Typosquatting and domain cloning
High-fidelity phishing kits utilizing the Layui UI library
Replication of Single Sign-On (SSO) authentication flows (e.g., PingIdentity)
Automated account takeover via silent password reset triggers
Distribution via paid Google Search ads, Facebook, Telegram, and WhatsApp
Multi-language support (11+ languages) for global targeting
Credential and PII harvesting