anti-utiq-filters

KO | EN

gitlite — search

#typescript #llm #go #machine-learning #rust #deep-learning #linux #docker #macos #nodejs #pytorch #ios #mcp #open-source

anti-utiq-filters

(★ 69)

Custom filtering rules for uBlock Origin, AdGuard, AdBlock, and AdBlock Plus to neutralize the Utiq tracking network.

anti-utiq-filters Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# 🛡️ anti-utiq-filters

> **Custom filtering rules for uBlock Origin, AdGuard, AdBlock, and AdBlock Plus to block the Utiq tracking network.**

This repository provides optimized filter rules designed to neutralize **Utiq** — the network-level tracking service (commonly known as the "Telecom Cookie") operated by major European carriers, including Orange, SFR, Bouygues, Vodafone, and others.

The objective is to block tracking requests whether they originate from Utiq's central infrastructure or via partner-hosted subdomains (`utiq.orange.fr`, `utiq.france.tv`, `utiq.allocine.fr`, etc.).

---

## 📖 Table of Contents

- [Repository Files](#-repository-files)
- [Installation](#-installation)
  - [For uBlock Origin & AdGuard](#1️⃣-for-ublock-origin--adguard-filters-ubo-adguardtxt)
  - [For AdBlock & AdBlock Plus](#2️⃣-for-adblock--adblock-plus-filters-abptxt)
- [Technical Analysis](#-technical-analysis)
  - [Central Infrastructure](#1-central-infrastructure)
  - [Script & API Interception](#2-script--api-interception)
  - [Partner-Hosted Subdomain Blocking](#3-partner-hosted-subdomain-blocking)
- [Known Utiq Infrastructure](#️-known-utiq-infrastructure)
- [Compatibility](#-compatibility)
- [Verification](#️-verification)
- [Defense in Depth](#️-defense-in-depth)
- [Contributing](#-contributing)
- [Changelog](#-changelog)
- [License](#-license)

---

## 📁 Repository Files

| File | Target | Raw link |
|---|---|---|
| `filters-ubo-adguard.txt` | uBlock Origin, AdGuard | [View raw](https://raw.githubusercontent.com/Polyum/anti-utiq-filters/main/filters-ubo-adguard.txt) |
| `filters-abp.txt` | AdBlock, AdBlock Plus | [View raw](https://raw.githubusercontent.com/Polyum/anti-utiq-filters/main/filters-abp.txt) |

---

## 📥 Installation

Choose the appropriate filter list based on your browser extension.

### 1️⃣ For uBlock Origin & AdGuard (`filters-ubo-adguard.txt`)

Optimized for modern filter engines supporting advanced wildcard matching and short modifiers.

#### ✅ Recommended — Subscribe to the raw file (auto-updates every 2 days)

The filter files include an `Expires: 2 days` metadata directive. Your extension will automatically fetch the latest version every 2 days, without any manual intervention.

**uBlock Origin:** Settings → Filter lists → Import → Paste the URL below → Apply changes

**AdGuard:** Settings → Filters → Custom → Add custom filter → Paste the URL below

```
https://raw.githubusercontent.com/Polyum/anti-utiq-filters/main/filters-ubo-adguard.txt
```

#### 🔁 Alternative — Manual copy/paste (no auto-update)

Copy and paste the rules below into your extension's **"My filters"** / **"Custom Filters"** editor. Note that this method does not auto-update — you will need to check for new versions manually.

```text
! Title: anti-utiq-filters (uBlock Origin & AdGuard)
! Description: Custom filtering rules to block the Utiq tracking network.
! Homepage: https://github.com/Polyum/anti-utiq-filters
! Expires: 2 days
! Version: 1.5

! 1. Central Infrastructure
||utiq.com^
||utiq-aws.net^
||utiqcontent.com^

! 2. Script & API Interception
/utiqLoader.js$script,important
/op/idconnect/mno-precheck$xhr,important

! 3. Partner-Hosted Subdomain Blocking
! Blocks utiq.orange.fr, utiq.france.tv, utiq.allocine.fr, etc.
! The * wildcard matches any parent domain, regardless of TLD.
||utiq.*^
```

---

### 2️⃣ For AdBlock & AdBlock Plus (`filters-abp.txt`)

Backward-compatible version adjusted to comply with stricter legacy parsing rules. The `$important` modifier is intentionally omitted — it is a uBlock Origin extension not supported by ABP engines and would cause these rules to be silently ignored or rejected.

