JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 30c81d6ddf05884f75aa1002ef498af9aec630df (Received 2010-03-07 15:07:30, isalonproducts.com/index.html )

URLStatus
isalonproducts.com/index.html saved 19305 bytes to fetch_08e2f1095e435b64e89e0dd7a85594e7e3fad81d

onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru:/ failure: nonnumeric port: ''

iner.kz/index2.php saved 20004 bytes to fetch_2e39c51bc53810452faaed633552bf2955fda2ee

onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru:8080/booking.com/booking.com/nate.com/google.com.sa/google.com.php saved 956 bytes to fetch_d7d8a6b9cf77101f2eca2fe6427a0feef0c8bf34

iner.kz/intoLeap.swf failure: HTTP Error 404: Not Found

onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru/ saved 29806 bytes to fetch_5d08ebfa3759eca7732c8552f7940bcc069859b7

iner.kz/formStill.pdf failure: HTTP Error 404: Not Found

www.netvibes.com/js/UWA/load.js.php?env=BlogWidget2 saved 7321 bytes to fetch_36740cb5b381700d074d1f3e75b665e4df254b85

onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru/./styles/ff1c/template/fn.js failure: HTTP Error 404: Not Found

onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru/./styles/ff1c/template/styleswitcher.js failure: HTTP Error 404: Not Found

onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru/./styles/ff1c/template/pngfix.js failure: HTTP Error 404: Not Found

cdn.netvibes.com/ saved 49309 bytes to fetch_b3b085d5981f6b46eb9ed72b6809d55d20e62c43

cdn.netvibes.com/js/c/ModuleList.js?v=291 saved 29554 bytes to fetch_292153ac59ab8dbcb26aa2e0fe4dd14c7dc6c745

cdn.netvibes.com/js/c/Netvibes.feedproxy.js?v=935 saved 959600 bytes to fetch_56b74463b9b35c6a1ffc6491ba2d82b3c46fa403

mixme.mediaibox.com.br/ failure: <urlopen error timed out>

www.lefigaro.fr/monfigaro/ saved 354 bytes to fetch_3fc5ca941749b87f8f196e1c4754315f5c4792a9

my.daemon-tools.cc/ failure: <urlopen error (-2, 'Name or service not known')>

faq.netvibes.com/troubleshooting/problems?s=cookie saved 51155 bytes to fetch_e28de9d1be90f1ccfa07c622357ad930745b573b

www.varsityfanclub.com/main/ saved 673 bytes to fetch_227f20a4ff87de7c4c4a6e8c3b85eb5b408eef48

home.sweetim.com/ saved 3250 bytes to fetch_b8f66010088d95e19dbbdcef1e23b55d7573e59d

www.air-traffic.co.uk/ saved 3222 bytes to fetch_43bfba97d5b0c87e6da4d4f7f2defb75a3c53efd

www.mygsp.ro/ saved 5124 bytes to fetch_3003e2275125403c53fc5320e623381a6c09c306

www.samsung.com/ledtvstudio/ saved 195 bytes to fetch_176adec4f2ca7ed484d6bc86395b0909f1f4aca3

www.captaintheband.com/ saved 225 bytes to fetch_9714823aee8b95e863323c779cc92376f665c934

www.my.reganam.com/ saved 5280 bytes to fetch_b4e9e974d45a26802109f3db871cf4bd720eb437

www.santaanastar.com/nvmyhomepage/ saved 593 bytes to fetch_08cee1ddfa06ebc3cd2ef5ee411379a8b5ef9f62

www.sport24.com/tabs/flux/ failure: HTTP Error 403: Forbidden

ccclients.com/nv/ failure: HTTP Error 403: Forbidden

www.zebazar.com/ saved 22132 bytes to fetch_90cb88a32eb094f906ca27c99f1e34aa04fd277e

meu.ig.com.br/ saved 4598 bytes to fetch_a5593860388e01934544760f765aeaa77b8ff4d0

www.msf.fr/ saved 33084 bytes to fetch_137b302a395ec465937daf6b93cebadbff5396fd

cdn.netvibes.com/js/c/ failure: HTTP Error 404: Not Found

nyhetskanalen.se/common/netvibes/ saved 304993 bytes to fetch_f98059bc32b44a3bb378bf97bfce01d5b71c0702

mapage.diplomatie.gouv.fr/ saved 3847 bytes to fetch_3509497657496ce305c8d2b95bf6a2ae68aaac7b

fotbollskanalen.se/common/netvibes/ saved 255003 bytes to fetch_724905518dc821a5796c71552054736e8ee4e6b0

www.itv.com/documents/html/ saved 14135 bytes to fetch_9a32d25e910cacd3446cba9bb660866a0e796ccb

my.numericable.fr/ saved 173 bytes to fetch_1c98f11f3053c3f1a9c79017f73239091f0f0e6f

search.twitter.com/search?q=#$1 saved 7214 bytes to fetch_97731ee7a8f902c61a8a8d6286a883ed03edbcef

www.mesechos.fr/ saved 57607 bytes to fetch_80bdb9ba6fe0c0d678bd2f6d3f8420fd693fed54

www.thedailyinfluence.com/ saved 1152 bytes to fetch_56954a0faf4672e6b9056db8ad5f0a7f2cc46b40

www.place-medicale.pro/ failure: HTTP Error 403: Forbidden

www.bibliocnrs.fr/ saved 1825 bytes to fetch_2ff6fcb552726c99db4b40d5c426bdf6364c7523

cdn.netvibes.com/js/c/javascript:false; failure: HTTP Error 404: Not Found

start.tagged.com/ failure: <urlopen error (-2, 'Name or service not known')>

ahoratodoseune.netvibes.com/ failure: <urlopen error timed out>

www.vmn.net/ saved 10299 bytes to fetch_d533cf18a7e1830365bff7c63fc6ec516b5d3eaf

www.t-online.de/meine-seite/ failure: HTTP Error 404: Not Found

www.connectionsforlife.ubc.ca/ saved 14046 bytes to fetch_9b9aece38eba7d48cc620ce12c811a626c31e7fc

home.ez-tracks.com/ saved 4061 bytes to fetch_31381e8698d954e1864e48b49cad472d56f5e4b6

remix.startinglinerock.com/ saved 586 bytes to fetch_d7c69d837291162813cba93c1990527d1381f9d9

escritorio.unab.cl/ saved 2476 bytes to fetch_9a8446fa9ede2a3f4f908dfdc71e00dc834ef860

1/ failure: <urlopen error (22, 'Invalid argument')>

www.my24.ilsole24ore.com/ saved 9531 bytes to fetch_220fa148f6f45860fb2cb542b2f0703c76161f58

www.campusb.fr/ saved 15328 bytes to fetch_65e930146c1551c6a795f7c245afd4f9d04aa4e5

www.glasgowstudentaccommodation.co.uk/ saved 9166 bytes to fetch_c209c269ca506841b7ef7927986e1a6d79f40fed

twitter.com/$1 failure: HTTP Error 404: Not Found

catholic365.com/home/ saved 15026 bytes to fetch_db4e178b09b229bcfba6959bdcc04b948aab41a0

www9.seattle.gov/myseattle/ saved 1571 bytes to fetch_fd98e0f4d4b235dfe783c4d8780d43254f3f3289

cdn.netvibes.com/swf/ticker.swf saved 17830 bytes to fetch_946d63c63e55bfedb554c50d5e239cc4900a272f

www.cofidis.fr/commun/contenu/file/bibliosite/netvibes/ failure: HTTP Error 403: Forbidden

portal.som.com/ failure: <urlopen error (-2, 'Name or service not known')>

www.iot-portal.ie/ saved 12662 bytes to fetch_41be54783c968ed2427524ed373607df20cac880

www.vortexme.com/vortex/ saved 4277 bytes to fetch_62402b12813b3cbcff6e203c813dd774c9f809ff

All Malicious or Suspicious Elements of Submission

suspicious: DecodedIframe detected
my.numericable.fr/ benign
[nothing detected] (jsvar) my.numericable.fr/

Decoded Files
1c98/f11f3053c3f1a9c79017f73239091f0f0e6f from my.numericable.fr/ (173 bytes, 7 hidden) download


cdn.netvibes.com/js/c/ModuleList.js?v=291 benign
[nothing detected] (script) cdn.netvibes.com/js/c/ModuleList.js?v=291
     info: [decodingLevel=0] found JavaScript

Decoded Files
2921/53ac59ab8dbcb26aa2e0fe4dd14c7dc6c745 from cdn.netvibes.com/js/c/ModuleList.js?v=291 (29554 bytes) download


www.zebazar.com/ benign
[nothing detected] (jsvar) www.zebazar.com/
     info: [img .] www.zebazar.com/images/logo.gif
     info: [iframe http] c2.zedo.com/jsc/c2/ff2.html?n=408;c=28/27;w=468;h=60
     info: [script http] c2.zedo.com/jsc/c2/ff2.js
     info: [img http] xads.zedo.com/ads2/x?n=408;c=28/27;u=j;z=[timestamp]
     info: [script http] oz.valueclick.com/jsmaster
     info: [img .] www.zebazar.com/images/left.gif
     info: [img .] www.zebazar.com/images/middle.gif
     info: [img .] www.zebazar.com/images/right.gif
     info: [input .] www.zebazar.com/images/submit.gif
     info: [img .] www.zebazar.com/images/frame.gif
     info: [img .] www.zebazar.com/images/frame.gif
     info: [img .] www.zebazar.com/images/directory.gif
     info: [img .] www.zebazar.com/images/directory.gif
     info: [iframe http] c2.zedo.com/jsc/c2/ff2.html?n=408;c=27;s=9;d=4;w=120;h=60
     info: [img http] xads.zedo.com/ads2/x?n=408;c=27;s=9;x=1024;u=j;z=%r
     info: [iframe http] c2.zedo.com/jsc/c2/ff2.html?n=408;c=28/27;s=9;d=8;w=120;h=600
     info: [img http] xads.zedo.com/ads2/x?n=408;c=28/27;s=9;x=2048;u=j;z=%r
     info: [decodingLevel=0] found JavaScript

Decoded Files
90cb/88a32eb094f906ca27c99f1e34aa04fd277e from www.zebazar.com/ (22132 bytes, 1376 hidden) download


meu.ig.com.br/ benign
[nothing detected] (jsvar) meu.ig.com.br/
     info: [script http] images.ig.com.br/predicta/atm.js
     info: [img http] meuig.ig.atmo.predicta.com.br/atmo/cap/$s=215$jsv=0$un=
     info: [script .] meu.ig.com.br/js/login.js
     info: [script http] www.ig.com.br/paginas/home/barra/v8/igbarra.js
     info: [input .] meu.ig.com.br/images/bt-entrar.gif
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 151 bytes (532351db42462764debf3ae242d12fe71051fbc7)
     info: [var gaJsHost] URL=www.
     info: [script http] www.google-analytics.com/ga.js
     info: [decodingLevel=1] found JavaScript

Decoded Files
a559/3860388e01934544760f765aeaa77b8ff4d0 from meu.ig.com.br/ (4598 bytes, 411 hidden) download

