jsunpack - a generic JavaScript unpacker

live-hotmail.net/ benign

[nothing detected] live-hotmail.net/
status: (referer=http:/www.twitter.com/trends/)saved 9865 bytes 29f0f4cdc8f655df14732714866d4a3320046426
info: [javascript variable] URL=gfx1.mail.live.com/mail/w1/ltr/clear.gif
info: [javascript variable] URL=mail.live.com/default.aspx
info: [javascript variable] URL=join.msn.com/GBB?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&bk=1189430587&cru=http:/login.live.com/login.srf%3fwa%3dwsignin1.0%26rpsnv%3d10%26rver%3d4.5.2130.0%26wp%3dMBI%26wreply%3dhttp:%252F%252Fmail.live.com%252Fdefault.aspx%26id%3d64855
info: [javascript variable] URL=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&vv=500&lc=3082
info: [javascript variable] URL=login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/default.aspx&bk=1189430587&lm=I
info: [meta refresh] URL=login.live.com/jsDisabled.srf?lc=3082
info: [img] live-hotmail.net/login.files/clear.gif
info: [img] live-hotmail.net/login.files/WindowsLive.png
info: [img] live-hotmail.net/login.files/LiveID16.gif
info: [decodingLevel=0] found JavaScript
error: undefined variable onLLogin
error: undefined function onLLogin
info: [var QS] URL=live-hotmail.net/wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&bk=1189430587
info: [var uBrImg] URL=gfx1.mail.live.com/mail/w1/ltr/clear.gif
info: [var uPost] URL=login.live.com/ppsecure/post.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&bk=1189430587
info: [var uRet] URL=mail.live.com/default.aspx
info: [var uSSL] URL=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&bk=48187775
info: [var uReg] URL=join.msn.com/GBB?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&bk=1189430587&cru=http:/login.live.com/login.srf%3fwa%3dwsignin1.0%26rpsnv%3d10%26rver%3d4.5.2130.0%26wp%3dMBI%26w
info: [var uPwRst] URL=login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&bk=1189430587&lc=3082
info: [var uLogin] URL=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&vv=500&lc=3082
info: [var uSwUsr] URL=login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/default.aspx&bk=1189430587&lm=I
info: [var newurl] URL=login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/default.aspx&bk=1189430587&lm=I
info: [decodingLevel=1] found JavaScript
file: 29f0f4cdc8f655df14732714866d4a3320046426: 9865 bytes
file: 9840b125e0f18ba62f456da83ec45a034289f57c: 1859 bytes

Decoded Files

29f0/f4cdc8f655df14732714866d4a3320046426 from live-hotmail.net/ (9865 bytes, 2 hidden) download

9840/b125e0f18ba62f456da83ec45a034289f57c from live-hotmail.net/ (1859 bytes) download

//jsunpack.url var g_QS = wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&bk=1189430587  //jsunpack.url var srf_uBrImg = http://gfx1.mail.live.com/mail/w1/ltr/clear.gif  //jsunpack.url var srf_uPost = https://login.live.com/ppsecure/post.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&bk=1189430587  //jsunpack.url var srf_uRet = http://mail.live.com/default.aspx  //jsunpack.url var srf_uSSL = https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&bk=48187775  //jsunpack.url var srf_uReg = http://join.msn.com/GBB?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&bk=1189430587&cru=http://login.live.com/login.srf%3fwa%3dwsignin1.0%26rpsnv%3d10%26rver%3d4.5.2130.0%26wp%3dMBI%26w  //jsunpack.url var srf_uPwRst = https://login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&bk=1189430587&lc=3082  //jsunpack.url var srf_uLogin = http://login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&vv=500&lc=3082  //jsunpack.url var srf_uSwUsr = http://login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&wlsu=1&ru=http://mail.live.com/default.aspx&bk=1189430587&lm=I  //jsunpack.url var newurl = http://login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&wlsu=1&ru=http://mail.live.com/default.aspx&bk=1189430587&lm=I

login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/default.aspx&bk=1189430587&lm=I benign

[nothing detected] (var newurl) login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/default.aspx&bk=1189430587&lm=I
status: (referer=live-hotmail.net/)saved 3324 bytes b661f67d30e21e9c79225ba3b8b8b0056ef2eedf
info: [javascript variable] URL=login.live.com/gls.srf?urlID=MSNPrivacyStatement&mkt=EN-US&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WLHelpCentral&mkt=EN-US&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WLFeedback&mkt=EN-US&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WinLiveTermsOfUse&mkt=EN-US&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WLAbout&mkt=EN-US&vv=1300
info: [meta refresh] URL=login.live.com/uilogout.srf?mkt=EN-US&lc=1033&id=64855&ru=http:/mail.live.com/default.aspx&lm=I&wp=MBI&wa=wsignin1.0&wreply=http:/mail.live.com/default.aspx&nsvis=&ec=1
info: [script] login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/js/LCore.js?x=13.0.20177.0
info: [script] login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/js/LoginACore.js?x=13.0.20177.0
info: [decodingLevel=0] found JavaScript
error: undefined variable LogoutNoUI_onload
error: undefined function LogoutNoUI_onload
info: [var uPrivacy] URL=login.live.com/gls.srf?urlID=MSNPrivacyStatement&mkt=EN-US&vv=1300
info: [var uHelp] URL=login.live.com/gls.srf?urlID=WLHelpCentral&mkt=EN-US&vv=1300
info: [var uFeedback] URL=login.live.com/gls.srf?urlID=WLFeedback&mkt=EN-US&vv=1300
info: [var uTerms] URL=login.live.com/gls.srf?urlID=WinLiveTermsOfUse&mkt=EN-US&vv=1300
info: [var uAbout] URL=login.live.com/gls.srf?urlID=WLAbout&mkt=EN-US&vv=1300
info: [var newurl] URL=login.live.com/gls.srf?urlID=WLAbout&mkt=EN-US&vv=1300
info: [decodingLevel=1] found JavaScript
error: line:6: SyntaxError: missing ; before statement:
error: line:6: <script type="text/javascript" src="js/LCore.js?x=13.0.20177.0"></script><script type="text/javascript" src="js/LoginACore.js?x=13.0.20177.0"></script>
error: line:6: ...............................................................................^
file: b661f67d30e21e9c79225ba3b8b8b0056ef2eedf: 3324 bytes
file: 4978f23b2f0aed7c0dbea8fb2d899d99923d478a: 784 bytes

