JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 58a5ac291059e9b4fe7ae32ac83a130d06d9157b (Received 2017-04-21 10:59:44, http://www.shemalezzz.com/ )

URLStatus
www.shemalezzz.com/ saved 79166 bytes 7f5b96a0306114a1ec79adf1ea4b65520152ec55

www.shemalezzz.com/stp/js/custom/js.js status: (referer=www.shemalezzz.com/)

www.shemalezzz.com/stp/js/jquery/undefined status: (referer=www.shemalezzz.com/stp/js/jquery/jquery.js)

syndication.exoclick.com/ads.php?type=160x600&login=inteligent&cat=142&search=&color=0000cc&bgcolor=FFFFFF&border=0&color=000000&font=&keywords=&color=000000&color=008000&adult=0&sub=&only=0&thumb=&idzone=82 status: (referer=www.shemalezzz.com/)

www.shemalezzz.com/stp/js/custom/custom.js status: (referer=www.shemalezzz.com/)

ads.livepromotools.com/WizardHandler.aspx?template=4&site=Shemale&queryid=6&platform=1&programid=275&wid=125256098190&promo=&bwt=160&bht=600&bcolor=ffffff&mncl=FFFFFF&mnfs=11&hfcl=FFFFFF&hfs=18&htext=&mbuttonfs=12&mblC=000000&ftext=&mblch=FFFFFF&mbutton=8 status: (referer=www.shemalezzz.com/)

syndication.exoclick.com/splash.php?cat=142&idsite=180283&idzone=478099&login=inteligent&type=3 status: (referer=www.shemalezzz.com/)

www.shemalezzz.com/stp/js/js/core.js status: (referer=www.shemalezzz.com/)

www.shemalezzz.com/stp/js/yetii.js status: (referer=www.shemalezzz.com/)

www.shemalezzz.com/stp/js/custom/undefined status: (referer=www.shemalezzz.com/stp/js/custom/widget.js)

syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=inteligent&cat=142&search=&color=0000cc&bgcolor=FFFFFF&border=0&color=000000&font=&keywords=&color=000000&color=008000&adult=0&sub=&only=0&t status: (referer=syndication.exoclick.com/ads.php?type=300x250&login=inteligent&cat=142&search=&color=0000cc&bgcolor=FFFFFF&border=0&color=000000&font=&keywords=&color=000000&color=008000&adult=0&sub=&only=0&thumb=&idzone=468739&idsite=180283)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
syndication.exoclick.com/ads.php?type=300x250&login=inteligent&cat=142&search=&color=0000cc&bgcolor=FFFFFF&border=0&color=000000&font=&keywords=&color=000000&color=008000&adult=0&sub=&only=0&thumb=&idzone=46 benign
[nothing detected] (script) syndication.exoclick.com/ads.php?type=300x250&login=inteligent&cat=142&search=&color=0000cc&bgcolor=FFFFFF&border=0&color=000000&font=&keywords=&color=000000&color=008000&adult=0&sub=&only=0&thumb=&idzone=468739&idsite=180283
     status: (referer=www.shemalezzz.com/)saved 649 bytes 8cbaa870092adce44ddb316fb24ec1fc943f7df6
     info: [iframe] syndication.exoclick.com/ads-iframe-display.php?type=300x250&login=inteligent&cat=142&search=&color=0000cc&bgcolor=FFFFFF&border=0&color=000000&font=&keywords=&color=000000&color=008000&adult=0&sub=&only=0&thumb=&idzone=468739&idsite=180283&p=
     file: 8cbaa870092adce44ddb316fb24ec1fc943f7df6: 649 bytes

Decoded Files
8cba/a870092adce44ddb316fb24ec1fc943f7df6 from syndication.exoclick.com/ads.php?type=300x250&login=inteligent&cat=142&search=&color=0000cc&bgcolor=FFFFFF&border=0&color=000000&font=&keywords=&color=000000&color=008000&adult=0&sub=&only=0&thumb=&idzone=46 (649 bytes) download


www.rulerclick.com/code/adspot/?sid=1193&bid=2566 benign
[nothing detected] (script) www.rulerclick.com/code/adspot/?sid=1193&bid=2566
     status: (referer=www.shemalezzz.com/)saved 3639 bytes 846fa8d739a03f0bd7b58fd33df13b748de3cf17
     info: [img] www.rulerclick.com/_system/templates/def/images/close.png
     info: [img] www.rulerclick.com/_files/adspot/1/0/1006_13737378253738.jpg
     file: 846fa8d739a03f0bd7b58fd33df13b748de3cf17: 3639 bytes

