{"root_cid":"bafkreia4cuj32fhh6cgb3hioojqoizwcicayew7prlnsqrla6lv7bvzlje","model":"openai/gpt-5.4-mini","analyzed_at":"2026-05-03T00:38:51.920Z","result":{"schema_version":1,"category":"Redirect","category_confidence":0.94,"summary":"A cloaked landing page that redirects Google traffic to an external URL while showing a generic analytics marketing page to others.","signals":["analysis-context.json: latest_probe title is \"Nexus Analytics | Enterprise Data Solutions\" for name unisewp.eth","root: inline script sets `const targetUrl = 'https://openset.co/u.html';` and redirects visitors with `window.location.href = targetUrl;`","root: referrer cloaking checks `document.referrer` for Google domains before deciding whether to redirect or reveal the page","root: page content is a generic enterprise analytics marketing landing page with no functional app UI"],"quality":{"tier":"low","score":0.22,"is_substantive":true,"is_redirect_only":false,"is_placeholder":false,"rationale":"Single-page marketing shell with generic copy and no real product functionality, plus cloaked redirect behavior that dominates the user experience."},"security":{"risk":"high","risk_score":0.93,"threat_type":"malicious_redirect","safe_to_list":false,"findings":[{"type":"malicious_redirect","severity":"high","confidence":0.98,"evidence":"root: `const targetUrl = 'https://openset.co/u.html';` and `if (!isBot) { window.location.href = targetUrl; }`","file":"root"},{"type":"malicious_redirect","severity":"high","confidence":0.9,"evidence":"root: cloaking logic checks `document.referrer` for Google domains before redirecting or revealing content","file":"root"}]},"files_reviewed":["analysis-context.json","ipfs-app-analysis-system.md","root"]}}
