Windows Analysis Report
https://atpscan.global.hornetsecurity.com/?d=W3rdHn1Og9hhUJnVJzqWF36wMmxswAZldvtx3E21ybg&f=v8m9AqGfgV2Ri7cjqmfsuyl2V2Mu_lVW0BRsqcFw4upagWAQ1C-MqANvN6gf4zNV&i=&k=xREg&m=b_ORYMkPffImCXbCPli-aiR7Ga6rGe55sar2xtigCL4MrowDPSzt7ABKETTGxzegakAfoZ57KD02aVix8V8TVmZ2VcxzjeybXYrPiS2SB73LCKYktj5jv2aw6VcPRslz&n=s

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": true,
    "brand_spoofing_attempt": false,
    "third_party_hosting": false
}

URL: https://atpscan.global.hornetsecurity.com

{
    "risk_score": 8,
    "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscated nature of the code further increase the risk. While the script may have a legitimate purpose, such as a challenge platform, the overall behavior is highly suspicious and indicative of malicious intent."
}

(function(){function c(){var b=a.contentDocument||a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8fff7f16dae3f5fe',t:'MTczNjU0MTc3Ni4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange||function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();

{
    "risk_score": 6,
    "reasoning": "The provided JavaScript snippet exhibits several behaviors that raise moderate security concerns. It uses dynamic code execution through the `r.l()` function, which can potentially load and execute external scripts. Additionally, it sends data to external domains, which could potentially include sensitive information. The script also uses obfuscated code, making it more difficult to analyze and understand its true purpose. While the script may have legitimate use cases, such as analytics or telemetry, the combination of these behaviors warrants further investigation to ensure it is not being used for malicious purposes."
}

(()=>{"use strict";var e,v={},m={};function r(e){var i=m[e];if(void 0!==i)return i.exports;var t=m[e]={exports:{}};return v[e](t,t.exports,r),t.exports}r.m=v,e=[],r.O=(i,t,o,u)=>{if(!t){var a=1/0;for(n=0;n<e.length;n++){for(var[t,o,u]=e[n],c=!0,f=0;f<t.length;f++)(!1&u||a>=u)&&Object.keys(r.O).every(b=>r.O[b](t[f]))?t.splice(f--,1):(c=!1,u<a&&(a=u));if(c){e.splice(n--,1);var d=o();void 0!==d&&(i=d)}}return i}u=u||0;for(var n=e.length;n>0&&e[n-1][2]>u;n--)e[n]=e[n-1];e[n]=[t,o,u]},r.d=(e,i)=>{for(var t in i)r.o(i,t)&&!r.o(e,t)&&Object.defineProperty(e,t,{enumerable:!0,get:i[t]})},r.f={},r.e=e=>Promise.all(Object.keys(r.f).reduce((i,t)=>(r.f[t](e,i),i),[])),r.u=e=>e+"."+{218:"0809266569f41ece",895:"be1bd3f1e3cf97bf"}[e]+".js",r.miniCssF=e=>{},r.o=(e,i)=>Object.prototype.hasOwnProperty.call(e,i),(()=>{var e={},i="toc:";r.l=(t,o,u,n)=>{if(e[t])e[t].push(o);else{var a,c;if(void 0!==u)for(var f=document.getElementsByTagName("script"),d=0;d<f.length;d++){var l=f[d];if(l.getAttribute("src")==t||l.getAttribute("data-webpack")==i+u){a=l;break}}a||(c=!0,(a=document.createElement("script")).type="module",a.charset="utf-8",a.timeout=120,r.nc&&a.setAttribute("nonce",r.nc),a.setAttribute("data-webpack",i+u),a.src=r.tu(t)),e[t]=[o];var s=(g,b)=>{a.onerror=a.onload=null,clearTimeout(p);var h=e[t];if(delete e[t],a.parentNode&&a.parentNode.removeChild(a),h&&h.forEach(y=>y(b)),g)return g(b)},p=setTimeout(s.bind(null,void 0,{type:"timeout",target:a}),12e4);a.onerror=s.bind(null,a.onerror),a.onload=s.bind(null,a.onload),c&&document.head.appendChild(a)}}})(),r.r=e=>{typeof Symbol<"u"&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},(()=>{var e;r.tt=()=>(void 0===e&&(e={createScriptURL:i=>i},typeof trustedTypes<"u"&&trustedTypes.createPolicy&&(e=trustedTypes.createPolicy("angular#bundler",e))),e)})(),r.tu=e=>r.tt().createScriptURL(e),r.p="",(()=>{var e={121:0};r.f.j=(o,u)=>{var n=r.o(e,o)?e[o]:void 0;if(0!==n)if(n)u.push(n[2]);else if(121!=o){var a=new Promise((l,s)=>n=e[o]=[l,s]);u.push(n[2]=a);var c=r.p+r.u(o),f=new Error;r.l(c,l=>{if(r.o(e,o)&&(0!==(n=e[o])&&(e[o]=void 0),n)){var s=l&&("load"===l.type?"missing":l.type),p=l&&l.target&&l.target.src;f.message="Loading chunk "+o+" failed.\n("+s+": "+p+")",f.name="ChunkLoadError",f.type=s,f.request=p,n[1](f)}},"chunk-"+o,o)}else e[o]=0},r.O.j=o=>0===e[o];var i=(o,u)=>{var f,d,[n,a,c]=u,l=0;if(n.some(p=>0!==e[p])){for(f in a)r.o(a,f)&&(r.m[f]=a[f]);if(c)var s=c(r)}for(o&&o(u);l<n.length;l++)d=n[l],r.o(e,d)&&e[d]&&e[d][0](),e[d]=0;return r.O(s)},t=self.webpackChunktoc=self.webpackChunktoc||[];t.forEach(i.bind(null,0)),t.push=i.bind(null,t.push.bind(t))})()})();

