http://ao3kahwiv3nyjch2hnx4xlstcir3xh2sw4tvue2uohmem4cfsxiussqd.onion/bank-logs-carding-latest-method.html
When people click, it takes them to the payment page (the cloned bank site). They think it is their bank’s website, so they log into it while the password is stored on your site. You can also design the phishing site such that you target people running a particular bank and lie that the URL you send them is the new login URL for the specific bank.