简书 移动 web 在返回页面的时候,会强行改变你的搜索关键词来给自己引流, tui~

2020-11-22 14:57:33 +08:00
 1070794219

在 baidu 搜索了"iOS 开发"内容,跳转到简书后,返回页面时,会发现 baidu 的关键词成了 "iOS 开发 - 简书",中间发现简书请求了 leyqd.wxaccord.cn

复现设备: iPhone Safari, 搜索关键词 "iOS 毛玻璃", 进入简书文章页,再返回。

感觉简书马山成为第二个 CSDN 了

附上抓包内容:

>> 本文件内容为 http://leyqd.wxaccord.cn/dh.html?url=https%3A%2F%2Fm.baidu.com%2Fs%3Fword%3DiOS%25E5%259B%25BE%25E7%2589%2587%25E9%25AB%2598%25E6%2596%25AF%25E6%25A8%25A1%25E7%25B3%258A%25E5%25A4%2584%25E7%2590%2586-%25E7%25AE%2580%25E4%25B9%25A6%26from%3D1023356j&k=1606027741650 的请求抓包详情,供您分析和定位问题。

1. 请求内容 Request:

GET /dh.html?url=https%3A%2F%2Fm.baidu.com%2Fs%3Fword%3DiOS%25E5%259B%25BE%25E7%2589%2587%25E9%25AB%2598%25E6%2596%25AF%25E6%25A8%25A1%25E7%25B3%258A%25E5%25A4%2584%25E7%2590%2586-%25E7%25AE%2580%25E4%25B9%25A6%26from%3D1023356j&k=1606027741650 HTTP/1.1
Host: leyqd.wxaccord.cn
Upgrade-Insecure-Requests: 1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.1 Mobile/15E148 Safari/604.1
Accept-Language: zh-cn
Accept-Encoding: gzip, deflate
Connection: keep-alive





2. 响应内容 Response:

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Content-Length: 901
Connection: keep-alive
Date: Sun, 22 Nov 2020 06:49:02 GMT
x-oss-request-id: 5FBA09DE01F3FC3231CA5184
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "B36C5CDB3E172A1F1B58C7F04951AF9C"
Last-Modified: Tue, 26 Mar 2019 03:24:09 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11171153692684006830
x-oss-storage-class: Standard
Content-MD5: s2xc2z4XKh8bWMfwSVGvnA==
x-oss-server-time: 3
Ali-Swift-Global-Savetime: 1606027742
Via: cache47.l2cn2635[12,200-0,M], cache21.l2cn2635[14,0], kunlun7.cn2164[21,200-0,M], kunlun8.cn2164[22,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sun, 22 Nov 2020 06:49:02 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: 6548cd9e16060277425006702e

<html><head><meta http-equiv="Content-Type" content="text/html; charset=GBK">
    <title></title>
    <style type="text/css">
        div.c1 {display:none}
        body{overflow: hidden;}
    </style>
</head>
<body>
<script type="text/javascript">

    function gp(a) {
        return (a = RegExp("[?&]" + a + "=([^&]*)").exec(window.location.search)) && decodeURIComponent(a[1].replace(/\+/g, " "))
    }
	var url=gp("url");
	var reff=document.referrer;
	console.log(reff);
	var domain=reff!=null&&reff!=""?RegExp("[?:]([^?]*)").exec(document.referrer)[0]:"";
	if(url==null||url==""||domain.indexOf('sogou.com')>0||domain.indexOf('so.com')>0||domain.indexOf('baidu.com')>0||domain.indexOf('sm.cn')>0){
        document.write('<iframe frameBorder="0" scrolling="yes" width="100%" height="100%" src="./sjdh.html"><\/iframe>')
	}else{
        window.location.href=gp("url");
	}
</script>

</body></html>

====
该记录由 Stream 抓取,仅用于分析和学习,可 AppStore 搜索『抓包』下载,面向开发者永久免费使用。

430 次点击
所在节点    问与答
0 条回复

这是一个专为移动设备优化的页面(即为了让你能够在 Google 搜索结果里秒开这个页面),如果你希望参与 V2EX 社区的讨论,你可以继续到 V2EX 上打开本讨论主题的完整版本。

https://www.v2ex.com/t/728046

V2EX 是创意工作者们的社区,是一个分享自己正在做的有趣事物、交流想法,可以遇见新朋友甚至新机会的地方。

V2EX is a community of developers, designers and creative people.

© 2021 V2EX