Detects a phishing kit targeting banks for Latin America,
these kits are often deployed on `replit.com`.
It uses `api.ipify.org` to fetch the victim's IP.
Harvested credentials are delivered into the scammer's Telegram channel
through the use of the `sax.js` script file.