JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link ad2cc67dafa4ef427b073b98f0c01074fa9da1ad (Received 2013-05-18 07:55:03, http://oh-geri.fanfusion.org/ait68.html )

URLStatus
oh-geri.fanfusion.org/ait68.html saved 390 bytes 5a147a1dbd65409731a0f67efe44ab0b8b8bb6ac

www.abusedteenstube.com/ui/js/ status: (referer=www.abusedteenstube.com/ui/js/util.js)

www.abusedteenstube.com/ui/js/signup.js status: (referer=www.abusedteenstube.com/signupforms/js/signup.php)

www.abusedteenstube.com/ui/js/md.php?r= status: (referer=www.abusedteenstube.com/signupforms/js/signup.php)

www.abusedteenstube.com/ui/js/images/movies/player.swf status: (referer=www.abusedteenstube.com/ui/js/util.js)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
www.abusedteenstube.com/ui/js/jquery-126.js benign
[nothing detected] (script) www.abusedteenstube.com/ui/js/jquery-126.js
     status: (referer=www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup)saved 55749 bytes 81caf0769139a3f677fb982f64da433206163e10
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: invalid flag after regular expression:
          error: line:3: s,"form")?jQuery.makeArray(this.elements):this;}).filter(function(){return this.name&&!this.disabled&&(this.checked||/select|textarea/i.test(this.nodeName)||/text|hidden|password/i.test(this.type));}).map(function(i,elem){var val=jQuery(this).val();return
          error: line:3: ^
     file: 81caf0769139a3f677fb982f64da433206163e10: 55749 bytes

Decoded Files
81ca/f0769139a3f677fb982f64da433206163e10 from www.abusedteenstube.com/ui/js/jquery-126.js (55749 bytes) download


lecheniel.ru/robots2AT/bar/index.html benign
[nothing detected] (metarefresh) lecheniel.ru/robots2AT/bar/index.html
     status: (referer=oh-geri.fanfusion.org/ait68.html)saved 8168 bytes 9b6b72582a5315c312de74fe77e739e0f55f204d
     info: [javascript variable] URL=www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup
     info: [script] lecheniel.ru/robots2AT/bar/mobileredir.js
     info: [script] lecheniel.ru/robots2AT/bar/navaway.js
     info: [img] lecheniel.ru/robots2AT/bar/img/01_abusedteenstube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/02_exgirlfriendrevengetube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/03_free3dtubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/images/web.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/04_freemilftubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/05_teenpornxxxtube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/06_monstercockxxxtube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/07_cartoonxxxtube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/08_exgirlfriendscaptured.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/09_exgirlfriendtubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/10_freeamateurtubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/11_freeanaltubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/12_freeanimexxxtube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/13_freeasiansxxxtube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/14_freeblowjobxxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/15_freehardcoretubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/16_freehentaitubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/17_freelesbianxxxtube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/18_freepornstartubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/19_freetrannytubexxx.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/20_freshteenstube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/21_juicyteentube.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/22_3dmoviehub.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/23_lollesbians.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/24_yourgirlfriends.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/25_revengetv.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/26_pawnyoursextape.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/27_madporn.jpg
     info: [img] lecheniel.ru/robots2AT/bar/images/banner3.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/28_bustedonfilm.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/29_allblackgfs.jpg
     info: [img] lecheniel.ru/robots2AT/bar/img/30_hardcorejapanesegfs.jpg
     info: [img] img.stat-run.info/empty22.gif
     info: [decodingLevel=0] found JavaScript
     info: [var exurl] URL=www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup
     info: [var newurl] URL=www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup
     info: [decodingLevel=1] found JavaScript
     file: 9b6b72582a5315c312de74fe77e739e0f55f204d: 8168 bytes
     file: d5750a0e2bd9557550364c30b8aec0f0378d4e21: 185 bytes

Decoded Files
9b6b/72582a5315c312de74fe77e739e0f55f204d from lecheniel.ru/robots2AT/bar/index.html (8168 bytes, 411 hidden) download

d575/0a0e2bd9557550364c30b8aec0f0378d4e21 from lecheniel.ru/robots2AT/bar/index.html (185 bytes) download


www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup benign
[nothing detected] (var newurl) www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup
     status: (referer=lecheniel.ru/robots2AT/bar/index.html)saved 4608 bytes ac78ce91fa08db7b4b6b2d27be531f069d8868df
     info: [script] www.abusedteenstube.com/ui/js/jquery-126.js
     info: [script] www.abusedteenstube.com/signupforms/js/signup.php
     info: [img] www.abusedteenstube.com/signupforms/19_0/02.png
     info: [img] www.abusedteenstube.com/signupforms/19_0/r1.jpg
     info: [img] www.abusedteenstube.com/signupforms/19_0/r2.jpg
     info: [input] www.abusedteenstube.com/signupforms/19_0/21.png
     info: [img] www.abusedteenstube.com/signupforms/19_0/r3.jpg
     info: [img] www.abusedteenstube.com/signupforms/19_0/r4.jpg
     info: [img] www.abusedteenstube.com/signupforms/19_0/08.png
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE HTML PUBLIC "-/W3C/DTD HTML 4.01 Transitional/EN" "http:/www.w3.org/TR/html4/loose.dtd">
          error: line:3: ...............^
     file: ac78ce91fa08db7b4b6b2d27be531f069d8868df: 4608 bytes

Decoded Files
ac78/ce91fa08db7b4b6b2d27be531f069d8868df from www.abusedteenstube.com/track/aK8HAIGAgIAAEwAA/?d=signup (4608 bytes, 330 hidden) download