Windows Analysis Report
https://economiesocialeestrie-my.sharepoint.com/:f:/g/personal/cynthia_economiesocialeestrie_ca/Eg3bU_gVnldCmtzlGs9oSUQBYKQRNnAURt93MlkOZFbwAg?email=gaston.stratford%40assnat.qc.ca&e=iSpthp&xsdata=MDV8MDJ8R2FzdG9uLlN0cmF0Zm9yZEBhc3NuYXQucWMuY2F8Y2RjYmI0YjE1ZGI0NGZhNmQzYjUwOGRkMTA4MmQxNTh8MWE1NjE5ODB

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": true,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": true,
    "brand_spoofing_attempt": false,
    "third_party_hosting": false
}

URL: https://economiesocialeestrie-my.sharepoint.com

{
    "risk_score": 1,
    "reasoning": "This is a benign script handling theme switching and basic navigation. It only performs legitimate DOM manipulations (CSS loading, style changes), uses standard browser APIs (URLSearchParams, history), and doesn't interact with external domains. The code follows normal practices for theme implementation and browser navigation."
}

window.onload = function OnLoadHandler(){
	if (window.history.length <= 1) {
		document.getElementById("close").style.display = "none";
	}
}

var theme = null;
try {
  (function (URLSearchParams, str) {
    if (!new URLSearchParams(window.location.search).get(str)){
		throw URLSearchParams;
	}
		var urlParams = new URLSearchParams(window.location.search);
		if (urlParams.has(str)){
			theme = String(urlParams.get(str));
		}
  }(URLSearchParams, "theme"));
} catch(URLSearchParams){
	var params = {}
	var parts = window.location.search.substring(1).split('&');
	for (var i = 0; i < parts.length; i++) {
		var val = parts[i].split('=');
		if (!val[0]) continue;
		params[val[0]] = val[1] || true;
	}
	theme = params["theme"];	
}

// Load theme specific css
if (theme === "dark"){
	AddCSS("Safelinksv2-dark.css");
}
else if (theme === "contrast"){
	AddCSS("Safelinksv2-highcontrast.css")
}

// Add CSS based on theme
function AddCSS(fileName){
	 var ss = document.createElement("link");
     ss.type = "text/css";
     ss.rel = "stylesheet";
     ss.href = "./Content/Scripts/" + fileName;
	 document.getElementsByTagName("head")[0].appendChild(ss);
}


function CloseHover(hoverIn) {
    var closeLink = document.getElementById("closeLink");

    if (hoverIn) {	
        closeLink.style.textDecoration = "underline";
    } else {
        closeLink.style.textDecoration = "none";
    }
}

function GoBack() {
    if (window.history.length > 1) {
		window.history.back();
	}
	else {
		window.location.href="about:blank";
	}
}

{
  "contains_trigger_text": true,
  "trigger_text": "Opening this website might not be safe.",
  "prominent_button_name": "unknown",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": true,
  "has_visible_qrcode": false,
  "contains_chinese_text": false
}

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": true,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": true,
    "contains_email_address": false,
    "known_domain": true,
    "brand_spoofing_attempt": false,
    "third_party_hosting": false
}

URL: https://can01.safelinks.protection.outlook.com

{
  "brands": []
}