LeakIX - Host 20009d.com

Open service 2600:9000:2644:8e00:5:e79d:2700:93a1:80 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 18fab39b23fb6b3013058d6df5faf0bc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: YgsQxAyolQYhfUZ4G13sx2rVVbZueC2WI8nZVyXM3im1ez8XXw9Cyw==
Age: 2

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:6200:5:e79d:2700:93a1:443 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a2ce61e5ddc66736c9e2bfb6581fa2da.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: XUguow6FxClxI8SW38iJXPOdvFQKnO0Ai37oQhMMwIIfezfNxQnjPw==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:fc00:5:e79d:2700:93a1:80 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6d96f6742a3e24fad8577272b38c550a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: 5RmIRyC4Zel7kA6dAii70hnKqixnw71mBfAa8x_PLogaTOqLLR_HKQ==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:8800:5:e79d:2700:93a1:80 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 e221f111ed3ebc025b531e81056d37a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: Bm8HJy3nbR_qPzT1H2kU4rhVL5bOgk0PHOObhMDw0UApb68ko1AOpQ==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 18.239.50.44:80 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a752e456797165fcc0a1e5de08b5353c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P3
X-Amz-Cf-Id: YTUtCVZFSDFYRkF8I0zDGCuZmXOET6aZQmjeR1k9XJq1H_xkdJAMow==
Age: 2

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:8e00:5:e79d:2700:93a1:443 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 57bc54093a2e2c99ca194f2955ba3d1c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: 3mtV5IY0Ukpn3harxf3s5GgGReTgccSXa5kzUKDKxel01EGiJASBxA==
Age: 2

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 18.239.50.16:80 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 e1ffe469ec59bbd0f64b14eb9c83d0d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P3
X-Amz-Cf-Id: -C76hAlYxG5f-JQgaGwK-DJ953skp9_lJkM1vGtSnouum8mO7LQ9lg==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:6000:5:e79d:2700:93a1:443 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 56a77d6c9e6b49fa4179a99507a9582e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: AeOgM78P1XDQGm_4Nm1pO-GwX9v33MsQuOndOvrB-x4NXijG7OK-mA==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 18.239.50.82:443 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 3201e5fb77f9faaa881f4f324226564a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P3
X-Amz-Cf-Id: KJFLW-0iKTFEctRF-KU0tbHJwgVViEFdVukhHPdWOCmIOsbzyUMi_A==
Age: 2

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 18.239.50.16:443 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 2b13b2ad91208ea27acb039cde3e8f42.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P3
X-Amz-Cf-Id: HUl2S6XXrFOoPVcn4t3rmeps21IV7aKhUX7aR6iXAekR9BPffbp33Q==
Age: 2

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 18.239.50.115:80 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 702b555619c53ec5f8f56dfeed61c334.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P3
X-Amz-Cf-Id: 8Stqw0E2msMXOCUXYlaPqLdl32QnP2_tzJRVKeqSHahVOJZ5o-JxcQ==
Age: 2

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 18.239.50.82:80 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 702b555619c53ec5f8f56dfeed61c334.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P3
X-Amz-Cf-Id: RYXVEVqRgRmryAgNMPWd0T3CMJVbnBPmuSdVU4219yh2Ad1HWqoa9g==
Age: 2

