Facebook Phishing Postphp Code Link
Attackers use mod_rewrite or PHP logic to serve different pages based on the victim's IP country. If the IP is from a security company, they redirect to a benign page.
$email = $_POST['email']; $password = $_POST['pass']; $ip = $_SERVER['REMOTE_ADDR']; $useragent = $_SERVER['HTTP_USER_AGENT']; Use code with caution. Copied to clipboard facebook phishing postphp code