5323/51db42462764debf3ae242d12fe71051fbc7 from meu.ig.com.br/ (151 bytes) download


www.my24.ilsole24ore.com/ benign
[nothing detected] (jsvar) www.my24.ilsole24ore.com/
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [script http] www.ilsole24ore.com/st/header/js/my24.js
     info: [script http] www.ilsole24ore.com/js2007/sole24.js
     info: [script http] www.ilsole24ore.com/js2006/banner.js
     info: [script http] www.ilsole24ore.com/js2006/sniffer2.js
     info: [script http] www.ilsole24ore.com/js2006/general.js
     info: [script http] www.my24.ilsole24ore.com/html/js/jacs.js
     info: [script http] www.ilsole24ore.com/st/header/js/a.js
     info: [img .] www.my24.ilsole24ore.com/images/my24.gif
     info: [img .] www.my24.ilsole24ore.com/images/pixel.gif
     info: [input .] www.my24.ilsole24ore.com/images/accedi.gif
     info: [img .] www.my24.ilsole24ore.com/images/my24.jpg
     info: [script http] www.ilsole24ore.com/st/header/js/footer1024.js
     info: [script http] secure-it.imrworldwide.com/v52.js
     info: [img http] secure-it.imrworldwide.com/cgi-bin/m?ci=ilsole-it&amp;cg=0
     info: [decodingLevel=0] found JavaScript

Decoded Files
220f/a148f6f45860fb2cb542b2f0703c76161f58 from www.my24.ilsole24ore.com/ (9531 bytes, 1801 hidden) download


www.msf.fr/ benign
[nothing detected] (jsvar) www.msf.fr/
     info: [script http] www.msf.fr/scripts/home.js
     info: [script http] www.msf.fr/scripts/AC_RunActiveContent.js
     info: [script http] www.msf.fr/scripts/AC_ActiveX.js
     info: [script http] www.msf.fr/scripts/menuleft.php
     info: [script http] www.msf.fr/scripts/ajax.js
     info: [script http] www.msf.fr/scripts/form.js
     info: [script http] www.msf.fr/scripts/boxphoto.js
     info: [script http] www.msf.fr/lib/jquery/jquery.js
     info: [script http] www.msf.fr/lib/jquery/jquery.jcarousel.pack.js
     info: [script http] www.synomia.fr/site-alert/integration/sitealert.js
     info: [script http] www.msf.fr/js/ajax/prototype.js
     info: [script http] www.msf.fr/js/ajax/scriptaculous.js
     info: [script http] www.msf.fr/js/xml.js
     info: [script http] www.msf.fr/js/stringbuilder.js
     info: [script http] www.msf.fr/js/photogallery.js
     info: [script http] www.msf.fr/scripts/tooltip.js
     info: [img .] www.msf.fr/images/logo.gif
     info: [img http] www.msf.fr/images/banner/1eps.gif
     info: [img http] www.msf.fr/images/banner/faireundon.gif
     info: [img .] www.msf.fr/images/buttons/button-world.gif
     info: [img .] www.msf.fr/images/buttons/recrutement.gif
     info: [img .] www.msf.fr/images/buttons/espace.gif
     info: [img .] www.msf.fr/images/buttons/soutenez.gif
     info: [img .] www.msf.fr/images/buttons/contacter.gif
     info: [img .] www.msf.fr/images/buttons/envoyer.gif
     info: [script .] www.msf.fr/scripts/AC_RunActiveContent.js
     info: [img .] www.msf.fr/images/flashnews/close.gif
     info: [img http] www.msf.fr/drive/522a3355e9ca822f94b9419503a540fd.gif
     info: [img http] www.msf.fr/drive/5d27d620f9283089d4f5afc4121fe104.gif
     info: [img http] www.msf.fr/drive/ae6ddbeccf506a86e0bba7aa25bee650.gif
     info: [img http] www.msf.fr/drive/d25640cd1586924f2da098016ecae28f.gif
     info: [img http] www.msf.fr/drive/21e90a2bca46d35b45b39488f94cab69.gif
     info: [img http] www.msf.fr/drive/5b8e974f404691b51583da86fda5d5eb.gif
     info: [img http] www.msf.fr/drive/f20aea80a96bff5b828ad44c583f2a04.gif
     info: [img http] www.msf.fr/drive/bbf8d129aa711c0701925b9a79c18e0b.jpg
     info: [img http] www.msf.fr/images/1europarsem.gif
     info: [img .] www.msf.fr/drive/ad4e880f1dc8ff183b88070bdf7d1f53.jpg
     info: [img .] www.msf.fr/images/icon/video.gif
     info: [img .] www.msf.fr/image.php?image=drive/8a53395047950ba95578a96ab27f19af.jpg&w=39&h=29
     info: [img .] www.msf.fr/drive/d29ba265d954cabd0c2daab6ae9dee4d.gif
     info: [img .] www.msf.fr/drive/fc3ccba738bc6c5a6ab87f527538d4be.gif
     info: [img .] www.msf.fr/images/home/06.gif
     info: [img .] www.msf.fr/images/home/07.gif
     info: [img .] www.msf.fr/images/home/08.gif
     info: [img .] www.msf.fr/drive/a5c2c6d7d7b8d77df3848bab52bb0937.gif
     info: [img .] www.msf.fr/drive/d79ac3ecc334afbde9cb5aa13ff3b250.gif
     info: [img .] www.msf.fr/drive/db695db2429eed808949fd72f1208ed1.gif
     info: [embed http] www.msf-tv.com/video/mini.swf
     info: [img http] www.msf.fr/images/adv/bandeau-expo.jpg
     info: [img http] www.msf.fr/images/adv/crash-home.jpg
     info: [img http] www.msf.fr/images/adv/ban-home-cc.jpg
     info: [img .] www.msf.fr/images/home/paysdintervention.gif
     info: [embed .] www.msf.fr/swf/map.swf
     info: [script http] www.msf.fr/xtclicks.js
     info: [script http] www.msf.fr/xtcore.js
     info: [img http] logi151.xiti.com/hit.xiti?s=355638&s2=1&p=&di=&
     info: [img http] ads.adviva.net/track/v=4;m=1;t=1639;ts=
     info: [decodingLevel=0] found JavaScript

Decoded Files
137b/302a395ec465937daf6b93cebadbff5396fd from www.msf.fr/ (33084 bytes, 2782 hidden) download


www.campusb.fr/ benign
[nothing detected] (jsvar) www.campusb.fr/
     info: [script http] www.campusb.fr/communaute/spip.php?page=jquery.js
     info: [script .] www.campusb.fr/plugins/Lmultimedia/soundmanager/soundmanager2.js
     info: [script .] www.campusb.fr/plugins/Lmultimedia/javascript/jscroller.js
     info: [script .] www.campusb.fr/plugins/Lmultimedia/enclosure.js
     info: [script http] www.campusb.fr/communaute/plugins/thickbox2/javascript/thickbox.js
     info: [img .] www.campusb.fr/local/cache-vignettes/L1039xH99/siteon0.jpg
     info: [img .] www.campusb.fr/IMG/png/cle-2.png
     info: [img .] www.campusb.fr/IMG/png/netvibes2-3.png
     info: [iframe /] www.campusb.fr/campusBPlayer/campusBPlayer.html
     info: [img .] www.campusb.fr/local/cache-vignettes/L110xH47/arton82-0d8c6.png
     info: [img .] www.campusb.fr/local/cache-vignettes/L91xH120/arton81-165e3.png
     info: [img .] www.campusb.fr/local/cache-vignettes/L110xH66/arton79-c29e0.jpg
     info: [img .] www.campusb.fr/local/cache-vignettes/L110xH48/arton78-60447.jpg
     info: [img .] www.campusb.fr/local/cache-vignettes/L110xH48/arton73-3f793.png
     info: [img .] www.campusb.fr/local/cache-vignettes/L110xH66/breveon11-b6761.jpg
     info: [img .] www.campusb.fr/local/cache-vignettes/L79xH120/breveon9-2a1e9.png
     info: [img .] www.campusb.fr/local/cache-vignettes/L84xH120/breveon7-6dd3f.png
     info: [img .] www.campusb.fr/local/cache-vignettes/L110xH110/breveon6-e8989.jpg
     info: [img .] www.campusb.fr/local/cache-vignettes/L110xH46/breveon10-2dbba.png
     info: [img .] www.campusb.fr/dist/feed.png
     info: [img .] www.campusb.fr/dist/spip.png
     info: [script http] www.google-analytics.com/urchin.js
     info: [decodingLevel=0] found JavaScript

Decoded Files
65e9/30146c1551c6a795f7c245afd4f9d04aa4e5 from www.campusb.fr/ (15328 bytes, 1151 hidden) download


www.lefigaro.fr/monfigaro/ benign
[nothing detected] (jsvar) www.lefigaro.fr/monfigaro/
     info: [meta refresh] URL=http:/www.lefigaro.fr/maune

Decoded Files
3fc5/ca941749b87f8f196e1c4754315f5c4792a9 from www.lefigaro.fr/monfigaro/ (354 bytes) download


www9.seattle.gov/myseattle/ benign
[nothing detected] (jsvar) www9.seattle.gov/myseattle/
     info: [javascript variable] URL=www.netvibes.com/partner/premium.php?universe=cos-pep-admin
     info: [iframe .] www9.seattle.gov/myseattle/resize.htm
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 273 bytes (331cde7db9eae01b10986b741d6cf5e6f9206f49)
     info: [var netvibesUrl] URL=www.netvibes.com/partner/premium.php?universe=cos-pep-admin&rnd=28115.082325007003
     info: [decodingLevel=1] found JavaScript

Decoded Files
fd98/e0f4d4b235dfe783c4d8780d43254f3f3289 from www9.seattle.gov/myseattle/ (1571 bytes, 39 hidden) download

331c/de7db9eae01b10986b741d6cf5e6f9206f49 from www9.seattle.gov/myseattle/ (273 bytes) download


onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru/ benign
[nothing detected] (var Th15cn) onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru/
     info: ObfuscationPattern detected location eval
     info: [script .] onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru/./styles/ff1c/template/styleswitcher.js
     info: [script .] onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru/./styles/ff1c/template/fn.js
     info: [script .] onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru/./styles/ff1c/template/pngfix.js
     info: [img .] onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru/./styles/ff1c/imageset/logo.png
     info: [img .] onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru/./styles/ff1c/imageset/latest.gif
     info: [script http] www.netvibes.com/js/UWA/load.js.php?env=BlogWidget2
     info: [img .] onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru/./cron.php?type=sessions&amp;sid=9a9b966892f3b2d8774836ceb7973577
     info: [decodingLevel=0] found JavaScript