#### ✅ Recommended — Subscribe to the raw file (auto-updates every 2 days)

**AdBlock / AdBlock Plus:** Options → Filter lists → Add a filter list → Paste the URL below

```
https://raw.githubusercontent.com/Polyum/anti-utiq-filters/main/filters-abp.txt
```

#### 🔁 Alternative — Manual copy/paste (no auto-update)

```text
! Title: anti-utiq-filters (AdBlock & AdBlock Plus)
! Description: Custom filtering rules to block the Utiq tracking network.
! Homepage: https://github.com/Polyum/anti-utiq-filters
! Expires: 2 days
! Version: 1.5

! 1. Central Infrastructure
||utiq.com^
||utiq-aws.net^
||utiqcontent.com^

! 2. Script & API Interception
/utiqLoader.js$script
/op/idconnect/mno-precheck$xmlhttprequest

! 3. Partner-Hosted Subdomain Blocking
! Adapted for ABP: matches 'utiq.' at any domain or subdomain boundary
||utiq.
```

---

## 🔍 Technical Analysis

### 1. Central Infrastructure

**`||utiq.com^`**
The `||` anchor targets the root domain **and all its subdomains recursively**. This single rule drops all traffic to nodes such as `consenthub.utiq.com`, `api.utiq.com`, or `cdn.utiq.com`. Applies to all four engines.

**`||utiq-aws.net^`**
Utiq's production backend runs on AWS under this dedicated domain. Blocking the root severs access to the current gateway (`frontend.prod`) and pre-emptively covers any future subdomains the network may deploy. Note that `utiq-aws.net` begins with `utiq-` (hyphen, not dot) and is therefore **not** caught by the partner-subdomain rules — this explicit entry is necessary. Applies to all four engines.

**`||utiqcontent.com^`**
A separate root domain used by the Utiq SDK to load static assets (configuration files and SVGs). Independent from `utiq.com` and `utiq-aws.net`, it would not be caught by any other rule. Applies to all four engines.

---

### 2. Script & API Interception

**`/utiqLoader.js$script,important`** *(uBlock Origin & AdGuard)*
**`/utiqLoader.js$script`** *(AdBlock & AdBlock Plus)*
Targets Utiq's initialization script by path, regardless of the host domain attempting to inject it. The `$important` modifier is available in uBO and AdGuard only: it assigns strict priority, preventing site-specific allowlist rules from bypassing the block. It is intentionally absent from the ABP variant, where it is not supported and would silently invalidate the rule.

**`/op/idconnect/mno-precheck$xhr,important`** *(uBlock Origin & AdGuard)*
**`/op/idconnect/mno-precheck$xmlhttprequest`** *(AdBlock & AdBlock Plus)*
The `mno-precheck` (*Mobile Network Operator*) endpoint is the API call that queries the cellular network to validate your subscriber identity in the background. Both rules target XHR/Fetch requests to this exact path. `$xhr` is the modern short form supported by uBO and AdGuard; `$xmlhttprequest` is the legacy equivalent required by AdBlock and AdBlock Plus. The `$important` modifier is again omitted from the ABP variant for the same reason.

