JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link b78379cb8b941a21b3a774af14cb49b70aed8599 (Received 2017-12-07 05:30:05, http://stplayold.com/ar/222/mobile.js )

URLStatus
stplayold.com/ar/222/mobile.js saved 4912 bytes 1529ba908cf1bc86bdbdc1f3b9fd6e3b5dad7814

All Malicious or Suspicious Elements of Submission

None
wapnt.smsconsulting.company/suscribir.php? benign
[nothing detected] (jsvar) wapnt.smsconsulting.company/suscribir.php?
     status: (referer=stplayold.com/ar/222/mobile.js)saved 570 bytes dc818c2c3e030613d5bb2000da09c22cd49f2677
     info: [0] no JavaScript
     file: dc818c2c3e030613d5bb2000da09c22cd49f2677: 570 bytes

Decoded Files
dc81/8c2c3e030613d5bb2000da09c22cd49f2677 from wapnt.smsconsulting.company/suscribir.php? (570 bytes, 13 hidden) download


r383.stplaynew.com/play.php benign
[nothing detected] (jsvar) r383.stplaynew.com/play.php
     status: (referer=stplayold.com/ar/222/mobile.js)saved 240 bytes ea091f333fe4a057544eacccc4e6944e877a4e22
     info: [meta refresh] URL=system.admedx.com/pb/pub?pubid=1046&offerid=2210
     info: [0] no JavaScript
     file: ea091f333fe4a057544eacccc4e6944e877a4e22: 240 bytes

Decoded Files
ea09/1f333fe4a057544eacccc4e6944e877a4e22 from r383.stplaynew.com/play.php (240 bytes) download


system.admedx.com/pb/pub?pubid=1046&offerid=2210 benign
[nothing detected] (metarefresh) system.admedx.com/pb/pub?pubid=1046&offerid=2210
     status: (referer=r383.stplaynew.com/play.php)saved 266 bytes 5bf1e316945012c2376a45fc5c47fc0d90dbca90
     info: [0] no JavaScript
     file: 5bf1e316945012c2376a45fc5c47fc0d90dbca90: 266 bytes

Decoded Files
5bf1/e316945012c2376a45fc5c47fc0d90dbca90 from system.admedx.com/pb/pub?pubid=1046&offerid=2210 (266 bytes, 8 hidden) download


stplayold.com/ar/222/mobile.js benign
[nothing detected] stplayold.com/ar/222/mobile.js
     status: (referer=http:/www.ask.com/web?q=puppies)saved 4912 bytes 1529ba908cf1bc86bdbdc1f3b9fd6e3b5dad7814
     info: [decodingLevel=0] found JavaScript
     error: undefined variable XMLHttpRequest
     error: line:4: TypeError: XMLHttpRequest is not a constructor
     info: [javascript variable] URL=wapnt.smsconsulting.company/suscribir.php?
     info: [javascript variable] URL=r383.stplaynew.com/play.php
     info: [decodingLevel=1] found JavaScript
     error: line:6: TypeError: XMLHttpRequest is not a constructor
     file: 1529ba908cf1bc86bdbdc1f3b9fd6e3b5dad7814: 4912 bytes
     file: 3d6be83dc45107b744aef4ad36cdcf17177f1a07: 6284 bytes

Decoded Files
1529/ba908cf1bc86bdbdc1f3b9fd6e3b5dad7814 from stplayold.com/ar/222/mobile.js (4912 bytes) download

3d6b/e83dc45107b744aef4ad36cdcf17177f1a07 from stplayold.com/ar/222/mobile.js (6284 bytes) download