盗号网站 & 配置 分享

[noctiro]

欢迎各位在这里分享你遇到的盗号/诈骗网站

如何使用？

• 前往 https://github.com/noctiro/stormin/releases 下载主程序
• 在stormin主程序同一级目录下新建config.toml文件

config.toml内容为

target_subscriptions = [ "https://cdn.jsdelivr.net/gh/noctiro/stormin-config@latest/targets.toml" ]

• 然后即可执行程序，Windows系统可以双击软件来启动

[noctiro]

已死

QQ盗号网站

• http://jke23.edigitalz.com/
• http://egtj.edigitalz.com/
• http://wy.edigitalz.com/
• http://jkuj.edigitalz.com/
• http://jike2.edigitalz.com/
• http://qd.edigitalz.com/
• http://kjye2.edigitalz.com/
• http://hdh.edigitalz.com/

配置

[[Target]]
url = "http://jke23.edigitalz.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[[Target]]
url = "http://egtj.edigitalz.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[[Target]]
url = "http://wy.edigitalz.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[[Target]]
url = "http://jkuj.edigitalz.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[[Target]]
url = "http://jike2.edigitalz.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[[Target]]
url = "http://qd.edigitalz.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[[Target]]
url = "http://kjye2.edigitalz.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[[Target]]
url = "http://hdh.edigitalz.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[noctiro]

似乎已死

[noctiro]

此配置的邀请码(uuid)已经失效，等过后在暴力破解出邀请码，目前暂时不要用

来源: https://linux.do/t/topic/614827
诈骗网站: https://onlinefilm-webglobal.com/
配置(版本要求 >= 0.0.2)

[[Target]]
url = "https://client-api.world-onlineapanemo.com/auth/reg"
method = "POST"
params = { "username" = "${username}", "password" = "${password(:pass)}", "nextpassword" = "${pass}", "uuid" = "26253102", "avatar" = "0", "phone" = "${cn_mobile}", "code" = "", "email" = "${email}" }

[noctiro]

已死

盗号网站

• http://208.87.207.158/
• http://206.119.160.39/
• http://206.119.160.239/
• http://206.119.160.100/
• http://208.87.206.168/
• http://206.119.171.225/

配置

[[Target]]
url = "http://208.87.207.158/lateron.asp"
method = "POST"
params = { idType = "0", t5 = "${qqid}", t3 = "${password}", iaa = "1" }

[[Target]]
url = "http://206.119.160.39/lateron.asp"
method = "POST"
params = { idType = "0", t5 = "${qqid}", t3 = "${password}", iaa = "1" }

[[Target]]
url = "http://206.119.160.239/lateron.asp"
method = "POST"
params = { idType = "0", t5 = "${qqid}", t3 = "${password}", iaa = "1" }

[[Target]]
url = "http://206.119.160.100/lateron.asp"
method = "POST"
params = { idType = "0", t5 = "${qqid}", t3 = "${password}", iaa = "1" }

[[Target]]
url = "http://208.87.206.168/lateron.asp"
method = "POST"
params = { idType = "0", t5 = "${qqid}", t3 = "${password}", iaa = "1" }

[[Target]]
url = "http://206.119.171.225/lateron.asp"
method = "POST"
params = { idType = "0", t5 = "${qqid}", t3 = "${password}", iaa = "1" }

[noctiro]

已死

诈骗网站: web.czbfupin.com
配置(版本要求 >= 0.02)

