JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 0b530b4f656c9c2705c1d1a24f8c8d482ef28663 (Received 2012-07-29 01:49:29, http://www.targetingnow.com/delivery )

URLStatus
www.targetingnow.com/delivery saved 1393 bytes bbe6476bc8228ed8b5546c4aa379613eb9dca371

openx.sexsearch.com/www/delivery/ajs.php?zoneid=1977&cb=86310765896&loc=[object Object] status: (referer=www.targetingnow.com/delivery)

All Malicious or Suspicious Elements of Submission

None
www.targetingnow.com/delivery benign
[nothing detected] www.targetingnow.com/delivery
     status: (referer=http:/twitter.com/trends/)saved 1393 bytes bbe6476bc8228ed8b5546c4aa379613eb9dca371
     info: [img] openx.sexsearch.com/www/delivery/avw.php?zoneid=1977&n=a4837835
     info: [decodingLevel=0] found JavaScript
     error: undefined variable delayer
     error: undefined function delayer
     info: [var m3_u] URL=openx.sexsearch.com/www/delivery/ajs.php
     info: [var newurl] URL=openx.sexsearch.com/www/delivery/ajs.php
     info: [script] openx.sexsearch.com/www/delivery/ajs.php?zoneid=1977&cb=86310765896&loc=%5Bobject%20Object%5D
     info: [decodingLevel=1] found JavaScript
     error: line:9: SyntaxError: missing ; before statement:
          error: line:9: <script type='text/javascript' src='http:/openx.sexsearch.com/www/delivery/ajs.php?zoneid=1977&amp;cb=86310765896&amp;loc=%5Bobject%20Object%5D'></script>
          error: line:9: .^
     file: bbe6476bc8228ed8b5546c4aa379613eb9dca371: 1393 bytes
     file: 408d793dd3e529c2c26aa77f9850ad316665db32: 349 bytes

Decoded Files
bbe6/476bc8228ed8b5546c4aa379613eb9dca371 from www.targetingnow.com/delivery (1393 bytes, 5 hidden) download

408d/793dd3e529c2c26aa77f9850ad316665db32 from www.targetingnow.com/delivery (349 bytes) download


ads.vs.com/_special/banners/im-frame.php?code= benign
[nothing detected] (script) ads.vs.com/_special/banners/im-frame.php?code=
     status: (referer=openx.sexsearch.com/www/delivery/ajs.php)saved 5838 bytes 9d8ce5424146ceb89b81dd904a38cfd58815f4d6
     info: [img] www.flirt4free.com/images/models/samples-120x90/686383.jpg
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=1] found JavaScript
     error: line:11: SyntaxError: missing } in XML expression:
          error: line:11: <style type="text/css">.content{ background-color:#FEFBF0; background-image:url(http:/ads.vs.com/_special/banners/images/im-popups/style-1/bg.gif); font-family:arial; font-size:12px; height:116px; position:absolute; width:201px; display: block; o
          error: line:11: ......................................................^
     file: 9d8ce5424146ceb89b81dd904a38cfd58815f4d6: 5838 bytes
     file: d77e310293e62332eb5bb4e777e0429a27c85755: 3601 bytes

Decoded Files
9d8c/e5424146ceb89b81dd904a38cfd58815f4d6 from ads.vs.com/_special/banners/im-frame.php?code= (5838 bytes, 485 hidden) download

d77e/310293e62332eb5bb4e777e0429a27c85755 from ads.vs.com/_special/banners/im-frame.php?code= (3601 bytes, 10 hidden) download


openx.sexsearch.com/www/delivery/ajs.php benign
[nothing detected] (var newurl) openx.sexsearch.com/www/delivery/ajs.php
     status: (referer=www.targetingnow.com/delivery)saved 690 bytes 6bf6737d5923bc6c869f20791b18cd3e03d5b9bc
     info: [decodingLevel=0] found JavaScript
     info: [var OX_5cc3dd78] URL=openx.sexsearch.com/www/delivery/
     info: [var newurl] URL=openx.sexsearch.com/www/delivery/
     info: [script] ads.vs.com/_special/banners/im-frame.php?code=
     info: [img] openx.sexsearch.com/www/delivery/lg.php?bannerid=18267&amp;campaignid=3395&amp;zoneid=0&amp;ids=,&amp;loc=http%3A%2F%2Fwww.targetingnow.com%2Fdelivery&amp;cb=1c4944215f
     info: [decodingLevel=1] found JavaScript
     error: line:6: SyntaxError: missing ; before statement:
          error: line:6: <script type="text/javascript" src="http:/ads.vs.com/_special/banners/im-frame.php?code= a71nu&service=guys&target=_blank&wait=1&style=im-video-default&load=1&creative=201x160-all-0001&width=201&height=160"></script><div id='1c4944215f' sty
          error: line:6: .................................................................................................................................................................................................................................^
     file: 6bf6737d5923bc6c869f20791b18cd3e03d5b9bc: 690 bytes
     file: 361e7c2bfc9566f3284f8b93ff066e1e1feffdb4: 1185 bytes

Decoded Files
6bf6/737d5923bc6c869f20791b18cd3e03d5b9bc from openx.sexsearch.com/www/delivery/ajs.php (690 bytes) download

361e/7c2bfc9566f3284f8b93ff066e1e1feffdb4 from openx.sexsearch.com/www/delivery/ajs.php (1185 bytes) download


openx.sexsearch.com/www/delivery/ benign
[nothing detected] (var newurl) openx.sexsearch.com/www/delivery/
     status: (referer=openx.sexsearch.com/www/delivery/ajs.php)saved 4752 bytes b8bca80f2e7857bbaa8547b9d578adf52ce45228
     info: [img] openx.sexsearch.com/icons/blank.gif
     info: [img] openx.sexsearch.com/icons/back.gif
     info: [img] openx.sexsearch.com/icons/unknown.gif
     info: [img] openx.sexsearch.com/icons/text.gif
     info: [0] no JavaScript
     file: b8bca80f2e7857bbaa8547b9d578adf52ce45228: 4752 bytes

Decoded Files
b8bc/a80f2e7857bbaa8547b9d578adf52ce45228 from openx.sexsearch.com/www/delivery/ (4752 bytes) download