JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 2821587210332f6695d84a9fe20d5a5fad77ff5e (Received 2012-08-25 04:28:01, http://quizingen.net/d/p/c4e2n30801 )

URLStatus
quizingen.net/d/p/c4e2n30801 saved 470 bytes f727d94339e70b05257950cd176348ecd41d663f

All Malicious or Suspicious Elements of Submission

None
mysearchproperties.com/images/js/cs-mn.js?251208 benign
[nothing detected] (script) mysearchproperties.com/images/js/cs-mn.js?251208
     status: (referer=clicks.coolsearchnow.com/fly?q=Investment+In+Properties&enk=hslGmeaBZpGPiabjJuOmuUbBpuMmmYapB8HGsSbBj4GPoQ==)saved 217 bytes d04e02eaffd6bd7b8307a83083333fd85db0feb1
     info: [0] no JavaScript
     file: d04e02eaffd6bd7b8307a83083333fd85db0feb1: 217 bytes

Decoded Files
d04e/02eaffd6bd7b8307a83083333fd85db0feb1 from mysearchproperties.com/images/js/cs-mn.js?251208 (217 bytes) download


ww90.centralpropertysales.net/?framerequest=1 benign
[nothing detected] (metarefresh) ww90.centralpropertysales.net/?framerequest=1
     status: (referer=ww90.centralpropertysales.net/)saved 4398 bytes fb5483fb0f0b4b95f8dc4676ec60c04e32c36c6d
     info: [meta refresh] URL=clicks.coolsearchnow.com/fly?q=Investment+In+Properties&enk=hslGmeaBZpGPiabjJuOmuUbBpuMmmYapB8HGsSbBj4GPoQ==
     info: [script] ww90.centralpropertysales.net/
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
          error: line:3: ...............^
     file: fb5483fb0f0b4b95f8dc4676ec60c04e32c36c6d: 4398 bytes

Decoded Files
fb54/83fb0f0b4b95f8dc4676ec60c04e32c36c6d from ww90.centralpropertysales.net/?framerequest=1 (4398 bytes, 32 hidden) download


ww90.centralpropertysales.net/ benign
[nothing detected] (var newurl) ww90.centralpropertysales.net/
     status: (referer=quizingen.net/d/p/c4e2n30801)saved 1233 bytes 3ee84a5ba02249aacb7ae70013b6fc58f52953ea
     info: [meta refresh] URL=ww90.centralpropertysales.net/?framerequest=1
     info: [frame] ww90.centralpropertysales.net/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable window.location.search
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var window.location.search = 1;
          error: line:1: ....^
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
          error: line:3: ...............^
     file: 3ee84a5ba02249aacb7ae70013b6fc58f52953ea: 1233 bytes

Decoded Files
3ee8/4a5ba02249aacb7ae70013b6fc58f52953ea from ww90.centralpropertysales.net/ (1233 bytes, 42 hidden) download


clicks.coolsearchnow.com/js/sk.js?251208 benign
[nothing detected] (script) clicks.coolsearchnow.com/js/sk.js?251208
     status: (referer=clicks.coolsearchnow.com/fly?q=Investment+In+Properties&enk=hslGmeaBZpGPiabjJuOmuUbBpuMmmYapB8HGsSbBj4GPoQ==)saved 206 bytes 81f0cd7202f2a7344aa0f57aa04dfa6e5205d2e8
     info: [0] no JavaScript
     file: 81f0cd7202f2a7344aa0f57aa04dfa6e5205d2e8: 206 bytes

Decoded Files
81f0/cd7202f2a7344aa0f57aa04dfa6e5205d2e8 from clicks.coolsearchnow.com/js/sk.js?251208 (206 bytes) download


quizingen.net/d/p/c4e2n30801 benign
[nothing detected] quizingen.net/d/p/c4e2n30801
     status: (referer=http:/www.twitter.com/trends/)saved 470 bytes f727d94339e70b05257950cd176348ecd41d663f
     info: [meta refresh] URL=ww90.centralpropertysales.net
     info: [decodingLevel=0] found JavaScript
     info: [var location] URL=ww90.centralpropertysales.net
     info: [var newurl] URL=ww90.centralpropertysales.net
     info: [decodingLevel=1] found JavaScript
     file: f727d94339e70b05257950cd176348ecd41d663f: 470 bytes
     file: abe3b72852c62ad373f6be0c6829f53f3db6f469: 362 bytes

Decoded Files
f727/d94339e70b05257950cd176348ecd41d663f from quizingen.net/d/p/c4e2n30801 (470 bytes) download