{
    "risk_score": 6,
    "reasoning": "The provided JavaScript snippet exhibits several moderate-risk behaviors, including external data transmission, fallback domains, and aggressive DOM manipulation. While the intent is not entirely clear, the use of multiple fallback domains and the potential for data exfiltration warrant further investigation. The script should be reviewed carefully to ensure it is not engaging in any malicious activities."
}

(()=>{"use strict";var e,g={},v={};function r(e){var f=v[e];if(void 0!==f)return f.exports;var t=v[e]={id:e,loaded:!1,exports:{}};return g[e].call(t.exports,t,t.exports,r),t.loaded=!0,t.exports}r.m=g,r.amdO={},e=[],r.O=(f,t,n,i)=>{if(!t){var a=1/0;for(o=0;o<e.length;o++){for(var[t,n,i]=e[o],l=!0,c=0;c<t.length;c++)(!1&i||a>=i)&&Object.keys(r.O).every(p=>r.O[p](t[c]))?t.splice(c--,1):(l=!1,i<a&&(a=i));if(l){e.splice(o--,1);var b=n();void 0!==b&&(f=b)}}return f}i=i||0;for(var o=e.length;o>0&&e[o-1][2]>i;o--)e[o]=e[o-1];e[o]=[t,n,i]},r.n=e=>{var f=e&&e.__esModule?()=>e.default:()=>e;return r.d(f,{a:f}),f},(()=>{var f,e=Object.getPrototypeOf?t=>Object.getPrototypeOf(t):t=>t.__proto__;r.t=function(t,n){if(1&n&&(t=this(t)),8&n||"object"==typeof t&&t&&(4&n&&t.__esModule||16&n&&"function"==typeof t.then))return t;var i=Object.create(null);r.r(i);var o={};f=f||[null,e({}),e([]),e(e)];for(var a=2&n&&t;"object"==typeof a&&!~f.indexOf(a);a=e(a))Object.getOwnPropertyNames(a).forEach(l=>o[l]=()=>t[l]);return o.default=()=>t,r.d(i,o),i}})(),r.d=(e,f)=>{for(var t in f)r.o(f,t)&&!r.o(e,t)&&Object.defineProperty(e,t,{enumerable:!0,get:f[t]})},r.f={},r.e=e=>Promise.all(Object.keys(r.f).reduce((f,t)=>(r.f[t](e,f),f),[])),r.u=e=>(592===e?"common":e)+"."+{42:"da26e9e1700e5a2d",123:"00bf2966affb36e3",130:"2fac05b43a037a8f",149:"61680660f3060b4e",163:"eec5cad7ccf4f3f7",172:"a825749b81586cc2",197:"550cc292d0312a8a",208:"772324f40381d158",310:"d77520ebb327a228",415:"98f0e5646858e351",498:"c48f2dcc335a569d",563:"8187c42c9a6cddd6",592:"a6796698b4ec7034",618:"8ef8f2261fb8889b",626:"566ca9a844d804a5",727:"7bd00c73d5fcf939",735:"fbf57368e4fb4610",772:"5ac33e623a82bc62",816:"c04225f6a8d70cfd",847:"d202de2e0d0cee0e",985:"39ff51ef9b5fc3e3"}[e]+".js",r.miniCssF=e=>{},r.o=(e,f)=>Object.prototype.hasOwnProperty.call(e,f),(()=>{var e={},f="angular6:";r.l=(t,n,i,o)=>{if(e[t])e[t].push(n);else{var a,l;if(void 0!==i)for(var c=document.getElementsByTagName("script"),b=0;b<c.length;b++){var d=c[b];if(d.getAttribute("src")==t||d.getAttribute("data-webpack")==f+i){a=d;break}}a||(l=!0,(a=document.createElement("script")).type="module",a.charset="utf-8",a.timeout=120,r.nc&&a.setAttribute("nonce",r.nc),a.setAttribute("data-webpack",f+i),a.src=r.tu(t)),e[t]=[n];var u=(_,p)=>{a.onerror=a.onload=null,clearTimeout(s);var h=e[t];if(delete e[t],a.parentNode&&a.parentNode.removeChild(a),h&&h.forEach(y=>y(p)),_)return _(p)},s=setTimeout(u.bind(null,void 0,{type:"timeout",target:a}),12e4);a.onerror=u.bind(null,a.onerror),a.onload=u.bind(null,a.onload),l&&document.head.appendChild(a)}}})(),r.r=e=>{typeof Symbol<"u"&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.nmd=e=>(e.paths=[],e.children||(e.children=[]),e),(()=>{var e;r.tt=()=>(void 0===e&&(e={createScriptURL:f=>f},typeof trustedTypes<"u"&&trustedTypes.createPolicy&&(e=trustedTypes.createPolicy("angular#bundler",e))),e)})(),r.tu=e=>r.tt().createScriptURL(e),r.p="",(()=>{var e={666:0};r.f.j=(n,i)=>{var o=r.o(e,n)?e[n]:void 0;if(0!==o)if(o)i.push(o[2]);else if(666!=n){var a=new Promise((d,u)=>o=e[n]=[d,u]);i.push(o[2]=a);var l=r.p+r.u(n),c=new Error;r.l(l,d=>{if(r.o(e,n)&&(0!==(o=e[n])&&(e[n]=void 0),o)){var u=d&&("load"===d.type?"missing":d.type),s=d&&d.target&&d.target.src;c.message="Loading chunk "+n+" failed.\n("+u+": "+s+")",c.name="ChunkLoadError",c.type=u,c.request=s,o[1](c)}},"chunk-"+n,n)}else e[n]=0},r.O.j=n=>0===e[n];var f=(n,i)=>{var c,b,[o,a,l]=i,d=0;if(o.some(s=>0!==e[s])){for(c in a)r.o(a,c)&&(r.m[c]=a[c]);if(l)var u=l(r)}for(n&&n(i);d<o.length;d++)r.o(e,b=o[d])&&e[b]&&e[b][0](),e[b]=0;return r.O(u)},t=self.webpackChunkangular6=self.webpackChunkangular6||[];t.forEach(f.bind(null,0)),t.push=f.bind(null,t.push.bind(t))})()})();

