- 掃描 ID：
- ae620979-f581-4aaf-bbb4-18e909a74d19已完成
- 已提交的 URL：
- https://gekkk.co/i/edc4d516b67c4f3d6f08bbf575eaae52
- 報告完成時間：
連結 · 找到 1 個
從頁面中識別的傳出連結
| 連結 | Text |
|---|---|
| https://lyrahosting.com | LyraHosting |
JavaScript 變數 · 找到 20 個
在頁面的視窗物件上載入的全域 JavaScript 變數是在函數外部宣告的變數，可從目前範圍內程式碼中的任何位置存取
| 名稱 | 類型 |
|---|---|
| onbeforetoggle | object |
| documentPictureInPicture | object |
| onscrollend | object |
| _0xe17c | object |
| w3DataObject | object |
| w3DisplayData | function |
| w3IncludeHTML | function |
| w3Http | function |
| _0x556f | function |
| _0x2ab8 | function |
主控台記錄訊息 · 找到 1 條
記錄到 Web 主控台的訊息
| 類型 | 類別 | 記錄 |
|---|---|---|
| error | network |
|
HTML
頁面的原始 HTML 主體
<!DOCTYPE html><html><head><script src="/vddosw3data.js"></script>
<script type="text/javascript" src="/min.js"></script><noscript><h1 style="text-align:center;color:red;"><strong>Please turn JavaScript on and reload the page.</strong></h1></noscript>
</head><body>
<div>
<title>Just a moment...</title>
<style>
body {
background-color: #333333;
}
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<meta charset="UTF-8">
</style>
<link href="https://fonts.googleapis.com/css2?family=Open+Sans:wght@300;400&display=swap" rel="stylesheet">
<table width="100%" height="100%" cellpadding="30">
<tbody><tr>
<td align="center" valign="center">
<img src="https://lyrahosting.com/lyrashield/lyrashield.svg">
<h2 style="text-align: center;text-shadow: black 0.1em 0.1em 0.2em;color: #E0E0E0;opacity: .9;font-weight: 400;font-size: 20px;font-family: 'Source Code Pro';">
Detecting intrusions...<br>This process will redirect you shortly.
</h2>
<noscript>
<h1 style="text-align:center;color:red;">
<strong>Please turn JavaScript on and reload the page.</strong>
</h1>
</noscript>
<br>
<h3 style="text-align: center;text-shadow: black 0.1em 0.1em 0.2em;color: #E0E0E0;opacity: .9;font-weight: 400;font-size: 18px;font-family: 'Source Code Pro';">
Powered by <a style="color: #ce3233;" href="https://lyrahosting.com" target="_blank"><b>LyraHosting</b></a>
</h3>
<br>
</td>
</tr>
</tbody></table>
</div>
<script>
w3IncludeHTML();
</script>
<script>var _0xe262=["\x70\x75\x73\x68","\x72\x65\x70\x6C\x61\x63\x65","\x6C\x65\x6E\x67\x74\x68","\x63\x6F\x6E\x73\x74\x72\x75\x63\x74\x6F\x72","","\x30","\x74\x6F\x4C\x6F\x77\x65\x72\x43\x61\x73\x65","\x4E\x54\x6B\x31\x5A\x6A\x4D\x33\x4E\x47\x45\x30\x5A\x6A\x63\x33\x4F\x54\x68\x6A\x4E\x44\x46\x68\x59\x7A\x6B\x33\x4E\x6A\x67\x31\x4F\x54\x6B\x78\x5A\x44\x4E\x68\x4D\x6A\x55\x3D"];function toNumbers(_0x3920x2){var _0x3920x3=[];_0x3920x2[_0xe262[1]](/(..)/g,function(_0x3920x2){_0x3920x3[_0xe262[0]](parseInt(_0x3920x2,16))});return _0x3920x3}function toHex(){for(var _0x3920x2=[],_0x3920x2=1== arguments[_0xe262[2]]&& arguments[0][_0xe262[3]]== Array?arguments[0]:arguments,_0x3920x3=_0xe262[4],_0x3920x5=0;_0x3920x5< _0x3920x2[_0xe262[2]];_0x3920x5++){_0x3920x3+= (16> _0x3920x2[_0x3920x5]?_0xe262[5]:_0xe262[4])+ _0x3920x2[_0x3920x5].toString(16)};return _0x3920x3[_0xe262[6]]()}var b2=atob(_0xe262[7]),b1=toNumbers(b2),c1=atob("OGQ0ZTk3ZjBkOGM2Yjk0MTYyZjhlMjhlNTdjYTNhODY="),c2=toNumbers(c1),a3=toNumbers("a2818d3080c35ae151c782e47eb6eb98");document.cookie="LyraShield-ij="+toHex(slowAES.decrypt(a3,2,b1,c2))+"; path=/";setTimeout("location.href='https://gekkk.co:443/i/edc4d516b67c4f3d6f08bbf575eaae52';",5000);
</script>
<center>
<br>
<br>
<center>
</center></center></body></html>