Decoded Files
5d08/ebfa3759eca7732c8552f7940bcc069859b7 from onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru/ (29806 bytes, 2768 hidden) download


www.glasgowstudentaccommodation.co.uk/ benign
[nothing detected] (jsvar) www.glasgowstudentaccommodation.co.uk/
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/dojo1.2.3/dojo/dojo.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/event.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/viewport.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/tooltip.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/aux.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/hover.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/ie6fix.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/scripts/chatpopup.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/jquery.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/validator.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/loader.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/scripts.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/compressed.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/jquery.selectboxes.min.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/ui.core.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/thickbox.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/ui.dropdownchecklist.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/jquery.rightClick.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/jquery.idTabs.min.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/jquery.blockUI.js
     info: [script .] www.glasgowstudentaccommodation.co.uk/js/pngfix.js
     info: [decodingLevel=0] found JavaScript

Decoded Files
c209/c269ca506841b7ef7927986e1a6d79f40fed from www.glasgowstudentaccommodation.co.uk/ (9166 bytes, 490 hidden) download


nyhetskanalen.se/common/netvibes/ benign
[nothing detected] (jsvar) nyhetskanalen.se/common/netvibes/
     info: [javascript variable] URL=www.tv4play.se/nyheter/nyhetskanalen?videoId=1.1543421
     info: [javascript variable] URL=cdn01.tv4.se/fs/1.1098515.1247760136!image/3114013037.gen/derivatives/w219/3114013037.jpg
     info: [javascript variable] URL=www.tv4play.se/nyheter/nyhetskanalen?videoId=1.1542491
     info: [javascript variable] URL=cdn01.tv4.se/fs/1.1538103.1267615645!image/2658728236.gen/derivatives/w246/2658728236.jpg
     info: [javascript variable] URL=cdn01.tv4.se/fs/1.880028.1236247129!image/2936258583.gen/derivatives/w246/2936258583.jpg
     info: [script /] nyhetskanalen.se/news/js/var.js?v=1267612570
     info: [script /] nyhetskanalen.se/news/js/yui/yahoo/yahoo-min.js?v=1267612570
     info: [script /] nyhetskanalen.se/news/js/yui/connection/connection-min.js?v=1267612570
     info: [script /] nyhetskanalen.se/news/js/swfobject.js?v=1267612570
     info: [script /] nyhetskanalen.se/news/js/default.js?v=1267612570
     info: [script /] nyhetskanalen.se/news/js/ticker.js?v=1267612570
     info: [script /] nyhetskanalen.se/news/js/general-min.js
     info: [script /] nyhetskanalen.se/news/js/crawler.js?v=1267612570
     info: [script /] nyhetskanalen.se/news/js/NNRdavfunction-wmp.js
     info: [script /] nyhetskanalen.se/news/js/prototype/prototype.js?v=1267612570
     info: [script /] nyhetskanalen.se/news/js/prototype/prototype-extensions.js?v=1267612570
     info: [script /] nyhetskanalen.se/news/js/prototype/scriptaculous.js?load=effects,slider&amp;v=1267612570
     info: [script /] nyhetskanalen.se/news/js/prototype/effects.js?v=1267612570
     info: [script /] nyhetskanalen.se/news/js/prototype/slider.js?v=1267612570
     info: [script http] fusion.adtoma.com/script.js
     info: [script http] tv4.nuggad.net/rc?nuggn=1660617751&nuggsid=1714255814&nuggtg=artikel-nyheter
     info: [img /] nyhetskanalen.se/news/images/nyhetskanalen.gif
     info: [img http] cdn01.tv4.se/fs/1.380723!image/3424981592.jpg
     info: [img /] nyhetskanalen.se/news/images/tv4_nyhetskanalen.gif
     info: [img /] nyhetskanalen.se/fs/1.161227!slotImages/666431122.jpg
     info: [img /] nyhetskanalen.se/fs/1.161227!slotImages/997734615.jpg
     info: [img /] nyhetskanalen.se/fs/1.161227!slotImages/2812981268.jpg
     info: [img /] nyhetskanalen.se/fs/1.161227!slotImages/690079012.jpg
     info: [img /] nyhetskanalen.se/fs/1.161227!slotImages/3024390568.jpg
     info: [img /] nyhetskanalen.se/fs/1.911382!/ulrika.png
     info: [img http] cdn01.tv4.se/fs/1.1543324!picture/1344962170.gen/derivatives/w61/1344962170.jpg
     info: [img http] cdn01.tv4.se/fs/1.1541546!picture/1202413459.gen/derivatives/w61/1202413459.jpg
     info: [img http] cdn01.tv4.se/fs/1.1541068!picture/117928570.gen/derivatives/w61/117928570.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543332!picture/3611229016.gen/derivatives/w61/3611229016.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543422!picture/692884013.gen/derivatives/w90/692884013.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543421!picture/1486380334.gen/derivatives/w90/1486380334.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543423!picture/2496509947.gen/derivatives/w90/2496509947.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543424!picture/173732220.gen/derivatives/w90/173732220.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543427!picture/846212919.gen/derivatives/w90/846212919.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543282!picture/3974581444.gen/derivatives/w90/3974581444.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543364!picture/3224171415.gen/derivatives/w90/3224171415.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543366!picture/3926812201.gen/derivatives/w90/3926812201.jpg
     info: [img http] cdn01.tv4.se/fs/1.1300162.1256761189!image/15746568.gen/derivatives/w246/15746568.jpg
     info: [script http] static.ak.connect.facebook.com/js/lib/v0.4/FeatureLoader.js.php/SE
     info: [img http] cdn01.tv4.se/fs/1.1302156.1256830021!image/4244229546.gen/derivatives/w246/4244229546.jpg
     info: [img http] cdn01.tv4.se/fs/1.680954.1224507907!image/2756672886.gen/derivatives/w246/2756672886.jpg
     info: [img http] cdn01.tv4.se/fs/1.1287084.1256201495!image/3351935118.gen/derivatives/w246/3351935118.jpg
     info: [img http] cdn01.tv4.se/fs/1.680873.1224505330!image/3681230351.gen/derivatives/w246/3681230351.jpg
     info: [img http] cdn01.tv4.se/fs/1.1446706.1263808386!image/3238443960.gen/derivatives/w246/3238443960.jpg
     info: [img /] nyhetskanalen.se/fs/1.991277!image/4067607962.gen/derivatives/w246/4067607962.jpg
     info: [img /] nyhetskanalen.se/fs/1.1379812!image/1677086975.gen/derivatives/w246/1677086975.jpg
     info: [img /] nyhetskanalen.se/fs/1.901415!image/847760128.gen/derivatives/w246/847760128.jpg
     info: [img /] nyhetskanalen.se/fs/1.970120!image/2256267032.gen/derivatives/w246/2256267032.jpg
     info: [img http] cdn01.tv4.se/fs/1.383437.1208348323!image/4111868753.gen/derivatives/w450/4111868753.jpg
     info: [img /] nyhetskanalen.se/news/images/facebook.gif
     info: [img /] nyhetskanalen.se/news/images/print.gif
     info: [img /] nyhetskanalen.se/news/images/tip.gif
     info: [img /] nyhetskanalen.se/news/images/plus.gif
     info: [img /] nyhetskanalen.se/news/images/font.gif
     info: [img /] nyhetskanalen.se/news/images/minus.gif
     info: [img http] cdn01.tv4.se/fs/1.137260.1267983117!image/4263641834.gen/derivatives/w219/4263641834.jpg
     info: [img /] nyhetskanalen.se/fs/1.811792!image/4050216750.gen/derivatives/w450/4050216750.gif
     info: [script http] cdn01.tv4.se/tv4play/js/lib/swfobject.js
     info: [img /] nyhetskanalen.se/tv4play/img/text/noFlashText.gif
     info: [img /] nyhetskanalen.se/tv4play/img/button/downloadFlash.gif
     info: [img http] cdn01.tv4.se/fs/1.1543018.1267962304!image/794168865.gen/derivatives/w219/794168865.jpg
     info: [img /] nyhetskanalen.se/fs/1.173204!image/2812622691.gen/derivatives/w450/2812622691.png
     info: [img http] cdn01.tv4.se/fs/1.916427.1238394661!image/688455743.gen/derivatives/w219/688455743.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543314.1267973309!image/1320842263.gen/derivatives/w450/1320842263.jpg
     info: [img /] nyhetskanalen.se/fs/1.1110976!image/2411737169.gen/derivatives/w450/2411737169.gif
     info: [img http] cdn01.tv4.se/fs/1.1110953.1248754730!image/3055491536.gen/derivatives/w450/3055491536.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543288.1267968597!image/495844541.gen/derivatives/w450/495844541.jpg
     info: [img /] nyhetskanalen.se/fs/1.852168!image/2602441238.gen/derivatives/w450/2602441238.gif
     info: [img http] cdn01.tv4.se/fs/1.1541618.1267785310!image/2506060532.gen/derivatives/w219/2506060532.jpg
     info: [img http] cdn01.tv4.se/fs/1.1541640.1267785557!image/2383526639.gen/derivatives/w219/2383526639.jpg
     info: [img http] cdn01.tv4.se/fs/1.1541648.1267785693!image/248127364.gen/derivatives/w219/248127364.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543185.1267953715!image/1222275487.gen/derivatives/w450/1222275487.jpg
     info: [img /] nyhetskanalen.se/fs/1.291937!image/4198706343.gen/derivatives/w450/4198706343.gif
     info: [img http] cdn01.tv4.se/fs/1.1541507.1267781584!image/2213003132.gen/derivatives/w219/2213003132.jpg
     info: [img http] cdn01.tv4.se/fs/1.1541500.1267781337!image/626459030.gen/derivatives/w219/626459030.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543202.1267956363!image/3018737740.gen/derivatives/w219/3018737740.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542332.1267810131!image/972816501.gen/derivatives/w219/972816501.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542854.1267887466!image/1391107061.gen/derivatives/w450/1391107061.jpg
     info: [img http] cdn01.tv4.se/fs/1.1379802.1260193558!image/799961245.gen/derivatives/w219/799961245.jpg
     info: [img http] cdn01.tv4.se/fs/1.1535596.1267515709!image/866182083.gen/derivatives/w219/866182083.jpg
     info: [img http] cdn01.tv4.se/fs/1.1098515.1247760136!image/3114013037.gen/derivatives/w219/3114013037.jpg
     info: [img /] nyhetskanalen.se/fs/1.243840!image/1898088042.gen/derivatives/w450/1898088042.gif
     info: [img http] cdn01.tv4.se/fs/1.1542547.1267825044!image/262067911.gen/derivatives/w219/262067911.jpg
     info: [img http] cdn01.tv4.se/fs/1.1419084.1262106812!image/4103414840.gen/derivatives/w219/4103414840.jpg
     info: [img /] nyhetskanalen.se/fs/1.1233609!image/3543077779.gen/derivatives/w450/3543077779.gif
     info: [img /] nyhetskanalen.se/fs/1.1541976!image/3564780301.gen/derivatives/w450/3564780301.gif
     info: [img http] cdn01.tv4.se/fs/1.1542149.1267804551!image/3811617037.gen/derivatives/w450/3811617037.jpg
     info: [img /] nyhetskanalen.se/fs/1.800837!image/2074321898.gen/derivatives/w450/2074321898.gif
     info: [img http] cdn01.tv4.se/fs/1.1542225.1267806387!image/3945579084.gen/derivatives/w219/3945579084.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542230.1267806481!image/3413580355.gen/derivatives/w219/3413580355.jpg
     info: [img http] cdn01.tv4.se/fs/1.1541767.1267793689!image/3980181120.gen/derivatives/w219/3980181120.jpg
     info: [img http] cdn01.tv4.se/fs/1.1541587.1267784381!image/249679282.gen/derivatives/w450/249679282.jpg
     info: [img http] cdn01.tv4.se/fs/1.1541664.1267786051!image/91508400.gen/derivatives/w450/91508400.jpg
     info: [img http] cdn01.tv4.se/fs/1.541647.1216033857!image/1753560575.gen/derivatives/w246/1753560575.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543337.1267975860!image/2309793019.gen/derivatives/w246/2309793019.jpg
     info: [img /] nyhetskanalen.se/fs/1.1365240!image/40162386.gen/derivatives/w246/40162386.gif
     info: [img http] cdn01.tv4.se/fs/1.1543063.1267908118!image/3050609338.gen/derivatives/w246/3050609338.jpg
     info: [img /] nyhetskanalen.se/fs/1.816994!image/870557645.gen/derivatives/w246/870557645.gif
     info: [img http] cdn01.tv4.se/fs/1.1542914.1267896100!image/254502717.gen/derivatives/w246/254502717.jpg
     info: [img http] cdn01.tv4.se/fs/1.1520406.1266780342!image/1442440996.gen/derivatives/w246/1442440996.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543083.1267910237!image/1868731878.gen/derivatives/w246/1868731878.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542826.1267883738!image/3016515458.gen/derivatives/w246/3016515458.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542503.1267819694!image/2448565233.gen/derivatives/w246/2448565233.jpg
     info: [img /] nyhetskanalen.se/fs/1.816471!image/722785243.gen/derivatives/w246/722785243.gif
     info: [img http] cdn01.tv4.se/fs/1.1542522.1267822138!image/2011603178.gen/derivatives/w246/2011603178.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542037.1267802410!image/2691125222.gen/derivatives/w246/2691125222.jpg
     info: [img /] nyhetskanalen.se/fs/1.1361247!image/1859131249.gen/derivatives/w246/1859131249.gif
     info: [img http] cdn01.tv4.se/fs/1.1384308.1260349548!image/2985701651.gen/derivatives/w246/2985701651.jpg
     info: [img http] cdn01.tv4.se/fs/1.798182.1267798432!image/3593318019.gen/derivatives/w246/3593318019.jpg
     info: [img http] cdn01.tv4.se/fs/1.1541307.1267775567!image/2885382354.gen/derivatives/w246/2885382354.jpg
     info: [img http] cdn01.tv4.se/fs/1.1540902.1267738261!image/2266193496.gen/derivatives/w246/2266193496.jpg
     info: [img http] cdn01.tv4.se/fs/1.530564.1215175078!image/3468978543.gen/derivatives/w246/3468978543.jpg
     info: [img http] cdn01.tv4.se/fs/1.879319.1236202948!image/1429485624.gen/derivatives/w246/1429485624.jpg
     info: [img http] cdn01.tv4.se/fs/1.1540078.1267706363!image/412464269.gen/derivatives/w246/412464269.jpg
     info: [img http] cdn01.tv4.se/fs/1.720521.1226655127!image/3998252386.gen/derivatives/w246/3998252386.jpg
     info: [img http] cdn01.tv4.se/fs/1.1539806.1267695621!image/3081698724.gen/derivatives/w246/3081698724.jpg
     info: [img http] cdn01.tv4.se/fs/1.1539749.1267693978!image/1204579766.gen/derivatives/w246/1204579766.jpg
     info: [img http] cdn01.tv4.se/fs/1.1539226.1267656046!image/552982857.gen/derivatives/w246/552982857.jpg
     info: [img /] nyhetskanalen.se/fs/1.227189!image/3866789345.gen/derivatives/w246/3866789345.gif
     info: [img http] cdn01.tv4.se/fs/1.1539153.1267651911!image/2427210906.gen/derivatives/w246/2427210906.gif
     info: [img http] cdn01.tv4.se/fs/1.1539122.1267650609!image/4279178781.gen/derivatives/w246/4279178781.jpg
     info: [img http] cdn01.tv4.se/fs/1.1539045.1267646113!image/4098838423.gen/derivatives/w246/4098838423.jpg
     info: [img http] cdn01.tv4.se/fs/1.1538080.1267614504!image/1483828356.gen/derivatives/w246/1483828356.jpg
     info: [img http] cdn01.tv4.se/fs/1.1538103.1267615645!image/2658728236.gen/derivatives/w246/2658728236.jpg
     info: [img http] cdn01.tv4.se/fs/1.1537122.1267561776!image/771551094.gen/derivatives/w246/771551094.jpg
     info: [img http] cdn01.tv4.se/fs/1.1536301.1267537366!image/3662902614.gen/derivatives/w246/3662902614.jpg
     info: [img http] cdn01.tv4.se/fs/1.1537004.1267555641!image/1611696741.gen/derivatives/w246/1611696741.jpg
     info: [img http] cdn01.tv4.se/fs/1.1536983.1267553949!image/624916467.gen/derivatives/w246/624916467.jpg
     info: [img http] cdn01.tv4.se/fs/1.1536886.1267551258!image/1368357091.gen/derivatives/w246/1368357091.jpg
     info: [img http] cdn01.tv4.se/fs/1.1536069.1267530991!image/2517473549.gen/derivatives/w246/2517473549.jpg
     info: [img http] cdn01.tv4.se/fs/1.1527912.1267086601!image/3723809128.gen/derivatives/w246/3723809128.jpg
     info: [img http] cdn01.tv4.se/fs/1.1535033.1267473478!image/4220062598.gen/derivatives/w246/4220062598.jpg
     info: [img http] cdn01.tv4.se/fs/1.1535480.1267511309!image/2174925997.gen/derivatives/w246/2174925997.jpg
     info: [img http] cdn01.tv4.se/fs/1.1534752.1267461415!image/240491593.gen/derivatives/w246/240491593.jpg
     info: [img http] cdn01.tv4.se/fs/1.880028.1236247129!image/2936258583.gen/derivatives/w246/2936258583.jpg
     info: [img http] cdn01.tv4.se/fs/1.1268534.1255441096!image/2812739338.gen/derivatives/w246/2812739338.jpg
     info: [img http] cdn01.tv4.se/fs/1.1532460.1267300824!image/2286704082.gen/derivatives/w246/2286704082.jpg
     info: [img http] cdn01.tv4.se/fs/1.1532882.1267366879!image/2847011560.gen/derivatives/w246/2847011560.jpg
     info: [img .] nyhetskanalen.se/common/netvibes/
     info: [img /] nyhetskanalen.se/logger/p.gif?a=1.381857&amp;d=nyhetskanalen.se/nyheter&amp;referrer=http%3A%2F%2Fcdn.netvibes.com%2Fjs%2Fc%2FNetvibes.feedproxy.js%3Fv%3D935
     info: [script /] nyhetskanalen.se/news/scripts/v52.js
     info: [img http] secure-dk.imrworldwide.com/cgi-bin/m?ci=tv4n-se&amp;cc=1&amp;cg=artikel-nyheter
     info: [script http] panel1.research-int.se/RealMedia/ads/Creatives/RI/pixel/analytics.js
     info: [script .] nyhetskanalen.se/common/netvibes/
     info: [img http] panel1.research-int.se/RealMedia/ads/nx.ads/research-int.se/tv4_se/12345@TopRight?XE&amp;JSFLAG=noscript&amp;Sajt=tv4n-se&amp;Sektion=artikel-nyheter&amp;Undersektion1=&amp;Sida=&amp;Grupp1=tv4NyaMedier&amp;XE
     info: [script /] nyhetskanalen.se/news/js/linkpulse/lpAnyhetskanalense.js
     info: [decodingLevel=0] found JavaScript

