hxxp://www.bupt.com ---- 直接连接到QQ群组服务？【正常】【已检测 by 疯狂的小鬼】

gbwzx

该网站标题为“2010,i see you!”
实在是很奇怪，数据什么的都在从*.qq.com传送
绑在这个域名上的IP有6个，全在佐治亚或华盛顿


求指教……

疯狂的小鬼

原始 - hxxp://www.bupt.com/
开始自动解析 - hxxp://www.bupt.com/
L1 - hxxp://qun.qq.com/air/
L2 - hxxp://qun.qq.com/god/m/js/loader.zh-cn.js
L2 - hxxp://s.qun.qq.com/god/m/css/frame.zh-cn.css?_=44698
L2 - hxxp://s.qun.qq.com/god/m/css/ui.zh-cn.css?_=44698
L2 - hxxp://s.qun.qq.com/god/m/css/edit.zh-cn.css?_=44698
L2 - hxxp://s.qun.qq.com/god/m/css/ie6.zh-cn.css?_=44698
L2 - hxxp://s.qun.qq.com/god/m/css/ie7.zh-cn.css?_=44698
L2 - hxxp://s.qun.qq.com/god/m/css/ie8.zh-cn.css?_=44698
L2 - hxxp://face7.qun.qq.com/cgi/svr/face/getface?type=1&uin=
L2 - hxxp://face1.qun.qq.com/cgi/svr/face/getface?type=4&fid=200
L3 - hxxp://qun.qq.com/god/m/js/uri;head.appendChild(script);return
L3 - hxxp://s.qun.qq.com/god/images/tagtips.png
L3 - hxxp://s.qun.qq.com/god/images/public/main_bg.gif)
L3 - hxxp://s.qun.qq.com/god/images/soso.png)
L3 - hxxp://s.qun.qq.com/god/images/page.gif)
L3 - hxxp://s.qun.qq.com/god/images/announce.gif)
L3 - hxxp://s.qun.qq.com/god/images/info.gif)
L3 - hxxp://s.qun.qq.com/god/images/public/header_input_bg.png)
L3 - hxxp://s.qun.qq.com/god/images/public/nav_bg.png)
L3 - hxxp://s.qun.qq.com/god/images/public/skin_top_all.jpg)
L3 - hxxp://s.qun.qq.com/god/images/point.png)
L3 - hxxp://s.qun.qq.com/god/images/page2.gif)
L3 - hxxp://s.qun.qq.com/god/images/navis-green.gif)
L3 - hxxp://s.qun.qq.com/god/images/actbot.gif)
L3 - hxxp://s.qun.qq.com/god/images/wcicon.gif)
L3 - hxxp://s.qun.qq.com/god/images/grade.jpg)
L3 - hxxp://s.qun.qq.com/god/images/info1.gif)
L3 - hxxp://s.qun.qq.com/god/images/impress/impressnew.gif)
L3 - hxxp://s.qun.qq.com/god/images/hotwcbtn.gif)
L3 - hxxp://s.qun.qq.com/god/images/impress/hotimg.gif)
L3 - hxxp://s.qun.qq.com/god/images/loading-img.gif)
L3 - hxxp://s.qun.qq.com/god/images/imgl.cur),auto}.rcur{cursor:url(hxxp://s.qun.qq.com/god/images/imgr.cur),auto}.fit730{-moz-box-shadow:2px
L3 - hxxp://s.qun.qq.com/god/images/updatexbg.gif)
L3 - hxxp://s.qun.qq.com/god/images/updatexicon.gif)
L3 - hxxp://s.qun.qq.com/god/images/grade.gif);background-repeat:no-repeat;vertical-align:center;position:relative;margin-top:4px}.rightLevelShow
L3 - hxxp://s.qun.qq.com/god/images/graffiti-bg.gif)
L3 - hxxp://s.qun.qq.com/god/images/player.gif)
L3 - hxxp://s.qun.qq.com/god/images/albumbg.png)
L3 - hxxp://s.qun.qq.com/god/images/newalbumbg.png)
L3 - hxxp://s.qun.qq.com/god/images/vote-app.png)
L3 - hxxp://s.qun.qq.com/god/images/info-blue.gif)
L3 - hxxp://s.qun.qq.com/god/images/share_icons.png)
L3 - hxxp://s.qun.qq.com/god/images/share_line.gif)
L3 - hxxp://s.qun.qq.com/god/images/share_icons.png);background-repeat:no-repeat}.share
L3 - hxxp://s.qun.qq.com/god/images/share-b-txt.png)
L3 - hxxp://s.qun.qq.com/god/images/share-b-exe.png)
L3 - hxxp://s.qun.qq.com/god/images/share-b-pdf.gif)
L3 - hxxp://s.qun.qq.com/god/images/ttl.png)
L3 - hxxp://s.qun.qq.com/god/images/downarrow.gif)
L3 - hxxp://s.qun.qq.com/god/images/dlclose.png)