---

### 3. Partner-Hosted Subdomain Blocking

To extend their reach, Utiq's carrier and media partners provision a `utiq.` subdomain directly on their own domains:

| Partner subdomain | Parent domain |
|---|---|
| `utiq.orange.fr` | `orange.fr` |
| `utiq.france.tv` | `france.tv` |
| `utiq.allocine.fr` | `allocine.fr` |
| `utiq.lefigaro.fr` | `lefigaro.fr` |
| … | … |

These hostnames do not appear in generic `utiq.com` blocklists because they are served under entirely different registrable domains.

**`||utiq.*^`** *(uBlock Origin & AdGuard)*
The `||` anchor matches at the beginning of a hostname or after a `.` separator. The `*` wildcard absorbs the entire parent domain:

- `utiq.orange.fr` → `||` anchors at position 0, `utiq.` matches, `*` absorbs `orange.fr` ✅
- `utiq.france.tv` → same mechanism ✅
- `cdn.utiq.orange.fr` → `||` anchors after the first `.`, `utiq.orange.fr` is matched ✅

**`||utiq.`** *(AdBlock & AdBlock Plus)*
ABP does not reliably handle the `.*^` wildcard combination in this position. The trailing `^` and wildcard are dropped: `||utiq.` matches any request where `utiq.` appears at a domain boundary, covering all partner-hosted subdomains with equivalent effectiveness.

---

## 🗺️ Known Utiq Infrastructure

This section documents Utiq's known core domains and endpoints, as a reference for contributors monitoring new infrastructure deployments.

> For a comprehensive and maintained list of partner-hosted subdomains, refer to the community blocklist: [utiq-tracker.online](https://utiq-tracker.online/)

### Root Domains
| Domain | Role |
|---|---|
| `utiq.com` | Main infrastructure — consent hub, APIs, CDN |
| `utiq-aws.net` | AWS production backend |
| `utiqcontent.com` | Static assets — SDK configuration files and SVGs |

### Known Subdomains
| Subdomain | Role |
|---|---|
| `consenthub.utiq.com` | User consent management portal |
| `frontend.prod.utiq-aws.net` | Production API gateway — CNAME target for all partner-hosted subdomains |

### Known API Endpoints
| Path | Role |
|---|---|
| `/op/idconnect/mno-precheck` | Mobile Network Operator handshake — subscriber identity validation |

### Known Scripts
| Filename | Role |
|---|---|
| `utiqLoader.js` | Main initialization script injected on partner sites |
| `utiqConsentManager.js` | Consent popup script, loaded by `utiqLoader.js` — blocked implicitly if the loader is blocked |

---

## ✅ Compatibility

| Rule | uBlock Origin | AdGuard | AdBlock | AdBlock Plus |
|---|---|---|---|---|
| `\|\|domain^` (root + subdomains) | ✅ | ✅ | ✅ | ✅ |
| `$script` modifier | ✅ | ✅ | ✅ | ✅ |
| `$xhr` modifier | ✅ | ✅ | ❌ | ❌ |
| `$xmlhttprequest` modifier | ✅ | ✅ | ✅ | ✅ |
| `$important` modifier | ✅ | ✅ | ❌ | ❌ |
| `\|\|utiq.*^` (wildcard) | ✅ | ✅ | ❌ | ❌ |
| `\|\|utiq.` (boundary match) | ✅ | ✅ | ✅ | ✅ |

> These rules apply to **browser-based** filtering only (extension required). They have no effect on native mobile apps or system-level traffic.

---

## 🛠️ Verification

To confirm the filters are active:

1. Navigate to a partner website using the Utiq network.
2. Open your extension's **Network Logger** (uBlock Origin dashboard → Logger tab; AdGuard → Filtering Log).
3. Search for `utiq`. All related requests (`utiqLoader.js`, `mno-precheck`, partner subdomains, etc.) must appear in **red** (Blocked), confirming the handshake was intercepted before any carrier data was transmitted.

