[Isaac]

Well, last post was before 5 weeks. But i would like to note something important.

@alok9shm , @ralf93,
First of all, you have posted something with a very qualitative way.

But, Google, automatically detects the page as Phishing and Malicious page because they see in the source, the "facebook" word .

So, if you set up it, using 000webhost.com, you will see this message :



Of Course, you can pass this message.
By hiding any words related with Facebook, or by using Cryptographic techniques.

Also, free hosting such as 000webhost.com is not a good choice.

-------------------------------------------------------------------------------------------------------------
And generally when the victim will see this message from Google, will surely not login.
So, we must solve and pass this problem.

You can use an HTML Obfuscator to get around that. The same can be used to hide sources for Java drive-by pages.