Hello,

When sending a campaign, the generation of the phishing URL by Gophish embeds the obfuscated version of the lure parameters added by Evilginx instead of the deobfuscated version. Gophish indeed doesn't extract query parameters before obfuscating the phishing URL, resulting in a nested obfuscation, making lure parameters unusable.

Steps to reproduce:

1. Generate a lure with parameters in Evilginx
2. Launch a campaign in Gophish with the generated lure as landing

First email sent without the fix:

As we can see, the pubkey parameter added by Evilginx is obfuscated twice in the final URL. As such, it is unusable in redirectors or js_inject when hitting the landing page.

Second mail sent with the fix: