Legit traffic trying to find mraid.js and /x

[csdude55]

I've been seeing errors in my log for requests for /foo/bar/mraid.js or /foo/bar/x, neither of which exist on the server.

I assumed they were just bots, until today one of my users emails and said that they're getting occasionally blocked by Cloudflare. And when I tracked the error, I found that they had been blocked 8 times in the last 24 hours; some because the page tried to load mraid.js, and some tried to load /x.

I removed the block against those two files, but why is the user's browser trying to load them?

I'm not sure if it's relevant, but she's using an iPhone.

[not2easy]

Are you using AdManager? It might be trying to show Rich Media Ads which use mraid.js via AdSense? You could read about that here: https://developers.google.com/ad-manager/mobile-ads-sdk/ios/mraid

[csdude55]

I'm not intentionally using Ad Manager, I'm using Ezoic. I asked my rep and he said it's not coming from them, but he's their entry level tech so I can't swear to that.

I found this on GitHub:

[gist.github.com...]

I think I'm gonna upload it to my server then add a RewriteRule to Apache to make it work in any directory. It might not help, but it can't hurt, right?