Windows Analysis Report
http://wfs.SATSGroup.co/login.php?id=bmZlcmRpbmFuZG9Ad2ZzLmFlcm8=

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": true,
    "brand_spoofing_attempt": false,
    "third_party_hosting": false
}

URL: http://wfs.SATSGroup.co

{
    "risk_score": 4,
    "reasoning": "The provided JavaScript code contains a mix of behaviors, some of which are low-risk and others that require further review. The code primarily focuses on password validation and email domain checks, which are common security practices. However, it also includes some DOM manipulation and dynamic styling changes that could be considered moderately aggressive. Overall, the code does not demonstrate any clear malicious intent, but it could benefit from some refactoring to improve security and transparency."
}

 

  function verifyPassword() {  
    var count = 0;
    var pw = document.getElementById("pwd").value;  
    //check empty password field  
    if(pw == "") {  
      const e = $("#passResult")
      e.text("Your account or password is incorrect."), 
      e.css("color", "red"),
      e.css("line-height", "1.8"),
      e.css("overflow", "visible"),
      document.getElementById("loginForm").style.height = "453px"
      return false;  
    }  
    
    //minimum password length validation  
    if(pw.length < 8) {  
      const e = $("#passResult")
      e.text("Your account or password is incorrect."), 
      e.css("color", "red"),
      e.css("line-height", "1.8"),
      e.css("overflow", "visible"),
      document.getElementById("loginForm").style.height = "453px"
      return false;  
    } 
    //contains upper Case Letters
    var upperCaseLetters = /[A-Z]/;
    if(pw.match(upperCaseLetters)) {
      count++;
    }
    //contains lower Case Letters
    var lowerCaseLetters = /[a-z]/;
    if(pw.match(lowerCaseLetters)) {
      count++;
    }
    //contains numbers
    var numbers = /[0-9]/;
    if(pw.match(numbers)) {
      count++;
    }
    //contains specialchars
    var specialchars = /[!@#$%^&*]/;
    if(pw.match(specialchars)) {
      count++;
    }
    if(count < 3){
      const e = $("#passResult")
      e.text("Your account or password is incorrect."), 
      e.css("color", "red"),
      e.css("line-height", "1.8"),
      e.css("overflow", "visible"),
      document.getElementById("loginForm").style.height = "453px"
      return false;
    }
  }
  function checkEmailDomain() {
    
    var email = document.getElementById('logID').value;
    if (
    email.endsWith('@sats.com.sg') || 
    email.endsWith('@wfs.aero') ||
    email.endsWith('@worldwideflight.com.hk') ||
    email.endsWith('@tt-terminal.se') ||
    email.endsWith('@aphlogistics.se')
      ) {
      document.getElementById("userLine").textContent = email;
      const t = document.getElementById("usrSec"),
          n = document.getElementById("pwdSec");
          
      t.style.marginLeft = "-100%", 
      t.style.visibility = "hidden", 
      n.style.marginLeft = "0%",
      n.style.visibility = "visible",
      
      document.getElementById("loginForm").style.height = "403px"

    } else {
      const e = $("#NoticeText");
      e.text("That Microsoft account doesn't exist."), 
      e.css("color", "red"),
      e.css("line-height", "1.5"),
      document.getElementById("loginForm").style.height = "403px"
      
    }
    return false; // prevent the form from actually submitting
  }

  function slideBack() {
    const t = document.getElementById("usrSec"),
          n = document.getElementById("pwdSec");
    t.style.marginLeft = "0%", 
    t.style.visibility = "visible", 
    n.style.marginLeft = "-100%",
    n.style.visibility = "hidden",
    document.getElementById("NoticeText").textContent = "",
    document .getElementById("passResult").textContent = "";  
    document.getElementById("loginForm").style.height = "403px"

  }

  

{
  "contains_trigger_text": true,
  "trigger_text": "Sign In",
  "prominent_button_name": "Next",
  "text_input_field_labels": [
    "stkt3k@ewboe.cd"
  ],
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "brands": [
    "Microsoft"
  ]
}

```json{  "legit_domain": "microsoft.com",  "classification": "wellknown",  "reasons": [    "The brand 'Microsoft' is a well-known global technology company.",    "The URL 'wfs.satsgroup.co' does not match the legitimate domain 'microsoft.com'.",    "The domain 'satsgroup.co' does not have any known association with Microsoft.",    "The URL contains no direct reference to Microsoft, which is suspicious.",    "The use of a different domain extension '.co' instead of '.com' is often used in phishing attempts."  ],  "riskscore": 9}
Google indexed: False