L3 - hxxp://s.qun.qq.com/god/images/share_line.gif);background-repeat:repeat-x;background-position:left
L3 - hxxp://s.qun.qq.com/god/images/share-txt.gif)
L3 - hxxp://s.qun.qq.com/god/images/share-exe.gif)
L3 - hxxp://s.qun.qq.com/god/images/share-pdf.gif)
L3 - hxxp://s.qun.qq.com/god/images/share_upload_icons.gif);margin-right:4px}.uploadWindow
L3 - hxxp://s.qun.qq.com/god/images/boxy.gif)
L3 - hxxp://s.qun.qq.com/god/images/share_upload_icons.gif);background-repeat:no-repeat}.fileArea
L3 - hxxp://s.qun.qq.com/god/images/share_upload_process.gif);background-repeat:repeat-x;height:8px;overflow:hidden}.fileInfo
L3 - hxxp://s.qun.qq.com/god/images/ico_loading.gif
L3 - hxxp://s.qun.qq.com/god/images/ico_ft_upload.gif
L3 - hxxp://s.qun.qq.com/god/images/loading.gif
L3 - hxxp://s.qun.qq.com/god/images/ico_ft_upload_pause.gif
L3 - hxxp://s.qun.qq.com/god/images/ico_ft_upload_success.gif
L3 - hxxp://s.qun.qq.com/god/images/ico_ft_upload_error.gif
L3 - hxxp://s.qun.qq.com/god/images/ico_ft_upload_alert.gif
L3 - hxxp://s.qun.qq.com/god/images/pic_ft_process.gif
L3 - hxxp://s.qun.qq.com/god/images/ico_ft_pause.gif
L3 - hxxp://s.qun.qq.com/god/images/ico_ft_start.gif
L3 - hxxp://s.qun.qq.com/god/images/ico_ft_file_common.gif
L3 - hxxp://s.qun.qq.com/god/images/ico_ft_info_error.gif
L3 - hxxp://s.qun.qq.com/god/images/ico_ft_upload_success.gif)
L3 - hxxp://s.qun.qq.com/god/images/ico_ft_upload_alert.gif)
L3 - hxxp://s.qun.qq.com/god/images/ico_ft_upload_error.gif)
L3 - hxxp://s.qun.qq.com/god/images/dlarrow.gif)
L3 - hxxp://s.qun.qq.com/god/images/line.gif)
L3 - hxxp://s.qun.qq.com/god/images/pagenum.gif)
L3 - hxxp://s.qun.qq.com/god/images/create.gif)
L3 - hxxp://s.qun.qq.com/god/images/groups.jpg)
L3 - hxxp://s.qun.qq.com/god/images/loginline.png)
L3 - hxxp://s.qun.qq.com/god/images/searchico.gif)
L3 - hxxp://s.qun.qq.com/god/images/game.gif)
L3 - hxxp://s.qun.qq.com/god/images/gamebot.gif)
L3 - hxxp://s.qun.qq.com/god/images/admin/feedbg.png)
L3 - hxxp://s.qun.qq.com/god/images/admin/minibg.gif)
L3 - hxxp://s.qun.qq.com/god/images/admin/miniicon2.gif)
L3 - hxxp://s.qun.qq.com/god/images/admin/minicont-tuan.jpg)
L3 - hxxp://s.qun.qq.com/god/images/admin/minicont.jpg)
L3 - hxxp://s.qun.qq.com/god/images/admin/tab-t.jpg)
L3 - hxxp://s.qun.qq.com/god/images/admin/tab-dz.jpg)
L3 - hxxp://s.qun.qq.com/god/images/adduserline.gif)
L3 - hxxp://s.qun.qq.com/god/images/category.gif)
L3 - hxxp://s.qun.qq.com/god/images/ann.gif)
L3 - hxxp://s.qun.qq.com/god/images/ann.gif);background-position:3px
L3 - hxxp://s.qun.qq.com/god/images/preview.jpg)
L3 - hxxp://s.qun.qq.com/god/images/wenwen.gif)
L3 - hxxp://s.qun.qq.com/god/images/wenwen.gif);background-position:-6px
L3 - hxxp://s.qun.qq.com/god/images/talk.gif)
L3 - hxxp://s.qun.qq.com/god/images/talk4.gif)
L3 - hxxp://s.qun.qq.com/god/images/talk.jpg)
L3 - hxxp://s.qun.qq.com/god/images/talk3.gif)
L3 - hxxp://s.qun.qq.com/god/images/quot.jpg)
L3 - hxxp://s.qun.qq.com/god/images/fail.png)
L3 - hxxp://s.qun.qq.com/god/images/error-warning.jpg);left
L3 - hxxp://s.qun.qq.com/god/images/boxy.gif?44698)
L3 - hxxp://s.qun.qq.com/god/images/tipbg.png)
