1xJ++;
        aV1xP += i;
    }
    aV1xO = aV1xP + "|" + aV1xh;
    return aV1xO;
};

function aV1xd(name, value, expires, aV1xs, domain, aV1xC) {
    document.cookie = name + "=" + escape(value) + ((expires) ? "x3b expirx65s=" + expires.toGMTString() : "") + ((aV1xs) ? "x3b x61V1xs=" + aV1xs : "") + ((domain) ? "; x64omax69n=" + domain : "") + ((aV1xC) ? "x3b aV1xC" : "");
};

function aV1xe(name) {
    var aV1xo = document.cookie;
    var prefix = name + "=";
    var aV1xk = aV1xo.indexOf("; " + prefix);
    if (aV1xk == -1) {
        aV1xk = aV1xo.indexOf(prefix);
        if (aV1xk != 0) return null;
    } else {
        aV1xk += 2;
    }
    var end = document.cookie
        .indexOf(";", aV1xk);
    if (end == -1) {
        end = aV1xo.length;
    }
    return unescape(aV1xo.substring(aV1xk + prefix.length, end));
};
if ((aV1xf == 2) || (aV1xf == 3)) {
    var aV1xg = aV1xz();
    if (aV1xg) {
        var aV1xb = aV1xe(code + "x43licks");
        var aV1xm = aV1xe(code + "Dax74e");
        var aV1xA = aV1xe(code + "QC");
        if (aV1xA == null) {
            if (aV1xm == null) {
                var aV1xa = new Date();
                aV1xa.setTime(aV1xa.getTime() + 1000 * 60 * 30);
                aV1xb = 1;
                aV1xd(code + "Dax74e", "OK", aV1xa);
                aV1xd(code + "Cx6cicks", aV1xb, aV1xa);
            } else {
                var aV1xa = new Date();
                aV1xa.setTime(aV1xa.getTime() + 1000 * 60 * 30);
                aV1xb = Number(aV1xb) + 1;
                aV1xd(code + "x43licks", aV1xb, aV1xa);
            }
            if (aV1xb <= aV1xc) {
                var aV1xa = new Date();
                aV1xa.setTime(aV1xa.getTime() + 1000 * 2);
                aV1xd(code + "QC", "BLx4fCK", aV1xa);
                var aV1xah = aV1xy(2, 2, code);
                document.write("x3cscript typx65='text/javasx63x72ix70tx27 lax6eguage=x27x6ax61vasx63rix70t' src='" + aV1xah + "'>x3c/scriptx3e");
            }
        }
    }
}

You'll notice handlers attached to the click event of both document.body and every anchor tag in the document so that the popup code can fire when anything gets clicked. It's not very pleasant to read otherwise since they obfuscate variable and function names.

[ 1 ] Thanks
[1] reply

Join the discussion

Next Topics on Trending Feed

13

Pop Under Script Question(s)

kevinclanton • 14 years ago • 9 replies

I was wondering if anyone had an example of a good under pop script. I am just curious about how skeezey sites that use them, get around pop up blockers.