{
    "risk_score": 2,
    "reasoning": "The provided JavaScript snippet appears to be a part of the TWEEN.js library, which is a popular animation library used in web development. The code does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The behaviors observed are typical of an animation library, including managing a collection of tweens, updating their values over time, and providing various easing functions and callbacks. While the code uses some legacy practices like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, this script is likely a benign part of a larger web application and does not demonstrate any suspicious or harmful behavior."
}

(self.webpackChunkangular6=self.webpackChunkangular6||[]).push([[149],{16553:function(j,B){var c,r=function(){this._tweens={},this._tweensAddedDuringUpdate={}};r.prototype={getAll:function(){return Object.keys(this._tweens).map(function(e){return this._tweens[e]}.bind(this))},removeAll:function(){this._tweens={}},add:function(e){this._tweens[e.getId()]=e,this._tweensAddedDuringUpdate[e.getId()]=e},remove:function(e){delete this._tweens[e.getId()],delete this._tweensAddedDuringUpdate[e.getId()]},update:function(e,s){var a=Object.keys(this._tweens);if(0===a.length)return!1;for(e=void 0!==e?e:m.now();a.length>0;){this._tweensAddedDuringUpdate={};for(var p=0;p<a.length;p++){var f=this._tweens[a[p]];f&&!1===f.update(e)&&(f._isPlaying=!1,s||delete this._tweens[a[p]])}a=Object.keys(this._tweensAddedDuringUpdate)}return!0}};var e,m=new r;m.Group=r,m._nextId=0,m.nextId=function(){return m._nextId++},m.now=typeof self>"u"&&typeof process<"u"&&process.hrtime?function(){var e=process.hrtime();return 1e3*e[0]+e[1]/1e6}:typeof self<"u"&&void 0!==self.performance&&void 0!==self.performance.now?self.performance.now.bind(self.performance):void 0!==Date.now?Date.now:function(){return(new Date).getTime()},m.Tween=function(e,s){this._object=e,this._valuesStart={},this._valuesEnd={},this._valuesStartRepeat={},this._duration=1e3,this._repeat=0,this._repeatDelayTime=void 0,this._yoyo=!1,this._isPlaying=!1,this._reversed=!1,this._delayTime=0,this._startTime=null,this._easingFunction=m.Easing.Linear.None,this._interpolationFunction=m.Interpolation.Linear,this._chainedTweens=[],this._onStartCallback=null,this._onStartCallbackFired=!1,this._onUpdateCallback=null,this._onRepeatCallback=null,this._onCompleteCallback=null,this._onStopCallback=null,this._group=s||m,this._id=m.nextId()},m.Tween.prototype={getId:function(){return this._id},isPlaying:function(){return this._isPlaying},to:function(e,s){return this._valuesEnd=Object.create(e),void 0!==s&&(this._duration=s),this},duration:function(s){return this._duration=s,this},start:function(e){for(var s in this._group.add(this),this._isPlaying=!0,this._onStartCallbackFired=!1,this._startTime=void 0!==e?"string"==typeof e?m.now()+parseFloat(e):e:m.now(),this._startTime+=this._delayTime,this._valuesEnd){if(this._valuesEnd[s]instanceof Array){if(0===this._valuesEnd[s].length)continue;this._valuesEnd[s]=[this._object[s]].concat(this._valuesEnd[s])}void 0!==this._object[s]&&(this._valuesStart[s]=this._object[s],this._valuesStart[s]instanceof Array||(this._valuesStart[s]*=1),this._valuesStartRepeat[s]=this._valuesStart[s]||0)}return this},stop:function(){return this._isPlaying?(this._group.remove(this),this._isPlaying=!1,null!==this._onStopCallback&&this._onStopCallback(this._object),this.stopChainedTweens(),this):this},end:function(){return this.update(1/0),this},stopChainedTweens:function(){for(var e=0,s=this._chainedTweens.length;e<s;e++)this._chainedTweens[e].stop()},group:function(e){return this._group=e,this},delay:function(e){return this._delayTime=e,this},repeat:function(e){return this._repeat=e,this},repeatDelay:function(e){return this._repeatDelayTime=e,this},yoyo:function(e){return this._yoyo=e,this},easing:function(e){return this._easingFunction=e,this},interpolation:function(e){return this._interpolationFunction=e,this},chain:function(){return this._chainedTweens=arguments,this},onStart:function(e){return this._onStartCallback=e,this},onUpdate:function(e){return this._onUpdateCallback=e,this},onRepeat:function(s){return this._onRepeatCallback=s,this},onComplete:function(e){return this._onCompleteCallback=e,this},onStop:function(e){return this._onStopCallback=e,this},update:function(e){var s,a,p;if(e<this._startTime)return!0;for(s in!1===this._onStartCallbackFired&&(null!==this._onStartCallback&&this._onStartCallback(this._object),this._onStartCallbackFired=!0),a=(e-this._startTime)/this._duration,p=this._easingFunction(a=0===this._duration||a>1?1:a),this._valuesEnd)if(void 0!==this._valuesStart[s]){var f=t

{
    "risk_score": 6,
    "reasoning": "The provided JavaScript snippet appears to have a mix of behaviors that require further review. While it does not contain any clear indicators of malicious intent, it exhibits some potentially concerning practices that warrant closer inspection. The key factors contributing to the medium risk score are:

1. External Data Transmission (+2 points): The script appears to be sending data to external domains, which could potentially include sensitive user information.
2. Aggressive DOM Manipulation (+2 points): The script is repeatedly altering the DOM, which could indicate overly aggressive or potentially disruptive behavior.
3. Contextual Adjustments:
   - Suspicious Domains (+1 point): The script interacts with domains of unknown or dubious reputation, which increases the risk.
   - Behavioral Inconsistency (+1 point): The script's behavior, such as the aggressive DOM manipulation, may be inconsistent with its apparent purpose, raising further suspicion.