Decoded Files

b661/f67d30e21e9c79225ba3b8b8b0056ef2eedf from login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/default.aspx&bk=1189430587&lm=I (3324 bytes, 10 hidden) download

4978/f23b2f0aed7c0dbea8fb2d899d99923d478a from login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/default.aspx&bk=1189430587&lm=I (784 bytes) download

login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=48187775 benign

[nothing detected] (var uSSL) login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=48187775
status: (referer=live-hotmail.net/)saved 11978 bytes a525e2927c4e516df639610dad6c9e072bf9584a
info: [javascript variable] URL=mail.live.com/mail/about.aspx
info: [javascript variable] URL=mail.live.com/default.aspx
info: [javascript variable] URL=login.live.com/gls.srf?urlID=MSNPrivacyStatement&mkt=EN-US&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WLHelpCentral&mkt=EN-US&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WLFeedback&mkt=EN-US&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WinLiveTermsOfUse&mkt=EN-US&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WLAbout&mkt=EN-US&vv=1300
info: [javascript variable] URL=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=48187775&vv=1300&mkt=EN-US&lc=1033
info: [javascript variable] URL=login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/default.aspx&bk=1335231325&lm=I
info: [javascript variable] URL=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=1300&mkt=EN-US&lc=1033&bk=1335231325
info: [javascript variable] URL=login.live.com/cookiesDisabled.srf?mkt=EN-US&lc=1033
info: [javascript variable] URL=login.live.com/hiphelp.srf?int=login&lc=1033&id=64855
info: [javascript variable] URL=Img.wlxrs.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/images/
info: [meta refresh] URL=login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033
info: [script] Js.wlxrs.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/js/LSJS1033.js
info: [script] Js.wlxrs.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/js/LCore.js
info: [decodingLevel=0] found JavaScript
error: line:6: SyntaxError: missing ; before statement:
   error: line:6: '&linktype=2\');\" id=\"i1686\">Learn More</a>";a["y19"]="You are now required to sign in at #~#partnerdomain#~#.";a["y20"]="Not associated with #~#fedbrandname#~#? You must <a href="">rename the account</a>.";a["b1"]="One Windows Live ID gets you into <b
   error: line:6: ............................................................................................................................^
error: line:6: SyntaxError: missing ; before statement:
   error: line:6: <html dir="ltr" lang="EN-US"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=5"/><script type="text/javascript">var dtFirstByte=new Date();</script><base href="http:/login.live.co
   error: line:6: .^
file: a525e2927c4e516df639610dad6c9e072bf9584a: 11978 bytes

Decoded Files

a525/e2927c4e516df639610dad6c9e072bf9584a from login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=48187775 (11978 bytes, 24 hidden) download

