JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 495405561483632573c7ddfa780519b9a4fd1cbc (Received 2017-12-07 14:34:19, weatherfor.us/ http://www.rlslog.net )

URLStatus
weatherfor.us/ saved 15489 bytes bf47988875ee5edd686afabecb4da647b99cc160

weatherfor.us/static/js/explicit/explicit.js status: (referer=weatherfor.us/widget?location=london&unit=c&key=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzZWNyZXQiOiI0ZWIwNTZkZWJlMzFjNjE4YjI0NTcyYjJkYWZhYWU2NTA1OWVmYmJmYmJmYmVjZjc5OWYzMmU2MDkyMTNlMGNhIiwiaWQiOiJqZWRpQHdlYXRoZXJmb3IudXMifQ.DOc3bMlusLO2m7zONB-XH-g6BrY5H6Hxc48DdhTzzZKfOaUB5BBXGdS-cS0fCOLm6dcJJkJ4vfz7YBBB9OuN25Fir0-L28EgzVqC0NXGPCS59yv8PK14G78iJpCT9tOmtLGLZ5TOUqI60Pg0T2lV3FSeV2sUo64rlUw-YQiyI-V6KofUj8ynIX8eJIMFykjd63gQqvlgZ5XBfyVdYbB9qDYwHni2IFDe8F_XhFKdGcMnD1sjSR4b-ctteEp44JmMGSxWArHyYgqtHxVa2sdwhMIGpiBIwmwgahp11Q9TPgkroSPSoYeomgjtTnudg6v9mLLuKLQd11sWkb1Y4Ow)

weatherfor.us/static/js/datacommons.js status: (referer=weatherfor.us/widget?skin=mini&location=Newyork)

weatherfor.us/static/js/twantu.js status: (referer=weatherfor.us/widget?skin=mini&location=Newyork)

www.google-analytics.com/analytics.js status: (referer=weatherfor.us/widget?skin=mini&location=Newyork)

pagead2.googlesyndication.com/pagead/js/undefined status: (referer=pagead2.googlesyndication.com/pagead/js/adsbygoogle.js)

adservice.google.com/adsid/integrator.js?domain=undefined status: (referer=pagead2.googlesyndication.com/pagead/js/adsbygoogle.js)

cdnjs.cloudflare.com/ajax/libs/onecolor/3.0.4/one-color.js status: (referer=weatherfor.us/widget?skin=mini&location=Newyork)

weatherfor.us/static/js/undefined status: (referer=weatherfor.us/static/js/jquery.js)

form.jotform.com/static/ status: (referer=form.jotform.com/static/feedback2.js)

form.jotform.com/static/undefined status: (referer=form.jotform.com/static/feedback2.js)

weatherfor.us/static/js/mustache.js status: (referer=weatherfor.us/widget?location=london&unit=c&key=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzZWNyZXQiOiI0ZWIwNTZkZWJlMzFjNjE4YjI0NTcyYjJkYWZhYWU2NTA1OWVmYmJmYmJmYmVjZjc5OWYzMmU2MDkyMTNlMGNhIiwiaWQiOiJqZWRpQHdlYXRoZXJmb3IudXMifQ.DOc3bMlusLO2m7zONB-XH-g6BrY5H6Hxc48DdhTzzZKfOaUB5BBXGdS-cS0fCOLm6dcJJkJ4vfz7YBBB9OuN25Fir0-L28EgzVqC0NXGPCS59yv8PK14G78iJpCT9tOmtLGLZ5TOUqI60Pg0T2lV3FSeV2sUo64rlUw-YQiyI-V6KofUj8ynIX8eJIMFykjd63gQqvlgZ5XBfyVdYbB9qDYwHni2IFDe8F_XhFKdGcMnD1sjSR4b-ctteEp44JmMGSxWArHyYgqtHxVa2sdwhMIGpiBIwmwgahp11Q9TPgkroSPSoYeomgjtTnudg6v9mLLuKLQd11sWkb1Y4Ow)