Overall, the script demonstrates a mix of behaviors that require further investigation to determine its true intent and potential impact. A risk score of 6 (Medium Risk) is assigned, indicating the need for additional review and analysis before making a final determination on the script's trustworthiness."
}

(self.webpackChunkangular6=self.webpackChunkangular6||[]).push([[163],{55214:(T,D,f)=>{"use strict";f.d(D,{s:()=>W});var l=f(98274),a=f(53486),r=f(21864),s=f(46770),i=f(12013),u=f(22993),m=f(36895),y=f(54463);function w(z,ye){1&z&&(l.\u0275\u0275elementStart(0,"span"),l.\u0275\u0275text(1),l.\u0275\u0275pipe(2,"translate"),l.\u0275\u0275elementEnd()),2&z&&(l.\u0275\u0275advance(1),l.\u0275\u0275textInterpolate(l.\u0275\u0275pipeBind1(2,1,"encryptAnimation.messageDecrypted")))}function b(z,ye){1&z&&(l.\u0275\u0275elementStart(0,"span"),l.\u0275\u0275text(1),l.\u0275\u0275pipe(2,"translate"),l.\u0275\u0275elementEnd()),2&z&&(l.\u0275\u0275advance(1),l.\u0275\u0275textInterpolate(l.\u0275\u0275pipeBind1(2,1,"encryptAnimation.decryptingMessage")))}const I=function(z){return{shown:z}};let W=(()=>{class z{constructor(H,ne,xe,he){this.rs=H,this.notificationService=ne,this.lfs=xe,this.gs=he,this.dic=a.A,this.encryptedContentEmitter=new l.EventEmitter,this.decryptionInProcess=!1,this.decryptionStatus=a.A.CONSTANTS.CONTENT_STATUS.INITIAL,this.adjustIframeHeight=(t,V)=>{const Fe=V.body,Pe=V.documentElement,fe=V.getElementsByTagName("HTML")[0];Fe.style.overflowY="hidden";let et=Math.max(Fe.scrollHeight,Fe.offsetHeight,fe.clientHeight,fe.scrollHeight,fe.offsetHeight,Pe.clientHeight,Pe.scrollHeight,Pe.offsetHeight);t.style.height=et.toString()+"px"}}ngOnInit(){this.encryptedContentSubscription=this.encryptedContentInput.subscribe(H=>{this.encryptedContent=H}),this.contentSubscription=this.contentInput.subscribe(H=>{this.content=H}),this.decryptionSubscription=this.gs.decryptionStateChange.subscribe(H=>{this.decryptionStatus=a.A.CONSTANTS.CONTENT_STATUS.INITIAL,this.decryptionInProcess=!1})}ngOnDestroy(){this.encryptedContentSubscription.unsubscribe(),this.contentSubscription.unsubscribe(),this.decryptionSubscription.unsubscribe()}decryptionProcess(H){this.encryptedContent?H===a.A.CONSTANTS.CONTENT_STATUS.PROCESS?(this.decryptionInProcess=!0,this.decryptionStatus=a.A.CONSTANTS.CONTENT_STATUS.PROCESS):H===a.A.CONSTANTS.CONTENT_STATUS.DECRYPTED&&(setTimeout(()=>{this.decryptionStatus=a.A.CONSTANTS.CONTENT_STATUS.DECRYPTED},1500),setTimeout(()=>{this.decryptData()},2500)):H===a.A.CONSTANTS.CONTENT_STATUS.DECRYPTED&&this.decryptData()}decryptData(H){this.decryptionStatus=a.A.CONSTANTS.CONTENT_STATUS.INITIAL,this.decryptionInProcess=!1,this.encryptedContent=!1,this.encryptedContentEmitter&&this.encryptedContentEmitter.emit(this.encryptedContent),setTimeout(()=>{this.updateIFrameContent(H)})}updateIFrameContent(H){if(!this.content&&!H)return;H&&(this.content=H);const xe=`::-webkit-scrollbar {\n                      width: 10px;\n                      height: 10px;\n                    }\n                    ::-webkit-scrollbar-button {\n                        width: 0px;\n                        height: 0px;\n                    }\n                    ::-webkit-scrollbar-thumb {\n                        background: ${this.lfs.color};\n                        border: 1px solid rgba(0, 0, 0, 0.5);\n                        border-radius: 50px;\n                    }\n                    ::-webkit-scrollbar-thumb:hover {\n                        background: ${this.lfs.hoverColor};\n                    }\n                    ::-webkit-scrollbar-thumb:active {\n                        background: ${this.lfs.color};\n                    }\n                    ::-webkit-scrollbar-track {\n                        background: #ffffff;\n                        border: 1px solid rgba(0,0,0,0.15);\n                        border-radius: 50px;\n                    }\n                    ::-webkit-scrollbar-track:hover {\n                        background: #ffffff;\n                    }\n                    ::-webkit-scrollbar-track:active {\n                        background: #ffffff;\n                    }\n                    ::-webkit-scrollbar-corner {\n                        background: transparent;\n                    }\n                    body {\n    

```json
{
    "risk_score": 1,
