Thanks for the good writeup. This technique however is not new, as others have mentioned. If you look at this phishing site on the "Similar Pages" feature on ht

Thanks for the good writeup. This technique however is not new, as others have mentioned. If you look at this phishing site on the "Similar Pages" feature on https://urlscan.io https://urlscan.io you can see a bunch of other phishing pages with similar themes (gaming / skin customisation) that employ the same phishing kit, going back five months: https://urlscan.io/result/24dc54ec-2008-4fe1-b526-4a25fca25ff3/related/ https://urlscan.io/result/24dc54ec-2008-4fe1-b526-4a25fca25f... Some example domains: skinssoul[.]com, skinsnecro[.]com, dotaskins[.]eu etc...