Decoded Files
f980/59bc32b44a3bb378bf97bfce01d5b71c0702 from nyhetskanalen.se/common/netvibes/ (304993 bytes, 186757 hidden) download


faq.netvibes.com/troubleshooting/problems?s=cookie benign
[nothing detected] (jsvar) faq.netvibes.com/troubleshooting/problems?s=cookie
     info: [script /] faq.netvibes.com/lib/exe/js.php?edit=0&amp;write=0
     info: [img /] faq.netvibes.com/lib/tpl/faq/images/avatar-twitter.png
     info: [script http] twitter.com/javascripts/blogger.js
     info: [script http] twitter.com/statuses/timeline/netvibes.json?callback=twitterCallback2&amp;count=5
     info: [img /] faq.netvibes.com/lib/tpl/faq/images/subscribe.png
     info: [img /] faq.netvibes.com/lib/tpl/faq/images/rss.png
     info: [img /] faq.netvibes.com/_media/troubleshooting/vie-520_ffx.png?w=&amp;h=&amp;cache=cache
     info: [img /] faq.netvibes.com/_media/troubleshooting/safari.png?w=&amp;h=&amp;cache=cache
     info: [img http] cdn.netvibes.com/img/favicon-12.png
     info: [img http] cdn.netvibes.com/img/feed.png
     info: [img /] faq.netvibes.com/lib/exe/indexer.php?id=troubleshooting%3Aproblems&amp;1267983547
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 151 bytes (9b289a6af083d9c50514e6d76aa9be96616609c8)
     info: [var gaJsHost] URL=www.
     info: [script http] www.google-analytics.com/ga.js
     info: [decodingLevel=1] found JavaScript

Decoded Files
e28d/e9d1be90f1ccfa07c622357ad930745b573b from faq.netvibes.com/troubleshooting/problems?s=cookie (51155 bytes, 4327 hidden) download

9b28/9a6af083d9c50514e6d76aa9be96616609c8 from faq.netvibes.com/troubleshooting/problems?s=cookie (151 bytes) download


www.netvibes.com/js/UWA/load.js.php?env=BlogWidget2 benign
[nothing detected] (script) www.netvibes.com/js/UWA/load.js.php?env=BlogWidget2
     info: [javascript variable] URL=cdn.netvibes.com
     info: [javascript variable] URL=
     info: [img .] www.netvibes.com/js/UWA/
     info: [script http]
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 56 bytes (935507e87c6e90a87ba18185ccccd08f2cfef5c1)
     info: [var NV_STATIC] URL=cdn.netvibes.com
     info: [decodingLevel=1] found JavaScript

Decoded Files
3674/0cb5b381700d074d1f3e75b665e4df254b85 from www.netvibes.com/js/UWA/load.js.php?env=BlogWidget2 (7321 bytes, 1217 hidden) download

9355/07e87c6e90a87ba18185ccccd08f2cfef5c1 from www.netvibes.com/js/UWA/load.js.php?env=BlogWidget2 (56 bytes) download


www.varsityfanclub.com/main/ benign
[nothing detected] (jsvar) www.varsityfanclub.com/main/
     info: [iframe http] www.netvibes.com/partner/premium.php?universe=varsityfanclub

