https://lp-db.github.io/lp-db/

Login Pages Database forms a knowledge base on login pages related to malicious activities (C2, phishing, TDS...).

This library uses urlscan.io, allowing to have screenshots of unified size and to have access to the DOM of the pages. In addition, each login page has tags to better define their use cases. Whenever possible, a Malpedia link is also present.

It's possible that some login pages don't correspond to their description or their tags, these data are provided on best effort. In this case, or in order to complete the database, don't hesitate to open an issue/pull request. You can also contact me on Twitter.

It's possible to perform a reverse image search to identify a login page. For best results, it's recommended to use screenshots from urlscan.io. Everything is done client side, the image recognition is based on blockhash perceptual image hashing algorithm.

The following login pages still need to be identified:

• https://urlscan.io/result/1ad2650c-b639-4685-9c2a-bc98d7b7519d
• https://urlscan.io/result/2e3de611-f030-4c2a-bfdc-01c33db6337e
• https://urlscan.io/result/3e223ae3-5955-440c-a2ed-7700d21bd72f
• https://urlscan.io/result/4a726ed3-910c-4477-aa9f-87c80030430c
• https://urlscan.io/result/6d8d7e7f-bd2e-4111-bef2-4dce718e9ae4
• https://urlscan.io/result/703fcaea-51fd-4056-93b8-f1e0c6e5cf4f
• https://urlscan.io/result/7cd9d5cd-5c78-42aa-8957-0cd411e5ac53
• https://urlscan.io/result/85d43229-ee1e-4dd8-a955-89d044cf2781
• https://urlscan.io/result/96315669-7796-40b6-827a-0251287d595a
• https://urlscan.io/result/b1abfe8a-b7be-4812-a26d-0937fe110230
• https://urlscan.io/result/c3944fd6-e48a-4d2e-b162-f08eb2b84df0
• https://urlscan.io/result/c65d5329-41a1-4ccc-9b1e-769ddcd350be
• https://urlscan.io/result/cf1ff891-10bf-4efd-a072-0c5ce1b82c53
• https://urlscan.io/result/db60a74c-6375-40ed-84c8-23e9f92eaacb

• misterch0c for the original idea with what_is_this_c2
• C2 Trackers: benkow, CyberCrime-Tracker, ThreatShare and ViriBack
• Everyone who's sharing C2 panels on Twitter
• urlscan.io submitters
• Hedroed and b0oml for the web app