2FA

|| OFFICE365 AVAILABLE
||GO DADDY AVAILABLE
|| OUTLOOK AVAILABLE
|| GMAIL-2FA
|| YAHOO MAIL 2FA


Office365 2FA cookie stealer

Features

ANTI-RED 2FA OFFICE LINKS 🔰

Does not require domain, we provide fully setup link. 🔰

AUTO CAPTURE 2FA COOKIES (phone and Microsoft Authenticator app) 🔰

AVAILABLE WITH OFFLINE 2FA ATTACHMENTS 🔰

Results in telegram. 🔰

LINK TRACKING ( click and paste detection)🔰

Multiple custom redirect pages🔰

Auto fetch custom logos and background 🔰

Super dynamic codes 🔰

To set up your tg for receiving results please follow the steps below.


To get your chatID search for @userinfobot

Send admin your chatID.




Then search for @rabbit2fa_bot

Add it up.

For whichever link you have a subscription for you’d get your results on your tg.

Set up will take max 24hrs.

Got issues reach out
@bishopzeit
🤙🏿

these custom pages can match your email message html. Eg you are sending a fedex project ? we can have a fed ex page up for you. That redirects to your office page.


Wire project? Wire template to match.

These are optional, you can use the default page as well.


We give you options for people that have custom needs.

When you get these it means either the mail server you sent to is sharing your link or you are getting a response in the box for the link. Or it’s being copied and pasted in a browser.

This is very useful. Because it gives you insight on if your project is delivering or getting some action.

🀄️ HERE’s ONE WAY TO TROUBLE-SHOOT YOUR PROJECT IF ITS NOT INBOXING.


Many ways to do this but this is a simple way to checklist everything and know what could be wrong in your project.


Things that matters.

Your project letter
Smtp
Sender
Link
Your ip location.


Some other things come to play but minor impacts.


So how do you know what could be wrong?

Test the basics first, eg my project is not inboxing then I go and buy sender, that could be what’s wrong but it’s a wild guess, could be my smtp,or my letter or my link..not a wise choice,you’d end up buying the sender and complaining your project didn’t inbox, whereas the problem is elsewhere. So to avoid buying every tool on earth before you inbox we test from the ground up. Let’s go.


So test your project to a lower grade security mail, eg hotmail or outlook. If it doesn’t inbox to those you never stood a chance.

Then you look at your SMTP because a good smtp inbox those.

After testing a good smtp and you are sure this is good yet a simple text still doesn’t inbox then check your SENDER.

let’s say your smtp inbox a text but doesn’t inbox your project,then check your project. Is your letter good enough ? Encrypted ? Proper html tags or is it bought from a popular platform that sells the same page to 230000000000000 people? Those kind of pages will be added to a database that detects them quickly.


So it could be the letter. Use letters that are freshly coded or use IMAGE LETTERS for projects those will bypass some security if your smtp is good enough.


so let’s say you have a good letter and you know it, then why is your project not inboxing even with a good smtp? a simple project without link…then check the sender and then check your IP if it’s blacklisted, this is where a good rdp comes in. Check if it’s blacklisted, online resources are available for this. If you are then able to get your project to inbox without link.

That’s great!


Now comes the final part. The inbox with link. Here, this scenario, everything works and inbox except when you add your link. Sucks balls I know.

A spammers journey is filled with these. Finding inbox.

The mail servers are smarter everyday. To bypass this you have to somehow hide your link.

Several ways to go about this(still experimenting) but you can either use a auto redirect, a manual redirect or obscure the link.

Manual redirect is when you use a third party link to host your main link so when they go to that site they can click on something that takes them to your site. eg canva,Facebook,Imgur and many like that.


Auto redirect uses a trusted site’s identity, hides your link and automatically redirects to your site.

You can also bring your link in using various methods like attachments, regex code obsfucation and other more technical methods.

The easiest of these options is the auto redirect.


It helps in inboxing projects that NOTHING ELSE IS WRONG WITH,project that just can’t inbox links but everything else works.

That’s when you need redirect.

so it’s smtp,letter,sender,ip location then redirects.. I hope this kind of helps with knowing where to start troubleshooting from. Lengthy but we are not just here to sell everything to you. Just what you need. 🀄️

remit custom page available for optional use. can be used for landing that redirects to office365 page.

