JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link ec0dfef095a1a1f5f9121196761d01a64a8e9378 (Received 2017-04-21 10:36:33, www.team-cymru.org )

URLStatus
www.team-cymru.org saved 30950 bytes e96cd129ef5a597c79dafe9a3a4c3fed38da0fb8

www.team-cymru.org/js/custom.js status: (referer=www.team-cymru.org/)

www.team-cymru.org/js-plugin/parallax/js/jquery.stellar.min.js status: (referer=www.team-cymru.org/)

www.team-cymru.org/js-plugin/owl.carousel/owl-carousel/owl.carousel.js status: (referer=www.team-cymru.org/)

www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/ status: (referer=www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/jquery.form.js)

www.team-cymru.org/js-plugin/jquery/jquery-1.10.2.min.js status: (referer=www.team-cymru.org/)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
www.team-cymru.org/js-plugin/appear/jquery.appear.js benign
[nothing detected] (script) www.team-cymru.org/js-plugin/appear/jquery.appear.js
     status: (referer=www.team-cymru.org/)saved 4351 bytes 8250a540b8ac6f7c504858ab71c2ae23e6cd74fa
     file: 8250a540b8ac6f7c504858ab71c2ae23e6cd74fa: 4351 bytes

Decoded Files
8250/a540b8ac6f7c504858ab71c2ae23e6cd74fa from www.team-cymru.org/js-plugin/appear/jquery.appear.js (4351 bytes, 1639 hidden) download


www.team-cymru.org/bootstrap/js/bootstrap.js benign
[nothing detected] (script) www.team-cymru.org/bootstrap/js/bootstrap.js
     status: (referer=www.team-cymru.org/)saved 55258 bytes fd607f85d598503b24d7799722db29fec4de1ef6
     file: fd607f85d598503b24d7799722db29fec4de1ef6: 55258 bytes

Decoded Files
fd60/7f85d598503b24d7799722db29fec4de1ef6 from www.team-cymru.org/bootstrap/js/bootstrap.js (55258 bytes, 6918 hidden) download


www.team-cymru.org/js-plugin/easing/jquery.easing.1.3.js benign
[nothing detected] (script) www.team-cymru.org/js-plugin/easing/jquery.easing.1.3.js
     status: (referer=www.team-cymru.org/)saved 8103 bytes b20fa51658e6369e3e660d3abca3c4b236f36a87
     file: b20fa51658e6369e3e660d3abca3c4b236f36a87: 8103 bytes

Decoded Files
b20f/a51658e6369e3e660d3abca3c4b236f36a87 from www.team-cymru.org/js-plugin/easing/jquery.easing.1.3.js (8103 bytes, 207 hidden) download


