MTNL Broadband is injecting ads on your computer pretending it's a feature

I use https everywhere in both FF and Chrome. but I think parts of these web-pages are not https. If I set the 'allow only https' rule, then the web-page does not load.
What I do not understand is, how is a site/domain/IP blocked at the router level still creeping in?
 
i mean ad injection should not happen at all on https sites so there is no way youtube can be affected by this.
almost all major video services are now https (including adult ones). one can just hope that smaller ones also migrate soon.
because that is the only good solution for this problem.
 
sigh. bbc should be running on full https. what a shame.
 


Since No-Script/Script-safe block phozeca.com, I do not see any reference when I inspect the page source. But somehow it is creeping in past the router filter. And maybe MTNL is blocking http streaming media (under orders of 'competent authorities'?)
 
ok I checked again and found the following under the 'console' section:

http://mtnl.phozeca.com:3000/nadip/?tm=1501948600453&fingerprint(REDACTED)&json=%7B%22url%22%3A%22%2Fframeworks%2Frequirejs%2Flib%2Ejs%22%2C%22referer%22%3A%22http%3A%2F%2Fwww%2Ebbc%2Ecom%2Fnews%2Fav%2Fworld%2Dasia%2D40823810%2Frhino%2Dchases%2Ddown%2Dcars%2Don%2Dassam%2Droad%2Din%2Dindia%22%2C%22host%22%3A%22static%2Ebbci%2Eco%2Euk%22%2C%22categories%22%3A%5B11%5D%2C%22reputations%22%3A%5B1%5D%7D

D%7D Failed to load resource: net::ERR_BLOCKED_BY_CLIENT

So is it phozeca that is blocking the media content?
 
Are these ads just like the old bottom right pop up ads it was pushing previously?

I wasn't introduced to those old ads for quite long but when I was I did block 203.94.227.140 and never saw it again.
 
These ads are new. I had set up DND a year ago and now even I have started seeing these ads which appear in the middle of the screen. Shitty attitude from MTNL. Jio fiber can’t get here soon enough!
 
I don't see the pop-ups thanks to the blocking at the router and the browser.But as I mentioned in my earlier post, somehow 'phozeca.com' creeps in past the router, even though it gets marked + blocked as 'untrusted' by No-script (firefox)/ script-safe (Chrome). This happens not on all web-sites, but wherever it happens, the site is very very slow to load or does not load at all. These are all sites using http , e.g., - Lenovo India | Buy Laptops, Netbooks, Tablets, Desktop PCs and More, BBC, World News - CNN
 
Last edited by a moderator:
I got to see it once it was a cybersecurity thing on CNN but never again so was unable to capture the IP to block it. It appears and disappears in less than 2-3 seconds.
Sadly its kinda random, so doesn't happen on every visit.
 
Finally got it
KtBgzv1.png


IP serving the injected ad image : 203.94.227.141
 

Top