weatherfor.us/static/js/jquery.tipsy.js status: (referer=weatherfor.us/widget?location=london&unit=c&key=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzZWNyZXQiOiI0ZWIwNTZkZWJlMzFjNjE4YjI0NTcyYjJkYWZhYWU2NTA1OWVmYmJmYmJmYmVjZjc5OWYzMmU2MDkyMTNlMGNhIiwiaWQiOiJqZWRpQHdlYXRoZXJmb3IudXMifQ.DOc3bMlusLO2m7zONB-XH-g6BrY5H6Hxc48DdhTzzZKfOaUB5BBXGdS-cS0fCOLm6dcJJkJ4vfz7YBBB9OuN25Fir0-L28EgzVqC0NXGPCS59yv8PK14G78iJpCT9tOmtLGLZ5TOUqI60Pg0T2lV3FSeV2sUo64rlUw-YQiyI-V6KofUj8ynIX8eJIMFykjd63gQqvlgZ5XBfyVdYbB9qDYwHni2IFDe8F_XhFKdGcMnD1sjSR4b-ctteEp44JmMGSxWArHyYgqtHxVa2sdwhMIGpiBIwmwgahp11Q9TPgkroSPSoYeomgjtTnudg6v9mLLuKLQd11sWkb1Y4Ow)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
cdnjs.cloudflare.com/ajax/libs/Base64/0.2.1/base64.min.js benign
[nothing detected] (script) cdnjs.cloudflare.com/ajax/libs/Base64/0.2.1/base64.min.js
     status: (referer=weatherfor.us/)saved 772 bytes 82806a5885ca6bae8220e5d15bf84b6af4debee9
     info: [decodingLevel=0] found JavaScript
     file: 82806a5885ca6bae8220e5d15bf84b6af4debee9: 772 bytes

Decoded Files
8280/6a5885ca6bae8220e5d15bf84b6af4debee9 from cdnjs.cloudflare.com/ajax/libs/Base64/0.2.1/base64.min.js (772 bytes) download


geo.weatherfor.us/json/?callback=__geoJSONPCallback benign
[nothing detected] (script) geo.weatherfor.us/json/?callback=__geoJSONPCallback
     status: (referer=weatherfor.us/)saved 188 bytes e3104aea651bc9d265f6a2edb2a10f3054cd92e0
     info: [0] no JavaScript
     file: e3104aea651bc9d265f6a2edb2a10f3054cd92e0: 188 bytes

Decoded Files
e310/4aea651bc9d265f6a2edb2a10f3054cd92e0 from geo.weatherfor.us/json/?callback=__geoJSONPCallback (188 bytes) download


form.jotform.com/static/feedback2.js benign
[nothing detected] (script) form.jotform.com/static/feedback2.js
     status: (referer=weatherfor.us/)saved 143338 bytes 21dacc73b323a851981b631a18183b8da95a73dd
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [img] form.jotform.com/static/
     info: [script] form.jotform.com/static/
     info: [img] www.jotform.com/images/loading-circle.gif
     info: [decodingLevel=0] found JavaScript
     error: undefined function a.getElementsByTagName
     error: undefined variable a
     info: [element] URL=form.jotform.com/static/undefined
     info: [1] no JavaScript
     file: 21dacc73b323a851981b631a18183b8da95a73dd: 143338 bytes
     file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes

Decoded Files
21da/cc73b323a851981b631a18183b8da95a73dd from form.jotform.com/static/feedback2.js (143338 bytes, 34 hidden) download

d5db/a94a76a67a54f2b98b16227da20414542fd9 from form.jotform.com/static/feedback2.js (72 bytes) download


weatherfor.us/widget?location=london&unit=c&key=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzZWNyZXQiOiI0ZWIwNTZkZWJlMzFjNjE4YjI0NTcyYjJkYWZhYWU2NTA1OWVmYmJmYmJmYmVjZjc5OWYzMmU2MDkyMTNlMGNhIiwiaWQiOiJqZWRpQHdlYXRoZXJmb3IudXMifQ.DOc3bMlusLO2m7zONB-XH-g6BrY5H6H benign
[nothing detected] (iframe) weatherfor.us/widget?location=london&unit=c&key=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzZWNyZXQiOiI0ZWIwNTZkZWJlMzFjNjE4YjI0NTcyYjJkYWZhYWU2NTA1OWVmYmJmYmJmYmVjZjc5OWYzMmU2MDkyMTNlMGNhIiwiaWQiOiJqZWRpQHdlYXRoZXJmb3IudXMifQ.DOc3bMlusLO2m7zONB-XH-g6BrY5H6Hxc48DdhTzzZKfOaUB5BBXGdS-cS0fCOLm6dcJJkJ4vfz7YBBB9OuN25Fir0-L28EgzVqC0NXGPCS59yv8PK14G78iJpCT9tOmtLGLZ5TOUqI60Pg0T2lV3FSeV2sUo64rlUw-YQiyI-V6KofUj8ynIX8eJIMFykjd63gQqvlgZ5XBfyVdYbB9qDYwHni2IFDe8F_XhFKdGcMnD1sjSR4b-ctteEp44JmMGSxWArHyYgqtHxVa2sdwhMIGpiBIwmwgahp11Q9TPgkroSPSoYeomgjtTnudg6v9mLLuKLQd11sWkb1Y4Ow
     status: (referer=weatherfor.us/)saved 7146 bytes d7f11fc114103649ac778f94a43a1b377ab311c7
     info: [img] weatherfor.us/static/verbose/{{image}}.png
     info: [script] weatherfor.us/static/js/jquery.js
     info: [script] weatherfor.us/static/js/mustache.js
     info: [script] weatherfor.us/static/js/jquery.tipsy.js
     info: [script] weatherfor.us/static/js/datacommons.js
     info: [script] weatherfor.us/static/js/explicit/explicit.js
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html>
          error: line:3: ..............^
     file: d7f11fc114103649ac778f94a43a1b377ab311c7: 7146 bytes