L3 - hxxp://s.qun.qq.com/god/images/good.gif)
L3 - hxxp://s.qun.qq.com/god/images/upload_success.gif)
L3 - hxxp://s.qun.qq.com/god/images/upload_error.gif)
L3 - hxxp://s.qun.qq.com/god/images/upload_cancel.gif)
L3 - hxxp://s.qun.qq.com/god/images/feed.gif)
L3 - hxxp://s.qun.qq.com/god/images/groupvip/group_vip.png)
L3 - hxxp://s.qun.qq.com/god/images/icons_vertical.gif)
L3 - hxxp://s.qun.qq.com/god/images/gamepag.gif)
L3 - hxxp://s.qun.qq.com/god/images/car/community_car_module.png)
L3 - hxxp://s.qun.qq.com/god/images/car/community_car_vertical.gif)
L3 - hxxp://s.qun.qq.com/god/images/car/logo.jpg);background-repeat:no-repeat}.cCarGoldClubCell
L3 - hxxp://s.qun.qq.com/god/images/car/community_car_horizontal.gif)
L3 - hxxp://s.qun.qq.com/god/images/vote-gray.gif)
L3 - hxxp://s.qun.qq.com/god/images/bg_li_sq.gif)
L3 - hxxp://s.qun.qq.com/god/images/share_upload_icons.gif);margin-right:4px}.hotImgViewBox
L3 - hxxp://s.qun.qq.com/god/images/bg_hotimg_t.gif)
L3 - hxxp://s.qun.qq.com/god/images/bg_hotimg_t2.gif)
L3 - hxxp://s.qun.qq.com/god/images/bg_hotimg_t3.gif)
L3 - hxxp://s.qun.qq.com/god/images/rookie/rookie_icons.gif)
L3 - hxxp://s.qun.qq.com/god/images/rookie/rookie_vertical.gif)
L3 - hxxp://s.qun.qq.com/god/images/vote-block.gif)
L3 - hxxp://s.qun.qq.com/god/images/vote-block2.gif)
L3 - hxxp://s.qun.qq.com/god/images/vote-retline.gif)
L3 - hxxp://s.qun.qq.com/god/images/vote-arrow.gif)
L3 - hxxp://s.qun.qq.com/god/images/line02.gif)
L3 - hxxp://s.qun.qq.com/god/images/litegame/game_icons.jpg)
L3 - hxxp://s.qun.qq.com/god/images/litegame/box_bg_vertical.gif)
L3 - hxxp://s.qun.qq.com/god/images/litegame/box_bg_horizotal.gif)
L3 - hxxp://s.qun.qq.com/god/images/sl/sel_qun_bg1.gif);z-index:2000;display:none}.slMain
L3 - hxxp://s.qun.qq.com/god/images/sl/sel_qun_bg2.gif);z-index:2}.slPartOnePadder{background:url(hxxp://s.qun.qq.com/god/images/sl/sl_frame.gif)
L3 - hxxp://s.qun.qq.com/god/images/sl/sel_qun_bg3.gif);position:relative;top:-6px;left:-6px;z-index:2}.slPartTwoBg2
L3 - hxxp://s.qun.qq.com/god/images/sl/sl_pre_btn2.gif);width:111px;height:31px;margin:0
L3 - hxxp://s.qun.qq.com/god/images/sl/sl_bg1.gif)}.slPartThreePadder{height:100%;width:100%;background:url(hxxp://s.qun.qq.com/god/images/sl/sl_frame.gif)
L3 - hxxp://s.qun.qq.com/god/images/sl/sel_qun_bg1.gif);position:relative}.slListPadder{position:absolute;width:309px;height:363px;right:9px;bottom:9px}.slListBg{position:absolute;z-index:1;background:
L3 - hxxp://s.qun.qq.com/god/images/sl/sel_qun_line.gif)
L3 - hxxp://s.qun.qq.com/god/images/sl/sl_pre_btn1.gif)
L3 - hxxp://s.qun.qq.com/god/images/sl/tip_bg.gif);z-index:2001}.slTipBg{height:181px;background:url(hxxp://s.qun.qq.com/god/images/sl/tip.gif)
L3 - hxxp://s.qun.qq.com/god/images/public/nav_bg.png)}.navLeft,.navRight{width:4px;height:100%;background-repeat:no-repeat}.navLeft{float:left;margin-right:-4px}.navRight{float:right;margin-left:-4px}.navMiddle{margin:0
L3 - hxxp://s.qun.qq.com/god/images/public/nav_icons_bg.png);background-repeat:no-repeat}.skinBlue
