SafeMode - Analysis: lafoiunrtyui.dynv6.net

Visual Capture

No screenshot available

Detection Info

http://lafoiunrtyui.dynv6.net/FORT/fryob/

Detected Brand

Crédit Agricole

Country

France

Confidence

95%

HTTP Status

N/A

Report ID

2c4119f4-33c…

Analyzed

2026-01-02 02:32

Final URL (after redirects)

https://lafoiunrtyui.dynv6.net/FORT/fryob/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T168D2513160F0183B07938581B6655B1A2F9AEB0BCA4E5550BAEC0BD55FF3CA1DE0F62D
CONTENT ssdeep	384:t0YvapaWraDhdQeOfQpQfVTChIqe/tBPuO:ZapaqaDhdQeOfQpQfVuhIqe/t7

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b333c4d41cced54c
VISUAL aHash	ff0f0f0f0f0fffff
VISUAL dHash	d81b5b5b1b980018
VISUAL wHash	0c0909090f0fffff
VISUAL colorHash	06000000c00
VISUAL cropResistant	d81b5b5b1b980018,a280a02b2b808080,812929326949a541

Code Analysis

Risk Score 70/100

Threat Level ALTO

🔬 Threat Analysis Report

• Threat: Phishing attack targeting banking credentials.
• Target: Customers of Crédit Agricole.
• Method: A fake login page is used to steal the department code.
• Exfil: Likely to a server controlled by the attacker (unknown).
• Indicators: Unofficial domain, Crédit Agricole branding.
• Risk: HIGH - The phishing site attempts to steal banking information.