回复: 网站不定时以网页形式给用户弹出“去哪儿”网站,求助。。
通过抓包工具分析,访问你的网站会定向到这里:
00:00:00.000 飞毯3D旅游网: 全球首家在线旅游的3D景点旅游社区
+ 0.000 4.243 439 31156 GET 200 text/html;charset=utf-8 http://www.3dlvyou.com/
+ 4.239 0.125 514 796 GET 302 Redirect to http://hub2.izptech.com/re/re.php?src=t0035&t=%E9%A3%9E%E6%AF%AF3D%E6%97%85%E6%B8%B8%E7%BD%91%3A%20%E5%85%A8%E7%90%83%E9%A6%96%E5%AE%B6%E5%9C%A8%E7%BA%BF%E6%97%85%E6%B8%B8%E7%9A%843D%E6%99%AF%E7%82%B9%E6%97%85%E6%B8%B8%E7%A4%BE%E5%8C%BA&ci=3673675772 http://211.144.95.196/re/re.php?src=t0035&t=%E9%A3%9E%E6%AF%AF3D%E6%97%85%E6%B8%B8%E7%BD%91%3A%20%E5%85%A8%E7%90%83%E9%A6%96%E5%AE%B6%E5%9C%A8%E7%BA%BF%E6%97%85%E6%B8%B8%E7%9A%843D%E6%99%AF%E7%82%B9%E6%97%85%E6%B8%B8%E7%A4%BE%E5%8C%BA&ci=3673675772
而http://211.144.95.196/re/re.php?src=t0035&t=%E9%A3%9E%E6%AF%AF3D%E6%97%85%E6%B8%B8%E7%BD%91%3A%20%E5%85%A8%E7%90%83%E9%A6%96%E5%AE%B6%E5%9C%A8%E7%BA%BF%E6%97%85%E6%B8%B8%E7%9A%843D%E6%99%AF%E7%82%B9%E6%97%85%E6%B8%B8%E7%A4%BE%E5%8C%BA&ci=3673675772
的内容为:
document.write("<script language='javascript' src='http://tstatic.izptech.com/re/ad/bc_321_pop.js'><\/script>");
bc_321_pop.js的内容见下图: