JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link ad2cc67dafa4ef427b073b98f0c01074fa9da1ad (Received 2013-05-18 07:55:03, http://oh-geri.fanfusion.org/ait68.html )

URLStatus
oh-geri.fanfusion.org/ait68.html saved 390 bytes 5a147a1dbd65409731a0f67efe44ab0b8b8bb6ac

www.abusedteenstube.com/ui/js/ status: (referer=www.abusedteenstube.com/ui/js/util.js)

www.abusedteenstube.com/ui/js/signup.js status: (referer=www.abusedteenstube.com/signupforms/js/signup.php)

www.abusedteenstube.com/ui/js/md.php?r= status: (referer=www.abusedteenstube.com/signupforms/js/signup.php)

www.abusedteenstube.com/ui/js/images/movies/player.swf status: (referer=www.abusedteenstube.com/ui/js/util.js)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
www.abusedteenstube.com/ui/js/jquery-126.js benign
[nothing detected] (script) www.abusedteenstube.com/ui/js/jquery-126.js
     status: (referer=www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup)saved 55749 bytes 81caf0769139a3f677fb982f64da433206163e10
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: invalid flag after regular expression:
          error: line:3: s,"form")?jQuery.makeArray(this.elements):this;}).filter(function(){return this.name&&!this.disabled&&(this.checked||/select|textarea/i.test(this.nodeName)||/text|hidden|password/i.test(this.type));}).map(function(i,elem){var val=jQuery(this).val();return
          error: line:3: ^
     file: 81caf0769139a3f677fb982f64da433206163e10: 55749 bytes

Decoded Files
81ca/f0769139a3f677fb982f64da433206163e10 from www.abusedteenstube.com/ui/js/jquery-126.js (55749 bytes) download


lecheniel.ru/robots2AT/bar/index.html benign
[nothing detected] (metarefresh) lecheniel.ru/robots2AT/bar/index.html
     status: (referer=oh-geri.fanfusion.org/ait68.html)saved 8168 bytes 9b6b72582a5315c312de74fe77e739e0f55f204d
     info: [javascript variable] URL=www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup
     info: [script] lecheniel.ru/robots2AT/bar/mobileredir.js
     info: [script] lecheniel.ru/robots2AT/bar/navaway.js
     info: [img] lecheniel.ru/robots2AT/bar/img/01_abusedteenstube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/02_exgirlfriendrevengetube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/03_free3dtubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/images/web.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/04_freemilftubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/05_teenpornxxxtube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/06_monstercockxxxtube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/07_cartoonxxxtube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/08_exgirlfriendscaptured.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/09_exgirlfriendtubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/10_freeamateurtubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/11_freeanaltubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/12_freeanimexxxtube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/13_freeasiansxxxtube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/14_freeblowjobxxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/15_freehardcoretubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/16_freehentaitubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/17_freelesbianxxxtube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/18_freepornstartubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/19_freetrannytubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/20_freshteenstube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/21_juicyteentube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/22_3dmoviehub.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/23_lollesbians.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/24_yourgirlfriends.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/25_revengetv.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/26_pawnyoursextape.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/27_madporn.jpg
     info: [img] lecheniel.ru/robots2AT/bar/images/banner3.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/28_bustedonfilm.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/29_allblackgfs.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/30_hardcorejapanesegfs.jpg
     info: [img] img.stat-run.info/empty22.gif
     info: [decodingLevel=0] found JavaScript
     info: [var exurl] URL=www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup
     info: [var newurl] URL=www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup
     info: [decodingLevel=1] found JavaScript
     file: 9b6b72582a5315c312de74fe77e739e0f55f204d: 8168 bytes
     file: d5750a0e2bd9557550364c30b8aec0f0378d4e21: 185 bytes