Decoded Files
846f/a8d739a03f0bd7b58fd33df13b748de3cf17 from www.rulerclick.com/code/adspot/?sid=1193&bid=2566 (3639 bytes, 37 hidden) download


www.shemalezzz.com/stp/js/rotate.js benign
[nothing detected] (script) www.shemalezzz.com/stp/js/rotate.js
     status: (referer=www.shemalezzz.com/)saved 810 bytes 950ad295e5591bbfc541a3b860f136c4a0fdf8cf
     file: 950ad295e5591bbfc541a3b860f136c4a0fdf8cf: 810 bytes

Decoded Files
950a/d295e5591bbfc541a3b860f136c4a0fdf8cf from www.shemalezzz.com/stp/js/rotate.js (810 bytes, 160 hidden) download


www.rulerclick.com/code/banner/?sid=1193&bid=2460 benign
[nothing detected] (script) www.rulerclick.com/code/banner/?sid=1193&bid=2460
     status: (referer=www.shemalezzz.com/)saved 619 bytes c9a9ba4f52f96ad3545a27fd30d954a4b3db769d
     info: [img] www.rulerclick.com/_files/banners/2/9/2939_13889495505115.gif
     info: [decodingLevel=0] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: c9a9ba4f52f96ad3545a27fd30d954a4b3db769d: 619 bytes
     file: ff5dbcbd9f8068f8295404d6ca938245721844e8: 871 bytes
     file: febb31dff83a5a153f4d0e7d2a37346c2a219a43: 877 bytes
     file: 8bbc29fdd0a1f3f76ee145e769e54fb40c09147d: 1086 bytes
     file: c7197ebbb67a90673ce1b5a930ebf4e82b802a1b: 1278 bytes
     file: 290f1a66f7a90dfd1c9fc3b99b9630a4a824f43c: 992 bytes
     file: 69cf5976b0d183996bdf9f13e6e641525bf8bfe9: 1116 bytes

Decoded Files
c9a9/ba4f52f96ad3545a27fd30d954a4b3db769d from www.rulerclick.com/code/banner/?sid=1193&bid=2460 (619 bytes) download

ff5d/bcbd9f8068f8295404d6ca938245721844e8 from www.rulerclick.com/code/banner/?sid=1193&bid=2460 (871 bytes) download

febb/31dff83a5a153f4d0e7d2a37346c2a219a43 from www.rulerclick.com/code/banner/?sid=1193&bid=2460 (877 bytes) download

8bbc/29fdd0a1f3f76ee145e769e54fb40c09147d from www.rulerclick.com/code/banner/?sid=1193&bid=2460 (1086 bytes) download

c719/7ebbb67a90673ce1b5a930ebf4e82b802a1b from www.rulerclick.com/code/banner/?sid=1193&bid=2460 (1278 bytes) download

290f/1a66f7a90dfd1c9fc3b99b9630a4a824f43c from www.rulerclick.com/code/banner/?sid=1193&bid=2460 (992 bytes) download

69cf/5976b0d183996bdf9f13e6e641525bf8bfe9 from www.rulerclick.com/code/banner/?sid=1193&bid=2460 (1116 bytes) download


www.shemalezzz.com/stp/js/jquery/jquery.js benign
[nothing detected] (script) www.shemalezzz.com/stp/js/jquery/jquery.js
     status: (referer=www.shemalezzz.com/)saved 85274 bytes 9d2984210d96431911ef648802871a267e16e31e
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined variable b.style
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var b.style = 1;
          error: line:1: ....^
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      72 bytes
     info: [element] URL=www.shemalezzz.com/stp/js/jquery/undefined
     info: [1] no JavaScript
     file: 9d2984210d96431911ef648802871a267e16e31e: 85274 bytes
     file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes

Decoded Files
9d29/84210d96431911ef648802871a267e16e31e from www.shemalezzz.com/stp/js/jquery/jquery.js (85274 bytes, 15 hidden) download

d5db/a94a76a67a54f2b98b16227da20414542fd9 from www.shemalezzz.com/stp/js/jquery/jquery.js (72 bytes) download


www.shemalezzz.com/stp/js/functions.js benign
[nothing detected] (script) www.shemalezzz.com/stp/js/functions.js
     status: (referer=www.shemalezzz.com/)saved 3577 bytes ab086226301c9c40a08ab6f53988c57f80c80a87
     info: [decodingLevel=0] found JavaScript
     file: ab086226301c9c40a08ab6f53988c57f80c80a87: 3577 bytes

