新浪的乐居云盘也成为钓鱼网站的温床了

Rottyler

QQ里面看到一个二维码图，解析后地址是
http://photo.house.sina.com.cn/imp/imp/deal/58/e3/f/d191f87a335d43d8174234302c4_p36_mk35.gif

curl
* About to connect() to photo.house.sina.com.cn port 80 (#0)
*   Trying 123.59.190.209...
* Connected to photo.house.sina.com.cn (123.59.190.209) port 80 (#0)
> GET /imp/imp/deal/58/e3/f/d191f87a335d43d8174234302c4_p36_mk35.gif HTTP/1.1
> User-Agent: curl/7.29.0
> Host: photo.house.sina.com.cn
> Accept: */*
>
< HTTP/1.1 200 OK
< Server: nginx
< Date: Mon, 12 Nov 2018 13:16:54 GMT
< Content-Type: text/html; charset=us-ascii
< Content-Length: 49
< Connection: keep-alive
< Content-Encoding: null
< Cache-Control: max-age=15552000
< Access-Control-Allow-Origin: *
< Access-Control-Allow-Methods: GET, OPTIONS
< Last-Modified: Tue, 30 Oct 2018 21:41:22GMT
< Expires: Sat, 11 May 2019 07:57:01 GMT
< LEJU_FQDN: d12070561.grid.house.sina.com.cn
< Accept-Ranges: bytes
< X-Varnish: 1867725489 286456660
< Age: 19194
< Via: 1.1 varnish
< x-hits: 25682
< X-Cache: HITS from d15070014.grid.house.sina.com.cn
<
<script src="http://9q3j.cn/js/qq.js"></script>
* Connection #0 to host photo.house.sina.com.cn left intact

Rottyler

cyo 发表于 2018-11-12 21:27
v站已经看过一次了，全球工单系统都没有解决

v站那个是另一个，已经被搞死了，最近几天又出来一个

king51

xss，这个就很厉害了