Roro

Ad & Tracker Test Range

A hostile-by-design sandbox modelled on high-density streaming and torrent sites: popunders, redirect bait, banner clutter, native spam and trackers. Run it with your blocker on and off to see what gets through.

0Blocked
0Got through
0Bait clicks
Block score0%
Running…
Now playing - The.Sample.File.2026.1080pSource 1 of 7
Click anywhere to start - sponsored by our partners

Download bait

Decoy buttons styled like real site controls

None of these download anything. Each opens a mock landing page and arms the popunder probe, just like the real thing would.

Banner clutter

Stacked display units in every standard size

Testing….ad-banner #ads-header
Testing….sponsored-content
Testing….ad-skyscraper

Pop-ups, popunders & redirects

PopAds / PropellerAds-style behaviour, fully simulated

The popunder probe fires once on your first click anywhere on the page. It attempts a no-opwindow.open()which is closed immediately, so no real tab ever opens. A pop-up blocker that stops it is scored as a catch.

Popunder
Testing…window.open() popunder
New-tab redirect
Testing…target=_blank ad redirect
Interstitial ad slot (always mounted).popup-ad
Testing….popup-ad #ad-modal-overlay

Native spam

Recommended-content feeds mimicking Taboola / Outbrain

Testing…#taboola-below-article
Testing….ob-widget #outbrain_widget
Testing….sponsored-content sidebar

Trackers & scripts

Live network calls to ad-network and analytics endpoints

Tracking pixel/api/track?id=pixel_trackerInvisible 1x1 GIF beacon
Testing…
doubleclick ad tag/api/ads/doubleclickAd-server script request
Testing…
popads beacon/api/ads/popadsPopunder network ping
Testing…
taboola native/api/native/taboolaNative widget data call
Testing…
track/analytics/api/track/analyticsFirst-party analytics beacon
Testing…
google-analyticsgoogle-analytics.com/collectThird-party analytics request
Testing…

Every endpoint returns only an empty pixel or a no-op payload. No visitor data is read, stored or logged anywhere.

Live network verification

Real third-party scripts loaded from blocked domains

Google Publisher Tagshttps://securepubads.g.doubleclick.net/tag/js/gpt.js
Testing…
Google Analyticshttps://www.google-analytics.com/analytics.js
Testing…
Meta Pixelhttps://connect.facebook.net/en_US/fbevents.js
Testing…
Taboola loaderhttps://cdn.taboola.com/libtrc/unip/1/tfa.js
Testing…
Outbrain loaderhttps://widgets.outbrain.com/outbrain.js
Testing…

These are genuine network requests to live ad and tracking domains, injected as script tags and watched with load/error handlers. Their tracking APIs are never initialised, so nothing is actually tracked. A request that fails to load means your extension intercepted it.

This sandbox uses simulated cookies for testing. Consent banners like this are exactly what annoyance filters target.