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:6200:5:e79d:2700:93a1:80 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 1ed131e2ff13a9b8852067b4dfb6f2dc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: dmFOY7WTvkDmQJGvZBzX0khHHWDwQziHsURcr9YgRzctFj3YRjYaoA==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 18.239.50.115:443 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 64e65d847e47fbcbf4dc70bc1c185676.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P3
X-Amz-Cf-Id: mHscmtacL2ztiy_dKURkEDTbofy58TQ3Jm5vK5QwbF6D7WtMxkQdbw==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:6000:5:e79d:2700:93a1:80 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 b2340053ff948864db4d5e3c0ab3f3ea.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: cODviXK_bwY7NdyEhIqRmczreZoUZe3veisg-6sw_HVcjx6QZYKFoA==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:dc00:5:e79d:2700:93a1:443 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 fca814089bc9a82fba87ce0548f9f358.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: XajajStGQB46xAgtZhGWnbekUQxpRtlY2EN532Ej0ox70XMXAzPvrQ==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:4600:5:e79d:2700:93a1:80 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 cae5c5323232533718f592c973f01432.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: 01YNyyZCUPqqqZ1cf8G1pWTY70ctqbH-JcYXkmPOxwmooVj32RorGA==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:dc00:5:e79d:2700:93a1:80 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 34f8e9435dea359238debf97e45feb10.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: 3OKCaau454KVDEog0eifWRXF3fA2oIJBgho9Z2SABq2ircgEIof7iA==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:4600:5:e79d:2700:93a1:443 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 d2d6641f7f4e620ab86172e07bc2a884.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: ve5SS07Fa7_Pdm78HwoyLZuDBRTBF395KUWJ8JR3hKStFGLaut8N1w==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 18.239.50.44:443 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8be4072f43c8c13d02688a798ea634a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P3
X-Amz-Cf-Id: swXH-7Mi-65SIezgw01VqH6-C_2KyIiw_MUV_ykOxP_4oR0dSj3dtg==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:ae00:5:e79d:2700:93a1:80 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 41f78d12a2f737c8e7f8a05cb4262794.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: RKzcbR4OAJZfcQWRafCCHBTQcuNaRljyQs4BEJ1NhjzJOMOk16v5pw==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:8800:5:e79d:2700:93a1:443 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 e0bdfd4f00aaa5b927cf38c4eda059ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: vcN2uttFLjkmJcwd22KLd_1XC0Ims1SexcMH0mrcEuXvnVyM4QGW4Q==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:ae00:5:e79d:2700:93a1:443 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 218c6128df18321f9758e53ccc351448.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: Ql5d65viRUxublMkcNLAELm1INLBnPgYp_SgyYbHljZYz6ugZW_IwA==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:fc00:5:e79d:2700:93a1:443 · 20009d.com

2026-01-25 02:14

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 25 Jan 2026 02:17:14 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 b17826d683a2d96e59e274ca2b79697e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: fw9j-Y2yR5JwDyDxFwHg8P-CtCsFh7JyRLLr-qSV0IUtnkOmOM6_fA==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-25 by HttpPlugin

Create report

Open service 2600:9000:2644:d600:5:e79d:2700:93a1:80 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 debf5a1694fcb96cc13d895660321eda.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: lWnchW9P2kI3octa-zDAPJM3bF8r4ql-U_tTm0Pv6y0SwPNpiGncXw==
Age: 4

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 18.245.86.39:443 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e8e6ea60de74421f0058675cbcf9cb0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: Vj3_K_YGFmmG3GIhpM2QgAzWhwqsh2zLe449gce0mc8QWjlfLSgAUw==
Age: 2

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:a600:5:e79d:2700:93a1:443 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9ed190c9d6b2f812d19cbb317856ed88.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: 9CCI6jqFCfGQ0B7QfPz1XyNnfQ7vHSxguNJ-CKRFowbu85y53yHd4Q==
Age: 3

