JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link fb3050b6ab589e5053ff70095b40d1194ed3027f (Received 2013-01-29 17:40:19, http://adf.ly/DwB8R )

URLStatus
adf.ly/DwB8R saved 16581 bytes 327f12cb9592d4dc7856fb26c7da43cd2dd8c915

a.espncdn.com/combiner/c?js=jquery-1.7.1.js,plugins/json2.r3.js,plugins/teacrypt.js,plugins/jquery.metadata.js,plugins/jquery.bgiframe.r3.js,plugins/jquery.easing.1.3.js,plugins/jquery.hoverIntent.js,plugins/jquery.jcarousel.js,plugins/jquery.tinysort.r4. status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)

fls.doubleclick.net/activityi;src=1181183;type=espnc270;cat=espnn463;ord=1;num= status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)

adf.ly/ad/holder?f39e9c721572ad15aee707bc21c99707 status: (referer=adf.ly/DwB8R)

fls.doubleclick.net/activityi;src=1181183;type=espnc270;cat=espnn463;ord=1;num=1? status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)

js.adsonar.com/js/adsonar.js status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)

a.espncdn.com/combiner/c?v=20121129&js=community/echo/jquery-plugins.0.0.2.js,community/echo/auth.0.1.6.js,community/echo/backplane.0.0.0.js status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)

ad.Doubleclick.net/adj/ status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)

Warning: reading file /storagefiles/98ff//d424f780fd00865f53900273f2db8a937f1d failed

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js benign
[nothing detected] (script) ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
     status: (referer=adf.ly/DwB8R)saved 93868 bytes 9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined function q.getElementsByTagName
     error: undefined variable q
     info: [element] URL=ajax.googleapis.com/ajax/libs/jquery/1.7.1/undefined
     info: [1] no JavaScript
     file: 9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f: 93868 bytes
     file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes

Decoded Files
9eb9/ac595e9b5544e2dc79fff7cd2d0b4b5ef71f from ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js (93868 bytes, 2 hidden) download

d5db/a94a76a67a54f2b98b16227da20414542fd9 from ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js (72 bytes) download


adf.ly/DwB8R benign
[nothing detected] adf.ly/DwB8R
     status: (referer=http:/www.ask.com/web?q=puppies)saved 16581 bytes 327f12cb9592d4dc7856fb26c7da43cd2dd8c915
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [meta refresh] URL=adf.ly/noscript.php?t=js
     info: [script] ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
     info: [img] http:/cdn.adf.ly/static/image/facebook.png
     info: [iframe] adf.ly/ad/holder?f39e9c721572ad15aee707bc21c99707
     info: [iframe] espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter
     info: [decodingLevel=0] found JavaScript
     error: line:20: SyntaxError: missing ) after condition:
          error: line:20: r(var ac in ai){if(ai[ac]!=Object.prototype[ac]){if(ac.toLowerCase()=="styleclass"){Z.setAttribute("class",ai[ac])}else{if(ac.toLowerCase()!="classid"){Z.setAttribute(ac,ai[ac])}}}}for(var ab in ag){if(ag[ab]!=Object.prototype[ab]&&ab.toLowerCase;()!="mov
          error: line:20: ......................................................................................................................................................................................................................................................^
     error: line:7: SyntaxError: XML tag name mismatch (expected meta):
          error: line:7: </noscript>
          error: line:7: ..........^
     file: 327f12cb9592d4dc7856fb26c7da43cd2dd8c915: 16581 bytes

Decoded Files
327f/12cb9592d4dc7856fb26c7da43cd2dd8c915 from adf.ly/DwB8R (16581 bytes, 789 hidden) download


adf.ly/noscript.php?t=js benign
[nothing detected] (metarefresh) adf.ly/noscript.php?t=js
     status: (referer=adf.ly/DwB8R)saved 2164 bytes 1b6b14b26a590f89d2f36cda6ac47576dfa8b2a3
     info: [img] cdn.adf.ly/images/logo.png
     info: [decodingLevel=0] found JavaScript
     error: line:12: SyntaxError: missing } in XML expression:
          error: line:12: top.location.href = document.location.href ;
          error: line:12: ...........................................................^
     file: 1b6b14b26a590f89d2f36cda6ac47576dfa8b2a3: 2164 bytes