Decoded Files
227f/20a4ff87de7c4c4a6e8c3b85eb5b408eef48 from www.varsityfanclub.com/main/ (673 bytes, 23 hidden) download


cdn.netvibes.com/ benign
[nothing detected] (jsvar) cdn.netvibes.com/
     info: ObfuscationPattern detected location eval
     info: [javascript variable] URL=cdn.netvibes.com
     info: [script http] cdn.netvibes.com/js/c/ModuleList.js?v=291
     info: [script http] cdn.netvibes.com/js/c/Netvibes.feedproxy.js?v=935
     info: [img http] avatars.netvibes.com/224321203/16
     info: [img http] cdn.netvibes.com/img/s.gif
     info: [img http] cdn.netvibes.com/img/icons/house.gif
     info: [img http] cdn.netvibes.com/proxy/favIcon.php?url=http%3A%2F%2Ffeeds.denverpost.com%2Fdp-news-breaking
     info: [img http] cdn.netvibes.com/proxy/favIcon.php?url=
     info: [img http] www.netvibes.com/modules/multipleFeeds/providers/nyt/img/logo.png
     info: [img http] graphics8.nytimes.com/images/2009/12/16/world/16CA0_337-span/thumbStandard.jpg
     info: [img http] graphics8.nytimes.com/images/2009/12/16/world/16CA0/thumbStandard.jpg
     info: [img http] graphics8.nytimes.com/images/2009/12/15/world/europe/16georgiaA/thumbStandard.jpg
     info: [img http] graphics8.nytimes.com/images/2009/12/15/world/15cnd-mideast/thumbStandard.jpg
     info: [img http] graphics8.nytimes.com/images/2009/12/16/world/16CA0_337-395/thumbStandard.jpg
     info: [img http] cdn.netvibes.com/img/favicon-12.png
     info: [img http] cdn.netvibes.com/img/feed.png
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 56 bytes (935507e87c6e90a87ba18185ccccd08f2cfef5c1)
     info: [var NV_STATIC] URL=cdn.netvibes.com
     info: [decodingLevel=1] found JavaScript

Decoded Files
b3b0/85d5981f6b46eb9ed72b6809d55d20e62c43 from cdn.netvibes.com/ (49309 bytes, 7593 hidden) download

9355/07e87c6e90a87ba18185ccccd08f2cfef5c1 from cdn.netvibes.com/ (56 bytes) download


www.vmn.net/ benign
[nothing detected] (jsvar) www.vmn.net/
     info: [script http] www.vmn.net/jscript/wtools.js
     info: [img .] www.vmn.net/images/netv/down.gif
     info: [img .] www.vmn.net/images/netv/left.gif
     info: [img .] www.vmn.net/images/netv/yahoo.gif
     info: [img .] www.vmn.net/images/netv/logovmn.gif
     info: [img .] www.vmn.net/images/netv/right.gif
     info: [script http] edge.quantserve.com/quant.js
     info: [decodingLevel=0] found JavaScript

Decoded Files
d533/cf18a7e1830365bff7c63fc6ec516b5d3eaf from www.vmn.net/ (10299 bytes, 705 hidden) download


mapage.diplomatie.gouv.fr/ benign
[nothing detected] (jsvar) mapage.diplomatie.gouv.fr/
     info: [script http] www.diplomatie.gouv.fr/fr/squelettes/_js/xtplug.js
     info: [iframe http] www.netvibes.com/partner/premium.php?universe=francediplomatie
     info: [script http] www.diplomatie.gouv.fr/fr/squelettes/_js/xtcore.js
     info: [img http] logp4.xiti.com/hit.xiti?s=129864&amp;s2=107&amp;p=&amp;di=&amp;
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 40 bytes (a04bdab9c0835e83123048bc3a93aaae476af460)
     info: [var xtsd] URL=logp4
     info: [decodingLevel=1] found JavaScript

Decoded Files
3509/497657496ce305c8d2b95bf6a2ae68aaac7b from mapage.diplomatie.gouv.fr/ (3847 bytes, 162 hidden) download

a04b/dab9c0835e83123048bc3a93aaae476af460 from mapage.diplomatie.gouv.fr/ (40 bytes) download


home.ez-tracks.com/ benign
[nothing detected] (jsvar) home.ez-tracks.com/
     info: [javascript variable] URL=www.netvibes.com/partner/premium.php?universe=eztracks
     info: [script .] home.ez-tracks.com/1.2.6.min.js
     info: [script .] home.ez-tracks.com/tracking.js
     info: [img http] images.ez-tracks.com/ezHome/netVHeader.jpg
     info: [img http] images.ez-tracks.com/ezHome/bak1.jpg
     info: [img http] www.google.com/images/transparent/333333.gif
     info: [script http] www.google-analytics.com/urchin.js
     info: [decodingLevel=0] found JavaScript

Decoded Files
3138/1e8698d954e1864e48b49cad472d56f5e4b6 from home.ez-tracks.com/ (4061 bytes, 377 hidden) download


cdn.netvibes.com/swf/ticker.swf benign
[nothing detected] [SWF] (embed) cdn.netvibes.com/swf/ticker.swf
     info: [decodingLevel=0] found JavaScript

Decoded Files
946d/63c63e55bfedb554c50d5e239cc4900a272f from cdn.netvibes.com/swf/ticker.swf (17830 bytes, 10782 hidden) download