<html dir="ltr" lang="EN-US"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=5"/><script type="text/javascript">var g_dtFirstByte=new Date();</script><base href="http://login.live.com/pp1300/"/><noscript><meta http-equiv="Refresh" content="0; URL=http://login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033"/>Windows Live ID requires JavaScript to sign in. This web browser either does not support JavaScript, or scripts are being blocked.<br /><br />To find out whether your browser supports JavaScript, or to allow scripts, see the browser's online help.</noscript><title>Sign In</title><meta name="description" content="Powerful free e-mail with security from Microsoft - Windows Live Hotmail is a best in class e-mail service that helps you organize and manage all your online stuff in one place"/><meta name="PageID" content="i5030"/><meta name="SiteID" content="64855"/><meta name="ReqLC" content="1033"/><meta name="LocLC" content="1033"/><script type="text/javascript"></script><link rel="shortcut icon" href="http://Img.wlxrs.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/images/favicon.ico" /> <link rel="image_src" href="http://Img.wlxrs.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/images/Windows_Live_v_thumb.jpg" / > <script type="text/javascript">function _v38(a){a=a||[];a["y16"]="Your organization #~#partnerdomain#~# does not let its users access this service. Please sign in with a different Live ID or create a new account. <a href=\"javascript:DoHelp(\'\',\'\',\'1033\',\',1033\',\'\',\'1300\',\'&linktype=2\');\" id=\"i1686\">Learn More</a>";a["y19"]="You are now required to sign in at #~#partnerdomain#~#.";a["y20"]="Not associated with #~#fedbrandname#~#? You must <a href=\"#~#FederationRenameURL_LS#~#\" id=\"i1687\">rename the account</a>.";a["b1"]="One Windows Live ID gets you into <b>Hotmail</b>, <b>Messenger</b>, <b>Xbox LIVE</b>  and other Microsoft services.";a["b23"]="&copy;2012 Microsoft";a["n0"]="Windows Live is not affiliated with  and will share with it only an anonymous ID. <a href=\"javascript:DoHelp(\'ni_ngis_driht\',\'\',\'1033\',\'DH_MSN,1033\',\'\',\'1300\',\'&format=b1\');\" id=\"idPaneHelpUniqueIDExplainLink9\">Learn more</a>.";a["dd3"]="If you\'re signing in from a public computer, you can use a single use code instead of your password for added security. <a href=\"javascript:DoHelp(\'\',\'\',\'1033\',\',1033\',\'\',\'1300\',\'&linktype=3\');\" id=\"idPaneHelpOTCInfoLink9\">Learn more</a>";a["dd23"]="Phone number must be the same as the one you registered with Windows Live. <a href=\"javascript:DoHelp(\'\',\'\',\'1033\',\',1033\',\'\',\'1300\',\'&linktype=3\');\" id=\"idPaneHelpOTCInfoLink9\">Learn more</a>";a["dd33"]="Your session has timed out. To request a single use code, please <a href=\"javascript:NewOTCRequest()\">refresh the page</a>.";a["ll2"]="To sign in again match the characters in the picture. <a href=\"javascript:DoHelp(\'pih\',\'\',\'1033\',\'DH_MSN,1033\',\'\',\'1300\',\'&format=b1\');\" id=\"i1577\">Why?</a>";return a} var PROOF = {};PROOF.Type = {SQSA: 6, CSS: 5, DeviceId: 4, Email: 1, AltEmail: 2, SMS: 3, HIP: 8, Birthday: 9, Voice: -3};var g_iSRSFailed=0,g_sSRSSuccess="";function _v27(a,f,b){var e=1,d=unescape('%3Cscript type="text/javascript" src="'),c=unescape('"%3E%3C/script%3E');if(g_sSRSSuccess.indexOf(a)!=-1)return;if(typeof window[a]=="undefined"){g_iSRSFailed=1;b<=e&&document.write(d+f+c)}else g_sSRSSuccess+=a+"|"+b+","} var ServerData = {iLoginMode:1,iBHOState:0,html:[],str:[]};var g_objPageMode = null;var g_QS="wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http://mail.live.com/default.aspx&id=64855&bk=1335231325";var srf_sBrHdr='';var srf_sBrTtl='Hotmail';var srf_sBrSTtl='##li4##Powerful Microsoft technology helps fight spam and improve security.##li19##Get all your e-mail accounts, calendars, and contacts in one place - even if you use other e-mail services.##li16##New! Chat from your inbox, see what\&#39;s new with friends, and get 5 GB storage that grows when you need it.##BR## ##BR## ##A##Learn more##/A##';var srf_uBrImg='';var srf_sUpLnk='http://mail.live.com/mail/about.aspx';var srf_iHdrCBMode = 0;var srf_iPrdCBMode = 3;var srf_uHdrIFrame = '';var srf_uPrdIFrame = '';var srf_uCustomJS  = '';var srf_uCobrandingLogo = '';var srf_fValProp=1;var srf_fSignup=1;var srf_oTemplate=new Object();var srf_uPost='https://login.live.com/ppsecure/post.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http://mail.live.com/default.aspx&id=64855&bk=1335231325';var srf_uRet="http://mail.live.com/default.aspx";var srf_uSSL='https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http://mail.live.com/default.aspx&id=64855&bk=5725138';var srf

login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&lc=3082 benign

[nothing detected] (var uPwRst) login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&lc=3082
status: (referer=live-hotmail.net/)saved 34763 bytes 50da4107344142cd97d48d2b9aa72e7954b0f311
info: [meta refresh] URL=login.live.com/error.aspx?ru=https%3A%2F%2Flogin%2Elive%2Ecom%2Flogin%2Esrf%3Flc%3D3082%26mkt%3DES%2DES%26wa%3Dwsignin1%2E0%26rpsnv%3D10%26ct%3D1189430587%26rver%3D4%2E5%2E2130%2E0%26wp%3DMBI%26wreply%3Dhttp%3A%2F%2Fmail%2Elive%2Ecom%2Fdefault%2Easpx%26id%3D64855%26bk%3D1189430587%26lc%3D3082%26vv%3D1300&mkt=es-es&errcode=1045
info: [img] https:/secure.wlxrs.com/$live.controls.images/is/invis.gif
info: [script] login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/
info: [script] secure.wlxrs.com/_D/pyPeAhocAxBh4XbBxP2oHA/jquery-min.js
info: [script] secure.wlxrs.com/pyPeAhocAxBh4XbBxP2oHA/wlive.js
info: [script] secure.wlxrs.com/pyPeAhocAxBh4XbBxP2oHA/livedep.js
info: [script] https:/secure.wlxrs.com/pyPeAhocAxBh4XbBxP2oHA/FireAnt.js
info: [script] https:/secure.shared.live.com/Jds9Yl5RKM3m6jhzzWeX2IvZ7CclQVa73nqXV1GP!ZnYYjQnXOI6!s4QyCuO6vf5oITZXcPkATsv08ErVs6dtahFrWlgW0kbq4Ly-vg4Pw36t4vmMlkg5A/ClientStrings.js?amx=16.3.3010.420
info: [script] https:/secure.shared.live.com/BGHKBH60ltC!jeugsxfw2g/JS/ResetPassword.js
info: [decodingLevel=0] found JavaScript
error: line:144: SyntaxError: missing ) after condition:
   error: line:144: ar g=h.split("."),e=window,c=window["$Config"],b=c&&c.BSI,a=b&&b.Watson,d,f;while(g.length&&!!(e=e[g.shift()]));if(!e){document.write('</scr'+"ipt>");if(a&&a.enabled;)try{d="/"+c.hn+"/handlers/Watson.mvc";if(a.url)d=a.url;f=new Image;d+="?xid="+b.xid+"&r
   error: line:144: .....................................................................................................................................................................^
error: line:3: SyntaxError: missing = in XML attribute:
   error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
   error: line:3: ...............^
file: 50da4107344142cd97d48d2b9aa72e7954b0f311: 34763 bytes

Decoded Files

50da/4107344142cd97d48d2b9aa72e7954b0f311 from login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&lc=3082 (34763 bytes, 2414 hidden) download

