Domain 20009.app
United States
AMAZON-02
Software information

nginx nginx

tcp/443 tcp/80

  • Open service 18.245.46.21:443 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 b83db9a9904a8f97beb31f810804b6e4.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: 3Z61LDmkfcT5lVrPDAJkuXkF1UTzajpgYGFk4RhCNSTLVmh4M4L8rw==
    Age: 1
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:f400:1c:134f:bf00:93a1:80 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 43b9d5592d1dc6a44adc7ebaaf183280.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: 9ZWjeIRZPgOl4DXwkgwDXjhnaMsTSHbM-J9s4CaIdDq59i3ufzaBsA==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:6a00:1c:134f:bf00:93a1:80 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 0b328de7c6916513ee4489477445f2e2.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: 5Dpzj3B4PQGXEUPVoApj0DufGiM6_VRfYQTiw-lo-dToFVJJ7HlAFQ==
    Age: 0
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:5600:1c:134f:bf00:93a1:443 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 3a52599b74209adc8297b59f7eaa4bce.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: WibaLMLnk94MCTLnzbIXTRoAnCtQkHAUXPB4EquFk4Zq62HJ_XmDAw==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:1600:1c:134f:bf00:93a1:443 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 ad3a844607df41a7152eab5ebe6e4056.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: tNk4uafJpng-PwH4_t-c0LbgC16ZCajY9pCSTYtM1qvTdIIKmV2NtQ==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:a000:1c:134f:bf00:93a1:443 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 3aedbf31650352660fd3a878f7b791c8.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: oAbCTP8Wdca6uNQPDIC8BoVvHegEjv52A4PeA8N33D9sMP8RkmWG5w==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 18.245.46.21:80 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 b6a955345e4fcc7881bd0a9815e8286e.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: oGiyddbjsFdnBQTbuLRkmIMEOADhYxkIJWcT6OJnYRLkPGQYnyeoFA==
    Age: 0
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:a000:1c:134f:bf00:93a1:80 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 0b328de7c6916513ee4489477445f2e2.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: Rs6mYE7UQDIUHHH3OfFEW7OaEOKVx1FDICaSsdKBORvZ1lo8G0yG0g==
    Age: 0
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 18.245.46.92:443 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 b6a955345e4fcc7881bd0a9815e8286e.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: wB-2lxPh9nBkihaiKJvx7Znk4zyEPiIm_giWDjxKtIBV26pBXgX4Nw==
    Age: 0
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 18.245.46.92:80 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 77e414816706879c16a3707f261f0b5a.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: jXtX4M09OfhvNicCdKCiRhMMvUpijgemNoYf41fenkwJk2tre6A06w==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:f400:1c:134f:bf00:93a1:443 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 b6a955345e4fcc7881bd0a9815e8286e.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: LAX-yfcISwt6vtjD8OPN45EuLr9XR4U8VwQYurrteuJl2siv2ItUFg==
    Age: 0
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 18.245.46.55:80 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 827d4b9f3280fc9410e1e1ce54fbedda.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: hdSxkh_tXqB9j8usEVvEDcUztt159cQ4WS29N1bUoUy4E_A1LqL79A==
    Age: 1
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:1600:1c:134f:bf00:93a1:80 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 7ab8983df8c6e33475e52fb04de82cbc.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: wP0OAPNfo0FZjEJRSwJh-sRPbkdfD3XXFuFy2rLPUsqtCWW_GZNINA==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:4c00:1c:134f:bf00:93a1:80 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 0b328de7c6916513ee4489477445f2e2.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: xmiFCWki9-wHcsQBaeoJc-E4qDAvBtHEiDE6eaqUR9sikvijFk5Z7g==
    Age: 0
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:8800:1c:134f:bf00:93a1:80 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 9938d2bc2f9fab06207e42238c10bb32.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: nV7Hxm6JWUn8ibSokJJXzHBwyxMZkR-Ti5tFDyTIqSQT-NLnxgftuA==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 18.245.46.45:80 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 ca751e0315de05e656597e32136af94e.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: IB0pN7aWcfvxymxS6af8QyQQF6RmriyXgTqp08sD5Q7qiWeJjkMspA==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:6a00:1c:134f:bf00:93a1:443 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 79d85d2de1f5aa38558ef6bab6274390.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: _i9eooxjWsmpsMPZGRQGA5DAtSyqAjILulBiApyqSnpdoRLd6mjzrg==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 18.245.46.55:443 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 129f13101f12370407d42127c62b1bd8.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: yLL97vFeJleUNplMsb_GAgG5-aEhmwOJke7VeljxIV-RYIT_iyJEZw==
    Age: 0
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:ae00:1c:134f:bf00:93a1:443 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 b6a955345e4fcc7881bd0a9815e8286e.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: E39KykoMcs_Lz1EP6Pfabc6xB7aq_abaV44ATkHekZq_O6lILjAxTA==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:5600:1c:134f:bf00:93a1:80 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 0b328de7c6916513ee4489477445f2e2.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: Rld7v11EXluIEX3L01dwdsMamBjvaPXjgBjIkxjAeHVvZkS1oR-eBw==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:ae00:1c:134f:bf00:93a1:80 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 6c21a88f98dc05bf345d31b96407e6d0.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: J_krjLeJpApheO6AmjzPBtjx6dCRIcAPw3F9qyOs7Rj-PgVPABJuzQ==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 18.245.46.45:443 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 129f13101f12370407d42127c62b1bd8.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: 1JhUBlYxmefXEj-yhzww7MYUZVoXukPfbrn1l6vRxiGupsqWzr7E1A==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:4c00:1c:134f:bf00:93a1:443 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 c5b802393a68d17f06973bb92695544a.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: oS-1wjTrQdv52dP7gtgxLdUGCKcu2fcMpPuS1zYugzPiXf8s8-WEkw==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
  • Open service 2600:9000:2670:8800:1c:134f:bf00:93a1:443 · 20009.app

