From my previous post, the culprit was really on the server.
It prepends an IFRAME pointing to Http://taobao69.blogcn.com/
BEWARE, because this one can steal SESSIONS saved in COOKIES for that site and they can use it to hijack your account.
I tried to check the domain, and it is a DEDICATED server somewhere in CHINA.


0 comments:
Post a Comment