The .js also looks at the captcha, just to make sure that something, anything was written in before the page is allowed to be submitted. The second is where the captcha input is actually validated ...

Cyber criminals have found a new way to cheat innocent people through fake captcha codes that look like genuine verification prompts. Malware like Luma Stealer, which may collect private information ...