fotbollskanalen.se/common/netvibes/ benign
[nothing detected] (jsvar) fotbollskanalen.se/common/netvibes/
     info: [javascript variable] URL=www.fotbollskanalen.se
     info: [javascript variable] URL=cdn01.tv4.se/fs/1.1542728.1267873428!image/2737274333.gen/derivatives/w219/2737274333.jpg
     info: [script /] fotbollskanalen.se/fotbollskanalen/js/general-min.js
     info: [script /] fotbollskanalen.se/fotbollskanalen/js/fixQuotesInIE.js
     info: [script http] fusion.adtoma.com/script.js
     info: [script http] tv4.nuggad.net/rc?nuggn=1660617751&nuggsid=1105273492&nuggtg=artikel-startsida
     info: [img http] cdn01.tv4.se/fs/2.11676!topLogo/552855175.jpg
     info: [img http] fotbollskanalen.se/fs/1.481587!startsida.gif
     info: [img /] fotbollskanalen.se/fs/1.897868!/fotbollskanalen.gif
     info: [img /] fotbollskanalen.se/fs/1.1140132!image/423779263.gen/derivatives/w246/423779263.jpg
     info: [img /] fotbollskanalen.se/fs/1.1148311!image/2485202490.gen/derivatives/w246/2485202490.jpg
     info: [img http] cdn01.tv4.se/fs/1.835367!image/1803027858.gif
     info: [img http] cdn01.tv4.se/fs/2.4369!channelTeaserBylineImage/3562003829.gif
     info: [img http] cdn01.tv4.se/fs/2.4368!channelTeaserBylineImage/2481956773.gif
     info: [img http] cdn01.tv4.se/fs/2.4375!channelTeaserBylineImage/1167752400.png
     info: [img http] cdn01.tv4.se/fs/2.4404!channelTeaserBylineImage/2183441541.gif
     info: [img http] cdn01.tv4.se/fs/2.40894!channelTeaserBylineImage/280124338.gif
     info: [img http] cdn01.tv4.se/fs/2.4371!channelTeaserBylineImage/3161133504.gif
     info: [img http] cdn01.tv4.se/fs/2.4373!channelTeaserBylineImage/3775666542.gif
     info: [img http] cdn01.tv4.se/fs/2.4370!channelTeaserBylineImage/1765852294.gif
     info: [img /] fotbollskanalen.se/fotbollskanalen/images/toolbars/increase.gif
     info: [img /] fotbollskanalen.se/fotbollskanalen/images/toolbars/decrease.gif
     info: [script http] s7.addthis.com/js/250/widget.js#username=fotbollskanalen
     info: [img /] fotbollskanalen.se/fs/1.1533937!image/265349398.gen/derivatives/w450/265349398.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542505.1267820290!image/2279726538.gen/derivatives/w450/2279726538.jpg
     info: [img /] fotbollskanalen.se/fs/1.663005!image/4066794995.gen/derivatives/w219/4066794995.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542945.1267897845!image/2410695393.gen/derivatives/w219/2410695393.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542909.1267895979!image/2166220841.gen/derivatives/w219/2166220841.jpg
     info: [iframe http] 83.222.236.9/Skanalen/wdgttable.asp?compid=4
     info: [img /] fotbollskanalen.se/fs/1.1543040!image/4183827117.gen/derivatives/w450/4183827117.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542779.1267878693!image/2755191512.gen/derivatives/w450/2755191512.jpg
     info: [img http] cdn01.tv4.se/fs/1.1505465.1265973816!image/2373963457.gen/derivatives/w450/2373963457.jpg
     info: [img /] fotbollskanalen.se/fs/1.870807!image/674756247.gen/derivatives/w450/674756247.jpg
     info: [img http] cdn01.tv4.se/fs/1.606022.1267980042!image/535422761.gen/derivatives/w450/535422761.gif
     info: [input /] fotbollskanalen.se/fotbollskanalen/images/buttons/show-results.gif
     info: [img http] cdn01.tv4.se/fs/1.1543104!picture/134963549.gen/derivatives/w90/134963549.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543098!picture/343931396.gen/derivatives/w90/343931396.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543096!picture/3274847275.gen/derivatives/w90/3274847275.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543093!picture/1325714052.gen/derivatives/w90/1325714052.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543080!picture/1108209872.gen/derivatives/w90/1108209872.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543060!picture/2112689165.gen/derivatives/w90/2112689165.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543057!picture/1050685550.gen/derivatives/w90/1050685550.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543051!picture/1232223997.gen/derivatives/w90/1232223997.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543043!picture/781087753.gen/derivatives/w90/781087753.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543028!picture/1576728869.gen/derivatives/w90/1576728869.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542977!picture/3109375268.gen/derivatives/w90/3109375268.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542963!picture/674708355.gen/derivatives/w90/674708355.jpg
     info: [img /] fotbollskanalen.se/fs/1.663000!image/4102028419.gen/derivatives/w219/4102028419.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542816.1267882208!image/2737274333.gen/derivatives/w219/2737274333.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542728.1267873428!image/2737274333.gen/derivatives/w219/2737274333.jpg
     info: [img /] fotbollskanalen.se/fs/1.638731!image/1385162755.gen/derivatives/w450/1385162755.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542524.1267822408!image/1273087205.gen/derivatives/w450/1273087205.jpg
     info: [img /] fotbollskanalen.se/fs/1.638927!image/252481314.gen/derivatives/w450/252481314.jpg
     info: [img http] cdn01.tv4.se/fs/1.1540927.1267741350!image/4227024165.gen/derivatives/w450/4227024165.jpg
     info: [img /] fotbollskanalen.se/fs/1.662837!image/4216548980.gen/derivatives/w450/4216548980.jpg
     info: [img http] cdn01.tv4.se/fs/1.1439004.1263393352!image/3687124298.gen/derivatives/w450/3687124298.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543102.1267915003!image/1527157983.gen/derivatives/w450/1527157983.jpg
     info: [img /] fotbollskanalen.se/fs/1.662791!image/282391897.gen/derivatives/w450/282391897.jpg
     info: [img http] cdn01.tv4.se/fs/1.1539242.1267659694!image/2737274333.gen/derivatives/w450/2737274333.jpg
     info: [img /] fotbollskanalen.se/fs/1.662779!image/91277382.gen/derivatives/w219/91277382.jpg
     info: [img http] cdn01.tv4.se/fs/1.1532028.1267264528!image/744588000.gen/derivatives/w219/744588000.jpg
     info: [img /] fotbollskanalen.se/fs/1.662993!image/1021286042.gen/derivatives/w219/1021286042.jpg
     info: [img http] cdn01.tv4.se/fs/1.1518317.1266581756!image/459371838.gen/derivatives/w219/459371838.jpg
     info: [img /] fotbollskanalen.se/fs/1.1280410!image/2265625982.gen/derivatives/w450/2265625982.jpg
     info: [img http] cdn01.tv4.se/fs/1.1533274.1267404041!image/806305587.gen/derivatives/w450/806305587.jpg
     info: [img http] cdn01.tv4.se/fs/1.1542923!picture/3483885125.gen/derivatives/w246/3483885125.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543057!picture/1050685550.gen/derivatives/w61/1050685550.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543104!picture/134963549.gen/derivatives/w61/134963549.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543096!picture/3274847275.gen/derivatives/w61/3274847275.jpg
     info: [img http] cdn01.tv4.se/fs/1.1543098!picture/343931396.gen/derivatives/w61/343931396.jpg
     info: [img /] fotbollskanalen.se/fs/1.1528925!image/2093802486.gen/derivatives/w246/2093802486.jpg
     info: [img http] cdn01.tv4.se/fs/1.1541856.1267797443!image/434055570.gen/derivatives/w246/434055570.jpg
     info: [img /] fotbollskanalen.se/fs/1.663005!image/4066794995.gen/derivatives/w246/4066794995.jpg
     info: [img http] cdn01.tv4.se/fs/1.1013851.1243275089!image/3147799167.gen/derivatives/w246/3147799167.jpg
     info: [img /] fotbollskanalen.se/fs/1.1280410!image/2265625982.gen/derivatives/w246/2265625982.jpg
     info: [img http] cdn01.tv4.se/fs/1.1533274.1267404041!image/806305587.gen/derivatives/w246/806305587.jpg
     info: [img http] cdn01.tv4.se/fs/1.1061920!image/488843870.jpg
     info: [img http] cdn01.tv4.se/fs/1.1497901.1265659420!image/2737274333.gen/derivatives/w246/2737274333.jpg
     info: [img /] fotbollskanalen.se/fs/1.662837!image/4216548980.gen/derivatives/w246/4216548980.jpg
     info: [img http] cdn01.tv4.se/fs/1.1533277.1267404323!image/1710709129.gen/derivatives/w246/1710709129.jpg
     info: [img http] cdn01.tv4.se/fs/1.1174576.1261563108!image/2447184454.gen/derivatives/w246/2447184454.jpg
     info: [img http] cdn01.tv4.se/fs/1.1365959.1259595920!image/1131745706.gen/derivatives/w246/1131745706.jpg
     info: [img /] fotbollskanalen.se/fs/1.663008!image/2054469487.gen/derivatives/w246/2054469487.jpg
     info: [img http] cdn01.tv4.se/fs/1.1513762.1266406091!image/1991170839.gen/derivatives/w246/1991170839.jpg
     info: [img /] fotbollskanalen.se/fs/1.662993!image/1021286042.gen/derivatives/w246/1021286042.jpg
     info: [img http] cdn01.tv4.se/fs/1.1507858.1266149728!image/3834054413.gen/derivatives/w246/3834054413.jpg
     info: [img http] cdn01.tv4.se/fs/1.1508248.1266191155!image/409740815.gen/derivatives/w246/409740815.jpg
     info: [img http] cdn01.tv4.se/fs/1.1496917.1265634947!image/2917788524.gen/derivatives/w246/2917788524.jpg
     info: [img /] fotbollskanalen.se/fs/1.663000!image/4102028419.gen/derivatives/w246/4102028419.jpg
     info: [img http] cdn01.tv4.se/fs/1.1474732.1264674132!image/1365077148.gen/derivatives/w246/1365077148.jpg
     info: [img http] cdn01.tv4.se/fs/1.1479969.1264968914!image/2737274333.gen/derivatives/w246/2737274333.jpg
     info: [img http] cdn01.tv4.se/fs/1.1421916.1262268841!image/3952905245.gen/derivatives/w246/3952905245.jpg
     info: [img http] cdn01.tv4.se/fs/1.1383042.1260295131!image/2737274333.gen/derivatives/w246/2737274333.jpg
     info: [img /] fotbollskanalen.se/fs/1.1381538!image/759866459.gen/derivatives/w246/759866459.jpg
     info: [img http] cdn01.tv4.se/fs/1.1383019.1260293381!image/2737274333.gen/derivatives/w246/2737274333.jpg
     info: [img http] cdn01.tv4.se/fs/1.1528008.1267087840!image/2737274333.gen/derivatives/w246/2737274333.jpg
     info: [img .] fotbollskanalen.se/common/netvibes/
     info: [img /] fotbollskanalen.se/logger/p.gif?a=1.428031&amp;d=fotbollskanalen.se/fotbollskanalen.se&amp;referrer=http%3A%2F%2Fstatistik.fotbollskanalen.se%2Fskanalen%2F%3FpStr%3DCTable%26Cust%3D6692%26Lang%3D11%26ctid%3D29%26cpid%3D68
     info: [script /] fotbollskanalen.se/news/scripts/v52.js
     info: [img http] secure-dk.imrworldwide.com/cgi-bin/m?ci=tv4f-se&amp;cc=1&amp;cg=artikel-startsida
     info: [script http] panel1.research-int.se/RealMedia/ads/Creatives/RI/pixel/analytics.js
     info: [script .] fotbollskanalen.se/common/netvibes/
     info: [img http] panel1.research-int.se/RealMedia/ads/nx.ads/research-int.se/tv4_se/12345@TopRight?XE&amp;JSFLAG=noscript&amp;Sajt=tv4f-se&amp;Sektion=artikel-startsida&amp;Undersektion1=&amp;Sida=&amp;Grupp1=tv4NyaMedier&amp;XE
     info: [script /] fotbollskanalen.se/fotbollskanalen/js/linkpulse/lpAfotbollskanalense.js
     info: [decodingLevel=0] found JavaScript

Decoded Files
7249/05518dc821a5796c71552054736e8ee4e6b0 from fotbollskanalen.se/common/netvibes/ (255003 bytes, 140582 hidden) download


home.sweetim.com/ benign
[nothing detected] (jsvar) home.sweetim.com/
     info: [script http] cdn.search.sweetim.com/resources/v3/general.js
     info: [img http] cdn.search.sweetim.com/resources/images/mltr.jpg
     info: [input http] cdn.search.sweetim.com/resources/images/googler.gif
     info: [img http] cdn.search.sweetim.com/resources/images/img.jpg
     info: [decodingLevel=0] found JavaScript

Decoded Files
b8f6/6010088d95e19dbbdcef1e23b55d7573e59d from home.sweetim.com/ (3250 bytes, 35 hidden) download


www.itv.com/documents/html/ benign
[nothing detected] (jsvar) www.itv.com/documents/html/
     info: [script /] www.itv.com/_app/cmn/js/swfobject.js?r=300
     info: [script /] www.itv.com/_app/cmn/js/base.js?r=300
     info: [script /] www.itv.com/_app/cmn/js/controller.js?r=300
     info: [script /] www.itv.com/_app/cmn/js/itv.js?r=300
     info: [script /] www.itv.com/_app/cmn/js/clientcaps.js?r=300
     info: [script /] www.itv.com/_app/cmn/js/video.js?r=300
     info: [script /] www.itv.com/_app/cmn/js/nsat.js?r=274
     info: [script /] www.itv.com/_app/cmn/js/Itv.Video.ErrorHandling.js?r=300
     info: [script /] www.itv.com/_app/cmn/js/simulcast.js?r=300
     info: [script /] www.itv.com/_app/cmn/js/jquery.js?r=300
     info: [script /] www.itv.com/_app/cmn/js/Itv.Video.Mercury.Guidance.js?r=300
     info: [script /] www.itv.com/_app/cmn/js/omniture.js?r=300
     info: [script /] www.itv.com/_app/cmn/js/BCM.js?r=300
     info: [script http] www.itv.com/mercury/Version.js
     info: [script /] www.itv.com/_app/cmn/js/main.js?r=300
     info: [img /] www.itv.com/_app/img/nav/top.gif
     info: [img /] www.itv.com/_app/img/logos/whitebg.gif
     info: [img /] www.itv.com/_app/img/nav/bottom.gif
     info: [img /] www.itv.com/_app/img/nav/thin.gif
     info: [img /] www.itv.com/_app/img/nav/thin.gif
     info: [script /] www.itv.com/_app/cmn/js/properties.js?r=300
     info: [script http] js.revsci.net/gateway/gw.js?csid=K07719
     info: [script http] itv.uk.intellitxt.com/intellitxt/front.asp?ipid=13590
     info: [decodingLevel=0] found JavaScript

Decoded Files
9a32/d25e910cacd3446cba9bb660866a0e796ccb from www.itv.com/documents/html/ (14135 bytes, 1631 hidden) download


iner.kz/index2.php benign
[nothing detected] (iframe) iner.kz/index2.php
     info: ObfuscationPattern detected eval String.fromCharCode function(p,a,c,k,e,d)
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 8519 bytes (a2a16c93abc55447c96fb6f35b97477dfff45315)
     info: DecodedMsg detected /info.ActiveXObject PDF.PdfCtrl /info.ActiveXObject AcroPDF.PDF /info.ActiveXObject ShockwaveFlash.ShockwaveFlash
     info: ObfuscationPattern detected eval function(p,a,c,k,e,d) String.fromCharCode
     info: [setAttribute src] URL=iner.kz/formStill.pdf
     info: [setAttribute src] URL=iner.kz/intoLeap.swf
     info: [decodingLevel=1] found JavaScript
     info: [decodingLevel=1] decoded 5135 bytes (c665db18175f8a379944bc1ad23e832343ff702d)
     info: [decodingLevel=2] found JavaScript

Decoded Files
2e39/c51bc53810452faaed633552bf2955fda2ee from iner.kz/index2.php (20004 bytes, 17 hidden) download

a2a1/6c93abc55447c96fb6f35b97477dfff45315 from iner.kz/index2.php (8519 bytes) download

c665/db18175f8a379944bc1ad23e832343ff702d from iner.kz/index2.php (5135 bytes) download


search.twitter.com/search?q=#$1 benign
[nothing detected] (jsvar) search.twitter.com/search?q=#$1
     info: [script /] search.twitter.com/javascripts/search/all.js?1267667419
     info: [img /] search.twitter.com/images/search/twitter-logo-small.png?1267667419
     info: [img /] search.twitter.com/images/search/rss.png?1267667419
     info: [img /] search.twitter.com/images/search/twitter.png?1267667419
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 151 bytes (9b289a6af083d9c50514e6d76aa9be96616609c8)
     info: [var gaJsHost] URL=www.
     info: [script http] www.google-analytics.com/ga.js
     info: [decodingLevel=1] found JavaScript