    "reasoning": "The script primarily involves polyfills and compatibility checks for older browsers, with no high-risk behaviors such as dynamic code execution or data exfiltration. It does not interact with external domains or perform aggressive DOM manipulations. The use of legacy practices is noted but does not indicate malicious intent."
}

(self.webpackChunkangular6=self.webpackChunkangular6||[]).push([[429],{7435:(s,d,t)=>{"use strict";t(70717),t(21926),t(6368),t(10609),window.global=window,window.process={env:{NODE_DEBUG:!1,DEBUG:void 0}}},6368:()=>{"document"in self&&(!("classList"in document.createElement("_"))||document.createElementNS&&!("classList"in document.createElementNS("http://www.w3.org/2000/svg","g"))?function(s){"use strict";if("Element"in s){var d="classList",t="prototype",r=s.Element[t],e=Object,n=String[t].trim||function(){return this.replace(/^\s+|\s+$/g,"")},a=Array[t].indexOf||function(c){for(var h=0,g=this.length;h<g;h++)if(h in this&&this[h]===c)return h;return-1},o=function(c,h){this.name=c,this.code=DOMException[c],this.message=h},u=function(c,h){if(""===h)throw new o("SYNTAX_ERR","An invalid or illegal string was specified");if(/\s/.test(h))throw new o("INVALID_CHARACTER_ERR","String contains an invalid character");return a.call(c,h)},v=function(c){for(var h=n.call(c.getAttribute("class")||""),g=h?h.split(/\s+/):[],y=0,p=g.length;y<p;y++)this.push(g[y]);this._updateClassName=function(){c.setAttribute("class",this.toString())}},i=v[t]=[],l=function(){return new v(this)};if(o[t]=Error[t],i.item=function(c){return this[c]||null},i.contains=function(c){return-1!==u(this,c+="")},i.add=function(){var y,c=arguments,h=0,g=c.length,p=!1;do{-1===u(this,y=c[h]+"")&&(this.push(y),p=!0)}while(++h<g);p&&this._updateClassName()},i.remove=function(){var y,E,c=arguments,h=0,g=c.length,p=!1;do{for(E=u(this,y=c[h]+"");-1!==E;)this.splice(E,1),p=!0,E=u(this,y)}while(++h<g);p&&this._updateClassName()},i.toggle=function(c,h){var g=this.contains(c+=""),y=g?!0!==h&&"remove":!1!==h&&"add";return y&&this[y](c),!0===h||!1===h?h:!g},i.toString=function(){return this.join(" ")},e.defineProperty){var f={get:l,enumerable:!0,configurable:!0};try{e.defineProperty(r,d,f)}catch(c){-2146823252===c.number&&(f.enumerable=!1,e.defineProperty(r,d,f))}}else e[t].__defineGetter__&&r.__defineGetter__(d,l)}}(self):function(){"use strict";var s=document.createElement("_");if(s.classList.add("c1","c2"),!s.classList.contains("c2")){var d=function(r){var e=DOMTokenList.prototype[r];DOMTokenList.prototype[r]=function(n){var a,o=arguments.length;for(a=0;a<o;a++)e.call(this,n=arguments[a])}};d("add"),d("remove")}if(s.classList.toggle("c3",!1),s.classList.contains("c3")){var t=DOMTokenList.prototype.toggle;DOMTokenList.prototype.toggle=function(r,e){return 1 in arguments&&!this.contains(r)==!e?e:t.call(this,r)}}s=null}())},10609:function(s,d,t){"use strict";var r,e,n=this&&this.__assign||function(){return n=Object.assign||function(o){for(var u,v=1,i=arguments.length;v<i;v++)for(var l in u=arguments[v])Object.prototype.hasOwnProperty.call(u,l)&&(o[l]=u[l]);return o},n.apply(this,arguments)},a=this&&this.__spreadArray||function(o,u,v){if(v||2===arguments.length)for(var f,i=0,l=u.length;i<l;i++)(f||!(i in u))&&(f||(f=Array.prototype.slice.call(u,0,i)),f[i]=u[i]);return o.concat(f||Array.prototype.slice.call(u))};r=function(){!function(C){var j=C.performance;function K(At){j&&j.mark&&j.mark(At)}function Z(At,X){j&&j.measure&&j.measure(At,X)}K("Zone");var nt=C.__Zone_symbol_prefix||"__zone_symbol__";function ot(At){return nt+At}var lt=!0===C[ot("forceDuplicateZoneCheck")];if(C.Zone){if(lt||"function"!=typeof C.Zone.__symbol__)throw new Error("Zone already loaded.");return C.Zone}var Et=function(){function At(X,q){this._parent=X,this._name=q?q.name||"unnamed":"<root>",this._properties=q&&q.properties||{},this._zoneDelegate=new Ut(this,this._parent&&this._parent._zoneDelegate,q)}return At.assertZonePatched=function(){if(C.Promise!==nr.ZoneAwarePromise)throw new Error("Zone.js has detected that ZoneAwarePromise `(window|global).Promise` has been overwritten.\nMost likely cause is that a Promise polyfill has been loaded after Zone.js (Polyfilling Promise api is not necessary when zone.js is loaded. If you must load one, do so before loading zone.js.)")},Object.defineProperty(At,"root",{get:function(