Decoded Files
ab08/6226301c9c40a08ab6f53988c57f80c80a87 from www.shemalezzz.com/stp/js/functions.js (3577 bytes, 528 hidden) download


www.shemalezzz.com/ benign
[nothing detected] www.shemalezzz.com/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 79166 bytes 7f5b96a0306114a1ec79adf1ea4b65520152ec55
     info: [script] www.shemalezzz.com/stp/js/jquery/jquery.js
     info: [script] www.shemalezzz.com/stp/js/functions.js
     info: [script] www.shemalezzz.com/stp/js/rotate.js
     info: [script] www.shemalezzz.com/stp/js/yetii.js
     info: [script] www.shemalezzz.com/stp/js/js/core.js
     info: [script] www.shemalezzz.com/stp/js/custom/js.js
     info: [script] www.shemalezzz.com/stp/js/custom/custom.js
     info: [script] www.shemalezzz.com/stp/js/custom/widget.js
     info: [img] www.shemalezzz.com/stp/images/custom/book1.png
     info: [img] www.shemalezzz.com/images/videos/0957/11780/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0472/11782/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0343/11785/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0907/11767/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0607/11775/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0405/11802/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0902/11804/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0187/11807/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0258/11810/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0265/11811/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0882/11812/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0387/11817/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0220/11820/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0567/11821/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0132/11823/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0604/11825/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0698/11828/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0644/11829/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0143/11830/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0181/11652/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0775/11663/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0567/11664/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0912/11621/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0473/11622/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0645/11625/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0082/11626/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0418/11630/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0631/11631/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0009/11636/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0555/11639/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0557/11640/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0541/11641/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0097/11645/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0326/11649/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0463/11613/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0944/11614/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0488/11616/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0126/11617/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0505/11619/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0824/11620/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0077/9605/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0565/9559/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0300/6442/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0881/6856/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0208/5002/main.jpg
     info: [img] www.shemalezzz.com/images/videos/0175/5017/main.jpg
     info: [script] syndication.exoclick.com/ads.php?type=300x250&login=inteligent&cat=142&search=&color=0000cc&bgcolor=FFFFFF&border=0&color=000000&font=&keywords=&color=000000&color=008000&adult=0&sub=&only=0&thumb=&idzone=468739&idsite=180283
     info: [script] www.rulerclick.com/code/banner/?sid=1193&bid=2460
     info: [img] www.shemalezzz.com/images/avatars/0281/10152.jpg
     info: [img] www.shemalezzz.com/images/avatars/0624/9690.jpg
     info: [img] www.shemalezzz.com/images/avatars/0769/9487.jpg
     info: [img] www.shemalezzz.com/images/avatars/0825/9369.jpg
     info: [img] www.shemalezzz.com/images/avatars/0469/9046.jpg
     info: [img] www.shemalezzz.com/images/avatars/0047/7338.jpg
     info: [img] www.shemalezzz.com/images/avatars/0090/5137.jpg
     info: [img] www.shemalezzz.com/images/avatars/1000/4972.jpg
     info: [img] www.shemalezzz.com/images/avatars/0598/4475.jpg
     info: [img] www.shemalezzz.com/images/avatars/0682/4341.jpg
     info: [img] www.shemalezzz.com/images/avatars/0725/4032.jpg
     info: [img] www.shemalezzz.com/images/avatars/0300/3729.jpg
     info: [img] www.shemalezzz.com/images/avatars/0961/3559.jpg
     info: [img] www.shemalezzz.com/images/avatars/0530/3557.jpg
     info: [img] www.shemalezzz.com/images/avatars/0038/3554.jpg
     info: [img] www.shemalezzz.com/images/avatars/0943/3520.jpg
     info: [script] syndication.exoclick.com/ads.php?type=160x600&login=inteligent&cat=142&search=&color=0000cc&bgcolor=FFFFFF&border=0&color=000000&font=&keywords=&color=000000&color=008000&adult=0&sub=&only=0&thumb=&idzone=826018&idsite=180283
     info: [iframe] ads.livepromotools.com/WizardHandler.aspx?template=4&site=Shemale&queryid=6&platform=1&programid=275&wid=125256098190&promo=&bwt=160&bht=600&bcolor=ffffff&mncl=FFFFFF&mnfs=11&hfcl=FFFFFF&hfs=18&htext=&mbuttonfs=12&mblC=000000&ftext=&mblch=FFFFFF&mbutton=8&mbutton2=undefined&IsCustomMButton=0&IsCustomMButton2=0&ff=Arial&mbxbrdr=000000&mvmrgn=5&mhmrgn=5&hostsnum=4&mimgwt=148&mimght=111&mnbg=8&mb2lc=undefined&mb2lc=undefined&mbutton2fs=undefined&hfclh=777777&hht=0&ffcl=888888&ffclh=777777&ffs=18&fht=0&MdlLnd=201&MButtonLand=201&MButtonLand2=undefined&HTextLand=211&FTextLand=211&cols=1
     info: [img] www.shemalezzz.com/stp/images/custom/wr-ra.png
     info: [img] www.shemalezzz.com/stp/images/custom/wr-la.png
     info: [img] www.shemalezzz.com/stp/images/custom/wr-bga.png
     info: [script] cdn.popcash.net/pop.js
     info: [script] syndication.exoclick.com/splash.php?cat=142&idsite=180283&idzone=470628&login=inteligent&type=4
     info: [script] syndication.exoclick.com/splash.php?cat=142&idsite=180283&idzone=478099&login=inteligent&type=3
     info: [script] www.rulerclick.com/code/adspot/?sid=1193&bid=2566
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined function jQuery.noConflict
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
          error: line:3: ...............^
     file: 7f5b96a0306114a1ec79adf1ea4b65520152ec55: 79166 bytes

