Load js hijacked recently wap end, open the page prompt open iQIYI, weibo, pay treasure to APP, such as: cross domain, using the HTTPS protocol, in domain name also doesn't work, change the server IP address doesn't work, 100% sure js code was hijacked, won't appear because the js code removed. Caught found that embedded iframe label in the h5 page, iframe SRC is to invoke the APP schema. The labels for the great spirit of action!