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xmlns:web="http://www.live.com/schemas" style="">   <head><script type="text/javascript">//<![CDATA[ window["$BSI"]={headTime:(new Date).getTime()};window["$CSIPerf"]={lapse:[{},{s:"h",t:$BSI.headTime}],csd:{},_ttg:$BSI.headTime} //]]></script><script type="text/javascript">//<![CDATA[  var $CJ={"p":"4CDidSZI0SaAgorJ5843ICTYcid\u002fTbmdQsdC7uIekdU\u003d0","c":null}; //]]></script><script type="text/javascript">//<![CDATA[ var _d=document,_dh=_d.getElementsByTagName("head")[0];function _ge(a){return _d.getElementById(a)}var $U={a:"^((ftp|http|https):)?//",isAbsoluteUrl:function(b){var a=new RegExp($U.a,"i");return a.test(b)},doesMatchHost:function(b,d){var f="^(mailto|tel|sms):",h=new RegExp(f,"i"),e=$U.a+"([^:/]*([:][^@/]*)?[@])?([-.a-z0-9]*)[^-.a-z0-9]?",g=new RegExp(e,"i"),k=$U.isAbsoluteUrl(b),a=(String(b).search(g)<0?"":RegExp.$5).toLowerCase(),j=h.test(b),c="."+d,i=a.substr(a.length-c.length)==c||a==""||a.charAt(0)=="#"||a==d;return (!k||i)&&!j},isLinkABookmark:function(a){var c=_d.createElement("span");c.innerHTML='<a href="#"></a>';var e=c.firstChild.href,b=a.indexOf("#"),d=a.indexOf("javascript:");if(b>-1)if(b==0||a.indexOf(e)==0)return 1;if(d==0)return 1;return 0},getUrlFragment:function(c){var a="",b=c.indexOf("#");if(b>-1)a=c.substr(b+1);return a}} //]]></script><script type="text/javascript">//<![CDATA[  //]]></script><script type="text/javascript">//<![CDATA[ (function(){var a=window.$Static={},i=0,b=[],d={},f={},e=1,g=1,h=1,j=0;a.queue=function p(l,j,i,e){var g=new k(l,j||0,i||[],!!e,b.length);b.push(g);d[g.f]=g;if(!!e){e.push(g.f);for(var h=0;h<e.length;h++)(f[e[h]]=f[e[h]]||[]).push(g)}c();return a};a.exec=function q(e){var d=0,a=f[e];if(!!a){d=2;for(var b=0;b<a.length;b++){a[b].e();if(2>a[b].s)d=1}c()}return d};a.shutdown=function m(){j=1};a.pause=function o(a){e=!a;g=0};a.resume=function n(){e=1;g=1;c()};a.stall=function s(){e=0};a.page=function r(){var d,f=$Do.q;e=1;h=0;a.max=1;for(d=0;d<b.length;d++)b[d].x();for(d=0;d<f.length;d++)a.exec(f[d].id);c()};function c(){setTimeout(function(){var d;b.sort(function(a,b){return a.z()-b.z()});for(d=0;d<b.length&&!h;d++){var c=b[d];if(!c.d&&3>c.s&&!c.p(4)){var f=c.h=_d.createElement(c.j?"script":"link");if(c.j)f.src=c.u;else{f.href=c.u;f.rel="StyleSheet"}f.onload=c.x;f.onreadystatechange=c.y;_dh.appendChild(f);c.s=3}}for(d=0;d<b.length&&i<a.max*e;d++){var c=b[d];if(!(c.s||c.d&&(!g||h))){c.s=1;i++;l(c)}}},0)}function l(b){a.load(b.u,function(){if(2>b.s)b.s=2;i--;c()})}function k(f,h,b,e,g){var a=this;a.u=f;a.f=f.split(/[?#]/)[0].split("/").pop();a.j=!a.f.match(/\.css$/);a.d=e;a.s=0;a.h=0;a.e=function k(){a.d=0;for(var c=0;c<b.length;c++)if(!!d[b[c]])d[b[c]].e()};a.x=function m(){var b=$Do.register;if(!j&&(!e||a.h)){a.s=4;b&&b(a.f);c()}};a.y=function i(){var b=a.h.readyState;if("loaded"==b||"complete"==b)a.x()};a.p=function l(c){for(var a=0;a<b.length;a++)if(!d[b[a]]||c>d[b[a]].s)return 1;return 0};a.z=function n(){return g+64*a.j+128*h+16384*a.d+32768*a.p(1)}}})();(function(){var b=window.$Static,a=[];b.load=function(d,c){var b=_d.createElement("script");b.onreadystatechange=function(){if(b.readyState=="loaded")c()};b.src=d;a.push(b)}})();$Static.max=2;$Static.queue('https\x3a\x2f\x2fsecure.wlxrs.com\x2f_D\x2fpyPeAhocAxBh4XbBxP2oHA\x2fjquery-min.js').queue('https\x3a\x2f\x2fsecure.wlxrs.com\x2fpyPeAhocAxBh4XbBxP2oHA\x2fwlive.js').queue('https\x3a\x2f\x2fsecure.wlxrs.com\x2fpyPeAhocAxBh4XbBxP2oHA\x2flivedep.js').queue('https\x3a\x2f\x2fsecure.wlxrs.com\x2fpyPeAhocAxBh4XbBxP2oHA\x2fFireAnt.js',20).queue('https\x3a\x2f\x2fsecure.shared.live.com\x2fJds9Yl5RKM3m6jhzzWeX2IvZ7CclQVa73nqXV1GP\x21ZnYYjQnXOI6\x21s4QyCuO6vf5oITZXcPkATsv08ErVs6dtahFrWlgW0kbq4Ly-vg4Pw36t4vmMlkg5A\x2fClientStrings.js\x3famx\x3d16.3.3010.420',40); //]]></script><link rel="StyleSheet" href="https://secure.wlxrs.com/JiEa80FFgbtk89BsRu1hrUPvsXsw40migT9-y6ol-xn96b5Nv9gcV9S3ZI1EnA4UadHNq0I8RJfat2cL8mvNj5EGCh!k2zLXcDKlmzG2fcE/Base/16.3.3382/NYKpPzcj59cAccountCSSX.css?ZfDHJ0dwkwrfIMoja3-R7w" type="text/css"/><style id="themecss" type="text/css">.t_sel{background-color:#DDECFE;border:1px solid #83AADA;}.t_seli{background-color:#DDECFE !important;border:1px solid #83AADA !important;}.t_hov{background-color:#F3F7FD;border:1px solid #BBD8FB;}.t_hovl a:hover{background-color:#F3F7FD;border:1px solid #BBD8FB;}.t_hovl a.sel{background-color:#DDECFE;border:1px solid #83AADA;}.t_hovlt a:hover .t_hovlt{background-color:#F3F7FD;border:1px solid #BBD8FB;}.t_hbg:hover{background-color:#F3F7FD;}.t_hdt,h1,.t_hdt a,.t_hdt a:visited,.t_hdt a:hover,.t_hdt a:link{color:#000;}.t_hdst,.t_hdt .c_hp li .link{color:#555;}.t_hp{border-left:1px solid #555;border-right:1px solid #555;}.t_hdbg{background-color:#d6eef8;}h2,h2 a,h2 a:visited,h3,h3 a,h3 a:visited,h4,h5,h6,.t_cht{color:#006E12 !important;}.t_hdbg{background-color:#d6eef8;}a,a:hover,.t_lnk