www.team-cymru.org/ benign
[nothing detected] www.team-cymru.org/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 30950 bytes e96cd129ef5a597c79dafe9a3a4c3fed38da0fb8
     info: [script] www.team-cymru.org/js/modernizr-2.6.1.min.js
     info: [img] www.team-cymru.org/images/main-logo.png
     info: [img] www.team-cymru.org/visualizations/map/recent.jpg
     info: [img] www.team-cymru.org/images/friends/google.png
     info: [img] www.team-cymru.org/images/friends/dyndns.png
     info: [img] www.team-cymru.org/images/friends/limelight.png
     info: [img] www.team-cymru.org/images/friends/cogent.png
     info: [img] www.team-cymru.org/images/friends/interoute.png
     info: [img] www.team-cymru.org/images/friends/intouch.png
     info: [img] www.team-cymru.org/images/friends/domainsponsor.png
     info: [img] www.team-cymru.org/images/friends/switch.png
     info: [img] www.team-cymru.org/images/friends/savvis.png
     info: [img] www.team-cymru.org/images/friends/support-intelligence.png
     info: [img] www.team-cymru.org/images/friends/tata.png
     info: [img] www.team-cymru.org/images/friends/verizon.png
     info: [img] www.team-cymru.org/images/friends/cert-lt.png
     info: [img] www.team-cymru.org/images/friends/apnic.png
     info: [img] www.team-cymru.org/images/friends/exelon.jpg
     info: [img] www.team-cymru.org/images/friends/ibq.jpg
     info: [img] www.team-cymru.org/images/friends/bae.png
     info: [img] www.team-cymru.org/images/friends/blackberry.png
     info: [img] www.team-cymru.org/images/friends/icann.png
     info: [img] www.team-cymru.org/images/friends/qiib.jpg
     info: [img] www.team-cymru.org/images/friends/op-financial.png
     info: [img] www.team-cymru.org/images/friends/city-link.png
     info: [img] www.team-cymru.org/images/friends/phish-labs.jpg
     info: [img] www.team-cymru.org/images/friends/kpmg.png
     info: [img] www.team-cymru.org/images/friends/f-secure.png
     info: [img] www.team-cymru.org/images/friends/symantec.jpg
     info: [img] www.team-cymru.org/images/friends/info-armor.jpg
     info: [img] www.team-cymru.org/images/friends/paysafecard.png
     info: [img] www.team-cymru.org/images/friends/deloitte.jpg
     info: [img] www.team-cymru.org/images/friends/linkedIn.png
     info: [img] www.team-cymru.org/images/friends/kaspersky.png
     info: [img] www.team-cymru.org/images/friends/bnp.jpg
     info: [img] www.team-cymru.org/images/friends/ahlibank.jpg
     info: [img] www.team-cymru.org/images/friends/mastercard.png
     info: [img] www.team-cymru.org/images/friends/ge.jpg
     info: [img] www.team-cymru.org/images/friends/recorded-future.png
     info: [img] www.team-cymru.org/images/friends/ooredoo.png
     info: [img] www.team-cymru.org/images/friends/iid.png
     info: [img] www.team-cymru.org/images/friends/qatar-financial-centre.png
     info: [img] www.team-cymru.org/images/friends/db.png
     info: [img] www.team-cymru.org/images/friends/commercial-bank.jpg
     info: [img] www.team-cymru.org/images/friends/cisco.png
     info: [img] www.team-cymru.org/images/friends/qintel.png
     info: [img] www.team-cymru.org/images/friends/qatar-national-bank.png
     info: [img] www.team-cymru.org/images/friends/discover.jpg
     info: [img] www.team-cymru.org/images/friends/standard-chartered.png
     info: [img] www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/php/image.php
     info: [img] www.paypalobjects.com/US/i/scr/pixel.gif
     info: [img] www.team-cymru.org/images/footer-logo.png
     info: [script] www.team-cymru.org/js-plugin/respond/respond.min.js
     info: [script] www.team-cymru.org/js-plugin/jquery/jquery-1.10.2.min.js
     info: [script] www.team-cymru.org/js-plugin/jquery-ui/jquery-ui-1.8.23.custom.min.js
     info: [script] www.team-cymru.org/bootstrap/js/bootstrap.js
     info: [script] www.team-cymru.org/js-plugin/easing/jquery.easing.1.3.js
     info: [script] www.team-cymru.org/js-plugin/owl.carousel/owl-carousel/owl.carousel.js
     info: [script] www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/jquery.form.js
     info: [script] www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/jquery.validate.min.js
     info: [script] www.team-cymru.org/js-plugin/parallax/js/jquery.stellar.min.js
     info: [script] www.team-cymru.org/js-plugin/appear/jquery.appear.js
     info: [script] www.team-cymru.org/js/custom.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable s
     info: [element] URL=piwik.cymru.com/piwik.js
     info: [1] no JavaScript
     file: e96cd129ef5a597c79dafe9a3a4c3fed38da0fb8: 30950 bytes
     file: a11984ce600ed013788e343acc1505a76c88f05a: 97 bytes

Decoded Files
e96c/d129ef5a597c79dafe9a3a4c3fed38da0fb8 from www.team-cymru.org/ (30950 bytes, 4667 hidden) download

a119/84ce600ed013788e343acc1505a76c88f05a from www.team-cymru.org/ (97 bytes) download


www.team-cymru.org/js-plugin/respond/respond.min.js benign
[nothing detected] (script) www.team-cymru.org/js-plugin/respond/respond.min.js
     status: (referer=www.team-cymru.org/)saved 4069 bytes be854f0f7076498e822f45c818ca3c3218e3377c
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     file: be854f0f7076498e822f45c818ca3c3218e3377c: 4069 bytes