Here's how to import the cookies you get in your results. https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwiT99LY2NWDAxWfS0EAHbjMDKEQwqsBegQIDhAG&url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DEwGg704KhsU&usg=AOvVaw2r3NHHRSXml1YNAlt9HxoJ&opi=89978449

microsoft html letter available for custom phishlet redirect

For samples of letters and attachments you can use with your projects. Join the letter and attachments channel.
So you can maximize your 2fa links

https://t.me/rabbitattachandletters

o365 2fa link is being maintained and updated till noon 24th(tmr noon) ⚙️⚙️

o365 ⚙️⚙️ very sharp

What are Spam Traps & what can be done?

Pristine Spam Traps

• Email addresses created solely to capture spammers (sometimes referred to as Honey Pots).

These email addresses were never owned by a real person, do not subscribe to email programs and of course will never make a purchase. If you are hitting pristine traps, this typically indicates you have a bad data partner.

Recycled Spam Traps

• Email addresses that were once used by a real person but abandoned and then recycled by ISPs as spam traps. Before turning on an abandoned email address into a spam trap, ISPs will return an unknown user error code for a period of time (6 to 12 months). If you are
hitting a recycled spam trap, this typically indicates that your data hygiene process is not working.

How to Avoid and Remove Spam Traps?

• Do not purchase, web-scrap or rent lists
• Remove hard bounces
• Continuously try to re-engage your inactive subscribers
• Remove disengaged subscribers once several re-engagement attempts have been made

BOUNCE RATE are more important than you think.

What are bounce rate?

Traditionally this means the percentage of visitors to a particular website who navigate away from the site after viewing only one page.

But within the content of spamming. When you send emails to email addresses that no longer exist or temporarily disabled these email servers detect a error message and keep count of your valid email and dead email addresses ratio.

They use this to identify if you are sending messages to people that didn’t subscribe to your emails.

If you have high bounce rate, it indicates you are unsure of your contacts and spamming.

This messes up your smtp.

puts a stain on your project signature.(makes it less likely to inbox)

If your smtp has a limit of 10k but after sending 2k emails your bounce rate is pass the threshold for your smtp provider then your 8k emails left have a less and less chance of inbox compared to the first 2k you sent.

The most damning impact of bounce rate is not your smtp but on you. Why? Because after a high bounce rate messes up your inbox status you’d start to doubt everything. And SWITCH A PERFECT SETUP for a setup that has other issues. Because you don’t know where the issue was coming from. This is a vicious cycle that can continue for long while the culprit is overlooked.

What’s your solution for this?


I’ll provide two.

First?

VALIDATE YOUR LEADS OG.

Get good leads.

get your leads validated either from us or whoever, just get it done.


Afterwards, you need to monitor your Bounce rate and reputation score.

Some Services Like Amazon SES, Spark post has a built-in reputation system that shows your Bounce Rate and User Interaction.

IN some cases you will be able to monitor bounces and user feedback through the mailing system like in MailWizz.

9. Monitor Reputation?

Having the right tools for checking the IP reputation is half way to success. Here are some tools and services you can use:

• Senderscore.org by Return Path. The score ranks from 0 to 100, 100 being the best. It tells you how you’re performing. Typically it’s recommended that you maintain your sender score of 90 or better.

• Senderbase.com by Cisco. It tells you how your reputation is across
all the network providers Cisco manages. The reputation score is grouped into Good, Neutral, and Poor.

• Postmaster.live.com. Microsoft’s Smart Network Data Services give
you the information about the traffic originating from your IP address
such as the volume of sent emails, complaint rates, and spam trap
hits.

• Postmaster.google.com. Gives access to your domain’s data on Google Search
Console.

• Postmaster.aol.com. Check your IP reputation and rates it as “bad”, “neutral”, and “good”.



Hey guys, it’s spamming for a reason, when it pays its’s worth it. Don’t think for a second it’s always easy because spamming is a billion(s) dollar industry. And who are we up against? The email provider security with super IT security personnels. Shit is a constant battlefield.

Bounce rate is something you should watch out for.

link sample with custom redirect and cookie. video include how to log in cookie via cookie editor. see how the link logs in the user box even when the domain wasn't really godaddy's domain? it's a neat trick.

Attachment spamming hitting inbox 🔥