Windows Analysis Report
http://zwibbdq.trackbest.click/6/128767/262/1494/873186/403/9/4avg5x4ni5

{
    "typosquatting": true,
    "unusual_query_string": false,
    "suspicious_tld": true,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": true,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": false,
    "brand_spoofing_attempt": false,
    "third_party_hosting": true
}

URL: http://zwibbdq.trackbest.click

{
    "risk_score": 6,
    "reasoning": "The script exhibits several moderate-risk behaviors, including redirecting the user to a modified URL and checking for bot/crawler user agents. While the intent is not entirely clear, the combination of URL manipulation and conditional redirection warrants further investigation."
}

let e=new URL(window.location.href);e.pathname="/t"+e.pathname;let o=e.toString();navigator.cookieEnabled&&!function(e){for(var o=["googlebot","bingbot","yandexbot","duckduckbot","slurp","baiduspider","facebot","ia_archiver"],t=e.toLowerCase(),n=0;n<o.length;n++)if(t.indexOf(o[n])>-1)return!0;return!1}(navigator.userAgent)?setTimeout((function(){document.location.href=o}),1e3):console.log("bt");

{
    "risk_score": 3,
    "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of an unsubscribe functionality. It sets a cookie to track the user's unsubscribed status, and sends a POST request to a server-side endpoint to handle the unsubscription. While it uses some older practices like setting cookies manually and making an AJAX request with jQuery, the overall behavior is consistent with a typical unsubscribe workflow and does not exhibit any high-risk indicators."
}

    function setCookie(name, value, days) {
        const date = new Date();
        date.setTime(date.getTime() + (days * 24 * 60 * 60 * 1000));
        const expires = `expires=${date.toUTCString()}`;
        document.cookie = `${name}=${value};${expires};path=/`;
    }

    function submitUnsubscribeForm(event) {
        event.preventDefault();
        const email = document.getElementById('unsubscribe-email').value;
        // Replace this with the actual unsubscription logic
        document.getElementById('unsubscribe-message').textContent = `You've successfully unsubscribed, ${email}. We're sorry to see you go.`;
        setCookie('unsubscribed', 'true', 365);

        sendUnsubscribeRequest();
    }

    function sendUnsubscribeRequest() {
        const email = document.getElementById('unsubscribe-email').value;
        const data = {
            "content": {
                "email": email,
                "reason": "none"
            }
        }
        $.ajax({
            url: "/form-request",
            type: "post",
            contentType: 'application/json',
            data: JSON.stringify(data),
            success: function (response) {
                console.log(response);
                
                document.getElementById('unsubscribe-form').style.display = 'none';
            },
            error: function (jqXHR, textStatus, errorThrown) {
                alert(jqXHR.statusText)
                console.log({"request-error": jqXHR})
            }
        });
    }

{
"contains_trigger_text": true,
"trigger_text": "Unsubscribe from Our Newsletter",
"prominent_button_name": "Unsubscribe",
"text_input_field_labels": ["9zpnjk@dugscl.com"],
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false,
"contains_chinese_text": false,
"contains_fake_security_alerts": false
}

{
  "brands": "unknown"
}