Decoded Files
be85/4f0f7076498e822f45c818ca3c3218e3377c from www.team-cymru.org/js-plugin/respond/respond.min.js (4069 bytes) download


www.team-cymru.org/js/modernizr-2.6.1.min.js benign
[nothing detected] (script) www.team-cymru.org/js/modernizr-2.6.1.min.js
     status: (referer=www.team-cymru.org/)saved 15367 bytes 7a33327d4f193071e46b0ca1112b6594f06d9f90
     file: 7a33327d4f193071e46b0ca1112b6594f06d9f90: 15367 bytes

Decoded Files
7a33/327d4f193071e46b0ca1112b6594f06d9f90 from www.team-cymru.org/js/modernizr-2.6.1.min.js (15367 bytes) download


www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/jquery.form.js benign
[nothing detected] (script) www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/jquery.form.js
     status: (referer=www.team-cymru.org/)saved 45038 bytes 9e693a73858fe86c9cba9b466e1cd97fe6a39409
     info: [iframe] www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/
     info: [decodingLevel=0] found JavaScript
     error: undefined function $
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: 9e693a73858fe86c9cba9b466e1cd97fe6a39409: 45038 bytes
     file: 1dacf07dd607dd77d185e44fcdf43fd6d64d27ce: 45568 bytes
     file: a7ba06acf8e08e2b54c129ce518b252ba505a990: 45741 bytes
     file: 46790b83cbd5d4ccdbf8d066a1fc5386bb1be9ab: 45455 bytes
     file: ee9109444333f567a543811389eb86f7e19e1af4: 45579 bytes

Decoded Files
9e69/3a73858fe86c9cba9b466e1cd97fe6a39409 from www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/jquery.form.js (45038 bytes, 13363 hidden) download

1dac/f07dd607dd77d185e44fcdf43fd6d64d27ce from www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/jquery.form.js (45568 bytes, 13363 hidden) download

a7ba/06acf8e08e2b54c129ce518b252ba505a990 from www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/jquery.form.js (45741 bytes, 13363 hidden) download

4679/0b83cbd5d4ccdbf8d066a1fc5386bb1be9ab from www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/jquery.form.js (45455 bytes, 13363 hidden) download

ee91/09444333f567a543811389eb86f7e19e1af4 from www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/jquery.form.js (45579 bytes, 13363 hidden) download


piwik.cymru.com/piwik.js benign
[nothing detected] (element) piwik.cymru.com/piwik.js
     status: (referer=www.team-cymru.org/)saved 22586 bytes c3c999e49e5d511d533d897ee656ab254d31c9b7
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Q
     file: c3c999e49e5d511d533d897ee656ab254d31c9b7: 22586 bytes

Decoded Files
c3c9/99e49e5d511d533d897ee656ab254d31c9b7 from piwik.cymru.com/piwik.js (22586 bytes) download


www.team-cymru.org/js-plugin/jquery-ui/jquery-ui-1.8.23.custom.min.js benign
[nothing detected] (script) www.team-cymru.org/js-plugin/jquery-ui/jquery-ui-1.8.23.custom.min.js
     status: (referer=www.team-cymru.org/)saved 15546 bytes a80c0856091f109f655e2c1cc5a061ab3e2ab39b
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined variable a.ui
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var a.ui = 1;
          error: line:1: ....^
     file: a80c0856091f109f655e2c1cc5a061ab3e2ab39b: 15546 bytes

Decoded Files
a80c/0856091f109f655e2c1cc5a061ab3e2ab39b from www.team-cymru.org/js-plugin/jquery-ui/jquery-ui-1.8.23.custom.min.js (15546 bytes) download


www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/jquery.validate.min.js benign
[nothing detected] (script) www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/jquery.validate.min.js
     status: (referer=www.team-cymru.org/)saved 21496 bytes 4740e3f1da602d0c25ee3b423f9a882219f861df
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined function a.extend
     error: undefined variable a
     file: 4740e3f1da602d0c25ee3b423f9a882219f861df: 21496 bytes

Decoded Files
4740/e3f1da602d0c25ee3b423f9a882219f861df from www.team-cymru.org/js-plugin/neko-contact-ajax-plugin/js/jquery.validate.min.js (21496 bytes, 5 hidden) download