این محتویات لینکی هست که دادین
<HTML><HEAD>
<meta http-equiv="content-type" content="text/html;charset=utf-8">
<meta http-equiv="pragma" content="no-cache">
<TITLE>Redirecting</TITLE>
<META HTTP-EQUIV="refresh" content="0; url=http://www.lovekaokaoni.cn/?webownerId=23339">
</HEAD>
<BODY onLoad="location.replace('http://www.lovekaokaoni.cn/?webownerId=23339')">
Loading...
</BODY></HTML>
و کد های پایین هم مربوط به صفحه ای هست که بهش ریدایرکت میشیم
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gbk" />
<title>考考你-范冰冰找茬</title>
<style type="text/css">
<!--
*{ margin:0px; padding:0px;}
body {
background: url(images/bg.gif) repeat;
line-height:120%;
font-size: 14px;
color: #000000;
}
.red{ color:red;}
.bold{ font-weight: bold}
a { color: #000; text-decoration:none;}
a:hover { color: #000; text-decoration: underline;}
a:visited { color: #000; text-decoration:none;}
.main{ width:1002px; margin:0px auto ;background:url(images/rr.gif) top right no-repeat;}
.top{ width:1002px; height:101px; background:url(images/top.gif) no-repeat;}
.midd{ float:left; width:787px; background: url(images/mbg.gif) top left repeat-y; padding:10px 100px 0px 115px;position:relative; overflow: hidden}
.midd h2{ width:100%; height: 60px;background:url(images/zhaocha.gif) no-repeat left;}
.mid_1{ text-align:center;}
.mid_2{ width:555px; height:270px; margin:15px auto; clear: both }
.mid_2lt{ width:252px; height:270px; float:left;}
.mid_2rt{ width:252px; height:270px; float:right;}
.mid_2lta{ float:left; margin-right:1px; margin-bottom:4px; width:127px;cursor: pointer;}
.mid_2ltax{ float:right; margin-bottom:4px;cursor: pointer;}
.mid_2ltb{ float:left; margin-right:1px;width:127px; cursor: pointer;}
.mid_2ltbx{ float:right; cursor: pointer;}
img { border:0;}
.clear{ clear:both;}
.bot{ width:747px; float:left; background:url(images/bot.gif) top left no-repeat; padding:100px 120px 10px 135px;}
div.select{ width: 787px; height: 25px; line-height:25px; clear: both; margin: 10px auto; text-align: center;}
-->
</style>
<script src="/js/q_main.js" type="text/javascript"></script>
<script type="text/javascript">
function checkAnswer(str) {
var myObj,msg="回答";
if(! (str == 1)){
msg=msg+"错误，您可以从第一个选项开始试试 ";
alert(msg);
return false;
}else {
alert('恭喜您，回答正确！即将抽奖！ 看您将抽到赢取哪一种奖品的机会.') ;
var paras = ['gopage='+gopage, 'webownerId='+webownerId, 'childid='+childid, 'id='+id, 'special='+special, 'siteurl='+siteurl];
var args = paras.join('&');
var gourl = '/index2.html?' + args;
window.location.href=gourl;
}
return false;
}
function checkform(obj) {
var answer = document.getElementsByName("RadioGroup1");
var myObj,msg="回答";
if(! (answer[1].checked)){
msg=msg+"错误，您可以从第一个选项开始试试 ";
alert(msg);
return false;
}else {
alert('恭喜您，回答正确！即将抽奖！ 看您将抽到赢取哪一种奖品的机会.') ;
var paras = ['gopage='+gopage, 'webownerId='+webownerId, 'childid='+childid, 'id='+id, 'special='+special, 'siteurl='+siteurl];
var args = paras.join('&');
var gourl = '/index2.html?' + args;
window.location.href=gourl;
}
return false;
}
function goPage3(){
var paras = ['gopage='+gopage, 'webownerId='+webownerId, 'childid='+childid, 'id='+id, 'special='+special, 'siteurl='+siteurl];
var args = paras.join('&');
var gourl = '/index_3.html?' + args;
window.location.href=gourl;
}
</script></head>
<body>
<div class="main">
<div class="top"></div>
<div class="midd">
<form id="send" name="send" method="get" onsubmit="return checkform(this);">
<h2></h2>
<div class="mid_2">
<div class="mid_2lt">
<span class="mid_2lta"><img src="images/t17a.gif" onClick="checkAnswer('2');" /></span>
<span class="mid_2ltax"><img src="images/t17b.gif" onClick="checkAnswer('1');" /></span>
<div class="clear"></div>
<span class="mid_2ltb"><img src="images/t17c.gif" onClick="checkAnswer('2');" /></span>
<span class="mid_2ltbx"><img src="images/t17d.gif" onClick="checkAnswer('2');" /></span>
</div>
<div class="mid_2rt">
<span class="mid_2lta"><img src="images/t17a.gif" onClick="checkAnswer('2');" /></span>
<span class="mid_2ltax"><img src="images/t17b2.gif" onClick="checkAnswer('1');" /></span>
<div class="clear"></div>
<span class="mid_2ltb"><img src="images/t17c.gif" onClick="checkAnswer('2');" /></span>
<span class="mid_2ltbx"><img src="images/t17d.gif" onClick="checkAnswer('2');" /></span>
</div>
</div>
<div class="select">
<label>
<input type="radio" name="RadioGroup1" value="单选" id="RadioGroup1_0" />
① </label>
<label>
