JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link fbec615268110059b1eaa53f8c16436cb8f75a52 (Received 2012-05-09 11:34:07, http://www.drtuber.com/tracker.php?target=player&click=1&url=1 )

URLStatus
www.drtuber.com/tracker.php?target=player&click=1&url=1 saved 333 bytes 91f897405d42e9174b6f1a5813df448fcb1f62f8

All Malicious or Suspicious Elements of Submission

None
www.drtuber.com/tracker.php?target=player&click=1&url=1 benign
[nothing detected] www.drtuber.com/tracker.php?target=player&click=1&url=1
     status: (referer=http:/twitter.com/trends/)saved 333 bytes 91f897405d42e9174b6f1a5813df448fcb1f62f8
     info: [meta refresh] URL=www.drtuber.com/th.php
     info: [decodingLevel=0] found JavaScript
     error: undefined variable document.urlform
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var document.urlform = 1;
          error: line:1: ....^
     error: line:9: SyntaxError: missing } in XML expression:
          error: line:9: document.urlform.submit();} </script> </head> <body onLoad="javascript:URL_Redirect()"> <form name="urlform" method="GET" action="http:/www.drtuber.com/th.php"></form></body></html>
          error: line:9: .........................^
     file: 91f897405d42e9174b6f1a5813df448fcb1f62f8: 333 bytes

Decoded Files
91f8/97405d42e9174b6f1a5813df448fcb1f62f8 from www.drtuber.com/tracker.php?target=player&click=1&url=1 (333 bytes) download


www.drtuber.com/th.php benign
[nothing detected] (metarefresh) www.drtuber.com/th.php
     status: (referer=www.drtuber.com/tracker.php?target=player&click=1&url=1)saved 104 bytes d8db1e3cbc36f49a59913e2488815a4fe45acac7
     info: [decodingLevel=0] found JavaScript
     error: line:3: TypeError: unknown XML entity n=nocookie&r='+escape(''):
          error: line:3: <parent xmlns=""><script>document.location = '/cgi-bin/traffic/process.fcgi?a=drtuber&n=nocookie&r='+escape('');</script></parent>
          error: line:3: .........................^
     file: d8db1e3cbc36f49a59913e2488815a4fe45acac7: 104 bytes

Decoded Files
d8db/1e3cbc36f49a59913e2488815a4fe45acac7 from www.drtuber.com/th.php (104 bytes) download