```json
{
    "risk_score": 1,
    "reasoning": "The script primarily involves DOM manipulation and Angular template rendering without any high-risk indicators such as dynamic code execution or data exfiltration. It does not interact with external domains or use obfuscated code, suggesting a low risk of malicious behavior."
}

"use strict";(self.webpackChunkangular6=self.webpackChunkangular6||[]).push([[618],{50650:(Y,O,h)=>{h.d(O,{J:()=>f});var e=h(98274),_=h(17489),v=h(36895),C=h(90158),x=h(54463),w=h(74028),D=h(24006),F=h(95149);const M=["searchInputElement"];function k(a,p){if(1&a&&(e.\u0275\u0275element(0,"span",14),e.\u0275\u0275pipe(1,"translate")),2&a){const r=e.\u0275\u0275nextContext();e.\u0275\u0275property("innerHTML",r.text||e.\u0275\u0275pipeBind1(1,1,"general.select"),e.\u0275\u0275sanitizeHtml)}}function A(a,p){if(1&a&&(e.\u0275\u0275elementStart(0,"span",15),e.\u0275\u0275text(1),e.\u0275\u0275pipe(2,"translate"),e.\u0275\u0275elementEnd()),2&a){const r=e.\u0275\u0275nextContext();e.\u0275\u0275advance(1),e.\u0275\u0275textInterpolate(r._.some(r.items,"selected")?r._.map(r._.filter(r.items,"selected"),r.itemDisplayKey||"text").join(", "):e.\u0275\u0275pipeBind1(2,1,"general.select"))}}function P(a,p){if(1&a&&(e.\u0275\u0275elementStart(0,"span",16),e.\u0275\u0275text(1),e.\u0275\u0275elementEnd()),2&a){const r=e.\u0275\u0275nextContext();e.\u0275\u0275advance(1),e.\u0275\u0275textInterpolate1("(",r._.filter(r.items,"selected").length,")")}}function B(a,p){1&a&&e.\u0275\u0275element(0,"i",17)}function L(a,p){if(1&a){const r=e.\u0275\u0275getCurrentView();e.\u0275\u0275elementStart(0,"i",23),e.\u0275\u0275listener("click",function(){e.\u0275\u0275restoreView(r);const u=e.\u0275\u0275nextContext(2);return e.\u0275\u0275resetView(u.clearSearchItem())}),e.\u0275\u0275elementEnd()}}function U(a,p){if(1&a){const r=e.\u0275\u0275getCurrentView();e.\u0275\u0275elementStart(0,"li",18)(1,"div",19)(2,"input",20,21),e.\u0275\u0275listener("click",function(u){return u.stopPropagation()})("ngModelChange",function(u){e.\u0275\u0275restoreView(r);const g=e.\u0275\u0275nextContext();return e.\u0275\u0275resetView(g.search.text=u)})("keyup",function(){e.\u0275\u0275restoreView(r);const u=e.\u0275\u0275nextContext();return e.\u0275\u0275resetView(u.searchItem())}),e.\u0275\u0275pipe(4,"translate"),e.\u0275\u0275elementEnd(),e.\u0275\u0275template(5,L,1,0,"i",22),e.\u0275\u0275elementEnd()()}if(2&a){const r=e.\u0275\u0275nextContext();e.\u0275\u0275advance(2),e.\u0275\u0275property("selectAllText",r.search.selectAll)("ngModel",r.search.text)("placeholder",e.\u0275\u0275pipeBind1(4,4,"general.search")),e.\u0275\u0275advance(3),e.\u0275\u0275property("ngIf",r.search.text)}}function y(a,p){if(1&a&&(e.\u0275\u0275elementStart(0,"span",35),e.\u0275\u0275text(1),e.\u0275\u0275elementEnd()),2&a){const r=e.\u0275\u0275nextContext(2).$implicit;e.\u0275\u0275advance(1),e.\u0275\u0275textInterpolate(r)}}function R(a,p){if(1&a&&e.\u0275\u0275element(0,"i",36),2&a){const r=e.\u0275\u0275nextContext(2).$implicit,l=e.\u0275\u0275nextContext(2);e.\u0275\u0275property("ngClass",r.icon||l.itemIcon)}}function $(a,p){if(1&a&&(e.\u0275\u0275elementStart(0,"span",37),e.\u0275\u0275text(1),e.\u0275\u0275elementEnd()),2&a){const r=e.\u0275\u0275nextContext(2).$implicit,l=e.\u0275\u0275nextContext(2);e.\u0275\u0275property("ngStyle",r.style),e.\u0275\u0275advance(1),e.\u0275\u0275textInterpolate(r[l.itemDisplayKey]||r.text)}}function E(a,p){if(1&a&&e.\u0275\u0275element(0,"i",38),2&a){const r=e.\u0275\u0275nextContext(2).$implicit;e.\u0275\u0275property("tooltip",r.explanation||r.tooltip)}}function V(a,p){if(1&a){const r=e.\u0275\u0275getCurrentView();e.\u0275\u0275elementStart(0,"i",39),e.\u0275\u0275listener("click",function(u){e.\u0275\u0275restoreView(r);const g=e.\u0275\u0275nextContext(2).$implicit;return e.\u0275\u0275nextContext(2).onItemDelete.emit({item:g}),e.\u0275\u0275resetView(u.stopPropagation())}),e.\u0275\u0275pipe(1,"translate"),e.\u0275\u0275elementEnd()}2&a&&e.\u0275\u0275property("tooltip",e.\u0275\u0275pipeBind1(1,1,"general.removeItem"))}function I(a,p){if(1&a&&(e.\u0275\u0275elementStart(0,"div",4),e.\u0275\u0275template(1,y,2,1,"span",30),e.\u0275\u0275template(2,R,1,1,"i",31),e.\u0275\u0275template(3,$,2,2,"span",32),e.\u0275\u0275template(4,E,1,1,"i",33),

```json
{
    "risk_score": 1,
