第二次出现劫持的网站
play.jzztq.com 经过测试实际上也是从同一个 url 跳过去的,
z80.meijingyi.com:81/url.php?cid=80 curl -v -L -H "User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 11_0_2 like Mac OS X) AppleWebKit/603.1.30 (KHTML, like Gecko) CriOS/61.0.3163.73 Mobile/15A421 Safari/602.1"
http://z80.meijingyi.com:81/url.php?cid=22* Trying 116.62.154.241...
* Connected to
z80.meijingyi.com (116.62.154.241) port 81 (#0)
> GET /url.php?cid=22 HTTP/1.1
> Host:
z80.meijingyi.com:81> Accept: */*
> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 11_0_2 like Mac OS X) AppleWebKit/603.1.30 (KHTML, like Gecko) CriOS/61.0.3163.73 Mobile/15A421 Safari/602.1
>
< HTTP/1.1 200 OK
< Server: nginx/1.0.15
< Date: Wed, 11 Oct 2017 09:44:43 GMT
< Content-Type: text/html
< Transfer-Encoding: chunked
< Connection: close
< X-Powered-By: PHP/5.2.17p1
<
<form id="sub" style="display: none;" action="
http://play.jzztq.com:81" method="get">
<input type="text" name="cid" value="22"></input>
</form>
<script>
document.getElementById('sub').submit();
* Closing connection 0
</script>
这至少说明两个不同的网站劫持源是同一个。iOS 没越狱没开任何全局代理类软件的情况下跟我说是我终端问题,我无法理解。(难道 iOS 有特别的劫持技巧?)更何况我手机里面的东西都是常用的几个大件 APP,根本没有什么莫名其妙的 APP。