mail.live.com/default.aspx benign

[nothing detected] (jsvar) mail.live.com/default.aspx
status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)saved 13181 bytes 2d75f28b8f5bef9299ad3ffa1f2a59a4a856252c
info: [javascript variable] URL=mail.live.com/mail/about.aspx
info: [javascript variable] URL=mail.live.com/default.aspx?rru=inbox
info: [javascript variable] URL=login.live.com/gls.srf?urlID=MSNPrivacyStatement&mkt=EN-US&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WLHelpCentral&mkt=EN-US&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WLFeedback&mkt=EN-US&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WinLiveTermsOfUse&mkt=EN-US&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WLAbout&mkt=EN-US&vv=1300
info: [meta refresh] URL=login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033
info: [script] mail.live.com/Https:/secure.shared.live.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/js/LSJS1033.js
info: [script] mail.live.com/Https:/secure.shared.live.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/js/LCore.js
info: [decodingLevel=0] found JavaScript
error: line:6: SyntaxError: missing ; before statement:
   error: line:6: '&linktype=2\');\" id=\"i1686\">Learn More</a>";a["y19"]="You are now required to sign in at #~#partnerdomain#~#.";a["y20"]="Not associated with #~#fedbrandname#~#? You must <a href="">rename the account</a>.";a["b1"]="One Windows Live ID gets you into <b
   error: line:6: ............................................................................................................................^
error: line:6: SyntaxError: missing ; before statement:
   error: line:6: <html dir="ltr" lang="EN-US"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=5"/><script type="text/javascript">var dtFirstByte=new Date();</script><base href="https:/login.live.c
   error: line:6: .^
file: 2d75f28b8f5bef9299ad3ffa1f2a59a4a856252c: 13181 bytes

Decoded Files

2d75/f28b8f5bef9299ad3ffa1f2a59a4a856252c from mail.live.com/default.aspx (13181 bytes, 24 hidden) download