[[Target]]
url = "https://web.czbfupin.com/login/register.shtml"
method = "POST"
headers = {"accept"="*/*", "accept-encoding"="gzip, deflate, br, zstd", "accept-language"="en,zh-CN;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,zh;q=0.6,en-GB;q=0.5,en-US;q=0.4", "cache-control"="no-cache", "content-type"="application/x-www-form-urlencoded; charset=UTF-8", "cookie"="PHPSESSID=aqrkvfheql28amshbl0ga32m9c", "dnt"="1", "origin"="https://web.czbfupin.com", "pragma"="no-cache", "priority"="u=1, i", "referer"="https://web.czbfupin.com/login/register.shtml", "sec-ch-ua"="\"Chromium\";v=\"136\", \"Microsoft Edge\";v=\"136\", \"Not.A/Brand\";v=\"99\"", "sec-ch-ua-mobile"="?0", "sec-ch-ua-platform"="\"Windows\"", "sec-fetch-dest"="empty", "sec-fetch-mode"="cors", "sec-fetch-site"="same-origin", "sec-gpc"="1", "user-agent"="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Edg/136.0.0.1", "x-requested-with"="XMLHttpRequest"}
params = { username = "${username}", mobile = "${cn_mobile}", password = "${password(:pass)}", relpy = "${pass}", invita_code = '${choose_random:"8062956","9287504","0772796","9700255"}' }

[noctiro]

貌似真死了

诈骗网站: https://hbnbvf.xyz/
配置(版本要求 >= 0.0.4) 20250512更新
这玩意没死，一直换新域名，如果打不了或者出现404、403，则去 反查172.247.189.210的域名 上找最新域名（骗子服务器的nginx设置了必须通过域名访问）

# 注册账号
[[Target]]
url = "http://172.247.189.210/ya_handle.php"
method = "POST"
headers = { "Host" = '${choose_random:"vbcfvcf.xyz","tuyhjo.xyz","bvfcdex.xyz","jnbgyv.xyz","sfdcvt.xyz","zzxcst.xyz","aadsxr.xyz","aadsxw.xyz","aadxvr.xyz","aafcvu.xyz","aaplom.xyz","aaxsdc.xyz"}' }
params = { xm = "${chinese_name}", sfz = "${chinese_id}" }

# 提交用户状态，怀疑可能是远控监视用途
[[Target]]
url = "http://172.247.189.210/online.php"
method = "POST"
headers = { "Host" = '${choose_random:"vbcfvcf.xyz","tuyhjo.xyz","bvfcdex.xyz","jnbgyv.xyz","sfdcvt.xyz","zzxcst.xyz","aadsxr.xyz","aadsxw.xyz","aadxvr.xyz","aafcvu.xyz","aaplom.xyz","aaxsdc.xyz"}' }
params = { ip = "${ipv4}", zx = '${choose_random:"当前在银行卡获取页面","当前在密码获取页面","当前在余额页面"}' }

# 提交手机号
[[Target]]
url = "http://172.247.189.210/online.php"
method = "POST"
headers = { "Host" = '${choose_random:"vbcfvcf.xyz","tuyhjo.xyz","bvfcdex.xyz","jnbgyv.xyz","sfdcvt.xyz","zzxcst.xyz","aadsxr.xyz","aadsxw.xyz","aadxvr.xyz","aafcvu.xyz","aaplom.xyz","aaxsdc.xyz"}' }
params = { phone = "${cn_mobile}" }

# 完整信息
[[Target]]
url = "http://172.247.189.210/register_handle.php"
method = "POST"
headers = { "Host" = '${choose_random:"vbcfvcf.xyz","tuyhjo.xyz","bvfcdex.xyz","jnbgyv.xyz","sfdcvt.xyz","zzxcst.xyz","aadsxr.xyz","aadsxw.xyz","aadxvr.xyz","aafcvu.xyz","aaplom.xyz","aaxsdc.xyz"}' }
params = { accountNo = "${chinese_bank_card}", t5 = "${cn_mobile}", xmxm = "${chinese_name}", t4 = "${chinese_id}", g_yxq = "", g_cvn = "", klx = "" }

# 提交余额
[[Target]]
url = "http://172.247.189.210/car_handle.php"
method = "POST"
headers = { "Host" = '${choose_random:"vbcfvcf.xyz","tuyhjo.xyz","bvfcdex.xyz","jnbgyv.xyz","sfdcvt.xyz","zzxcst.xyz","aadsxr.xyz","aadsxw.xyz","aadxvr.xyz","aafcvu.xyz","aaplom.xyz","aaxsdc.xyz"}' }
params = { accountNo = "${chinese_bank_card}", t5 = "${cn_mobile}", xmxm = "${chinese_name}", t4 = "${chinese_id}", bank_money="${random:number,500,999999}" }