Decoded Files
9b6b/72582a5315c312de74fe77e739e0f55f204d from lecheniel.ru/robots2AT/bar/index.html (8168 bytes, 411 hidden) download

d575/0a0e2bd9557550364c30b8aec0f0378d4e21 from lecheniel.ru/robots2AT/bar/index.html (185 bytes) download


www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup benign
[nothing detected] (var newurl) www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup
     status: (referer=lecheniel.ru/robots2AT/bar/index.html)saved 4608 bytes ac78ce91fa08db7b4b6b2d27be531f069d8868df
     info: [script] www.abusedteenstube.com/ui/js/jquery-126.js
     info: [script] www.abusedteenstube.com/signupforms/js/signup.php
     info: [img] www.abusedteenstube.com/signupforms/19_0/02.png
     info: [img] www.abusedteenstube.com/signupforms/19_0/r1.jpg
     info: [img] www.abusedteenstube.com/signupforms/19_0/r2.jpg
     info: [input] www.abusedteenstube.com/signupforms/19_0/21.png
     info: [img] www.abusedteenstube.com/signupforms/19_0/r3.jpg
     info: [img] www.abusedteenstube.com/signupforms/19_0/r4.jpg
     info: [img] www.abusedteenstube.com/signupforms/19_0/08.png
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE HTML PUBLIC "-/W3C/DTD HTML 4.01 Transitional/EN" "http:/www.w3.org/TR/html4/loose.dtd">
          error: line:3: ...............^
     file: ac78ce91fa08db7b4b6b2d27be531f069d8868df: 4608 bytes

Decoded Files
ac78/ce91fa08db7b4b6b2d27be531f069d8868df from www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup (4608 bytes, 330 hidden) download


ajax.googleapis.com/ajax/libs/jquery/1.4.4/undefined benign
[nothing detected] (element) ajax.googleapis.com/ajax/libs/jquery/1.4.4/undefined
     status: (referer=ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js)saved 963 bytes b23fa4d738a8d5a66f51c79b7dd003fa6a4068ef
     info: [img] www.google.com/images/errors/sm.gif
     file: b23fa4d738a8d5a66f51c79b7dd003fa6a4068ef: 963 bytes

Decoded Files
b23f/a4d738a8d5a66f51c79b7dd003fa6a4068ef from ajax.googleapis.com/ajax/libs/jquery/1.4.4/undefined (963 bytes, 11 hidden) download


lecheniel.ru/robots2AT/bar/mobileredir.js benign
[nothing detected] (script) lecheniel.ru/robots2AT/bar/mobileredir.js
     status: (referer=lecheniel.ru/robots2AT/bar/index.html)saved 905 bytes fa53266c03a464465550be85e2df0753768a1067
     info: [decodingLevel=0] found JavaScript
     file: fa53266c03a464465550be85e2df0753768a1067: 905 bytes

Decoded Files
fa53/266c03a464465550be85e2df0753768a1067 from lecheniel.ru/robots2AT/bar/mobileredir.js (905 bytes, 44 hidden) download


www.abusedteenstube.com/signupforms/js/signup.php benign
[nothing detected] (script) www.abusedteenstube.com/signupforms/js/signup.php
     status: (referer=www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup)saved 23788 bytes 341ee740e7525f4df399fe3c8778c24157604dbb
     info: [script] www.abusedteenstube.com/ui/js/jquery-126.js
     info: [script] www.abusedteenstube.com/ui/js/util.js
     info: [script] www.abusedteenstube.com/ui/js/md.php?r=
     info: [script] www.abusedteenstube.com/ui/js/signup.js
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/033.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/209.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/185.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/137.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/223.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/149.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/147.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/187.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/186.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/127.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/144.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/183.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/114.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/011.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/060.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/214.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/157.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/179.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/008.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/159.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/189.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/235.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/165.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/113.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/245.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/228.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/064.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/229.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/172.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/164.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/129.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/206.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/066.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/199.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/194.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/111.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/004.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/051.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/160.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/075.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/010.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/061.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/026.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/071.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/022.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/102.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/143.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/076.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/236.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/040.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/213.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/121.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/247.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/140.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/073.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/145.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/089.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/193.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/081.jpg
     info: [img] www.abusedteenstube.com/signupforms/js/images/small/151.jpg
     info: [img] www.abusedteenstube.com/ui/images/rta/def.png
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html>
          error: line:3: ..............^
     file: 341ee740e7525f4df399fe3c8778c24157604dbb: 23788 bytes