<html dir="ltr" lang="EN-US"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=5"/><script type="text/javascript">var g_dtFirstByte=new Date();</script><base href="https://login.live.com/pp1300/"/><noscript><meta http-equiv="Refresh" content="0; URL=https://login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033"/>Windows Live ID requires JavaScript to sign in. This web browser either does not support JavaScript, or scripts are being blocked.<br /><br />To find out whether your browser supports JavaScript, or to allow scripts, see the browser's online help.</noscript><title>Sign In</title><meta name="description" content="Powerful free e-mail with security from Microsoft - Windows Live Hotmail is a best in class e-mail service that helps you organize and manage all your online stuff in one place"/><meta name="PageID" content="i5030"/><meta name="SiteID" content="64855"/><meta name="ReqLC" content="1033"/><meta name="LocLC" content="1033"/><script type="text/javascript"></script><link rel="shortcut icon" href="Https://secure.shared.live.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/images/favicon.ico" /> <link rel="image_src" href="Https://secure.shared.live.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/images/Windows_Live_v_thumb.jpg" / > <script type="text/javascript">function _v38(a){a=a||[];a["y16"]="Your organization #~#partnerdomain#~# does not let its users access this service. Please sign in with a different Live ID or create a new account. <a href=\"javascript:DoHelp(\'\',\'\',\'1033\',\',1033\',\'\',\'1300\',\'&linktype=2\');\" id=\"i1686\">Learn More</a>";a["y19"]="You are now required to sign in at #~#partnerdomain#~#.";a["y20"]="Not associated with #~#fedbrandname#~#? You must <a href=\"#~#FederationRenameURL_LS#~#\" id=\"i1687\">rename the account</a>.";a["b1"]="One Windows Live ID gets you into <b>Hotmail</b>, <b>Messenger</b>, <b>Xbox LIVE</b>  and other Microsoft services.";a["b23"]="&copy;2012 Microsoft";a["n0"]="Windows Live is not affiliated with  and will share with it only an anonymous ID. <a href=\"javascript:DoHelp(\'ni_ngis_driht\',\'\',\'1033\',\'DH_MSN,1033\',\'\',\'1300\',\'&format=b1\');\" id=\"idPaneHelpUniqueIDExplainLink9\">Learn more</a>.";a["dd3"]="If you\'re signing in from a public computer, you can use a single use code instead of your password for added security. <a href=\"javascript:DoHelp(\'\',\'\',\'1033\',\',1033\',\'\',\'1300\',\'&linktype=3\');\" id=\"idPaneHelpOTCInfoLink9\">Learn more</a>";a["dd23"]="Phone number must be the same as the one you registered with Windows Live. <a href=\"javascript:DoHelp(\'\',\'\',\'1033\',\',1033\',\'\',\'1300\',\'&linktype=3\');\" id=\"idPaneHelpOTCInfoLink9\">Learn more</a>";a["dd33"]="Your session has timed out. To request a single use code, please <a href=\"javascript:NewOTCRequest()\">refresh the page</a>.";a["ll2"]="To sign in again match the characters in the picture. <a href=\"javascript:DoHelp(\'pih\',\'\',\'1033\',\'DH_MSN,1033\',\'\',\'1300\',\'&format=b1\');\" id=\"i1577\">Why?</a>";return a} var PROOF = {};PROOF.Type = {SQSA: 6, CSS: 5, DeviceId: 4, Email: 1, AltEmail: 2, SMS: 3, HIP: 8, Birthday: 9, Voice: -3};var g_iSRSFailed=0,g_sSRSSuccess="";function _v27(a,f,b){var e=1,d=unescape('%3Cscript type="text/javascript" src="'),c=unescape('"%3E%3C/script%3E');if(g_sSRSSuccess.indexOf(a)!=-1)return;if(typeof window[a]=="undefined"){g_iSRSFailed=1;b<=e&&document.write(d+f+c)}else g_sSRSSuccess+=a+"|"+b+","} var ServerData = {iLoginMode:1,iBHOState:0,html:[],str:[]};var g_objPageMode = null;var g_QS="wa=wsignin1.0&rpsnv=11&ct=1335231323&rver=6.1.6206.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx%3Frru%3Dinbox&lc=1033&id=64855&mkt=en-US&cbcxt=mai&snsc=1&bk=1335231324";var srf_sBrHdr='';var srf_sBrTtl='Hotmail';var srf_sBrSTtl='##li4##Powerful Microsoft technology helps fight spam and improve security.##li19##Get all your e-mail accounts, calendars, and contacts in one place - even if you use other e-mail services.##li16##New! Chat from your inbox, see what\&#39;s new with friends, and get 5 GB storage that grows when you need it.##BR## ##BR## ##A##Learn more##/A##';var srf_uBrImg='';var srf_sUpLnk='http://mail.live.com/mail/about.aspx';var srf_iHdrCBMode = 2;var srf_iPrdCBMode = 2;var srf_uHdrIFrame = 'https://secure.shared.live.com/~Live.SiteContent.Explore/~15.40.52/header/mai/EN-US/header.html?id=64855&mkt=EN-US&cbcxt=mai&ru=http://mail.live.com/default.aspx%3frru%3dinbox';var srf_uPrdIFrame = 'https://secure.shared.live.com/~Live.SiteContent.Explore/~15.40.52/mai/ssl/EN-US/product_facebook.html?id=64855&mkt=EN-US&cbcxt=mai&ru=http://mail.live.com/default.aspx%3frru%3dinbox';var srf_uCustomJS  = '';var srf_uCobrandingLogo = '

login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082 benign

[nothing detected] (var uLogin) login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082
status: (referer=live-hotmail.net/)saved 12623 bytes 17919fe5aaf861428b1efc6be0bb5d358640e124
info: [javascript variable] URL=mail.live.com/mail/about.aspx
info: [javascript variable] URL=mail.live.com/default.aspx
info: [javascript variable] URL=login.live.com/gls.srf?urlID=MSNPrivacyStatement&mkt=ES-ES&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WLHelpCentral&mkt=ES-ES&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WLFeedback&mkt=ES-ES&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WinLiveTermsOfUse&mkt=ES-ES&vv=1300
info: [javascript variable] URL=login.live.com/gls.srf?urlID=WLAbout&mkt=ES-ES&vv=1300
info: [javascript variable] URL=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=1300&mkt=ES-ES&lc=3082
info: [javascript variable] URL=login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082&wlsu=1&ru=http:/mail.live.com/default.aspx&bk=1335231318&lm=I
info: [javascript variable] URL=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=1300&mkt=ES-ES&lc=3082&bk=1335231318
info: [javascript variable] URL=login.live.com/cookiesDisabled.srf?mkt=ES-ES&lc=3082
info: [javascript variable] URL=login.live.com/hiphelp.srf?int=login&lc=3082&id=64855
info: [javascript variable] URL=Img.wlxrs.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/images/
info: [meta refresh] URL=login.live.com/jsDisabled.srf?mkt=ES-ES&lc=3082
info: [script] Js.wlxrs.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/js/LSJS3082.js
info: [script] Js.wlxrs.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/js/LCore.js
info: [decodingLevel=0] found JavaScript
error: line:6: SyntaxError: missing ; before statement:
   error: line:6: \',\'1300\',\'&linktype=2\');\" id=\"i1686\">Más información</a>";a["y19"]="Ahora, debe iniciar sesión en #~#partnerdomain#~#.";a["y20"]="¿No forma parte de #~#fedbrandname#~#? Debe <a href="">cambiar el nombre de la cuenta</a>.";a["b1"]="Los Windows
   error: line:6: ............................................................................................................................................^
error: line:6: SyntaxError: missing ; before statement:
   error: line:6: <html dir="ltr" lang="ES-ES"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=5"/><script type="text/javascript">var dtFirstByte=new Date();</script><base href="http:/login.live.co
   error: line:6: .^
file: 17919fe5aaf861428b1efc6be0bb5d358640e124: 12623 bytes

Decoded Files

1791/9fe5aaf861428b1efc6be0bb5d358640e124 from login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082 (12623 bytes, 115 hidden) download