Decoded Files
7f5b/96a0306114a1ec79adf1ea4b65520152ec55 from www.shemalezzz.com/ (79166 bytes, 7790 hidden) download


cdn.popcash.net/pop.js benign
[nothing detected] (script) cdn.popcash.net/pop.js
     status: (referer=www.shemalezzz.com/)saved 2864 bytes 82f2a90df575632202259e7f26d06382db3a0318
     info: [decodingLevel=0] found JavaScript
     error: undefined variable i
     file: 82f2a90df575632202259e7f26d06382db3a0318: 2864 bytes

Decoded Files
82f2/a90df575632202259e7f26d06382db3a0318 from cdn.popcash.net/pop.js (2864 bytes) download


www.shemalezzz.com/stp/js/custom/widget.js benign
[nothing detected] (script) www.shemalezzz.com/stp/js/custom/widget.js
     status: (referer=www.shemalezzz.com/)saved 30593 bytes ec0af2ea7f9c98fe4e6ce274fed03fd84d9ceba9
     info: [decodingLevel=0] found JavaScript
     error: undefined variable z
     error: undefined function O.addEventListener
     error: undefined variable O
     info: Decoding option browser=Opera,      0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP,      319 bytes
     info: Decoding option browser=Firefox,      73 bytes
     info: Decoding option browser=IE8/Vista,      391 bytes
     info: [element] URL=www.shemalezzz.com/stp/js/custom/undefined
     info: [decodingLevel=1] found JavaScript
     file: ec0af2ea7f9c98fe4e6ce274fed03fd84d9ceba9: 30593 bytes
     file: 6e759a681b34f768501fea376558340f457b8667: 391 bytes

Decoded Files
ec0a/f2ea7f9c98fe4e6ce274fed03fd84d9ceba9 from www.shemalezzz.com/stp/js/custom/widget.js (30593 bytes) download

6e75/9a681b34f768501fea376558340f457b8667 from www.shemalezzz.com/stp/js/custom/widget.js (391 bytes, 66 hidden) download


syndication.exoclick.com/splash.php?cat=142&idsite=180283&idzone=470628&login=inteligent&type=4 benign
[nothing detected] (script) syndication.exoclick.com/splash.php?cat=142&idsite=180283&idzone=470628&login=inteligent&type=4
     status: (referer=www.shemalezzz.com/)saved 4401 bytes e7967a2e77242c9066ab5ef348b9f3bb3d919a8d
     info: [img] syndication.exoclick.com/
     info: [img] static.exoclick.com/6a97888ec52c042c679a36e919843cca/banners/400302/16823150815405738_1.gif
     info: [decodingLevel=0] found JavaScript
     info: [img] ads.exoclick.com/close.png
     info: [decodingLevel=1] found JavaScript
     error: line:11: SyntaxError: XML tag name mismatch (expected img):
          error: line:11: t="150;" src="http:/static.exoclick.com/6a97888ec52c042c679a36e919843cca/banners/400302/16823150815405738_1.gif"></a></div></div></div>
          error: line:11: ....................................................................................................................^
     file: e7967a2e77242c9066ab5ef348b9f3bb3d919a8d: 4401 bytes
     file: 8bd09a89573fc0a092cd21ab026c6f3dff9dfd1d: 1796 bytes

Decoded Files
e796/7a2e77242c9066ab5ef348b9f3bb3d919a8d from syndication.exoclick.com/splash.php?cat=142&idsite=180283&idzone=470628&login=inteligent&type=4 (4401 bytes, 316 hidden) download

8bd0/9a89573fc0a092cd21ab026c6f3dff9dfd1d from syndication.exoclick.com/splash.php?cat=142&idsite=180283&idzone=470628&login=inteligent&type=4 (1796 bytes, 10 hidden) download