查看: 2179|回复: 6
收起左侧

[未鉴定] 今天收到一个短信。。

[复制链接]
_唐三藏的格子装
发表于 2015-7-29 11:41:28 | 显示全部楼层 |阅读模式
本帖最后由 _唐三藏的格子装 于 2015-7-29 11:56 编辑

就是这个,但是为什么我的电脑打不开这个网址,用360网址检测显示安全,刚查到网址IP是香港特别行政区。。
psb.jpg
开玩笑被扣魅力
发表于 2015-7-29 12:00:55 | 显示全部楼层
本帖最后由 开玩笑被扣魅力 于 2015-7-29 12:07 编辑
  1. Domain Name: RYWAF.COM
  2. Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
  3. Sponsoring Registrar IANA ID: 303
  4. Whois Server: whois.PublicDomainRegistry.com
  5. Referral URL: http://www.PublicDomainRegistry.com
  6. Name Server: NS1.51DNS.COM
  7. Name Server: NS2.51DNS.COM
  8. Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
  9. Updated Date: 24-jul-2015
  10. Creation Date: 24-jul-2015
  11. Expiration Date: 24-jul-2016
  12. ------------> Detailed Info <-----------
  13. Domain Name: RYWAF.COM
  14. Registry Domain ID: 1948817882_DOMAIN_COM-VRSN
  15. Registrar WHOIS Server: whois.publicdomainregistry.com
  16. Registrar URL: www.publicdomainregistry.com
  17. Updated Date: 2015-07-24T07:41:18Z
  18. Creation Date: 2015-07-24T07:41:17Z
  19. Registrar Registration Expiration Date: 2016-07-24T07:41:17Z
  20. Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
  21. Registrar IANA ID: 303
  22. Domain Status: clientTransferProhibited
  23. https://icann.org/epp#clientTransferProhibited
  24. Registry Registrant ID:
  25. Registrant Name: XiaoRen
  26. Registrant Organization: XiaoRen
  27. Registrant Street: hubei wuhanshi
  28. Registrant City: Wu Han
  29. Registrant State/Province: Hu Bei
  30. Registrant Postal Code: 510000
  31. Registrant Country: CN
  32. Registrant Phone: +86.05922669759
  33. Registrant Phone Ext:
  34. Registrant Fax:
  35. Registrant Fax Ext:
  36. Registrant Email: 124335758#qq.com
  37. Registry Admin ID:
  38. Admin Name: XiaoRen
  39. Admin Organization: XiaoRen
  40. Admin Street: hubei wuhanshi
  41. Admin City: Wu Han
  42. Admin State/Province: Hu Bei
  43. Admin Postal Code: 510000
  44. Admin Country: CN
  45. Admin Phone: +86.05922669759
  46. Admin Phone Ext:
  47. Admin Fax:
  48. Admin Fax Ext:
  49. Admin Email: 124335758#qq.com
  50. Registry Tech ID:
  51. Tech Name: XiaoRen
  52. Tech Organization: XiaoRen
  53. Tech Street: hubei wuhanshi
  54. Tech City: Wu Han
  55. Tech State/Province: Hu Bei
  56. Tech Postal Code: 510000
  57. Tech Country: CN
  58. Tech Phone: +86.05922669759
  59. Tech Phone Ext:
  60. Tech Fax:
  61. Tech Fax Ext:
  62. Tech Email: 124335758#qq.com
  63. Name Server: ns1.51dns.com
  64. Name Server: ns2.51dns.com
  65. DNSSEC:Unsigned
  66. Registrar Abuse Contact Email: abuse-contact#publicdomainregistry.com
  67. Registrar Abuse Contact Phone: +1-2013775952
  68. URL of the ICANN WHOIS Data Problem Reporting System:
  69. http://wdprs.internic.net/
  70. >>>Last update of WHOIS database: 2015-07-29T03:53:02+0000Z<<<
  71. For more information on Whois status codes, please visit https://icann.org/epp
  72. Registration Service Provided By: ZHENGZHOUCENTURYCONNECT ELECTRONIC & TECHNOLOGY DEVELOPMENT CO., LTD
  73. The data in this whois database is provided to you for information purposes
  74. only, that is, to assist you in obtaining information about or related to a
  75. domain name registration record. We make this information available "as is",
  76. and do not guarantee its accuracy. By submitting a whois query, you agree
  77. that you will use this data only for lawful purposes and that, under no
  78. circumstances will you use this data to:
  79. (1) enable high volume, automated, electronic processes that stress or load
  80. this whois database system providing you this information; or
  81. (2) allow, enable, or otherwise support the transmission of mass unsolicited,
  82. commercial advertising or solicitations via direct mail, electronic mail, or
  83. by telephone.
  84. The compilation, repackaging, dissemination or other use of this data is
  85. expressly prohibited without prior written consent from us. The Registrar of
  86. record is PDR Ltd. d/b/a PublicDomainRegistry.com.
  87. We reserve the right to modify these terms at any time.
  88. By submitting this query, you agree to abide by these terms.
复制代码


