Found a phishing site, and study

SONY Camera today inquiries MTS format conversion, and, occasionally, into a phishing site, Google search to, and also discharged to the first

This is the URL

Into the page there is no problem, close the browser after reading a sudden jump to a new window

Found a phishing site, and study

This is the URL of the phishing site

Began to analyze the website (http://www.ieeye.com/post/SONY-MTS.html), found three suspicious JS, (http://www.ieeye.com/script/common.js; http : / / www.vzhan.cn / i.js; http://js.tongji.linezing.com/796146/tongji.js), there is still a JS as follows:

<script type="text/javascript">
u_a_client = "4001";
u_a_width = "0";
u_a_height = "0";
u_a_zones = "15059";
u_a_type = "1";
</ Script>

Find the three JS files and found the contents of the reference I.js:

Found a phishing site, and study

Some combination of the string is (http://www.vzhan.cn/show.php?z_uid=4001&zoneid=15059), click on this address will appear

var tT_Zyads_Url = 'http://www.vzhan.cn/iclk/?s=NDUzNDAyfHx8eHh8fHx8fHx8fDEyNzE0MzM2OTd8MTI0LjIzNS4yNDYuMjMyfDYwfGNwbXx0dHw0MDAxfDUyOHwxNTA1OQ ==; 8011ce17921d7bfe319e0386f5c2ae2e; http% 3A% 2F% 2F98.126.57.53% 2F'; var tT_zoneids = '15059 '; var tT_width = '0 '; var tT_height = '0'; document.write ('');

Again extracted URL link:

http://www.vzhan.cn/iclk/?s=NDUzNDAyfHx8eHh8fHx8fHx8fDEyNzE0MzM2OTd8MTI0LjIzNS4yNDYuMjMyfDYwfGNwbXx0dHw0MDAxfDUyOHwxNTA1OQ ==; 8011ce17921d7bfe319e0386f5c2ae2e; http% 3A% 2F% 2F98.126.57.53% 2F

Haha, the original initiator of this site is the secret

Found a phishing site, and study


Found a phishing site, and study

whois information I will not put up, sleep, a good storm

分类:Internet 时间:2010-04-17 人气:202
分享到:
blog comments powered by Disqus

相关文章

iOS 开发

Android 开发

Python 开发

JAVA 开发

开发语言

PHP 开发

Ruby 开发

搜索

前端开发

数据库

开发工具

开放平台

Javascript 开发

.NET 开发

云计算

服务器

Copyright (C) codeweblog.com, All Rights Reserved.

CodeWeblog.com 版权所有 黔ICP备15002463号-1

processed in 0.245 (s). 12 q(s)