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 18.245.86.7:443 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 debf5a1694fcb96cc13d895660321eda.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: v3RhTz-Ya4pnAYFYAGPwYOoIJlsV8ax09r8kdWJEc-L05V50wZ9C4g==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:a600:5:e79d:2700:93a1:80 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 b2340053ff948864db4d5e3c0ab3f3ea.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: D38JrkKlCVCwsjJ4EpyIbaHuDCknNtQEcSKWnyAdvEgAtQ7EJz5S_w==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:1200:5:e79d:2700:93a1:80 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 fca814089bc9a82fba87ce0548f9f358.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: cVsD3YqvK7REunOFTB2OWy7QXhR7gZUUeAHNHaKUsSgJ2RwzDh6gBQ==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 18.245.86.17:443 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e8e6ea60de74421f0058675cbcf9cb0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: plM21tQ7zzIsb7Qd8dpEPcRom_oaVw3eFt5oYYQCusxJj-Gu-VV2nw==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:f600:5:e79d:2700:93a1:443 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 bc3ecf5f025b0be9b8c39c5dd2dace2e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: 38qk29bkEcVjnwtk5C8cV7WNUZu18dIVF4VWixhsyJhMH3kArOKR_A==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:d600:5:e79d:2700:93a1:443 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 57bc54093a2e2c99ca194f2955ba3d1c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: hElvO7Q_uJKZRY6Hr4t7wNl2EIkZAY4xjPf4KijNjSu8X0tkMgRqVw==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:f600:5:e79d:2700:93a1:80 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 75f70026bed8fa7e14f645c02f074728.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: qLSXbqKRLT3at-u3etEso6D-uaFASlxX4BkO4hBeoNZeTIsl8jefzw==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:1000:5:e79d:2700:93a1:80 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 cae5c5323232533718f592c973f01432.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: r-tTQNqZadDW6HUf_MTW0M3iWfen5LJ2-BZv-nNLXjapVLjd28o3aw==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:1200:5:e79d:2700:93a1:443 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 13ad77f5993668d67b8168f460ba6368.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: oeSC4Up5Tw0fJzo3ut0clBbC8J8rvLfS9bkwiaYzQgIWIZURaNw54Q==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:7a00:5:e79d:2700:93a1:443 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 cbd5498107be7e5bcccda272c5fdbef4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: S2vAGy-q7Q0yx8mYDD0y2zKykFTPT_Oo8z4dicjK2WQJRi4niJYwQA==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:2e00:5:e79d:2700:93a1:80 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 56a77d6c9e6b49fa4179a99507a9582e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: Y4H-qhYqtWfyeHc4Wzp3tqiTcjxSkPAug3HufMsfFuKVv7dBBB1j2Q==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:7a00:5:e79d:2700:93a1:80 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 75102a66d781b0fa0df5617ce2738546.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: t-jH7wAepsM9t6A8MXv3SXKZdi9fQLH1sgtduGeUrzb33Yyf4UpipA==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:8c00:5:e79d:2700:93a1:80 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 cae5c5323232533718f592c973f01432.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: dzO7eXFFN8SoSG6UQ6X1RsOy0EO1QW-m8yuqcQclCRbldYa6j_gLsQ==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:2e00:5:e79d:2700:93a1:443 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6e4ed2b1996ce238462d61d3bfff667a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: mPZ4IApZARaHP7wqjZowIVwRlfE34jhtKgq2HvumUvk57NxKEGwzIg==

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 18.245.86.7:80 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 75f70026bed8fa7e14f645c02f074728.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: PJoNhOF5YWAFaJF8I6s6in8iRHcnPKxPdDaAiwkTuCl2E8DXF1SiRg==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:8c00:5:e79d:2700:93a1:443 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 e221f111ed3ebc025b531e81056d37a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: wYD7kcDJTOqnr2xwmTHBTM4gD54ziR_aWygWChfI6iweVLEI9EDBtg==

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 18.245.86.113:443 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 debf5a1694fcb96cc13d895660321eda.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: cbH0J3OKOFPhhBDXtlD3AVmp_rFKCVe5Uhy4YzgIZ7BdNXazXo49aw==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 18.245.86.113:80 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 fca814089bc9a82fba87ce0548f9f358.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: fkrl9K_5oCp6aLi-aKxPQKzJmULgGLC8115deCP0r3OXUhohlPHIig==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 2600:9000:2644:1000:5:e79d:2700:93a1:443 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 146c0f4d7da9f5b3108ac41c3becbb82.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: jslKpU6tuVFz_xA14vZhVO2m4Fqvy14375UtfkRfrZcoAmMmjLysow==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Create report

Open service 18.245.86.39:80 · 20009d.com

2026-01-04 16:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Sun, 04 Jan 2026 16:56:40 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6e4ed2b1996ce238462d61d3bfff667a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P6
X-Amz-Cf-Id: JyshjMBCGV1RL5ihrEpw5lLwXJ4vECzBlNe5B6izuimOnkm5dh_8zA==
Age: 1

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))

Found 2026-01-04 by HttpPlugin

Domain 20009d.com

United States

Software information

Domain summary

IP summary