Simple Static page for Trezor

В этой теме можно использовать автоматический гарант!

Статус
Закрыто для дальнейших ответов.

QWSAZX

CD-диск
Пользователь
Регистрация
05.08.2022
Сообщения
12
Реакции
3
Trezor phishing page for retrieving recovery seed phrase from victim

Preview of page will be sent to you when private contact is established

PRICE: 80$

Features:
Anti bot
Uniquely obfuscated code for each copy that is distributed -hopefully to reduce static detections-
**If you are feeling paranoid and don't want my obfuscated code because you think it's backdoored then I am perfectly fine with sending it unobfuscated as well

Disclaimer:
Please do not waste my time asking for a preview unless you actually have an intention of purchasing this product. I have other phishing pages/panels but will not be advertising them in this thread, if you are interested ask me what else other pages I have
Selling only 5 copies of this -not trying to create a sense false of urgency just don't want it being leaked by someone-

CONTACTS:
TOX: 38455634D9EFDA59C9AD33C866F804D13041C208247D0EFC3A13752E1FE716643FBCC54E910F
or just pm me on the site
 
Пожалуйста, обратите внимание, что пользователь заблокирован
Hmmmm obfuscated code for seed phishing page !!!
Detections no reason to do this as any standard antibot API stop this
See no reason for code to be obfuscated especially for seed phrases makes one be a little suspicious but thats just me i guess
 
Hmmmm obfuscated code for seed phishing page !!!
Detections no reason to do this as any standard antibot API stop this
See no reason for code to be obfuscated especially for seed phrases makes one be a little suspicious but thats just me i guess
As I have already stated, I am able to send the code without obfuscation if need be
 
Hmmmm obfuscated code for seed phishing page !!!
Detections no reason to do this as any standard antibot API stop this
See no reason for code to be obfuscated especially for seed phrases makes one be a little suspicious but thats just me i guess
And I was also not aware that an anti bot solely prevents scanning, maybe the API I was using is terrible
 
Пожалуйста, обратите внимание, что пользователь заблокирован
And I was also not aware that an anti bot solely prevents scanning, maybe the API I was using is terrible
yh a good antibot api is needed things like killbot/antibot.pw are next to useless and are built on freely available github repos
You need a dynamic api that is updated hourly/daily with known bots signatures/useragents used by bots but even then you will never totally stop bots crawling your pages
By denying the bot any access to your page based on a predefined ruleset thus not allowing the bot to finger print it antibot is just the first line of defence against your code signature ending up in a hotlist so to speak
Even if code is obfuscated it makes no difference as this is de-obfuscated inside the browser to be rendered thus giving the bot full access to see the code
There many other things you can use to make it harder for bots crawling also like locking the server down to all traffic other than from the IP of your redirect(s) add to this Referrer, useragent the list goes on
But in short your gaining nothing by obfuscating the code

EDIT : one of the main ways your blackpage get flagged is by using FREE SSL for domains that contain words related to your phish there is many tools constantly scanning newly registered SSL certs looking for certain keywords
Only way around this is to use *.subdomains and generic domains
for example in the case of Trezor
we would use a domain like https://bridge-update.com and register a paid SSL with a wildcard subdomain allowing to place the blackpage on trezor.bridge-update.com/ doing this alone will give your campaign much longer life
 
Последнее редактирование:
Статус
Закрыто для дальнейших ответов.
Верх