This subdomain hosts a deliberately simple, fake "bank" used to demonstrate CORS and CSRF. Nothing here is real: no accounts, no money, no database.
Start at the interactive explainer on barisalgun.dev, or open the bank's own page.