在 baidu 搜索了"iOS 开发"内容,跳转到简书后,返回页面时,会发现 baidu 的关键词成了 "iOS 开发 - 简书",中间发现简书请求了 leyqd.wxaccord.cn
复现设备: iPhone Safari, 搜索关键词 "iOS 毛玻璃", 进入简书文章页,再返回。
感觉简书马山成为第二个 CSDN 了
附上抓包内容:
>> 本文件内容为 http://leyqd.wxaccord.cn/dh.html?url=https%3A%2F%2Fm.baidu.com%2Fs%3Fword%3DiOS%25E5%259B%25BE%25E7%2589%2587%25E9%25AB%2598%25E6%2596%25AF%25E6%25A8%25A1%25E7%25B3%258A%25E5%25A4%2584%25E7%2590%2586-%25E7%25AE%2580%25E4%25B9%25A6%26from%3D1023356j&k=1606027741650 的请求抓包详情,供您分析和定位问题。
1. 请求内容 Request:
GET /dh.html?url=https%3A%2F%2Fm.baidu.com%2Fs%3Fword%3DiOS%25E5%259B%25BE%25E7%2589%2587%25E9%25AB%2598%25E6%2596%25AF%25E6%25A8%25A1%25E7%25B3%258A%25E5%25A4%2584%25E7%2590%2586-%25E7%25AE%2580%25E4%25B9%25A6%26from%3D1023356j&k=1606027741650 HTTP/1.1
Host: leyqd.wxaccord.cn
Upgrade-Insecure-Requests: 1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.1 Mobile/15E148 Safari/604.1
Accept-Language: zh-cn
Accept-Encoding: gzip, deflate
Connection: keep-alive
2. 响应内容 Response:
HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Content-Length: 901
Connection: keep-alive
Date: Sun, 22 Nov 2020 06:49:02 GMT
x-oss-request-id: 5FBA09DE01F3FC3231CA5184
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "B36C5CDB3E172A1F1B58C7F04951AF9C"
Last-Modified: Tue, 26 Mar 2019 03:24:09 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11171153692684006830
x-oss-storage-class: Standard
Content-MD5: s2xc2z4XKh8bWMfwSVGvnA==
x-oss-server-time: 3
Ali-Swift-Global-Savetime: 1606027742
Via: cache47.l2cn2635[12,200-0,M], cache21.l2cn2635[14,0], kunlun7.cn2164[21,200-0,M], kunlun8.cn2164[22,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sun, 22 Nov 2020 06:49:02 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: 6548cd9e16060277425006702e
<html><head><meta http-equiv="Content-Type" content="text/html; charset=GBK">
<title></title>
<style type="text/css">
div.c1 {display:none}
body{overflow: hidden;}
</style>
</head>
<body>
<script type="text/javascript">
function gp(a) {
return (a = RegExp("[?&]" + a + "=([^&]*)").exec(window.location.search)) && decodeURIComponent(a[1].replace(/\+/g, " "))
}
var url=gp("url");
var reff=document.referrer;
console.log(reff);
var domain=reff!=null&&reff!=""?RegExp("[?:]([^?]*)").exec(document.referrer)[0]:"";
if(url==null||url==""||domain.indexOf('sogou.com')>0||domain.indexOf('so.com')>0||domain.indexOf('baidu.com')>0||domain.indexOf('sm.cn')>0){
document.write('<iframe frameBorder="0" scrolling="yes" width="100%" height="100%" src="./sjdh.html"><\/iframe>')
}else{
window.location.href=gp("url");
}
</script>
</body></html>
====
该记录由 Stream 抓取,仅用于分析和学习,可 AppStore 搜索『抓包』下载,面向开发者永久免费使用。