Windows Analysis Report
ELECTRONIC RECEIPT_Moog.html

• HCA enabled
• EGA enabled
• AMSI enabled

• Successful, ratio: 100%
• Number of executed functions: 0
• Number of non-executed functions: 0

• Found application associated with file extension: .html

{
"loginform": false,
"reasons": [
"The text does not contain any form fields for a username or password.",
"The text does not contain any submit button for a login form.",
"The text does not mention or imply that it is a login form."
]
}

About this page Our systems have detected unusual traffic from your computer nebnorlc This page checks to see if it's realty you sending the requests, and not a robot Why did this happen? 

{
"loginform": false,
"reasons": [
"The text does not contain any form fields for a username or password.",
"The text does not contain any submit button for a login form.",
"The text mentions that the page is checking for unusual traffic and not for user authentication."
]
}

About this page Our systems have detected unusual traffic from your computer network. This page checks to see if it's realty you sending the requests, and not a robot Why did this happen? 

```json
{
  "riskscore": 7,
  "reasons": "The code appears to be obfuscated, which is a common technique used to hide malicious behavior. The presence of functions that manipulate URLs, such as 'getSearchParams', 'getHostname', 'setHash', 'parseHost', and 'updateURL', suggests potential phishing or redirection activities. Additionally, the use of 'document' and 'contentWindow' could indicate attempts to manipulate the DOM or interact with iframes, which are common in phishing attacks. While no explicit malicious actions are visible, the obfuscation and the nature of the functions used raise significant concerns."
}

function a0m(s,o){var K=a0b();return a0m=function(t,n){t=t-0x17c;var b=K[t];return b;},a0m(s,o);}function a0b(){var zh=['log','getSearchParams','','\x20is\x20not\x20an\x20object','PAcmF','SfvHe','getHostname','hasOwnProperty','all','default','unscopables','gSffB','(?<a>b)','%2e.','domain','eZarM','AMYEW','JoiBq','url','DDiSS','name','multiline','uZLvl','__core-js_shared__','\x09\x0a\x0b\x0c\x0d\x20\u00a0\u1680\u2000\u2001\u2002\u2003\u2004\u2005\u2006\u2007\u2008\u2009\u200a\u202f\u205f\u3000\u2028\u2029\ufeff','number','gwkAf','documentElement','parseHost','roGSe','aQaPk','JoTjo','setHash','jWmqk','slice','cannotBeABaseURL','NZgTm','ihtxr','Arguments','return\x20this','AVzny','replace','OrXoh','versions','pIpKT','bindURL','ftTyb','blob','Incorrect\x20invocation','ODbTp','concat','Can\x27t\x20convert\x20object\x20to\x20primitive\x20value','gVMUh','yHyiJ','CrXUY','UyFjC','2244kMSahC','rmcOi','a1c3','CmpTF','ZZSbs','sort','POLYFILL','{}.constructor(\x22return\x20this\x22)(\x20)','aqHee','parseObject','mnkHK','ynWGy','String','console','Symbol(','OoqmW','foo','getterFor','constructor','PROPER','vsPUq','hKThU','host','DyTmU','bqYHS','DWpkT','file','a=b','getOwnPropertyDescriptor','hjzMA','RegExp','fPDdW','4','MUyGe','','Reflect','getOwnPropertyNames','port','FLasa','Object','exec','substring','max','setPassword','avNig','1364JNdhqa','cannotHaveUsernamePasswordPort','QyRXO','\x20is\x20not\x20a\x20function','getSearch','$<a>c','oxbaV','lqkjg','3.37.0','java','iterator','stat','pathname','defineProperty','HuCXZ','trim','474TaKwAK','dontCallGetSet','xn--','ywEjp','TypeError','add','RcapU','((?:%[\x5cda-f]{2}){','open','isArray','toPrimitive','iBBjB','%29','src','%23','ZXqMV','zbltc','parse','ksxJm','keys','script','username','Symbol','Undefined','WRDwf','query','String\x20Iterator','JtIQp','splice','fromCharCode','create','getHost','Function','fuKCY','chniv','Can\x27t\x20set\x20','serialize','@@iterator','iVgze','random','set','b?a=1&b=2&c=3','fmtFm','parentWindow','dkQAX','createObjectURL','wJClU','hostname','WqNNL','vQTnZ','object','FTJgx','asvMd','process','Overflow:\x20input\x20needs\x20wider\x20integers\x20to\x20process','ScbGv','indexOf','lmLwy','nKbAU','rxAFY','encodeURIComponent','floor','RSAzV','toJSON','valueOf','Array','source','inspectSource','input','%2e%2e','prototype','\x20is\x20not\x20iterable','revokeObjectURL','exception','kAZIb','scheme','global','hyLLQ','target','jxGAu','getPathname','URLSearchParams','sandbox','values','document','getPort','updateURL','Not\x20enough\x20arguments','Expected\x20sequence\x20with\x20length\x202','kind','174960XMMBXx','throw','setter','kpbjY','none','native-string-replace','(((.+)+)+)+$','contentWindow','fvTRi','toLocaleString','UATts','[object\x20','getPassword','charAt','type','origin','protocol','append','data','TZKtE','Math','get','propertyIsEnumerable','\x20required','min','raw','split','arity','lNnWY','symbol\x20detection','fetch','value','Array\x20Iterator','next','WEygc','WACSU','shortenPath','QyD

{
"loginform": false,
"reasons": [
"The text does not contain any form fields for a login form such as username, password, or submit button.",
"The text mentions unusual traffic detection and not related to a login form."
]
}

I'm not a About this page Our systems have detected unusual traffic from your computer network. This page checks to see if it's realty you sending the requests, and not a robot Why did this hapEn_2 