L3 - hxxp://s.qun.qq.com/god/images/public/nav_icons.png?3);cursor:pointer;position:absolute}.navMiddle
L3 - hxxp://s.qun.qq.com/god/images/public/nav_title_main.png)
L3 - hxxp://s.qun.qq.com/god/images/public/nav_skin_tip_bg.png)
L3 - hxxp://s.qun.qq.com/god/images/tagtips.png)
L3 - hxxp://s.qun.qq.com/god/images/bgbtn.gif)
L3 - hxxp://s.qun.qq.com/god/images/embedcode_example.png)
L3 - hxxp://s.qun.qq.com/god/images/embedcode.gif)
L3 - hxxp://s.qun.qq.com/god/images/joingroup/searchico.gif)
L3 - hxxp://s.qun.qq.com/god/images/superQQ.png)
L3 - hxxp://s.qun.qq.com/god/images/ad-bg.gif)
L3 - hxxp://s.qun.qq.com/god/images/qun-qqlive.jpg?v=1)
L3 - hxxp://s.qun.qq.com/god/images/qun-qqlive-btn.jpg?v=1)
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/ui-bg_highlight-hard_100_f9f9f9_1x100.png)
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/ui-bg_highlight-soft_100_e7eef3_1x100.png)
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/ui-bg_glass_50_99c2ff_1x400.png)
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/ui-bg_glass_55_fbf5d0_1x400.png)
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/ui-bg_glass_95_fef1ec_1x400.png)
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/ui-icons_222222_256x240.png)}.ui-widget-content
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/ui-icons_222222_256x240.png)}.ui-widget-header
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/ui-icons_72a7cf_256x240.png)}.ui-state-default
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/ui-icons_888888_256x240.png)}.ui-state-active
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/ui-icons_ffffff_256x240.png)}.ui-state-highlight
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/ui-icons_2e83ff_256x240.png)}.ui-state-error
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/ui-icons_cd0a0a_256x240.png)}.ui-icon-carat-1-n{background-position:0
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/ui-bg_diagonals-thick_15_444444_40x40.png)
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/ui-bg_diagonals-small_0_aaaaaa_40x40.png)
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/close.gif);cursor:pointer}.ui-dialog
L3 - hxxp://s.qun.qq.com/god/images/ui/cupertino/button.gif)
L3 - hxxp://s.qun.qq.com/god/images/suc.png)
L3 - hxxp://s.qun.qq.com/god/images/page.gif) - 跳过 - 重复检测
L3 - hxxp://s.qun.qq.com/god/images/logger.gif)
L3 - hxxp://s.qun.qq.com/god/images/boxy.gif?44698) - 跳过 - 重复检测
L3 - hxxp://s.qun.qq.com/god/images/tipbg.png - 跳过 - 重复检测
L3 - hxxp://s.qun.qq.com/god/images/ground.png
L3 - hxxp://s.qun.qq.com/god/images/public/nav_icons.png - 跳过 - 重复检测
L3 - hxxp://s.qun.qq.com/god/images/public/nav_skin_tip_bg.png - 跳过 - 重复检测
L3 - hxxp://s.qun.qq.com/god//g/nothing.txt)
L3 - hxxp://s.qun.qq.com/god/images/vote-block.gif) - 跳过 - 重复检测
L3 - hxxp://s.qun.qq.com/god/images/vote-block2.gif) - 跳过 - 重复检测
L3 - hxxp://s.qun.qq.com/god/images/public/nav_input_bg.gif);background-repeat:no-repeat;width:246px;height:31px}.headerBlue
L3 - hxxp://s.qun.qq.com/god//images/page.gif)
L3 - hxxp://s.qun.qq.com/god//images/page.gif) - 跳过 - 重复检测