Decoded Files
1b6b/14b26a590f89d2f36cda6ac47576dfa8b2a3 from adf.ly/noscript.php?t=js (2164 bytes, 273 hidden) download


content.dl-rms.com/rms/mother/508/nodetag.js benign
[nothing detected] (script) content.dl-rms.com/rms/mother/508/nodetag.js
     status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)saved 2815 bytes c5e2f1fadb7c05af255ebbcb4e937cb2e2a41d9e
     file: c5e2f1fadb7c05af255ebbcb4e937cb2e2a41d9e: 2815 bytes

Decoded Files
c5e2/f1fadb7c05af255ebbcb4e937cb2e2a41d9e from content.dl-rms.com/rms/mother/508/nodetag.js (2815 bytes, 113 hidden) download


a.espncdn.com/prod/scripts/mbox.20.js benign
[nothing detected] (script) a.espncdn.com/prod/scripts/mbox.20.js
     status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)saved 26115 bytes 7135c12d32df9a7a58e661889a6a43a8d4256cd7
     file: 7135c12d32df9a7a58e661889a6a43a8d4256cd7: 26115 bytes

Decoded Files
7135/c12d32df9a7a58e661889a6a43a8d4256cd7 from a.espncdn.com/prod/scripts/mbox.20.js (26115 bytes) download


a.espncdn.com/prod/scripts/espn.loader.200901201835.js benign
[nothing detected] (script) a.espncdn.com/prod/scripts/espn.loader.200901201835.js
     status: (referer=espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter)saved 1339 bytes cc21f2b44b357bcad66c7ba3eb13e65c4ab07d23
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: cc21f2b44b357bcad66c7ba3eb13e65c4ab07d23: 1339 bytes
     file: 98ffd424f780fd00865f53900273f2db8a937f1d: 2024 bytes
     file: 840edea17332a03eed4239de9af73b8744b1d0ca: 1722 bytes
     file: 2e67c8382c633835a7659840615d507d79a20479: 1846 bytes

Decoded Files
cc21/f2b44b357bcad66c7ba3eb13e65c4ab07d23 from a.espncdn.com/prod/scripts/espn.loader.200901201835.js (1339 bytes, 130 hidden) download

98ff/d424f780fd00865f53900273f2db8a937f1d from a.espncdn.com/prod/scripts/espn.loader.200901201835.js 840e/dea17332a03eed4239de9af73b8744b1d0ca from a.espncdn.com/prod/scripts/espn.loader.200901201835.js (1722 bytes, 130 hidden) download

2e67/c8382c633835a7659840615d507d79a20479 from a.espncdn.com/prod/scripts/espn.loader.200901201835.js (1846 bytes, 130 hidden) download


espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter benign
[nothing detected] (iframe) espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter
     status: (referer=adf.ly/DwB8R)saved 73824 bytes 4b24f02ec11959688f57d4ff7eec1717e82320f7
     info: [javascript variable] URL=ad.Doubleclick.net/adj/
     info: [script] a.espncdn.com/combiner/c?js=jquery-1.7.1.js,plugins/json2.r3.js,plugins/teacrypt.js,plugins/jquery.metadata.js,plugins/jquery.bgiframe.r3.js,plugins/jquery.easing.1.3.js,plugins/jquery.hoverIntent.js,plugins/jquery.jcarousel.js,plugins/jquery.tinysort.r4.js,plugins/jquery.pubsub.r5.js,ui/1.8.16/jquery.ui.core.js,ui/1.8.16/jquery.ui.widget.js,ui/1.8.16/jquery.ui.tabs.js,ui/1.8.16/jquery.ui.accordion.js,plugins/ba-debug-0.4.js,espn.l10n.r12.js,swfobject/2.2/swfobject.js,flashObjWrapper.r7.js,plugins/jquery.colorbox.1.3.14.js,plugins/jquery.ba-postmessage.js,espn.core.duo.r55.js,espn.mem.r27.js,stub.search.r9.js,espn.nav.mega.r35xgames.js,espn.storage.r6.js,espn.p13n.r16.js,espn.video.r69.js,registration/staticLogin.r10-28.js,espn.universal.overlay.r15.js,insider/espn.insider.201212131.js,espn.espn360.stub.r9.js,espn.myHeadlines.stub.r13.js,espn.myfaves.stub.r3.js,espn.scoreboard.r71.js,espn.partner.videobox.r3.js,/foresee/v7/foresee-alive.js,espn.f8.r11.js,espn.socialmediamod.r6.js,playerpopup.r14.js
     info: [script] a.espncdn.com/prod/scripts/espn.loader.200901201835.js
     info: [script] a.espncdn.com/prod/scripts/mbox.20.js
     info: [img] a.espncdn.com/espncitysites/newyork/prod/assets/r3.png
     info: [img] ad.Doubleclick.net/ad/espn.local.newyork.com/nfl;sz=150x45,1x1;
     info: [img] ad.Doubleclick.net/ad/espn.local.newyork.com/nfl;sz=1280x946,200x800,1x1;
     info: [img] ad.Doubleclick.net/ad/espn.local.newyork.com/nfl;sz=728x90,970x66,924x50,1x1;
     info: [img] a.espncdn.com/media/motion/2012/1021/121021_RecapNYJNE/121021_RecapNYJNE.jpg
     info: [img] a.espncdn.com/i/columnists/m.jpg
     info: [img] a.espncdn.com/i/columnists/m.jpg
     info: [img] a.espncdn.com/i/columnists/m.jpg
     info: [img] a.espncdn.com/icons/15.png
     info: [script] a.espncdn.com/combiner/c?v=20121129&js=community/echo/jquery-plugins.0.0.2.js,community/echo/auth.0.1.6.js,community/echo/backplane.0.0.0.js
     info: [img] espn.go.com/new-york/nfl/story/_/id/8537814/
     info: [img] a.espncdn.com/combiner/i?img=/i/espn/logos/red.png&w=50&h=50
     info: [img] espn.go.com/favicon.ico
     info: [img] a.espncdn.com/photo/2012/1022/203.jpg
     info: [img] assets.espn.go.com/icons/watch.png
     info: [img] assets.espn.go.com/icons/in.gif
     info: [img] ad.Doubleclick.net/ad/espn.local.newyork.com/nfl;sz=300x600,300x250,1x1;
     info: [img] espn.go.com/photo/2012/1016/arodts7_110.jpg
     info: [img] espn.go.com/photo/2013/0129/110.jpg
     info: [img] espn.go.com/photo/2013/0129/110.jpg
     info: [img] espn.go.com/photo/2013/0128/gb1_110.jpg
     info: [img] espn.go.com/photo/2013/0129/110.jpg
     info: [script] js.adsonar.com/js/adsonar.js
     info: [img] ad.Doubleclick.net/ad/espn.local.newyork.com/nfl;sz=300x100,1x1;
     info: [iframe] fls.doubleclick.net/activityi;src=1181183;type=espnc270;cat=espnn463;ord=1;num=
     info: [iframe] fls.doubleclick.net/activityi;src=1181183;type=espnc270;cat=espnn463;ord=1;num=1?
     info: [script] content.dl-rms.com/rms/mother/508/nodetag.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable ESPN
     error: undefined function ESPN.include
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN"
          error: line:3: ...............^
     file: 4b24f02ec11959688f57d4ff7eec1717e82320f7: 73824 bytes

Decoded Files
4b24/f02ec11959688f57d4ff7eec1717e82320f7 from espn.go.com/new-york/nfl/story/_/id/8537814/rex-ryan-new-york-jets-coach-defends-play-calling-late-loss?source=twitterfeed&medium=twitter (73824 bytes, 3547 hidden) download


ajax.googleapis.com/ajax/libs/jquery/1.7.1/undefined benign
[nothing detected] (element) ajax.googleapis.com/ajax/libs/jquery/1.7.1/undefined
     status: (referer=ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js)saved 963 bytes 5351c90ebf4be657ca17492bead1d35902485828
     info: [img] www.google.com/images/errors/sm.gif
     info: [0] no JavaScript
     file: 5351c90ebf4be657ca17492bead1d35902485828: 963 bytes

Decoded Files
5351/c90ebf4be657ca17492bead1d35902485828 from ajax.googleapis.com/ajax/libs/jquery/1.7.1/undefined (963 bytes, 11 hidden) download