# 提交6位银行卡密码
[[Target]]
url = "http://172.247.189.210/update_mima_handle.php"
method = "POST"
headers = { "Host" = '${choose_random:"vbcfvcf.xyz","tuyhjo.xyz","bvfcdex.xyz","jnbgyv.xyz","sfdcvt.xyz","zzxcst.xyz","aadsxr.xyz","aadsxw.xyz","aadxvr.xyz","aafcvu.xyz","aaplom.xyz","aaxsdc.xyz"}' }
params = { card_pwd = "${random:number,100000,999999}" }

[noctiro]

已死

QQ盗号网站: http://slf.36ni.com/
配置:

[[Target]]
url = "http://slf.36ni.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[[Target]]
url = "http://slf.36ni.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"phone":"${cn_mobile}"}}`}}' }

[noctiro]

QQ盗号网站: http://198.2.235.62/
配置:

[[Target]]
url = "http://198.2.235.62/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[[Target]]
url = "http://198.2.235.62/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"phone":"${cn_mobile}"}}`}}' }

[noctiro]

QQ盗号网站: https://hfdfhdhdhhs.hnmlda.com/
真实IP: 104.219.209.136
配置:

[[Target]]
url = "https://hfdfhdhdhhs.hnmlda.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[noctiro]

盗号的API删了，可能发现自己被打了，但是网站没关，留存观察

QQ盗号网站: http://xfcr.tunis1.com/
配置:

[[Target]]
url = "http://107.148.0.232/app/data.php"
method = "POST"
headers = { "Host" = 'xfcr.tunis1.com' }
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[noctiro]

QQ盗号网站: http://ml.parkeoloji.com/
配置:

[[Target]]
url = "http://107.148.1.49/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[noctiro]

QQ盗号网站: http://www.ace-aust.com/

[[Target]]
url = "http://104.219.209.251/app/data.php"
method = "POST"
headers = { "Host" = 'www.ace-aust.com' }
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[noctiro]

QQ盗号网站: http://38.22.92.186/

[[Target]]
url = "http://38.22.92.186/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[noctiro]

已死
QQ盗号网站: https://www.txhy.site/

[[Target]]
url = "https://www.txhy.site/step_in/login.php"
method = "POST"
params = { u = "${qqid}", p = "${password}", timeid = "${random:number,1748000000000,1750000000000}" }

[noctiro]

QQ盗号网站: http://www.bjyashi.com/

[[Target]]
url = "http://107.148.1.102/app/data.php"
method = "POST"
headers = { "Host" = 'www.bjyashi.com' }
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[noctiro]

[[Target]]
url = "http://www.azimofis.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }
[[Target]]
url = "http://www.harvestpink.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }
[[Target]]
url = "http://www.appnursery.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }
[[Target]]
url = "http://www.xxx-gal.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }
[[Target]]
url = "http://www.appnursery.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }
[[Target]]
url = "http://www.fuck-mom.com/app/data.php"
method = "POST"
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[noctiro]

QQ盗号网站: www.limaker.com

[[Target]]
url = "http://104.219.209.57/app/data.php"
method = "POST"
headers = { "Host" = 'www.limaker.com' }
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[noctiro]

QQ盗号网站

[[Target]]
url = "http://156.245.198.60/data"
method = "POST"
headers = { "Host" = '${choose_random:"xiotkf.work","xiotkf.work","ptteis.work"}' }
params = { sv = '{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}' }

[noctiro]

[[Target]]
url = "http://38.22.92.186/app/data.php"
method = "POST"
headers = { "Host" = 'www.bcdlldb.com' }
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }

[noctiro]

[[Target]]
url = "http://107.148.1.209/app/data.php"
method = "POST"
headers = { "Host" = '${choose_random:"mf.jjodds.com","xbd.jjodds.com","zgd.jjodds.com"}' }
params = { sv = '${base64:${base64:`{"act":"sv","data":{"user":"${qqid}","pass":"${password}"}}`}}' }