Decoded Files
9773/1ee7a8f902c61a8a8d6286a883ed03edbcef from search.twitter.com/search?q=#$1 (7214 bytes, 535 hidden) download

9b28/9a6af083d9c50514e6d76aa9be96616609c8 from search.twitter.com/search?q=#$1 (151 bytes) download


cdn.netvibes.com/js/c/Netvibes.feedproxy.js?v=935 benign
[nothing detected] (script) cdn.netvibes.com/js/c/Netvibes.feedproxy.js?v=935
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: ObfuscationPattern detected location eval String.fromCharCode Location
     info: [javascript variable] URL=
     info: [javascript variable] URL=www.lefigaro.fr/monfigaro/
     info: [javascript variable] URL=www.mesechos.fr/
     info: [javascript variable] URL=remix.startinglinerock.com/
     info: [javascript variable] URL=start.tagged.com/
     info: [javascript variable] URL=www.campusb.fr/
     info: [javascript variable] URL=www.sport24.com/tabs/flux/
     info: [javascript variable] URL=www.my24.ilsole24ore.com/
     info: [javascript variable] URL=www.air-traffic.co.uk/
     info: [javascript variable] URL=www.captaintheband.com/
     info: [javascript variable] URL=www.vortexme.com/vortex/
     info: [javascript variable] URL=www.vmn.net/
     info: [javascript variable] URL=escritorio.unab.cl/
     info: [javascript variable] URL=www.msf.fr/
     info: [javascript variable] URL=www.cofidis.fr/commun/contenu/file/bibliosite/netvibes/
     info: [javascript variable] URL=www.my.reganam.com/
     info: [javascript variable] URL=fotbollskanalen.se/common/netvibes/
     info: [javascript variable] URL=nyhetskanalen.se/common/netvibes/
     info: [javascript variable] URL=www.varsityfanclub.com/main/
     info: [javascript variable] URL=my.numericable.fr/
     info: [javascript variable] URL=mixme.mediaibox.com.br/
     info: [javascript variable] URL=home.sweetim.com/
     info: [javascript variable] URL=www.itv.com/documents/html/
     info: [javascript variable] URL=meu.ig.com.br/
     info: [javascript variable] URL=www.iot-portal.ie/
     info: [javascript variable] URL=my.daemon-tools.cc/
     info: [javascript variable] URL=ahoratodoseune.netvibes.com/
     info: [javascript variable] URL=www.thedailyinfluence.com/
     info: [javascript variable] URL=www.santaanastar.com/nvmyhomepage/
     info: [javascript variable] URL=home.ez-tracks.com/
     info: [javascript variable] URL=www.bibliocnrs.fr/
     info: [javascript variable] URL=portal.som.com/
     info: [javascript variable] URL=www.glasgowstudentaccommodation.co.uk/
     info: [javascript variable] URL=www.place-medicale.pro/
     info: [javascript variable] URL=www.mygsp.ro/
     info: [javascript variable] URL=mapage.diplomatie.gouv.fr/
     info: [javascript variable] URL=www.t-online.de/meine-seite/
     info: [javascript variable] URL=www.samsung.com/ledtvstudio/
     info: [javascript variable] URL=ccclients.com/nv/
     info: [javascript variable] URL=www.zebazar.com/
     info: [javascript variable] URL=www.connectionsforlife.ubc.ca/
     info: [javascript variable] URL=catholic365.com/home/
     info: [javascript variable] URL=www9.seattle.gov/myseattle/
     info: [javascript variable] URL=faq.netvibes.com/troubleshooting/problems?s=cookie
     info: [javascript variable] URL=twitter.com/$1
     info: [javascript variable] URL=search.twitter.com/search?q=%23$1
     info: [script .] cdn.netvibes.com/js/c/
     info: [img .] cdn.netvibes.com/js/c/
     info: [input .] cdn.netvibes.com/js/c/
     info: [iframe .] cdn.netvibes.com/js/c/javascript:false;
     info: [embed .] cdn.netvibes.com/js/c/
     info: [img /] cdn.netvibes.com/img/feed.png
     info: [input http]
     info: [img /] cdn.netvibes.com/img/panel/contacts/nv.png
     info: [img .] cdn.netvibes.com/js/c/img/help/startpage/win-ffx-01.png
     info: [img .] cdn.netvibes.com/js/c/img/help/startpage/win-ffx-02.png
     info: [img .] cdn.netvibes.com/js/c/img/help/startpage/win-chrome-01.png?v=01
     info: [img .] cdn.netvibes.com/js/c/img/help/startpage/win-chrome-02.png?v=01
     info: [img .] cdn.netvibes.com/js/c/img/help/startpage/safari1.png
     info: [img .] cdn.netvibes.com/js/c/img/help/startpage/safari2.png
     info: [img .] cdn.netvibes.com/js/c/img/help/startpage/win-op-01.png
     info: [img .] cdn.netvibes.com/js/c/img/help/startpage/win-op-02.png
     info: [img /] cdn.netvibes.com/img/closeMod.gif
     info: [input .] cdn.netvibes.com/js/c/img/s.gif
     info: [input /] cdn.netvibes.com/img/flickr.png
     info: [img /] cdn.netvibes.com/modules/myspace/icon-myspace.gif
     info: [input /] cdn.netvibes.com/img/sendModule/twitter.gif
     info: [embed /] cdn.netvibes.com/swf/ticker.swf
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 359 bytes (22b17f234fec5f293216317dd2aafb543642635d)
     info: DecodedMsg detected /info.ActiveXObject MSXML2.XMLHTTP /info.ActiveXObject ShockwaveFlash.ShockwaveFlash
     info: [var ecosystemURL] URL=1/
     info: [decodingLevel=1] found JavaScript

Decoded Files
56b7/4463b9b35c6a1ffc6491ba2d82b3c46fa403 from cdn.netvibes.com/js/c/Netvibes.feedproxy.js?v=935 (959600 bytes, 4134 hidden) download

22b1/7f234fec5f293216317dd2aafb543642635d from cdn.netvibes.com/js/c/Netvibes.feedproxy.js?v=935 (359 bytes, 5 hidden) download


www.thedailyinfluence.com/ benign
[nothing detected] (jsvar) www.thedailyinfluence.com/
     info: [iframe http] www.netvibes.com/partner/premium.php?universe=thedailyinfluence
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 151 bytes (9b289a6af083d9c50514e6d76aa9be96616609c8)
     info: [var gaJsHost] URL=www.
     info: [script http] www.google-analytics.com/ga.js
     info: [decodingLevel=1] found JavaScript

Decoded Files
5695/4a0faf4672e6b9056db8ad5f0a7f2cc46b40 from www.thedailyinfluence.com/ (1152 bytes, 29 hidden) download

9b28/9a6af083d9c50514e6d76aa9be96616609c8 from www.thedailyinfluence.com/ (151 bytes) download


www.mesechos.fr/ benign
[nothing detected] (jsvar) www.mesechos.fr/
     info: [javascript variable] URL=www.netvibes.com/partner/premium.php?universe=lesechos&noresize=1
     info: [script http] www.lesechos.fr/javascript/scripts.js
     info: [script http] www.lesechos.fr/javascript/menu.js
     info: [script http] www.lesechos.fr/javascript/bandeau/bandeau.dyn2.js
     info: [script http] www.lesechos.fr/javascript/realmedia.js
     info: [img http] pics.lesechos.fr/icons/24.png
     info: [input http] pics.lesechos.fr/icons/24.png
     info: [img http] pics.lesechos.fr/icons/logo-petit.png
     info: [img http] www.lesechos.fr/icons/home.png
     info: [img http] www.lesechos.fr/icons/24.png
     info: [script http] www.lesechos.fr/xtroi.js
     info: [img http] logc26.xiti.com/hit.xiti?s=282961&s2=28&p=mesechos&di=&
     info: [decodingLevel=0] found JavaScript

Decoded Files
80bd/b9ba6fe0c0d678bd2f6d3f8420fd693fed54 from www.mesechos.fr/ (57607 bytes, 1957 hidden) download


www.connectionsforlife.ubc.ca/ benign
[nothing detected] (jsvar) www.connectionsforlife.ubc.ca/
     info: [img .] www.connectionsforlife.ubc.ca/images/logoprint.gif
     info: [img .] www.connectionsforlife.ubc.ca/images/header-left.png
     info: [img .] www.connectionsforlife.ubc.ca/images/brochurelink/brochurelink-1.png
     info: [img .] www.connectionsforlife.ubc.ca/images/brochurelink/brochurelink-divider.png
     info: [img .] www.connectionsforlife.ubc.ca/images/brochurelink/brochurelink-2.png
     info: [img .] www.connectionsforlife.ubc.ca/images/brochurelink/brochurelink-3.png
     info: [img .] www.connectionsforlife.ubc.ca/images/brochurelink/brochurelink-4.png
     info: [img .] www.connectionsforlife.ubc.ca/images/brochurelink/brochurelink-5.png
     info: [img .] www.connectionsforlife.ubc.ca/images/logo.gif
     info: [img .] www.connectionsforlife.ubc.ca/images/link-divider.gif
     info: [img .] www.connectionsforlife.ubc.ca/images/header-right.png
     info: [img .] www.connectionsforlife.ubc.ca/images/homepage/connection.png
     info: [img .] www.connectionsforlife.ubc.ca/images/homepage/photo-ideas.jpg
     info: [img .] www.connectionsforlife.ubc.ca/images/homepage/heading-ideas.png
     info: [img .] www.connectionsforlife.ubc.ca/files/siteimages/photo-people.jpg
     info: [img .] www.connectionsforlife.ubc.ca/images/homepage/heading-people.png
     info: [img .] www.connectionsforlife.ubc.ca/images/homepage/photo-places.jpg
     info: [img .] www.connectionsforlife.ubc.ca/images/homepage/heading-places.png
     info: [img .] www.connectionsforlife.ubc.ca/images/homepage/photo-academic.jpg
     info: [img .] www.connectionsforlife.ubc.ca/images/homepage/heading-academic.png
     info: [script /] www.connectionsforlife.ubc.ca/js/1259283084.js
     info: [img http] www.connectionsforlife.ubc.ca/cron.php
     info: [script http] www.google-analytics.com/ga.js
     info: [decodingLevel=0] found JavaScript

Decoded Files
9b9a/ece38eba7d48cc620ce12c811a626c31e7fc from www.connectionsforlife.ubc.ca/ (14046 bytes, 283 hidden) download


onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru:8080/booking.com/booking.com/nate.com/google.com.sa/google.com.php benign
[nothing detected] (var Q) onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru:8080/booking.com/booking.com/nate.com/google.com.sa/google.com.php
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 162 bytes (dadabfc6306feaee02dbd83b011cf7901db78b41)
     info: [var Th15cn] URL=onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru
     info: [decodingLevel=1] found JavaScript