    "reasoning": "The script primarily defines Angular directives and does not exhibit any high-risk behaviors such as dynamic code execution, data exfiltration, or redirects to suspicious domains. It uses standard Angular practices for DOM manipulation and event handling, which are typical for web applications. There are no interactions with external domains or obfuscated code present."
}

"use strict";(self.webpackChunkangular6=self.webpackChunkangular6||[]).push([[123],{74028:(gt,U,f)=>{f.d(U,{$g:()=>H,YD:()=>$,bf:()=>L,hT:()=>w,vM:()=>E});var i=f(98274);let E=(()=>{class a{get attrHidden(){return this.shown?null:"hidden"}}return a.\u0275fac=function(l){return new(l||a)},a.\u0275dir=i.\u0275\u0275defineDirective({type:a,selectors:[["","shown",""]],hostVars:1,hostBindings:function(l,V){2&l&&i.\u0275\u0275attribute("hidden",V.attrHidden)},inputs:{shown:"shown"},standalone:!0}),a})(),H=(()=>{class a{constructor(l){this.element=l}ngOnInit(){this.selectAllText&&this.selectAll()}ngOnChanges(l){this.selectAllText&&this.selectAll()}selectAll(){setTimeout(()=>{this.element.nativeElement.focus(),this.element.nativeElement.select()})}}return a.\u0275fac=function(l){return new(l||a)(i.\u0275\u0275directiveInject(i.ElementRef))},a.\u0275dir=i.\u0275\u0275defineDirective({type:a,selectors:[["","selectAllText",""]],inputs:{selectAllText:"selectAllText"},standalone:!0,features:[i.\u0275\u0275NgOnChangesFeature]}),a})(),L=(()=>{class a{constructor(){this.ngInit=new i.EventEmitter}ngOnInit(){this.ngInit&&this.ngInit.emit()}}return a.\u0275fac=function(l){return new(l||a)},a.\u0275dir=i.\u0275\u0275defineDirective({type:a,selectors:[["","ngInit",""]],outputs:{ngInit:"ngInit"},standalone:!0}),a})(),$=(()=>{class a{constructor(l){this.el=l,this.scrollToTopFlagChange=new i.EventEmitter}ngOnChanges(l){setTimeout(()=>{!0===this.scrollToTopFlag&&(this.el.nativeElement.scrollTo({top:0,behavior:"smooth"}),this.scrollToTopFlagChange.emit(!1))})}}return a.\u0275fac=function(l){return new(l||a)(i.\u0275\u0275directiveInject(i.ElementRef))},a.\u0275dir=i.\u0275\u0275defineDirective({type:a,selectors:[["","scrollToTopFlag",""]],inputs:{scrollToTopFlag:"scrollToTopFlag"},outputs:{scrollToTopFlagChange:"scrollToTopFlagChange"},standalone:!0,features:[i.\u0275\u0275NgOnChangesFeature]}),a})(),w=(()=>{class a{constructor(l){this.el=l}ngAfterContentInit(){this.checkFocus(this.appAutoFocus)}checkFocus(l){l&&setTimeout(()=>{this.el.nativeElement.focus()},this.focusDelay||1)}}return a.\u0275fac=function(l){return new(l||a)(i.\u0275\u0275directiveInject(i.ElementRef))},a.\u0275dir=i.\u0275\u0275defineDirective({type:a,selectors:[["","appAutoFocus",""]],inputs:{appAutoFocus:"appAutoFocus",focusDelay:"focusDelay"},standalone:!0}),a})()},24006:(gt,U,f)=>{f.d(U,{Cf:()=>c,Fd:()=>pe,Fj:()=>O,JJ:()=>Ue,JU:()=>u,On:()=>oe,Q7:()=>G,UX:()=>_n,Wl:()=>V,_:()=>ae,nD:()=>me,qQ:()=>ge,u5:()=>mn,wV:()=>se});var i=f(98274),E=f(36895),H=f(32076),L=f(4128),$=f(54004);let w=(()=>{class n{constructor(e,r){this._renderer=e,this._elementRef=r,this.onChange=o=>{},this.onTouched=()=>{}}setProperty(e,r){this._renderer.setProperty(this._elementRef.nativeElement,e,r)}registerOnTouched(e){this.onTouched=e}registerOnChange(e){this.onChange=e}setDisabledState(e){this.setProperty("disabled",e)}}return n.\u0275fac=function(e){return new(e||n)(i.\u0275\u0275directiveInject(i.Renderer2),i.\u0275\u0275directiveInject(i.ElementRef))},n.\u0275dir=i.\u0275\u0275defineDirective({type:n}),n})(),a=(()=>{class n extends w{}return n.\u0275fac=function(){let t;return function(r){return(t||(t=i.\u0275\u0275getInheritedFactory(n)))(r||n)}}(),n.\u0275dir=i.\u0275\u0275defineDirective({type:n,features:[i.\u0275\u0275InheritDefinitionFeature]}),n})();const u=new i.InjectionToken("NgValueAccessor"),l={provide:u,useExisting:(0,i.forwardRef)(()=>V),multi:!0};let V=(()=>{class n extends a{writeValue(e){this.setProperty("checked",e)}}return n.\u0275fac=function(){let t;return function(r){return(t||(t=i.\u0275\u0275getInheritedFactory(n)))(r||n)}}(),n.\u0275dir=i.\u0275\u0275defineDirective({type:n,selectors:[["input","type","checkbox","formControlName",""],["input","type","checkbox","formControl",""],["input","type","checkbox","ngModel",""]],hostBindings:function(e,r){1&e&&i.\u0275\u0275listener("change",function(s){return r.onChange(s.target.checked)})("blur",function(){return r.onTouched()})},features:[i.\