<input type="radio" name="RadioGroup1" value="单选" id="RadioGroup1_1" />
② </label>
<label>
<input type="radio" name="RadioGroup1" value="单选" id="RadioGroup1_2" />
③ </label>
<label>
<input type="radio" name="RadioGroup1" value="单选" id="RadioGroup1_2" />
④ </label>
</div>
<div class="mid_1"><input type="image" src="images/submit.gif" /></div>
</form>
</div>
<iframe id="awardfrm" src="award.html?fee=2" width="1002" height="1320" scrolling="no" frameborder="0"></iframe>
</div>
</body>
</html>
و اینم کدهای اون فایل جاوا اسکریپتی که لود میشه
document.write("<style>ul{list-style:none;margin:0;padding:0;}</style>");
var indexPage="http://www.aiqianming.cn/index.htm?";
function GetLocationParam(param){
var request = {
QueryString : function(val) {
var s = location.href;
s = s.replace("?","?&").split("&");
var re = "";
for(i=1;i<s.length;i++)
if(s[i].indexOf(val+"=")==0)
re = s[i].replace(val+"=","");
return re;
}
}
if(param=="serviceId"){
if(request.QueryString(param)=="")return "100008";
}
if(param=="webownerId"){
if(request.QueryString(param)=="")return "10001";
}
if(param=="childid"){
if(request.QueryString(param)=="")return "10000";
}
if(param=="id"){
if(request.QueryString(param)=="")return "888888";
}
if(param=="ordertype"){
if(request.QueryString(param)=="")return "0";
}
if(param=="gotype"){
if(request.QueryString(param)==""){
return "";
}
}
if(param=="gopage"){
if(request.QueryString(param)==""){
return "2";
}
}
if(param=="special"){
if(request.QueryString(param)==""){
return "0";
}
}
if(param=="cross"){
if(request.QueryString(param)==""){
return "0";
}
}
if(param=="siteurl"){
var url = request.QueryString(param);
if(url=="") {
if(document.referrer) {
url = document.referrer;
} else if(window.opener && window.opener.location){
try{url = window.opener.location.href}catch(e){url = "";}
}
if(url=="")
url = "http://"+location.host+location.pathname;
}
try{var re = /http[^\?]+/i; url = url.match(re)}catch(e){}
return url;
}
return request.QueryString(param);
}
var webownerId=GetLocationParam("webownerId");
var serviceId = 100008;
var childid = GetLocationParam("childid");
var id = GetLocationParam("id");
var ordertype = GetLocationParam("ordertype");
var gopage = GetLocationParam("gopage");
var special = GetLocationParam("special");
var mobileid = GetLocationParam("mobile");
var name = GetLocationParam("name");
//var fee = GetLocationParam("fee");
var cross = GetLocationParam("cross");
var siteurl = GetLocationParam("siteurl");
var globalparas = ['gopage='+gopage, 'webownerId='+webownerId, 'childid='+childid, 'id='+id, 'special='+special, 'cross='+cross, 'siteurl='+siteurl];
var ref = "";
if(document.referrer) {
ref = document.referrer;
} else if(window.opener && window.opener.location){
try{ref = window.opener.location.href}catch(e){ref = "opener";}
}
var nref = location.href;
//if(nref.indexOf("index_") != -1 || nref.indexOf("submit.jsp") != -1) {
//if (ref == "" && special!=1){
//location.href="/error.html";
//}
//}
function isPhone(phone){
var pr = /^1[3|5|8]([0-9]{1})([0-9]{8})$/;
return pr.test(phone)
}
function isCHName(astr){
var lst = /^[\u4E00-\u9FA5]{2,4}$/;
return lst.test(astr);
}
function ToIndexWindow(){
var paras = ['id='+id, 'webownerId='+webownerId, 'childid='+childid, 'siteurl='+siteurl];
var args = paras.join('&');
var urlStr= indexPage + args;
var t=window.open(urlStr);
t.focus();
}
var to = "12590642123";
var result = "";
function showResult()
{
if(webownerId!="" && webownerId.length>0)
{
if(webownerId=="14964")
to = "125906421230";
else if(webownerId=="23196")
to = "125906421231";
else if(webownerId=="220848")
to = "12590642123";
else if(webownerId=="12068")
to = "125906421233";
else if(webownerId=="23502")
to = "125906421235";
else if(webownerId=="620848")
to = "12590642123";
else if(webownerId=="15359")
to = "125906421237";
else if(webownerId=="23577")
to = "125906421239";
else if(webownerId=="18112")
to = "1259064212300";
else if(webownerId=="116051" || webownerId=="216051")
to = "125906421230";
else if (webownerId=="15359")
to = "125906421238";
}
result = to + webownerId;
var res = " ";
res = res+result.substring(0,5)+" ";
res = res+result.substring(5,10)+" ";
res = res+result.substring(10);
return res;
}
function show()
{
var result = document.getElementById("result");
result.innerHTML = showResult();
}
کدی توش ندیدم که مشکوک باشه
بعید میدونم کی لاگر باشه
باقی دوستان هم نظر بدن ...