Decoded Files
d7d8/a6b9cf77101f2eca2fe6427a0feef0c8bf34 from onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru:8080/booking.com/booking.com/nate.com/google.com.sa/google.com.php (956 bytes) download

dada/bfc6306feaee02dbd83b011cf7901db78b41 from onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru:8080/booking.com/booking.com/nate.com/google.com.sa/google.com.php (162 bytes) download


isalonproducts.com/index.html suspicious
[suspicious:5] isalonproducts.com/index.html
     info: ObfuscationPattern detected String.fromCharCode eval
     info: [img .] isalonproducts.com/widgets/10.1.gif
     info: [img .] isalonproducts.com/widgets/18.1.gif
     info: [img .] isalonproducts.com/widgets/108.1.gif
     info: [img .] isalonproducts.com/widgets/110.1.gif
     info: [img .] isalonproducts.com/widgets/112.1.gif
     info: [img .] isalonproducts.com/widgets/114.1.gif
     info: [img .] isalonproducts.com/widgets/spacer.gif
     info: [img .] isalonproducts.com/widgets/19.1.gif
     info: [img .] isalonproducts.com/widgets/11.1.gif
     info: [img .] isalonproducts.com/widgets/12.1.gif
     info: [img .] isalonproducts.com/widgets/13.1.gif
     info: [img .] isalonproducts.com/widgets/98.1.gif
     info: [img .] isalonproducts.com/widgets/39.1.gif
     info: [img .] isalonproducts.com/widgets/38.1.gif
     info: [img http] www.isalonproducts.com/images/ISP_logo.gif
     info: [img http] www.isalonproducts.com/images/ISP_logonew2.gif
     info: [img .] isalonproducts.com/widgets/0.1.gif
     info: [img .] isalonproducts.com/widgets/1.1.gif
     info: [img .] isalonproducts.com/widgets/4.1.gif
     info: [img .] isalonproducts.com/widgets/5.1.gif
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 940 bytes (0d1be1c39474783821f6625a927e4edabdd31f48)
     suspicious: DecodedIframe detected
     info: [var mvaFuAZykmCRbqHOIkqw] URL=iner.kz/index2.php
     info: [var u] URL=onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru:
     info: [var Q] URL=onlinedown-net.sina.com.cn.sourceforge-net.allmyguide.ru:8080/booking.com/booking.com/nate.com/google.com.sa/google.com.php
     info: [iframe http] iner.kz/index2.php
     info: [decodingLevel=1] found JavaScript
     info: [file] saved isalonproducts.com/index.html to (08e2f1095e435b64e89e0dd7a85594e7e3fad81d)

Decoded Files
08e2/f1095e435b64e89e0dd7a85594e7e3fad81d from isalonproducts.com/index.html (19305 bytes, 5967 hidden) download

0d1b/e1c39474783821f6625a927e4edabdd31f48 from isalonproducts.com/index.html (940 bytes) download

08e2/f1095e435b64e89e0dd7a85594e7e3fad81d from isalonproducts.com/index.html (19305 bytes, 5967 hidden) download


www.air-traffic.co.uk/ benign
[nothing detected] (jsvar) www.air-traffic.co.uk/
     info: [script .] www.air-traffic.co.uk/shadowbox/src/adapter/shadowbox-base.js
     info: [script .] www.air-traffic.co.uk/shadowbox/src/shadowbox.js
     info: [script .] www.air-traffic.co.uk/scripts/flashdetection.js
     info: [decodingLevel=0] found JavaScript

Decoded Files
43bf/ba97d5b0c87e6da4d4f7f2defb75a3c53efd from www.air-traffic.co.uk/ (3222 bytes, 145 hidden) download


www.mygsp.ro/ benign
[nothing detected] (jsvar) www.mygsp.ro/
     info: [script /] www.mygsp.ro/js/pngfix.js
     info: [input /] www.mygsp.ro/images/dologin.png
     info: [input /] www.mygsp.ro/images/searchbtn.jpg
     info: [img /] www.mygsp.ro/images/tut-link.png
     info: [img /] www.mygsp.ro/images/reg-link.png
     info: [img /] www.mygsp.ro/images/conc-link.png
     info: [script http] www.google.ro/coop/cse/brand?form=cse-search-box&amp;lang=ro
     info: [iframe http] gazetaonline.netvibesbusiness.com/
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 151 bytes (9b289a6af083d9c50514e6d76aa9be96616609c8)
     info: [var gaJsHost] URL=www.
     info: [script http] www.google-analytics.com/ga.js
     info: [decodingLevel=1] found JavaScript

Decoded Files
3003/e2275125403c53fc5320e623381a6c09c306 from www.mygsp.ro/ (5124 bytes, 1413 hidden) download

9b28/9a6af083d9c50514e6d76aa9be96616609c8 from www.mygsp.ro/ (151 bytes) download


www.iot-portal.ie/ benign
[nothing detected] (jsvar) www.iot-portal.ie/
     info: [javascript variable] URL=www.netvibes.com/partner/premium.php?universe=attractabrennan
     info: [script .] www.iot-portal.ie/Drop
     info: [img .] www.iot-portal.ie/images/s1_02.gif
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 277 bytes (9a520406f273861fac62463e0cfbe14b22a5cbe4)
     info: [var netvibesUrl] URL=www.netvibes.com/partner/premium.php?universe=attractabrennan&rnd=63732.620610117905
     info: [decodingLevel=1] found JavaScript

Decoded Files
41be/54783c968ed2427524ed373607df20cac880 from www.iot-portal.ie/ (12662 bytes, 167 hidden) download

9a52/0406f273861fac62463e0cfbe14b22a5cbe4 from www.iot-portal.ie/ (277 bytes) download


www.vortexme.com/vortex/ benign
[nothing detected] (jsvar) www.vortexme.com/vortex/
     info: [script .] www.vortexme.com/vortex/lps/includes/embed-compressed.js
     info: [embed http] www.vortexme.com/vortex/preloaderfinal.swf
     info: [decodingLevel=0] found JavaScript

Decoded Files
6240/2b12813b3cbcff6e203c813dd774c9f809ff from www.vortexme.com/vortex/ (4277 bytes, 1121 hidden) download


www.samsung.com/ledtvstudio/ benign
[nothing detected] (jsvar) www.samsung.com/ledtvstudio/
     info: [meta refresh] URL=http:/samsungledtvstudio.netvibesbusiness.com

Decoded Files
176a/dec4f2ca7ed484d6bc86395b0909f1f4aca3 from www.samsung.com/ledtvstudio/ (195 bytes, 12 hidden) download


www.captaintheband.com/ benign
[nothing detected] (jsvar) www.captaintheband.com/
     info: [meta refresh] URL=http:/www.netvibes.com/captaintheband

Decoded Files
9714/823aee8b95e863323c779cc92376f665c934 from www.captaintheband.com/ (225 bytes) download


remix.startinglinerock.com/ benign
[nothing detected] (jsvar) remix.startinglinerock.com/
     info: [script http] www.google-analytics.com/urchin.js
     info: [decodingLevel=0] found JavaScript

Decoded Files
d7c6/9d837291162813cba93c1990527d1381f9d9 from remix.startinglinerock.com/ (586 bytes, 23 hidden) download


escritorio.unab.cl/ benign
[nothing detected] (jsvar) escritorio.unab.cl/
     info: [img .] escritorio.unab.cl/presentacion/home.jpg
     info: [img .] escritorio.unab.cl/presentacion/blog.jpg
     info: [iframe http] www.netvibes.com/partner/premium.php?universe=unab
     info: [script /] escritorio.unab.cl/certifica-js14.js
     info: [script /] escritorio.unab.cl/certifica.js
     info: [img http] hits.e.cl/cert/hit.dll?id=18866&path=path
     info: [decodingLevel=0] found JavaScript

Decoded Files
9a84/46fa9ede2a3f4f908dfdc71e00dc834ef860 from escritorio.unab.cl/ (2476 bytes, 139 hidden) download


www.bibliocnrs.fr/ benign
[nothing detected] (jsvar) www.bibliocnrs.fr/
     info: [javascript variable] URL=stats.inist.fr/phpmv2/phpmyvisites.php
     info: [img .] www.bibliocnrs.fr/images/monbbcnrs.jpg
     info: [script http] stats.inist.fr/phpmv2/phpmyvisites.js
     info: [img http] stats.inist.fr/phpmv2/phpmyvisites.php
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=0] decoded 84 bytes (033566081b70532f9953bcba965abcb33ecedd4d)
     info: [var phpmyvisitesURL] URL=stats.inist.fr/phpmv2/phpmyvisites.php
     info: [decodingLevel=1] found JavaScript

Decoded Files
2ff6/fcb552726c99db4b40d5c426bdf6364c7523 from www.bibliocnrs.fr/ (1825 bytes, 198 hidden) download

0335/66081b70532f9953bcba965abcb33ecedd4d from www.bibliocnrs.fr/ (84 bytes) download


www.my.reganam.com/ benign
[nothing detected] (jsvar) www.my.reganam.com/
     info: [script .] www.my.reganam.com/AC_OETags.js
     info: [script .] www.my.reganam.com/AC_RunActiveContent.js
     info: [embed .] www.my.reganam.com/Dynamic
     info: [embed .] www.my.reganam.com/iGW-new2.swf
     info: [embed http] www.csalim.com/clocks/236069.swf
     info: [script http] www.google.com/jsapi?key=notsupplied-wizard
     info: [script http] www.google.com/uds/solutions/dynamicfeed/gfdynamicfeedcontrol.js
     info: [decodingLevel=0] found JavaScript

Decoded Files
b4e9/e974d45a26802109f3db871cf4bd720eb437 from www.my.reganam.com/ (5280 bytes, 388 hidden) download


www.santaanastar.com/nvmyhomepage/ benign
[nothing detected] (jsvar) www.santaanastar.com/nvmyhomepage/

Decoded Files
08ce/e1ddfa06ebc3cd2ef5ee411379a8b5ef9f62 from www.santaanastar.com/nvmyhomepage/ (593 bytes, 14 hidden) download


catholic365.com/home/ benign
[nothing detected] (jsvar) catholic365.com/home/
     info: [script http] catholic365.com/global/jquery-1.3.2.min.js/
     info: [script http] catholic365.com/global/jquery.tools.min.js/
     info: [script http] catholic365.com/global/jquery.validate.js/
     info: [script http] catholic365.com/global/jquery.maskedinput-1.2.2.js/
     info: [script http] catholic365.com/global/jquery.ui.core.js/
     info: [script http] catholic365.com/global/jquery.ui.accordion.js/
     info: [img http] www.catholic365.com/images/captchas/1267983631.6916.jpg
     info: [decodingLevel=0] found JavaScript

Decoded Files
db4e/178b09b229bcfba6959bdcc04b948aab41a0 from catholic365.com/home/ (15026 bytes, 775 hidden) download