Decoded Files
d7f1/1fc114103649ac778f94a43a1b377ab311c7 from weatherfor.us/widget?location=london&unit=c&key=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzZWNyZXQiOiI0ZWIwNTZkZWJlMzFjNjE4YjI0NTcyYjJkYWZhYWU2NTA1OWVmYmJmYmJmYmVjZjc5OWYzMmU2MDkyMTNlMGNhIiwiaWQiOiJqZWRpQHdlYXRoZXJmb3IudXMifQ.DOc3bMlusLO2m7zONB-XH-g6BrY5H6H (7146 bytes, 699 hidden) download


weatherfor.us/static/js/jquery.js benign
[nothing detected] (script) weatherfor.us/static/js/jquery.js
     status: (referer=weatherfor.us/)saved 104383 bytes b343947f88bf15dc757353c4db088dcf70ac46dd
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined function b0.getElementsByTagName
     error: undefined variable b0
     info: [element] URL=weatherfor.us/static/js/undefined
     info: [1] no JavaScript
     file: b343947f88bf15dc757353c4db088dcf70ac46dd: 104383 bytes
     file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes

Decoded Files
b343/947f88bf15dc757353c4db088dcf70ac46dd from weatherfor.us/static/js/jquery.js (104383 bytes) download

d5db/a94a76a67a54f2b98b16227da20414542fd9 from weatherfor.us/static/js/jquery.js (72 bytes) download


netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js benign
[nothing detected] (script) netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js
     status: (referer=weatherfor.us/)saved 29110 bytes 5814e91bb6276f4de8b7951c965f2f190a03978d
     info: [decodingLevel=0] found JavaScript
     error: line:8: Bootstrap's JavaScript requires jQuery
     file: 5814e91bb6276f4de8b7951c965f2f190a03978d: 29110 bytes

Decoded Files
5814/e91bb6276f4de8b7951c965f2f190a03978d from netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js (29110 bytes) download


weatherfor.us/widget?skin=mini&location=Newyork benign
[nothing detected] (iframe) weatherfor.us/widget?skin=mini&location=Newyork
     status: (referer=weatherfor.us/)saved 6425 bytes dc4691b32981838c401b98f04eacf38d950fdb7c
     info: [script] cdnjs.cloudflare.com/ajax/libs/onecolor/3.0.4/one-color.js
     info: [script] weatherfor.us/static/js/jquery.js
     info: [script] weatherfor.us/static/js/datacommons.js
     info: [script] weatherfor.us/static/js/minion/minion.page.js?_=251002
     info: [script] weatherfor.us/static/js/twantu.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable m
     info: [element] URL=www.google-analytics.com/analytics.js
     info: [1] no JavaScript
     file: dc4691b32981838c401b98f04eacf38d950fdb7c: 6425 bytes
     file: cc034b8ef7e51f6116d02c8aef2cc9fc89715a9a: 105 bytes

Decoded Files
dc46/91b32981838c401b98f04eacf38d950fdb7c from weatherfor.us/widget?skin=mini&location=Newyork (6425 bytes, 612 hidden) download

cc03/4b8ef7e51f6116d02c8aef2cc9fc89715a9a from weatherfor.us/widget?skin=mini&location=Newyork (105 bytes) download