Decoded Files
341e/e740e7525f4df399fe3c8778c24157604dbb from www.abusedteenstube.com/signupforms/js/signup.php (23788 bytes, 2614 hidden) download


oh-geri.fanfusion.org/ait68.html benign
[nothing detected] oh-geri.fanfusion.org/ait68.html
     status: (referer=http:/www.ask.com/web?q=puppies)saved 390 bytes 5a147a1dbd65409731a0f67efe44ab0b8b8bb6ac
     info: [meta refresh] URL=lecheniel.ru/robots2AT/bar/index.html
     info: [0] no JavaScript
     file: 5a147a1dbd65409731a0f67efe44ab0b8b8bb6ac: 390 bytes

Decoded Files
5a14/7a1dbd65409731a0f67efe44ab0b8b8bb6ac from oh-geri.fanfusion.org/ait68.html (390 bytes, 244 hidden) download


ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js benign
[nothing detected] (element) ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js
     status: (referer=lecheniel.ru/robots2AT/bar/navaway.js)saved 78601 bytes b75990598ee8d3895448ed9d08726af63109f842
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined variable d.style
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var d.style = 1;
          error: line:1: ....^
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      147 bytes
     info: [element] URL=ajax.googleapis.com/ajax/libs/jquery/1.4.4/undefined
     file: b75990598ee8d3895448ed9d08726af63109f842: 78601 bytes
     file: 39966416ab73fd9345f656c7f570a449cab17000: 79129 bytes
     file: 856970df15bbb0cc248844c465fd3df0588df947: 147 bytes

Decoded Files
b759/90598ee8d3895448ed9d08726af63109f842 from ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js (78601 bytes) download

3996/6416ab73fd9345f656c7f570a449cab17000 from ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js (79129 bytes) download

8569/70df15bbb0cc248844c465fd3df0588df947 from ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js (147 bytes) download


www.abusedteenstube.com/ui/js/util.js benign
[nothing detected] (script) www.abusedteenstube.com/ui/js/util.js
     status: (referer=www.abusedteenstube.com/signupforms/js/signup.php)saved 12047 bytes dfe347a2260d4230ae13b214e673dc89be63da99
     info: [img] www.abusedteenstube.com/ui/js/
     info: [embed] www.abusedteenstube.com/ui/js/images/movies/player.swf
     info: [embed] www.abusedteenstube.com/ui/js/
     file: dfe347a2260d4230ae13b214e673dc89be63da99: 12047 bytes

Decoded Files
dfe3/47a2260d4230ae13b214e673dc89be63da99 from www.abusedteenstube.com/ui/js/util.js (12047 bytes, 655 hidden) download


lecheniel.ru/robots2AT/bar/navaway.js benign
[nothing detected] (script) lecheniel.ru/robots2AT/bar/navaway.js
     status: (referer=lecheniel.ru/robots2AT/bar/index.html)saved 2352 bytes 34df48019b0f25e43d46561be4417cbf5764a884
     info: [decodingLevel=0] found JavaScript
     error: undefined variable s
     info: [element] URL=ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js
     info: [1] no JavaScript
     file: 34df48019b0f25e43d46561be4417cbf5764a884: 2352 bytes
     file: c60571910ccaf5179779fad5143793d15d504b57: 129 bytes

Decoded Files
34df/48019b0f25e43d46561be4417cbf5764a884 from lecheniel.ru/robots2AT/bar/navaway.js (2352 bytes, 156 hidden) download

c605/71910ccaf5179779fad5143793d15d504b57 from lecheniel.ru/robots2AT/bar/navaway.js (129 bytes) download