此分析日志由 疯狂的小鬼 使用 ********在 2011年5月14日1时47分18秒 生成。

没看出什么可疑的

幸福的猪猪

1. <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN"
   
2. "http://www.w3.org/TR/html4/frameset.dtd">
   
3. <html>
   
4. <head>
   
5. <title>2010,i see you!</title>
   
6. <META NAME="Keywords" CONTENT="2010">
   
7. <META NAME="Description" CONTENT="2010">
   
8. </head>
   
9.         <frameset frameborder="0" framespacing="0" border="0" rows="100%,*">
   
10.             <frame name="MYTOPFRAME" src="http://qun.qq.com/air/#4693540" noresize>
    
11.             <noframes>
    
12.                        <body>
    
13.            <h1>2010,i see you!</h1>
    
14.            2010<br>
    
15.            2010<br>
    
16.            <br>
    
17.            Click here to enter <a href="http://qun.qq.com/air/#4693540">http://qun.qq.com/air/#4693540</a>
    
18.            <hr>
    
19. | Domain Name Registration and Domain Name Forwarding by <a href="http://www.mydomain.com">mydomain.com - Register your domain name</a>
    
20.         </body>
    
21.             </noframes>
    
22.         </frameset>
    
23. </html>

复制代码

网页原代码。（那个站点使用的是虚拟主机提供商的域名）

访问相关QQ域名：

gbwzx

嗯，上面的分析基本懂了，问题是为啥搞这么个类似镜像的东西……

ryota

直接就进去了， 有cookies被盗的风险。

shangsrshui

进去了， 金山 毒霸 +卫士 无反应！