<html dir="ltr" lang="ES-ES"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=5"/><script type="text/javascript">var g_dtFirstByte=new Date();</script><base href="http://login.live.com/pp1300/"/><noscript><meta http-equiv="Refresh" content="0; URL=http://login.live.com/jsDisabled.srf?mkt=ES-ES&lc=3082"/>Windows Live ID requiere JavaScript para iniciar sesin. Este explorador web no admite JavaScript o las secuencias de comandos estn bloqueadas.<br /><br />Para averiguar si el explorador admite JavaScript o para permitir las secuencias de comandos, consulte la ayuda en pantalla del explorador.</noscript><title>Iniciar sesin</title><meta name="description" content="El nuevo Hotmail ya est aqu. Es un sistema de correo electrnico eficaz y gratuito con las caractersticas de seguridad de Microsoft, 2 GB de espacio, un nuevo diseo y una seguridad mejorada. Estamos seguros de que te va a encantar."/><meta name="PageID" content="i5030"/><meta name="SiteID" content="64855"/><meta name="ReqLC" content="3082"/><meta name="LocLC" content="3082"/><script type="text/javascript"></script><link rel="shortcut icon" href="http://Img.wlxrs.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/images/favicon.ico" /> <link rel="image_src" href="http://Img.wlxrs.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/images/Windows_Live_v_thumb.jpg" / > <script type="text/javascript">function _v38(a){a=a||[];a["y16"]="La organizacin #~#partnerdomain#~# no permite que sus usuarios tengan acceso a este servicio. Inicie sesin con un Live ID distinto o cree una cuenta nueva. <a href=\"javascript:DoHelp(\'\',\'\',\'3082\',\',3082\',\'\',\'1300\',\'&linktype=2\');\" id=\"i1686\">Ms informacin</a>";a["y19"]="Ahora, debe iniciar sesin en #~#partnerdomain#~#.";a["y20"]="No forma parte de #~#fedbrandname#~#? Debe <a href=\"#~#FederationRenameURL_LS#~#\" id=\"i1687\">cambiar el nombre de la cuenta</a>.";a["b1"]="Los Windows Live ID le permiten tener acceso a <b>Hotmail</b>, <b>Messenger</b>, <b>Xbox LIVE</b> y a otros servicios de Microsoft.";a["b23"]="&copy;2012 Microsoft";a["n0"]="Windows Live no est afiliado a  y solo compartir con la aplicacin un id. annimo. <a href=\"javascript:DoHelp(\'ni_ngis_driht\',\'\',\'3082\',\'DH_MSN,3082\',\'\',\'1300\',\'&format=b1\');\" id=\"idPaneHelpUniqueIDExplainLink9\">Ms informacin</a>.";a["dd3"]="Si va a iniciar sesin desde un equipo pblico, para mayor seguridad puede usar un cdigo de un solo uso en lugar de su contrasea. <a href=\"javascript:DoHelp(\'\',\'\',\'3082\',\',3082\',\'\',\'1300\',\'&linktype=3\');\" id=\"idPaneHelpOTCInfoLink9\">Ms informacin</a>";a["dd23"]="El nmero de telfono debe ser el mismo que el que registr con Windows Live. <a href=\"javascript:DoHelp(\'\',\'\',\'3082\',\',3082\',\'\',\'1300\',\'&linktype=3\');\" id=\"idPaneHelpOTCInfoLink9\">Ms informacin</a>";a["dd33"]="Su sesin ha agotado el tiempo de espera. Para solicitar un cdigo de un solo uso, <a href=\"javascript:NewOTCRequest()\">actualice la pgina</a>.";a["ll2"]="Para iniciar sesin de nuevo, copie los caracteres de la imagen. <a href=\"javascript:DoHelp(\'pih\',\'\',\'3082\',\'DH_MSN,3082\',\'\',\'1300\',\'&format=b1\');\" id=\"i1577\">Por qu?</a>";return a} var PROOF = {};PROOF.Type = {SQSA: 6, CSS: 5, DeviceId: 4, Email: 1, AltEmail: 2, SMS: 3, HIP: 8, Birthday: 9, Voice: -3};var g_iSRSFailed=0,g_sSRSSuccess="";function _v27(a,f,b){var e=1,d=unescape('%3Cscript type="text/javascript" src="'),c=unescape('"%3E%3C/script%3E');if(g_sSRSSuccess.indexOf(a)!=-1)return;if(typeof window[a]=="undefined"){g_iSRSFailed=1;b<=e&&document.write(d+f+c)}else g_sSRSSuccess+=a+"|"+b+","} var ServerData = {iLoginMode:1,iBHOState:0,html:[],str:[]};var g_objPageMode = null;var g_QS="wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http://mail.live.com/default.aspx&id=64855&vv=500&lc=3082&bk=1335231318";var srf_sBrHdr='';var srf_sBrTtl='Hotmail';var srf_sBrSTtl='##li4##Eficaz tecnologa de Microsoft para combatir el correo no deseado y mejorar la seguridad.##li19##Rene todas tus cuentas de correo electrnico, tus calendarios y tus contactos en una nica ubicacin, aunque uses otros servicios de correo electrnico.##li16##Novedad! Charla desde tu bandeja de entrada, consulta las novedades de tus amigos y obtn un espacio de almacenamiento de 5 GB que aumenta a medida que lo necesitas.##BR## ##BR## ##A##Ms informacin##/A##';var srf_uBrImg='';var srf_sUpLnk='http://mail.live.com/mail/about.aspx';var srf_iHdrCBMode = 0;var srf_iPrdCBMode = 3;var srf_uHdrIFrame = '';var srf_uPrdIFrame = '';var srf_uCustomJS  = '';var srf_uCobrandingLogo = '';var srf_fValProp=1;var srf_fSignup=1;var srf_oTemplate=new Object();var srf_uPost='https://login.live.com/ppsecure/post

Submission permanent link a8721498ddbd9c4e7daf03e7543c89e8c750303c (Received 2012-04-23 21:21:21, http://live-hotmail.net/ )

