Windows Analysis Report
https://nicholaspackaging.businesslawcloud.com/mTlFM

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": false,
    "brand_spoofing_attempt": false,
    "third_party_hosting": true
}

URL: https://nicholaspackaging.businesslawcloud.com

{
    "risk_score": 2,
    "reasoning": "The provided JavaScript snippet appears to be a simple form submission function, which is a common and legitimate behavior. There are no high-risk indicators, such as dynamic code execution, data exfiltration, or suspicious redirects. The script does not exhibit any malicious or overly aggressive behavior, and it is likely part of a legitimate web application."
}

            function KnapweedLeaf() {
                document.forms[0].submit();
            }
        

{
    "risk_score": 7,
    "reasoning": "The script demonstrates several high-risk behaviors, including the use of `eval`-like functions to execute dynamic code, potential data exfiltration through the use of the `aluminum` function, and the presence of obfuscated code. While the script may have a legitimate purpose, the overall behavior is highly suspicious and requires further investigation."
}

        
        const aluminum = (name) => {
            name = name.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]');
            var regex = new RegExp('[\\?&]' + name + '=([^&#]*)');
            var results = regex.exec(location.search); // Do aute adipisicing chicken. T-bone landjaeger porchetta sirloin pork belly pancetta aliqua meatloaf do jowl short ribs consectetur laborum id. Andouille sint ullamco, shankle brisket anim venison. Tongue meatball meatloaf jowl occaecat. Velit capicola cupidatat t-bone, ad consequat ham cow ea est occaecat brisket. Nulla fatback alcatra reprehenderit velit aute ground round anim in chuck in deserunt. Hamburger t-bone leberkas filet mignon. Lorem reprehenderit cupidatat ball tip beef ribs commodo, t-bone et adipisicing short loin laborum sirloin pastrami qui. Dolore adipisicing exercitation, jowl ea bresaola jerky lorem nisi in duis. Bresaola boudin andouille leberkas, commodo shankle et picanha exercitation culpa. Velit buffalo cupim chuck ad anim tenderloin cillum aliqua pork loin reprehenderit. Tri-tip drumstick rump minim salami, ullamco dolore swine shoulder strip steak enim sausage. Meatloaf corned beef buffalo pork loin bresaola shoulder landjaeger capicola excepteur id ribeye pastrami. Kevin ad pancetta excepteur minim kielbasa lorem cow dolor elit jowl. Cupidatat salami est, tempor mollit ad t-bone.
            return results === null ? '' : decodeURIComponent(results[1].replace(/\+/g, ' '));
        } // Pork loin pancetta elit bacon burgdoggen porchetta. Flank cupidatat capicola burgdoggen, brisket anim officia filet mignon tongue frankfurter. Venison bresaola rump cow filet mignon nisi sunt fatback occaecat exercitation sed consectetur. Turkey exercitation ipsum prosciutto non, ullamco tempor cupim mollit brisket. Dolore nisi sed incididunt pork. Leberkas tri-tip cupidatat, ball tip sunt ipsum nulla filet mignon capicola ullamco. Frankfurter et sunt, kevin pastrami nisi magna dolor sed sint. Ut excepteur magna sirloin, turkey porchetta dolore anim ipsum voluptate dolore frankfurter cupidatat brisket. Ham eu prosciutto, ground round non esse anim duis porchetta. Dolor filet mignon qui deserunt, shankle dolore sunt. Consequat boudin tenderloin dolore quis eu pork belly dolore ut in sunt beef irure bresaola. Ribeye aute leberkas et non andouille consectetur. Occaecat pastrami pork chop minim, spare ribs esse jerky short loin. Nisi incididunt shank drumstick proident ground round, bacon cillum picanha rump nostrud commodo occaecat bresaola pastrami. Occaecat pancetta ex kielbasa ad filet mignon.

        rh13z8jemt = aluminum('e') == '' ? rh13z8jemt : aluminum('e');
        rh13z8jemt = atob(rh13z8jemt);
    

{
  "contains_trigger_text": false,
  "trigger_text": "unknown",
  "prominent_button_name": "unknown",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "contains_trigger_text": false,
  "trigger_text": "unknown",
  "prominent_button_name": "unknown",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "brands": "unknown"
}

{
  "brands": [
    "Cloudflare"
  ]
}

{
"contains_trigger_text": false,
"trigger_text": "unknown",
"prominent_button_name": "Next",
"text_input_field_labels": [
"67l162@hbnlxbj.org"
],
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false,
"contains_chinese_text": false,
"contains_fake_security_alerts": false
}

{
  "brands": [
    "Microsoft"
  ]
}

```json{  "legit_domain": "microsoft.com",  "classification": "wellknown",  "reasons": [    "The brand 'Microsoft' is classified as 'wellknown'.",    "The URL 'nicholaspackaging.businesslawcloud.com' does not match the legitimate domain 'microsoft.com'.",    "The domain 'businesslawcloud.com' does not have any known association with Microsoft.",    "The presence of a subdomain 'nicholaspackaging' and the main domain 'businesslawcloud.com' suggests a third-party service, which is not typically associated with Microsoft.",    "The email address '67l162@hbnlxbj.org' does not appear to be related to Microsoft, which raises suspicion."  ],  "riskscore": 9}
Google indexed: False