---

## 🛡️ Defense in Depth

No single layer provides complete protection. Each layer's blind spots are covered by the others: stack as many as your setup allows.

| Layer | What it protects | Blind spots |
|---|---|---|
| Filters (this project) | HTTP requests, scripts, API calls | Browser only; ineffective in native apps |
| Legal opt-out | Carrier-level consent revocation | Can be accidentally overridden by clicking "Accept" on a partner site |
| VPN | Network level — prevents token generation entirely | Only active when the VPN tunnel is up |
| DNS blocklist | All devices on the network | Blind to CNAME cloaking; cannot block by path or request type |

### Layer 1 — Browser Filters (this project)
These rules intercept Utiq's script, API handshake, and partner subdomains at the HTTP level. Path-based rules (`/utiqLoader.js`, `/mno-precheck`) remain effective even against CNAME cloaking, unlike DNS-level blocking.

### Layer 2 — Legal Opt-Out (Carrier Level)
Formally revoke your consent at the carrier infrastructure level via Utiq's official privacy portal:
👉 **[consenthub.utiq.com](https://consenthub.utiq.com/)**

### Layer 3 — VPN (Network Level)
A VPN is the most fundamental protection against Utiq: the token is generated by your carrier via a network-level injection tied to your IP address and subscriber identity. Routing your traffic through a VPN server makes this identification impossible — the VPN provider is not a carrier partner, and your ISP only sees an encrypted tunnel and cannot associate your session with your network identifier. This protection is independent of browser configuration and covers all devices and apps on the connection.

> ⚠️ Protection is only active while the VPN tunnel is up. If your device falls back to a direct connection (mobile data, or Wi-Fi without VPN), Utiq may resume operating normally — which is precisely why stacking multiple layers matters.

### Layer 4 — Community DNS Blocklist (Automated Maintenance)
Subscribe to a community-maintained blocklist to receive automatic domain updates without manual intervention:
- 📋 **Subscription URL:** [utiq-tracker.online/blocklists/utiq-standard-adblock.txt](https://utiq-tracker.online/blocklists/utiq-standard-adblock.txt)
- 🌐 **Project Reference:** [utiq-tracker.online](https://utiq-tracker.online/)

> ⚠️ Always verify the trustworthiness of a third-party blocklist before subscribing.

> 💡 **Pi-hole / AdGuard Home users:** this project's filters rely on HTTP-level rules (script paths, API endpoints, request types) that DNS-based blockers cannot process. The community blocklist above may offer better-suited DNS entries for your setup.

---

## 🤝 Contributing

This project only tracks changes to Utiq's infrastructure. If you detect any of the following, feel free to open an issue or a pull request:

- A new root domain (alternative to `utiq.com` or `utiq-aws.net`)
- A new API path (alternative to `/op/idconnect/mno-precheck`)
- A new script name (alternative to `utiqLoader.js`)
- A partner using a subdomain prefix other than `utiq.`

Please include the domain or path observed, the partner site where you detected it, and ideally a screenshot of the Network Logger showing the blocked (or unblocked) request.

---

## 📅 Changelog

> Version numbers track changes to filter files only. README-only updates are not versioned.

| Version | Date | Notes |
|---|---|---|
| 1.5 | 2026-06-19 | Added `\|\|utiqcontent.com^` to both filter files (Utiq static assets domain) |
| 1.4 | 2026-06-19 | Removed `$important` from `filters-abp.txt` (not supported by AdBlock/ABP engines) |
| 1.3 | 2026-06-18 | Added `filters-abp.txt` (AdBlock & AdBlock Plus support) |
| 1.2 | 2026-06-18 | Unified filter set (uBO + AdGuard); corrected `\|\|utiq.*^` subdomain-prefix matching |
| 1.1 | 2026-06-18 | Split uBO / AdGuard variants; added compatibility table; corrected terminology |
| 1.0 | — | Initial release |

---

## 📄 License

This project is open-source and licensed under the **MIT License**. See the [LICENSE](LICENSE) file for more details.

anti-utiq-filters

anti-utiq-filters Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

anti-utiq-filters

anti-utiq-filters Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README