Phishing on a bookmaker

Professor

Professional
Messages
213
Reaction score
22
Points
18
The topic is not mine, added purely for review.

Due to the fact that online bookmakers are now banned in the Russian Federation, every self-respecting online bookmaker began to bang hundreds of mirrors for their offices. I will consider a specific BC - Leon. But I am sure that this business can be done with any of them, in general, the approach is the same.

So, first we look for a real working mirror of our BC Leon. Found it? Great! Now, as they taught us at school: right-click on the site and "save as". Copy the site template to your folder on your PC. Now what we need:
- Hosting ($1/month)
- A domain similar to mirrors (2/year)
- A little skillful hands (optional)

Probably everyone already understood where this is all going, but there are a couple of important points. We choose the most wretched hosting, with dead tech support, the one that will not block the user even if that CPU is flooded with gigabytes. Because many hostings are very picky and can block you for a phishing site (by themselves or upon a complaint from the bookmaker).

Leon mirrors look like this: leon19.com, leon431.net, leon21.com, leon18.com - is the gist clear? So we register something like this. For example leon312.ru So, after registering the hosting and domain, you need to slightly customize our template - namely, make it so that when entering the login and password, the user data goes to our database and is displayed on a separate page. I will not explain how to do this, anyone who knows PHP + SQL can do it in 10 minutes. If you do not have such knowledge, contact any freelancer, they will do everything for you in the best possible way for $1-2 maximum. Next, you need to distribute our phishing link. This can be done in different ways. How I do it:
- I buy 50-100 FB accounts
- I look for thematic FB groups where users are trying to find a working link to Leon
- I launch a program for automatic posting to these groups

As a rule, 10 to 30 working accounts are merged per day. But this does not make you rich. How many accounts will have a balance of at least $10? I'll be honest, no more than one in 30! (rarely more often). Often there is a balance of $1-2, even more often - with zero. But here we see 10 pieces on the account from a winning bet, what to do?

The trick is that we can not withdraw funds from every balance. There are several nuances:
- If the account is not varied (the player did not provide passport data for the bookmaker), then in 90% of cases they will allow you to withdraw money only to the number and method of issuing funds through which the balance was replenished, so here we fly (but not always).
- If the account is varied and the player has not specified a specific method for issuing money, then we can easily withdraw at least 100k to any wallet, no one will blink an eye.
- It is necessary to know the user's name and surname (in 90% of cases, you can simply google the phone number or email specified in your personal account, or try entering the same password in email or FB).
I will immediately answer a few more questions that may arise.
1. Using a proxy and hiding your data is your business. In fact, according to the policy of the offices, they don't give a damn that the user was hacked and the funds were gone, they are not responsible for them - no one will hunt you.
2. Do I need to have a left wallet? Of course, the bookmakers can say to which wallet the payment was made, it is better not to indicate your number.
3. Are there any consequences from a legal point of view? I don't know. This is theft, BUT: you are stealing from people who play in services prohibited in the Russian Federation, I think you don't have to strain yourself too much here
4. Do not use foreign proxies and IP. Bookmakers can block an account if the player has always logged in from the Russian Federation, but then logged in from Argentina - you can log into your wallet, but the payout will never be approved! How much can you earn? It depends only on you and Lady Luck. Sometimes it's a dead end for a week, sometimes you take away 10-40k at a time, it depends on your luck, what kind of sucker you run into. And of course, look at the betting history. Let's say a player has a zero balance, but the history shows that almost every evening he loses $0.1 with three zeros? It makes sense to monitor this account and try to lose the winnings at the right moment.
 
Top