7月24注册的域名。
注册者:124335758@qq.com

无标题.png
这域名就有猫腻。

Js判断客户端是否为PC还是手持设备,判定为手机客户端后才跳转并进行文件下载。

  1. <html xmlns="http://www.w3.org/1999/xhtml"><head>
  2. <meta http-equiv="Content-Type" content="text/html; charset=gb2312">
  3. <meta name="viewport" content="initial-scale=1, maximum-scale=1">
  4. <title></title>
  5. <script>
  6.       function IsPC() {
  7.           var userAgentInfo = navigator.userAgent;
  8.           var Agents = new Array("Android", "iPhone", "SymbianOS", "Windows Phone", "iPod");
  9.           var flag = true;
  10.           for (var v = 0; v < Agents.length; v++) {
  11.               if (userAgentInfo.indexOf(Agents[v]) > 0) { flag = false; break; }
  12.           }
  13.           return flag;
  14.       }
  15.       if (!IsPC()) {
  16.           location.href = '/index.apk';
  17.       }       
  18. </script>
  19. </head><body>

  20. </body></html>
复制代码


      function IsPC() {
          var userAgentInfo = navigator.userAgent;
          var Agents = new Array("Android", "iPhone", "SymbianOS", "Windows Phone", "iPod");
          var flag = true;
          for (var v = 0; v < Agents.length; v++) {
              if (userAgentInfo.indexOf(Agents[v]) > 0) { flag = false; break; }
          }
          return flag;
      }
      if (!IsPC()) {
         
location.href = '/index.apk';
      }


/index.apk


然后下载APK http://www.rywaf.com/index.apk
文件附件: index.rar (271.06 KB, 下载次数: 77)
_唐三藏的格子装
 楼主| 发表于 2015-7-29 12:27:39 | 显示全部楼层
开玩笑被扣魅力 发表于 2015-7-29 12:00
7月24注册的域名。
注册者:

那我分别用电脑和手机打开那个网页了,什么也不显示,会不会出问题?? 怎么解决呀?
开玩笑被扣魅力
发表于 2015-7-29 12:29:11 | 显示全部楼层
_唐三藏的格子装 发表于 2015-7-29 12:27
那我分别用电脑和手机打开那个网页了,什么也不显示,会不会出问题?? 怎么解决呀?

只要你没有下载并安装到那个apk安装包是没问题的。
请放心。
就算你下载了,没安装也是没事的。
_唐三藏的格子装
 楼主| 发表于 2015-7-29 12:30:02 | 显示全部楼层
开玩笑被扣魅力 发表于 2015-7-29 12:29
只要你没有下载并安装到那个apk安装包是没问题的。
请放心。
就算你下载了,没安装也是没事的。

我手机上什么也没显示,电脑也是。吓死我了
开玩笑被扣魅力
发表于 2015-7-29 12:32:57 | 显示全部楼层
_唐三藏的格子装 发表于 2015-7-29 12:30
我手机上什么也没显示,电脑也是。吓死我了
if (!IsPC()) {
          location.href = '/index.apk';


if (!IsPC())
如果不是PC,则跳转到服务器的本地相对地址/index.apk 也就是http://www.rywaf.com/index.apk
电脑打开时没问题的。。手机打开而且浏览器允许JS脚本的话就会跳转到http://www.rywaf.com/index.apk下载
_唐三藏的格子装
 楼主| 发表于 2015-7-29 12:35:56 | 显示全部楼层
开玩笑被扣魅力 发表于 2015-7-29 12:32
if (!IsPC())
如果不是PC,则跳转到服务器的本地相对地址/index.apk 也就是http://www.rywaf.com/i ...

哦哦,好吧 ,谢谢你了~~  以后不手贱了。。
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-2 05:47 , Processed in 0.132927 second(s), 20 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表