Fake Bank Website

Usage

Register using whatever fake information you want, it just makes an "account" on your browser's local storage.

The fake OTP when logging in is 314-159.

Visiting /admin will let you change account activity and stuff like that when I implement it.

Running & Developing

bun run dev

# or start the server and open the app in a new browser tab
bun run dev -- --open

To deploy the app, you may need to install an adapter for your target environment.

Setup for Scambaiting

You could just use https://silvereastcreditunion.netlify.app, but if you want to better trick scammers by having an official-looking domain like silvereastcreditunion.com, follow these steps.

You'll probably want to put the site on port 80 so there's no trailing stuff in the URL.

On top of that, we need to allow the silvereastcreditunion.com host in Vite.

Edit the vite.config.ts file:

// ...

export default defineConfig({
	plugins: [tailwindcss(), sveltekit()],
    server: {
        port: 80,
        allowedHosts: ["silvereastcreditunion.com"]
    }
});

Now, you need to do a DNS override so that silvereastcreditunion.com will point to the IP of the device running this website. (127.0.0.1 if you are running it on the same device you're accessing it.)

On Linux, MacOS and Windows, you simply edit the /etc/hosts file:

127.0.0.1 silvereastcreditunion.com

On Windows this file is at C:/Windows/System32/drivers/etc/hosts.

If on Linux, run sudo systemctl restart systemd-resolved.service and it should now be doing DNS overriding.

Finally, on Linux you must run the webserver as root if it is on port 80: sudo ~/.bun/bin/bun run dev

Now open your web browser, visit http://silvereastcreditunion.com, and you should see the fake bank website!

Additional setup for SSL

You may have noticed we do not have HTTPS. For this we'll need a Vite plugin, which can be installed with bun i vite-plugin-mkcert.

Also, change the port to 443 for HTTPS.

Then edit vite.config.ts:

// ...
import mkcert from 'vite-plugin-mkcert';

export default defineConfig({
    server {
        port: 443,
        allowedHosts: ["silvereastcreditunion.com"]
    }
    
	plugins: [tailwindcss(), sveltekit(), mkcert() ]
});

Now you should be able to access https://localhost. If your browser says something about it being insecure, just click "advanced" and then "continue" or whatever similar option you may have.

And that's all! Now you can access a fake bank website with an official-looking domain. Happy scam-baiting!

Common Errors

Missing ALPN Protocol, expected 'h2' to be available. - Add the --host flag to Vite, so like sudo ~/.bun/bin/bun run dev --host

Contributing

Want to make this fake bank website look more legit? Feel free to send a PR and I may implement your change.