```json
{
  "riskscore": 7,
  "reasons": "The code contains obfuscated JavaScript, which is often used to hide malicious activities. The function names and variables are not descriptive, making it difficult to understand the code's intent. Additionally, there are references to potentially suspicious elements and actions, such as 'requestIdleCallback', 'setImmediate', and 'send', which could be used for malicious purposes. The presence of 'YVtocmVmPSJodHRwOi8vd3d3LnNhbGlkemluaS5sdi8iXVtzdHlsZT0iZGlzcGxheTogYmxvY2s7IHdpZHRoOiA4OHB4OyBoZWlnaHQ6IDMxcH' suggests a base64-encoded URL, which is a common technique used in phishing attacks."
}

function a0y(q,O){var C=a0T();return a0y=function(F,T){F=F-0x1a6;var y=C[F];return y;},a0y(q,O);}function a0T(){var rA=['classList','','','whiteSpace','ZpTKC','hasOwnProperty','TouchEvent','333473XOteKC','DGBiR','CtoLL','print','LOW_FLOAT','Serifa','#barraPublicidade','description','','pmVZK','word','CONFIGURABLE','log10','EXISTS','JHmxD','Object\x20already\x20initialized','WAppU','requestIdleCallback','','setImmediate','send','Fhcgb','rejectionhandled','.sb-box-pubbliredazionale','prhWB','JFRVJ','RegExp#exec\x20called\x20on\x20incompatible\x20receiver','ZsLZs','417035vCYWtm','Arial\x20Unicode\x20MS','setter','offsetHeight','set\x20','2206510gLBMfe','','','ayqzq','/npm-monitoring','expm1','__gCrWeb','availLeft','[object\x20WebPageNamespace]','DRGnZ','.as-oil','sinh','','race','trNew','webgl2','default','BvMpc','LkZyZ','AsyncFunction','Aknpv','','fillText','','fxUNo','24DQcAgP','frllC','uQgMm','knee','','stat','.o--cookies--container','querySelector','div[class$=\x22-hide\x22][zoompage-fontsize][style=\x22display:\x20block;\x22]','CSSPrimitiveValue','write','Unhandled\x20promise\x20rejection','flags','#Publicidade','isArray','fromCharCode','TypeError','ufWmi','pow','ontypechange','platform','nextTick','none','about:blank','webglCreateContextError','propertyIsEnumerable','LOW_INT','arc','Notification','matches','reason','CONSTRUCTOR','hhxdf','submit','Copy\x20the\x20text\x20below\x20to\x20get\x20the\x20debug\x20data:\x0a\x0a```\x0aversion:\x20','Clarendon','OIFwv','RegExp','host','userLanguage','visibility','serviceWorker','toJSON','','gkekb','create','rect','','oArcm','QObject','Levenim\x20MT','','IS_RECORD','tkNEb','pGhXd','','toStringTag','1.25','\x0atimeBetweenLoadAndGet:\x20','Null','suspended','','then','arity','loopEnd','innerWidth','kmHnE','rgba(102,\x20204,\x200,\x200.2)','context','NaN','iPad','kRJSe','QRqbK','notifications','Meiryo\x20UI','NeCqG','vDKxH','contentWindow','webkit','oTgyP','.cnt-publi','multiline','oHoLC','amp-embed[type=\x2224smi\x22]','atiuW','hRlRZ','unscopables','onreadystatechange','pdfViewerEnabled','CanvasCaptureMediaStream','Math','(forced-colors:\x20','puffinDevice','.right-and-left-sponsers','Symbol','AYiXD','HWorq','resolvedOptions','HaczZ','hasIndices','PROPER','','gkrmb','McdkR','MeSpG','pxvFm','InvalidAccessError','gMULW','\x20is\x20not\x20an\x20object','#cookies-policy-sticky','tMnZg','getSupportedExtensions','Generator\x20is\x20already\x20executing.','attributionsourceid','','Can\x27t\x20set\x20','fydne','','exp','','oprt','$(?!\x5cs)','okPbg','sham','','TpeLY','String\x20Iterator','tZAHA','onload','','frequency','global','dotAll','','symbol-to-string-registry','zQBJv','values','KmSlv','mozFullScreenElement','style','','psLmX','BYFsz','','','some','YOHjH','attributionSourceId','clientWidth','getContext','textSizeAdjust','','samsungAr','reverse','48px','configurable','upbUP','XOtUL','assign','acosh','YVtocmVmPSJodHRwOi8vd3d3LnNhbGlkemluaS5sdi8iXVtzdHlsZT0iZGlzcGxheTogYmxvY2s7IHdpZHRoOiA4OHB4OyBoZWlnaHQ6IDMxcH

{
"loginform": false,
"reasons": [
"The text does not mention or include any input fields for a username or password.",
"The text does not contain any buttons or links that would indicate a login submission.",
"The text is about selecting squares with bicycles, not logging into a system."
]
}

Select all squares with bicycles About tt Our systf network requests SKIP 

{
"loginform": false,
"reasons": [
"The text does not contain any form fields for a login form such as username, password, or submit button.",
"The text mentions an issue with unusual traffic and robot detection, which is not related to a login form."
]
}

I'm not a About this page Our systems have detected unusual traffic from your computer network. This page checks to see if it's realty you sending the requests, and not a robot Why did this hapEn_2 

{
"loginform": false,
"reasons": [
"The text does not mention a username or password field.",
"The text does not mention a 'Log In' or 'Submit' button.",
"The text is about selecting squares with bicycles, not logging into a system."
]
}

Select all squares with bicycles About tt Our systf network requests SKIP 

{
"loginform": false,
"reasons": [
"The text does not contain any form fields for a username or password.",
"There is no 'Login' or 'Submit' button in the text.",
"The text is about selecting squares with bicycles and does not mention logging in."
]
}

Select all squares with bicycles About Our sys network. requests SKIP 

{
"loginform": false,
"reasons": [
"Text does not contain any input fields for username or password.",
"Text does not contain any submit buttons for login.",
"Text does not mention or imply a login form."
]
}

Select all squares with bicycles About tt Our systf network requests SKIP