```json
{
    "risk_score": 4,
    "reasoning": "The script contains obfuscated code and base64 encoding/decoding functions, which are high-risk indicators (+3 points). It also includes functions for redirecting and analyzing data, which could imply data transmission to external servers (+2 points). However, there is no clear evidence of malicious intent or interaction with suspicious domains, so no additional points are added. The final score suggests a need for further review due to unclear behavior."
}

"use strict";(self.webpackChunktoc=self.webpackChunktoc||[]).push([[895],{6895:(ut,k,d)=>{d.r(k),d.d(k,{V3Module:()=>v});var w=d(177),Y=d(9417),_=d(9888),O=d(8797);const h="function"==typeof Buffer,C="function"==typeof TextDecoder?new TextDecoder:void 0,p=("function"==typeof TextEncoder&&new TextEncoder,Array.prototype.slice.call("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=")),g=(e=>{let s={};return e.forEach((i,r)=>s[i]=r),s})(p),H=/^(?:[A-Za-z\d+\/]{4})*?(?:[A-Za-z\d+\/]{2}(?:==)?|[A-Za-z\d+\/]{3}=?)?$/,a=String.fromCharCode.bind(String),F="function"==typeof Uint8Array.from?Uint8Array.from.bind(Uint8Array):e=>new Uint8Array(Array.prototype.slice.call(e,0)),j=e=>e.replace(/[^A-Za-z0-9\+\/]/g,""),B=e=>{let s,i,r,n,o="";const l=e.length%3;for(let b=0;b<e.length;){if((i=e.charCodeAt(b++))>255||(r=e.charCodeAt(b++))>255||(n=e.charCodeAt(b++))>255)throw new TypeError("invalid character found");s=i<<16|r<<8|n,o+=p[s>>18&63]+p[s>>12&63]+p[s>>6&63]+p[63&s]}return l?o.slice(0,l-3)+"===".substring(l):o},Z=/[\xC0-\xDF][\x80-\xBF]|[\xE0-\xEF][\x80-\xBF]{2}|[\xF0-\xF7][\x80-\xBF]{3}/g,K=e=>{switch(e.length){case 4:var i=((7&e.charCodeAt(0))<<18|(63&e.charCodeAt(1))<<12|(63&e.charCodeAt(2))<<6|63&e.charCodeAt(3))-65536;return a(55296+(i>>>10))+a(56320+(1023&i));case 3:return a((15&e.charCodeAt(0))<<12|(63&e.charCodeAt(1))<<6|63&e.charCodeAt(2));default:return a((31&e.charCodeAt(0))<<6|63&e.charCodeAt(1))}},P=e=>e.replace(Z,K),S=e=>{if(e=e.replace(/\s+/g,""),!H.test(e))throw new TypeError("malformed base64.");e+="==".slice(2-(3&e.length));let s,r,n,i="";for(let o=0;o<e.length;)s=g[e.charAt(o++)]<<18|g[e.charAt(o++)]<<12|(r=g[e.charAt(o++)])<<6|(n=g[e.charAt(o++)]),i+=64===r?a(s>>16&255):64===n?a(s>>16&255,s>>8&255):a(s>>16&255,s>>8&255,255&s);return i},I="function"==typeof atob?e=>atob(j(e)):h?e=>Buffer.from(e,"base64").toString("binary"):S,U=h?e=>F(Buffer.from(e,"base64")):e=>F(I(e).split("").map(s=>s.charCodeAt(0))),tt=h?e=>Buffer.from(e,"base64").toString("utf8"):C?e=>C.decode(U(e)):e=>P(I(e)),N=e=>j(e.replace(/[-_]/g,s=>"-"==s?"+":"/")),x=e=>tt(N(e)),st_decode=x;var t=d(4438),it=d(1626);class f{constructor(s){this.http=s}redirect(s,i){return this.http.post(`${s}redirect`,i)}analyse(s,i){return this.http.post(`${s}analyse`,i)}static#t=this.\u0275fac=function(i){return new(i||f)(t.KVO(it.Qq))};static#e=this.\u0275prov=t.jDH({token:f,factory:f.\u0275fac})}var J=d(5694);const X=e=>({disabled:e});function rt(e,s){if(1&e){const i=t.RV6();t.j41(0,"div",26),t.bIt("click",function(){t.eBV(i);const n=t.XpG(2);return t.Njj(n.navToLeft())})("keyup",function(){t.eBV(i);const n=t.XpG(2);return t.Njj(n.navToLeft())}),t.k0s()}if(2&e){const i=t.XpG(2);t.Y8G("ngClass",t.eq3(1,X,i.leftNavDisabled))}}function nt(e,s){if(1&e){const i=t.RV6();t.j41(0,"div",27),t.bIt("click",function(){t.eBV(i);const n=t.XpG(2);return t.Njj(n.navToRight())})("keyup",function(){t.eBV(i);const n=t.XpG(2);return t.Njj(n.navToRight())}),t.k0s()}if(2&e){const i=t.XpG(2);t.Y8G("ngClass",t.eq3(1,X,i.rightNavDisabled))}}function ot(e,s){if(1&e&&(t.j41(0,"div",28)(1,"div",17)(2,"div",18)(3,"div",19),t.nrm(4,"img",29),t.j41(5,"h2"),t.EFF(6),t.nI1(7,"translate"),t.k0s()(),t.j41(8,"strong"),t.EFF(9),t.nI1(10,"translate"),t.k0s(),t.j41(11,"p"),t.EFF(12),t.nI1(13,"translate"),t.k0s()(),t.j41(14,"div",22),t.nrm(15,"img",30),t.k0s(),t.nrm(16,"div",5),t.k0s()()),2&e){const i=t.XpG(2);t.R7$(6),t.JRh(t.bMT(7,3,"urlscan.scanning.title")),t.R7$(3),t.JRh(t.bMT(10,5,"urlscan.scanning.notify")),t.R7$(3),t.JRh(t.bMT(13,7,i.securityQuote))}}function at(e,s){if(1&e&&(t.j41(0,"div",31)(1,"div",17)(2,"div",18)(3,"div",19),t.nrm(4,"img",32),t.j41(5,"h2"),t.EFF(6),t.nI1(7,"translate"),t.k0s()(),t.j41(8,"strong"),t.EFF(9),t.nI1(10,"translate"),t.k0s(),t.j41(11,"p"),t.EFF(12),t.nI1(13,"translate"),t.k0s(),t.j41(14,"p"),t.EFF(15),t.nI1(16,"translate"),t.k0s()(),t.j41(17,"div",22),t.nrm(18,"img",33),t.k0s(),t.nrm(19,"div",5),t.k0s()()),2&e){const i=t.XpG(2);t.R7$(6),t.JRh(t.bMT(7,6,"urlscan.v

{
  "contains_trigger_text": true,
  "trigger_text": "Please be patient. The requested web page is being scanned for malicious code. You will soon be redirected to the web page.",
  "prominent_button_name": "unknown",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": true,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "contains_trigger_text": false,
  "trigger_text": "unknown",
  "prominent_button_name": "unknown",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
"contains_trigger_text": false,
"trigger_text": "unknown",
"prominent_button_name": "Reply",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false,
"contains_chinese_text": false,
"contains_fake_security_alerts": false
}

{
  "brands": [
    "Hornetsecurity"
  ]
}

{
"contains_trigger_text": true,
"trigger_text": "YOU'VE A FILE FOR REVIEW!",
"prominent_button_name": "CLICK HERE TO REVIEW",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false,
"contains_chinese_text": false,
"contains_fake_security_alerts": false
}

{
"contains_trigger_text": true,
"trigger_text": "YOU'VE A FILE FOR REVIEW!",
"prominent_button_name": "CLICK HERE TO REVIEW",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false,
"contains_chinese_text": false,
"contains_fake_security_alerts": false
}

{
  "brands": [
    "unknown"
  ]
}

{
  "brands": [
    "Trustifi"
  ]
}

{
  "brands": [
    "Trustifi"
  ]
}

{
  "brands": [
    "Trustifi"
  ]
}