weatherfor.us/ benign
[nothing detected] weatherfor.us/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 15489 bytes bf47988875ee5edd686afabecb4da647b99cc160
     info: [script] weatherfor.us/static/js/jquery.js
     info: [script] cdnjs.cloudflare.com/ajax/libs/Base64/0.2.1/base64.min.js
     info: [script] netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js
     info: [img] weatherfor.us/static/images/slide-0-bg.jpg
     info: [img] weatherfor.us/static/images/logo.png
     info: [iframe] weatherfor.us/widget?location=london&unit=c&key=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzZWNyZXQiOiI0ZWIwNTZkZWJlMzFjNjE4YjI0NTcyYjJkYWZhYWU2NTA1OWVmYmJmYmJmYmVjZjc5OWYzMmU2MDkyMTNlMGNhIiwiaWQiOiJqZWRpQHdlYXRoZXJmb3IudXMifQ.DOc3bMlusLO2m7zONB-XH-g6BrY5H6Hxc48DdhTzzZKfOaUB5BBXGdS-cS0fCOLm6dcJJkJ4vfz7YBBB9OuN25Fir0-L28EgzVqC0NXGPCS59yv8PK14G78iJpCT9tOmtLGLZ5TOUqI60Pg0T2lV3FSeV2sUo64rlUw-YQiyI-V6KofUj8ynIX8eJIMFykjd63gQqvlgZ5XBfyVdYbB9qDYwHni2IFDe8F_XhFKdGcMnD1sjSR4b-ctteEp44JmMGSxWArHyYgqtHxVa2sdwhMIGpiBIwmwgahp11Q9TPgkroSPSoYeomgjtTnudg6v9mLLuKLQd11sWkb1Y4Ow
     info: [iframe] weatherfor.us/widget?skin=mini&location=Newyork
     info: [script] form.jotform.com/static/feedback2.js
     info: [script] pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
     info: [img] bat.bing.com/action/0?ti=5523641&Ver=2
     info: [script] geo.weatherfor.us/json/?callback=__geoJSONPCallback
     info: [decodingLevel=0] found JavaScript
     error: undefined variable JotformFeedback
     error: line:19: TypeError: JotformFeedback is not a constructor
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html>
          error: line:3: ..............^
     file: bf47988875ee5edd686afabecb4da647b99cc160: 15489 bytes

Decoded Files
bf47/988875ee5edd686afabecb4da647b99cc160 from weatherfor.us/ (15489 bytes, 1517 hidden) download


weatherfor.us/static/js/minion/minion.page.js?_=251002 benign
[nothing detected] (script) weatherfor.us/static/js/minion/minion.page.js?_=251002
     status: (referer=weatherfor.us/widget?skin=mini&location=Newyork)saved 2344 bytes 7befe57347fd866b5a1b5bd47005020b522b47d8
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined function a
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: 7befe57347fd866b5a1b5bd47005020b522b47d8: 2344 bytes
     file: 2b5f7b6e6cd0b98039506738ce9980ff1449a578: 2628 bytes
     file: a8765bd6fa7f5f1f6444582c54e45867f4f2bdbb: 2821 bytes
     file: 2b4d94e6843de7b5dd005b35e066a513ccc46d3c: 3013 bytes
     file: d38c52d74e770f31aace245593cb46e503b70d9e: 2727 bytes
     file: d290163d6cc79cca75e4431177124049aa5cd96f: 2851 bytes

Decoded Files
7bef/e57347fd866b5a1b5bd47005020b522b47d8 from weatherfor.us/static/js/minion/minion.page.js?_=251002 (2344 bytes) download

2b5f/7b6e6cd0b98039506738ce9980ff1449a578 from weatherfor.us/static/js/minion/minion.page.js?_=251002 (2628 bytes) download

a876/5bd6fa7f5f1f6444582c54e45867f4f2bdbb from weatherfor.us/static/js/minion/minion.page.js?_=251002 (2821 bytes) download

2b4d/94e6843de7b5dd005b35e066a513ccc46d3c from weatherfor.us/static/js/minion/minion.page.js?_=251002 (3013 bytes) download

d38c/52d74e770f31aace245593cb46e503b70d9e from weatherfor.us/static/js/minion/minion.page.js?_=251002 (2727 bytes) download

d290/163d6cc79cca75e4431177124049aa5cd96f from weatherfor.us/static/js/minion/minion.page.js?_=251002 (2851 bytes) download


pagead2.googlesyndication.com/pagead/js/adsbygoogle.js benign
[nothing detected] (script) pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
     status: (referer=weatherfor.us/)saved 67808 bytes dad0c702a3ff871078cfaef1fa5f2e4a69dd18bb
     info: [decodingLevel=0] found JavaScript
     info: [element] URL=pagead2.googlesyndication.com/pagead/js/undefined
     info: [element] URL=adservice.google.com/adsid/integrator.js?domain=undefined
     info: [decodingLevel=1] found JavaScript
     file: dad0c702a3ff871078cfaef1fa5f2e4a69dd18bb: 67808 bytes
     file: 9f961cadcc007784cad0decc9d4dddd73835a7e3: 297 bytes

Decoded Files
dad0/c702a3ff871078cfaef1fa5f2e4a69dd18bb from pagead2.googlesyndication.com/pagead/js/adsbygoogle.js (67808 bytes) download

9f96/1cadcc007784cad0decc9d4dddd73835a7e3 from pagead2.googlesyndication.com/pagead/js/adsbygoogle.js (297 bytes, 5 hidden) download