中国海商法协会挂马页面:
安天防线2009拦截图:
挂马层次结构:
[wide]www.cmla.org.cn
[iframe]http://99j4.org/0.js
[iframe]http://8884.ss.la/4/google.htm
[iframe]http://8884.ss.la/4/ie7.htm
[iframe]http://8884.ss.la/4/search.htm
[script]http://8884.ss.la/4/google_ad.js
[iframe]http://8884.ss.la/4/cqqmp.htm
[script]http://8884.ss.la/4/cqqskin.css
[exe]http://fuck.ss.la/4.exe
[script]http://8884.ss.la/4/show.jpg
[script]http://8884.ss.la/4/shows.jpg
[script]http://8884.ss.la/4/google_ads.js
[iframe]http://8884.ss.la/4/ec1.htm
[script]http://8884.ss.la/4/ec4.js
[exe]http://fuck.ss.la/4.exe
[iframe]http://8884.ss.la/4/fyfl.htm
[iframe]http://8884.ss.la/4/ecof.htm
[script]http://8884.ss.la/4/off.css
[exe]http://fuck.ss.la/4.exe
[iframe]http://8884.ss.la/4/fydvd.htm
[iframe]http://8884.ss.la/4/fycry.htm
[script]http://8884.ss.la/4/cry.css
[exe]http://fuck.ss.la/4.exe
[script]http://8884.ss.la/4/google_adx.js
[iframe]http://8884.ss.la/4/cqq0.htm
[script]http://8884.ss.la/4/cqq2s.css
[script]http://8884.ss.la/4/cqq2.css
[exe]http://fuck.ss.la/4.exe
[iframe]http://8884.ss.la/4/ecb.htm
[iframe]http://8884.ss.la/4/ecbbb.htm
[script]http://8884.ss.la/4/ecfff.js
[exe]http://fuck.ss.la/4.exe
[iframe]http://8884.ss.la/4/fyr.htm
[script]http://8884.ss.la/4/rr.js
[iframe]http://8884.ss.la/4/evilr.htm
[script]http://8884.ss.la/4/evilrr.js
[exe]http://fuck.ss.la/4.exe
[iframe]http://8884.ss.la/4/fyre1.htm
[script]http://8884.ss.la/4/fyr1.js
[exe]http://fuck.ss.la/4.exe
[script]http://8884.ss.la/4/zz.js
[iframe]http://8884.ss.la/4/fylz.htm
[script]http://8884.ss.la/4/xxxxz.js
[exe]http://fuck.ss.la/4.exe
[iframe]http://8884.ss.la/4/ecfox.htm
[iframe]http://8884.ss.la/4/ecffx.htm
[script]http://8884.ss.la/4/ecfox.js
[exe]http://fuck.ss.la/4.exe
[script]http://8884.ss.la/4/music.js
[iframe]http://8884.ss.la/4/sfpf.htm
[iframe]http://8884.ss.la/4/ax.htm
[exe]http://8884.ss.la/4.exe
[iframe]http://www.sesesemml.cn/?9c569332
[iframe]http://a.mmzfc.cn/zz/a.htm?9c569332
[iframe]http://a.mmzfc.cn/zz/11.htm?9c569332
[iframe]http://ersyrt5h.7766.org/web/40/index.html
[script]http://ersyrt5h.7766.org/web/40/a.jpg
[exe]http://viper.8gcc.com/down/my/40.exe
[script]http://ersyrt5h.7766.org/web/40/c.jpg
[script]http://ersyrt5h.7766.org/web/40/d.css
[script]http://ersyrt5h.7766.org/web/40/e.jpg
[script]http://ersyrt5h.7766.org/web/40/f.css
[script]http://js.tongji.linezing.com/615056/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/615056//clickcollect.js
[script]http://js.tongji.linezing.com/1389409/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/1389409//clickcollect.js
[script]http://js.tongji.linezing.com/1389409/tongji.js
[script]http://js.tongji.linezing.com/615056/tongji.js
[iframe]http://fffsder.7766.org/htmlasp/imgasp/asp.html?z2
[iframe]http://a.ppmmoo.cn/tj.htm
[script]http://js.tongji.linezing.com/1344381/tongji.js
[script]http://tongji.linezing.com/clickmap/load_clickmap.html?r=+token+
[script]http://js.tongji.linezing.com/1344381//clickcollect.js
[script]http://count23.51yes.com/click.aspx?id=235810066&logo=12
[iframe]http://count23.51yes.com/sa.aspx?id=235810066 |
|