everet
October 19, 2025, 8:06am
1
Hi
I am running latest OP version on Beryl AX:
GL.iNet download center (4.8.2)
And I found that firmware tries to connect to https://ad-api.gl-inet.com/ad/v1/ads
Found via Wireshark
WHAT THE?!
admon
October 19, 2025, 8:07am
3
@bruce Something you might need to clearify?
“These requests are to obtain whether there is new AD banner (general is VPN offers) and load the VPN provider logo/icon, which is trustworthy. Please rest assured.”
Hi, with regards to a GL-x3000 router using the latest firmware v4.7, when opening the Wireguard Client page I get requests to static.gl-inet.com , and ad-api.gl-inet.com .
There are cell-site simulator(s) in heavy use in my area of the UK. Consequently I would like to avoid any unnecessary outbound dns requests unless explicity allowed.
The most common form of attack on me presently is the perpetrators setting themselves up as an MITM IPv6 resolver through which they inject some nefarious javas…
2 Likes
saki
October 24, 2025, 1:10pm
5
It is not malicious, nor a backdoor.
But I reported issue to filter lists. Just to be sure
opened 01:04PM - 24 Oct 25 UTC
### URL(s) where the issue occurs.
```yaml
https://ad-api.gl-inet.com/ad/v1/
``… `
### Description
Hi
This is request that made by Gl.iNet GUI in firmware 4.8.0 and above to request VPN banners.
Unfortunately I cannot provide more information, because I am away from this router.
It is inside their firmware (http://192.168.8.1), so even if I show you screenshot this will not change anything since you have no such router.
### Screenshot(s)
<details>
<summary>Screenshot(s)</summary>
</details>
Unfortunately, there is no "regular" screenshot, because requests made, but banner shows only when they have some promotional campaigns.
Blocking it won't break anything. I tried to add: `||ad-api.gl-inet.com`. Nothing broken.
Here is proof that this thingy really used by screenshot me emailed their support.
### Configuration
<details>
<summary>Details</summary>
```yaml
uBlock Origin: 1.67.0
Firefox Mobile: 144
filterset (summary):
network: 159604
cosmetic: 52090
scriptlet: 23984
html: 2453
listset (total-discarded, last-updated):
default:
user-filters: 0-0, never
ublock-filters: 41800-71, 15m
ublock-badware: 11138-31, 15m
ublock-privacy: 3526-2, 15m
ublock-unbreak: 2750-1, 15m
ublock-quick-fixes: 372-13, 15m
adguard-mobile: 11409-66, 15m
easylist: 82569-179, 15m
easyprivacy: 54714-54, 15m
urlhaus-1: 27970-5, 15m
plowe-0: 3441-1004, 15m
filterset (user): [empty]
userSettings: [none]
hiddenSettings: [none]
supportStats:
allReadyAfter: 5218 ms
maxAssetCacheWait: 47 ms
cacheBackend: indexedDB
```
</details>
@Yuki2718, can you please take a look?
opened 12:58PM - 24 Oct 25 UTC
### Prerequisites
- [x] This is **NOT** a [_YouTube_](https://www.github.com/uB… lockOrigin/uAssets/issues/30157), [_Facebook_](https://www.github.com/uBlockOrigin/uAssets/issues/3367), [_Twitch_](https://www.github.com/uBlockOrigin/uAssets/issues/5184) or [_a shortener/hosting site_](https://www.github.com/uBlockOrigin/uAssets/discussions/27472) report. _These sites MUST be reported by clicking their **respective links**_.
- [x] I read and understand the [policy about what is a valid filter issue](https://github.com/uBlockOrigin/uAssets/blob/master/README.md#uassets).
- [x] I verified that this issue is not a duplicate. (Use this [button](https://user-images.githubusercontent.com/585534/146582579-c32707a0-36a1-4cc5-ad50-83172c9f67a8.png) to find out.). Comment in the old issue threads even when they are closed or even if you have a different problem.
- [x] I did not remove any of the [default filter lists](https://github.com/user-attachments/assets/1879fc88-09bc-4de4-9e2f-3834a6ab396a), or I have verified that the issue was not caused by removing any of the default lists.
- [x] I did not enable additional or non-default filter lists, or I have verified that the issue still occurs without enabling additional filter lists.
- [x] I do not have custom filters/rules, or I have verified that the issue still occurs without custom filters/rules.
- [x] I have verified that the web browser's built-in content blocker/tracking protection, [network wide/DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking), or my VPN is not causing the issue.
- [x] I have turned off all other extensions and the issue still persists. (exception "[Firefox Multi-Account Containers](https://addons.mozilla.org/en-US/firefox/addon/multi-account-containers)").
- [x] If this is about a breakage or detection, I have verified that it is caused by uBlock Origin and isn't a site or browser issue.
- [x] I have verified that the browser I am using is up to date with no pending updates.
- [ ] I did not answer truthfully to **ALL** the above checkboxes.
### URL(s) where the issue occurs.
```yaml
https://ad-api.gl-inet.com/ad/v1/
```
### Description
Hi
This is request that made by Gl.iNet GUI in firmware 4.8.0 and above to request VPN banners.
Unfortunately I cannot provide more information, because I am away from this router.
It is inside their firmware (http://192.168.8.1), so even if I show you screenshot this will not change anything since you have no such router.
### Browser name and version
Firefox
### Other extensions used
No
### Country
_No response_
### Screenshot(s)
<details>
<summary>Screenshot(s)</summary>
</details>
Unfortunately, there is no "regular" screenshot, because requests made, but banner shows only when they have some promotional campaigns.
Blocking it won't break anything. I tried to add: `||ad-api.gl-inet.com`. Nothing broken.
Here is proof that this thingy really used by screenshot me emailed their support.
### Configuration
<details>
<summary>Details</summary>
```yaml
uBlock Origin: 1.67.0
Firefox Mobile: 144
filterset (summary):
network: 159604
cosmetic: 52090
scriptlet: 23984
html: 2453
listset (total-discarded, last-updated):
default:
user-filters: 0-0, never
ublock-filters: 41800-71, 15m
ublock-badware: 11138-31, 15m
ublock-privacy: 3526-2, 15m
ublock-unbreak: 2750-1, 15m
ublock-quick-fixes: 372-13, 15m
adguard-mobile: 11409-66, 15m
easylist: 82569-179, 15m
easyprivacy: 54714-54, 15m
urlhaus-1: 27970-5, 15m
plowe-0: 3441-1004, 15m
filterset (user): [empty]
userSettings: [none]
hiddenSettings: [none]
supportStats:
allReadyAfter: 5218 ms
maxAssetCacheWait: 47 ms
cacheBackend: indexedDB
```
</details>