JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 89ba85c5c13d74843eaf4754bd6a5e32e6321b8b (Received 2018-04-16 14:04:25, http://rr-tt.ml/Just/Hoh/login Fish Drop)

URLStatus
rr-tt.ml/Just/Hoh/login saved 15884 bytes 32ca0a37504551998561d31494cc18ff6ba67481

All Malicious or Suspicious Elements of Submission

None
rr-tt.ml/Just/Hoh/login benign
[nothing detected] rr-tt.ml/Just/Hoh/login
     status: (referer=www.google.com/trends/hottrends)saved 15884 bytes 32ca0a37504551998561d31494cc18ff6ba67481
     info: [meta refresh] URL=login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033
     info: [img] rr-tt.ml/Just/Hoh/files/logo.svg
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=1] found JavaScript
     error: line:6: SyntaxError: missing } in XML expression:
          error: line:6: <style type="text/css">body{display:block !important;}</style>
          error: line:6: ...................................^
     file: 32ca0a37504551998561d31494cc18ff6ba67481: 15884 bytes
     file: 0b57515941f599e1ac729b37a147782c8d19c0ce: 86 bytes

Decoded Files
32ca/0a37504551998561d31494cc18ff6ba67481 from rr-tt.ml/Just/Hoh/login (15884 bytes, 1192 hidden) download

0b57/515941f599e1ac729b37a147782c8d19c0ce from rr-tt.ml/Just/Hoh/login (86 bytes) download


login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033 benign
[nothing detected] (metarefresh) login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033
     status: (referer=rr-tt.ml/Just/Hoh/login)saved 3878 bytes ba9082ec7a3c6c087567d9a14fa2e28babd1f568
     info: [img] login.live.com/images/ms-logo-v2.jpg
     info: [decodingLevel=0] found JavaScript
     error: line:8: SyntaxError: missing ; before statement:
          error: line:8: Method string:GET
          error: line:8: ^
     file: ba9082ec7a3c6c087567d9a14fa2e28babd1f568: 3878 bytes

Decoded Files
ba90/82ec7a3c6c087567d9a14fa2e28babd1f568 from login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033 (3878 bytes, 17 hidden) download