All Malicious or Suspicious Elements of Submission

URL	Status
live-hotmail.net/	saved 9865 bytes 29f0f4cdc8f655df14732714866d4a3320046426

login.live.com/hiphelp.srf?int=login&lc=3082&id=64855	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=1300&mkt=EN-US&lc=1033&bk=133523132	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=48187775)

Js.wlxrs.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/js/LSJS1033.js	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=48187775)

login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082&wlsu=1&ru=http:/mail.live.com/default.aspx&bk=1335231318&lm=I	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

login.live.com/cookiesDisabled.srf?mkt=ES-ES&lc=3082	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

login.live.com/gls.srf?urlID=WinLiveTermsOfUse&mkt=EN-US&vv=1300	status: (referer=mail.live.com/default.aspx)

https:/secure.shared.live.com/Jds9Yl5RKM3m6jhzzWeX2IvZ7CclQVa73nqXV1GP!ZnYYjQnXOI6!s4QyCuO6vf5oITZXcPkATsv08ErVs6dtahFrWlgW0kbq4Ly-vg4Pw36t4vmMlkg5A/ClientStrings.js?amx=16.3.3010.420	status: (referer=login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&lc=3082)

login.live.com/jsDisabled.srf?mkt=ES-ES&lc=3082	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

login.live.com/uilogout.srf?mkt=EN-US&lc=1033&id=64855&ru=http:/mail.live.com/default.aspx&lm=I&wp=MBI&wa=wsignin1.0&wreply=http:/mail.live.com/default.aspx&nsvis=&ec=1	status: (referer=login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/default.aspx&bk=1189430587&lm=I)

secure.wlxrs.com/_D/pyPeAhocAxBh4XbBxP2oHA/jquery-min.js	status: (referer=login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&lc=3082)

login.live.com/ppsecure/post.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587	status: (referer=live-hotmail.net/)

login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/js/LCore.js?x=13.0.20177.0	status: (referer=login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/default.aspx&bk=1189430587&lm=I)

mail.live.com/Https:/secure.shared.live.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/js/LSJS1033.js	status: (referer=mail.live.com/default.aspx)

login.live.com/gls.srf?urlID=WLFeedback&mkt=EN-US&vv=1300	status: (referer=mail.live.com/default.aspx)

Js.wlxrs.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/js/LSJS3082.js	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

login.live.com/gls.srf?urlID=WinLiveTermsOfUse&mkt=ES-ES&vv=1300	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

join.msn.com/GBB?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&cru=http:/login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&w	status: (referer=live-hotmail.net/)

login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/js/LoginACore.js?x=13.0.20177.0	status: (referer=login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/default.aspx&bk=1189430587&lm=I)

https:/secure.shared.live.com/BGHKBH60ltC!jeugsxfw2g/JS/ResetPassword.js	status: (referer=login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&lc=3082)

mail.live.com/Https:/secure.shared.live.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/js/LCore.js	status: (referer=mail.live.com/default.aspx)

login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=48187775&vv=1300&mkt=EN-US&lc=1033	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=48187775)

login.live.com/gls.srf?urlID=MSNPrivacyStatement&mkt=EN-US&vv=1300	status: (referer=mail.live.com/default.aspx)

login.live.com/gls.srf?urlID=MSNPrivacyStatement&mkt=ES-ES&vv=1300	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

secure.wlxrs.com/pyPeAhocAxBh4XbBxP2oHA/livedep.js	status: (referer=login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&lc=3082)

login.live.com/jsDisabled.srf?lc=3082	status: (referer=live-hotmail.net/)

login.live.com/gls.srf?urlID=WLAbout&mkt=ES-ES&vv=1300	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

login.live.com/error.aspx?ru=https:/login.live.com/login.srf?lc=3082&mkt=ES-ES&wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&lc=3082&vv=1300&mkt=es-es&errcode=1045	status: (referer=login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&lc=3082)

Js.wlxrs.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/js/LCore.js	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=1300&mk	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

https:/secure.wlxrs.com/pyPeAhocAxBh4XbBxP2oHA/FireAnt.js	status: (referer=login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&lc=3082)

join.msn.com/GBB?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&cru=http:/login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%

Img.wlxrs.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/images/	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=1300&mkt=ES-ES&lc=3082	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/	status: (referer=login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&lc=3082)

join.msn.com/GBB?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&cru=http:/login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/defa	status: (referer=live-hotmail.net/)failure: <urlopen error [Errno -2] Name or service not known>

login.live.com/gls.srf?urlID=WLAbout&mkt=EN-US&vv=1300	status: (referer=mail.live.com/default.aspx)

login.live.com/gls.srf?urlID=WLHelpCentral&mkt=ES-ES&vv=1300	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

login.live.com/logout.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&wlsu=1&ru=http:/mail.live.com/default.aspx&bk=1335231325&lm=I	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=48187775)

mail.live.com/mail/about.aspx	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

mail.live.com/default.aspx?rru=inbox	status: (referer=mail.live.com/default.aspx)

login.live.com/cookiesDisabled.srf?mkt=EN-US&lc=1033	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=48187775)

login.live.com/hiphelp.srf?int=login&lc=1033&id=64855	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=48187775)

login.live.com/gls.srf?urlID=WLHelpCentral&mkt=EN-US&vv=1300	status: (referer=mail.live.com/default.aspx)

login.live.com/gls.srf?urlID=WLFeedback&mkt=ES-ES&vv=1300	status: (referer=login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&vv=500&lc=3082)

secure.wlxrs.com/pyPeAhocAxBh4XbBxP2oHA/wlive.js	status: (referer=login.live.com/resetpw.srf?wa=wsignin1.0&rpsnv=10&ct=1189430587&rver=4.5.2130.0&wp=MBI&wreply=http:/mail.live.com/default.aspx&id=64855&bk=1189430587&lc=3082)

login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033	status: (referer=mail.live.com/default.aspx)