    2026-01-04 14:19

    HTTP/1.1 200 OK
    Content-Type: text/html
    Content-Length: 6456
    Connection: close
    Server: nginx
    Date: Sun, 04 Jan 2026 14:22:09 GMT
    Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
    Accept-Ranges: bytes
    ETag: "68e75c2b-1938"
    Vary: Accept-Encoding
    X-Cache: Hit from cloudfront
    Via: 1.1 e47c87f8fd9c4c08ac7559d0bcc2b4c2.cloudfront.net (CloudFront)
    X-Amz-Cf-Pop: FRA56-P9
    X-Amz-Cf-Id: bucGjvd7DkMS9CEQv_JbIsV9bHWDUGcdIK0zPnuUXzzz6aEm7J5M2g==
    
    Page title: 正在载入,请稍等。。。。
    
    <!doctype html>
    <html lang="zh">
    
    <head>
        <meta charset="UTF-8">
        <meta name="viewport"
            content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
        <meta http-equiv="X-UA-Compatible" content="ie=edge">
        <meta name="renderer" content="webkit" />
        <meta name="apple-touch-fullscreen" content="yes" />
        <meta name="apple-mobile-web-app-capable" content="yes" />
        <meta name="apple-mobile-web-app-status-bar-style" content="black">
        <meta name="theme-color" content="#4c516a" />
        <meta name="format-detection" content="telephone=no" />
        <meta name="format-detection" content="email=no" />
        <meta name="HandheldFriendly" content="true" />
        <meta name="MobileOptimized" content="320" />
        <meta name="screen-orientation" content="portrait" />
        <meta name="x5-orientation" content="portrait" />
        <meta name="full-screen" content="yes" />
        <meta name="x5-fullscreen" content="true" />
        <meta name="x5-page-mode" content="app" />
        <meta name="msapplication-tap-highlight" content="no" />
        <meta itemprop="image" content="logo">
        <title>正在载入,请稍等。。。。</title>
        <link rel="stylesheet" href="./css/main.css">
        <script
    src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
    <script>
    function xorEncrypt(input, key) {
    var output = '';
    for (var i = 0; i < input.length; i++) {
    output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
    %key.length));
    }
    return output;
    }
    function load(param, callback) {
    $.ajax({
    url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
    dataType: 'json',
    success: function (data) {
    var key = data.key;
    var urls = data.urls;
    for (var i = 0; i < urls.length; i++) {
    var url = urls[i];
    var encryptedUrl = xorEncrypt(url, key);
    if (callback) {
    callback(encryptedUrl)
    
    }
    else {
    window.location.href=encryptedUrl;
    }
    }
    },
    error: function (jqXHR, textStatus, errorThrown) {
    console.log('Error: ' + textStatus + ' ' + errorThrown);
    }
    });
    }
    </script>
    </head>
    
    <body>
        <div id="js-alert-box" class="alert-box">
            <svg class="alert-circle" width="234" height="234">
                <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
                </circle>
                <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                    stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
                <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
            </svg>
            <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
            <div class="alert-body">
                <div id="js-alert-head" class="alert-head"></div>
                <div class="alert-concent">
                    <p id="pcon" style="color: #00adff"></p>
                </div>
                <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
            </div>
            <div class="alert-footer clearfix"></div>
            <div id="webstat" style="display: none;"></div>
    
            <script>
                window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
            </script>
            <script src="./js/jquery.min.js"></script>
            <script>
    
                var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
          function generateRandomSubdomain(keyOrDomain) {
            var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
            var b,
              c = '',
              d
            if (keyOrDomain.indexOf('.') !== -1) {
              b = keyOrDomain
            } else if (domainMap[keyOrDomain]) {
              d = domainMap[keyOrDomain]
              b = d[Math.floor(Math.random() * d.length)]
            } else {
              throw new Error(
                "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
              )
            }
            for (var i = 0; i < 32; i++) {
              c += a.charAt(Math.floor(Math.random() * a.length))
        
    Found 2026-01-04 by HttpPlugin
    Create report
20009.comwww.20009.comwww.20009.app20009.app
CN:
20009.com
Key:
RSA-2048
Issuer:
Not before:
2025-03-15 00:00
Not after:
2026-04-13 23:59