Windows Analysis Report
https://muhammadsaadofficial390.github.io/s1

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": true,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": true,
    "brand_spoofing_attempt": false,
    "third_party_hosting": true
}

URL: https://muhammadsaadofficial390.github.io

{
    "risk_score": 3,
    "reasoning": "The provided JavaScript snippet appears to be a script that creates shadow DOMs within the document. While it uses some DOM manipulation techniques, it does not exhibit any high-risk indicators like dynamic code execution, data exfiltration, or redirects to malicious domains. The script seems to be focused on modifying the document structure, which is a common practice for web development. However, the use of shadow DOMs and the lack of context around the script's purpose warrant a moderate risk score due to the potential for aggressive DOM manipulation."
}

      "use strict";
      window.addEventListener("DOMContentLoaded",
      function(event) {
        savepage_ShadowLoader(5);
      },false);
      function savepage_ShadowLoader(c){createShadowDOMs(0,document.documentElement);function createShadowDOMs(a,b){var i;if(b.localName=="iframe"||b.localName=="frame"){if(a<c){try{if(b.contentDocument.documentElement!=null){createShadowDOMs(a+1,b.contentDocument.documentElement)}}catch(e){}}}else{if(b.children.length>=1&&b.children[0].localName=="template"&&b.children[0].hasAttribute("data-savepage-shadowroot")){b.attachShadow({mode:"open"}).appendChild(b.children[0].content);b.removeChild(b.children[0]);for(i=0;i<b.shadowRoot.children.length;i++)if(b.shadowRoot.children[i]!=null)createShadowDOMs(a,b.shadowRoot.children[i])}for(i=0;i<b.children.length;i++)if(b.children[i]!=null)createShadowDOMs(a,b.children[i])}}}
    

{
    "risk_score": 3,
    "reasoning": "The provided JavaScript snippet appears to be a utility function for creating shadow DOMs within the web page. It iterates through the DOM tree, creating shadow roots for elements with a specific template structure. This behavior is likely part of a legitimate web page enhancement or optimization functionality, and does not exhibit any high-risk indicators such as dynamic code execution, data exfiltration, or suspicious redirects. The script uses standard DOM manipulation APIs and does not appear to be malicious in nature. However, the use of shadow DOMs could potentially be abused for certain types of attacks, so the script should be reviewed in the context of the overall web application to ensure it is being used appropriately."
}

  "use strict";
  window.addEventListener("DOMContentLoaded",
  function(event) {
    savepage_ShadowLoader(5);
  },false);
  function savepage_ShadowLoader(c){createShadowDOMs(0,document.documentElement);function createShadowDOMs(a,b){var i;if(b.localName=="iframe"||b.localName=="frame"){if(a<c){try{if(b.contentDocument.documentElement!=null){createShadowDOMs(a+1,b.contentDocument.documentElement)}}catch(e){}}}else{if(b.children.length>=1&&b.children[0].localName=="template"&&b.children[0].hasAttribute("data-savepage-shadowroot")){b.attachShadow({mode:"open"}).appendChild(b.children[0].content);b.removeChild(b.children[0]);for(i=0;i<b.shadowRoot.children.length;i++)if(b.shadowRoot.children[i]!=null)createShadowDOMs(a,b.shadowRoot.children[i])}for(i=0;i<b.children.length;i++)if(b.children[i]!=null)createShadowDOMs(a,b.children[i])}}}

{
"contains_trigger_text": true,
"trigger_text": "Your Page Will Be Deactivated Soon",
"prominent_button_name": "Continue",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": true,
"has_visible_qrcode": false,
"contains_chinese_text": false,
"contains_fake_security_alerts": true
}

{
  "brands": [
    "Facebook"
  ]
}

{
  "contains_trigger_text": true,
  "trigger_text": "Appeal Page Violation",
  "prominent_button_name": "Submit",
  "text_input_field_labels": [
    "c_user",
    "xs"
  ],
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "brands": [
    "Facebook"
  ]
}