Windows Analysis Report
http://cdn.taboola-display.com/ext/dynamic-content-loader.html?w=970&h=250

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": true,
    "brand_spoofing_attempt": false,
    "third_party_hosting": true
}

URL: http://cdn.taboola-display.com

{
    "risk_score": 3,
    "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of a custom HTML element called 'taboola-tag'. It includes functionality to create the element, attach a shadow DOM, and set various attributes based on the element's properties. The script also includes utility functions for parsing query strings, unescaping HTML, and reporting metrics/errors. While the script uses some dynamic code execution techniques (e.g., `Reflect.construct`), these are used in a controlled manner and do not appear to be indicative of malicious intent. The overall behavior of the script is consistent with typical web development practices, and there are no clear high-risk indicators present. Therefore, the risk score is assessed as low (3)."
}

        function createTaboolaTag() {
            function TaboolaTag() {
                try{
                    reportMetric('dcl-taboola-tag-creation-start');
                    var element = Reflect.construct(HTMLElement, [], TaboolaTag);
                    var shadow = element.attachShadow({mode: 'open'});
                    var link = document.createElement('a');
                    var img = document.createElement('img');

                    link.appendChild(img);
                    shadow.appendChild(link);

                    element._link = link;
                    element._img = img;

                    return element;
                }
                catch(e){
                    reportError('Error while creating TaboolaTag ' + e);
                }
            }

            function isSupportedBrowser() {
                return window.Reflect && window.customElements && window.customElements.define;
            }

            function isTaboolaTagAlreadyExist() {
                return window.customElements.get('taboola-tag');
            }
            reportMetric('dcl-taboola-tag-define-start');

            if (!isSupportedBrowser()) {
                reportMetric('dcl-taboola-tag-not-supported-browser');
                return;
            }
            if (isTaboolaTagAlreadyExist()) {
                reportMetric('dcl-taboola-tag-already-exist');
                return;
            }

            TaboolaTag.prototype = Object.create(HTMLElement.prototype);
            TaboolaTag.prototype.constructor = TaboolaTag;
            TaboolaTag.prototype.connectedCallback = function() {
                this._link.href = this.getAttribute('href');
                this._link.target = this.getAttribute('target') || '_blank';
                this._img.src = this.getAttribute('imageSrc');
                this._img.border = this.getAttribute('border') || '0';
                reportMetric('dcl-taboola-tag-added-attributes');
            };

            window.customElements.define('taboola-tag', TaboolaTag);
            reportMetric('dcl-taboola-tag-define-end');
        }

        function parseQueryString() {
            try {
                var pairs = location.search.slice(1).split('&'),
                    result = {};

                pairs.forEach(function (pair) {
                    pair = pair.split('=');
                    result[pair[0]] = pair[1];
                });

                return JSON.parse(JSON.stringify(result));
            } catch (e) {
                return {};
            }
        }

        function htmlUnescape(value) {
            var htmlUnescapes = {
                    '&': '&',
                    '&lt;': '<',
                    '&gt;': '>',
                    '&quot;': '"',
                    '&#39;': "'"
                },
                reEscapedHtml = /&(?:amp|lt|gt|quot|#(0+)?39);/g,
                reHasEscapedHtml = RegExp(reEscapedHtml.source);
            var replaceFunction = function (entity) {
                return htmlUnescapes[entity] || "'";
            };

            return (value && reHasEscapedHtml.test(value))
                ? value.replace(reEscapedHtml, replaceFunction)
                : (value || '');
        }

        function formatHtmlString(str) {
            try {
                var unescaped = htmlUnescape(str);

                return JSON.parse('{"key": "' + unescaped + '"}').key;
            } catch (e) {
                reportMetric('HTML-error-format_html_error_rtb');
                reportError('error while parsing html string: ' + str);
                return '';
            }
        }

        function reportMetric(metricName) {
            TBC.cmd.push(function () {
                TBC.reportMetrics(metricName);
            });
        }

        function reportError(errorMessage) {
            TBC.cmd.push(function () {
                TBC.error(errorMessage);
            });
        }

        function safeParseJsonString(