EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of resnepost.dynv6.net

Información de Detección

https://resnepost.dynv6.net/Banqu_postal/Banque_postale/index.html.html
Detected Brand
La Banque Postale
Country
International
Confianza
100%
HTTP Status
200
Report ID
4fb2ccc5-033…
Analyzed
2026-02-13 12:12

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1DBD1866490086A67C1C381E8F7F2AB1B75A0C348D74367009AFD935DABDBCE8C6461E9
CONTENT ssdeep
192:IJpZIIIIIFDrPLMoCWD+S7uK0LzLBGtpnkVdiLB9:ITZIIIIIlPLvCWDZuldepn6did9

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
f19ed0e0e0931f0f
VISUAL aHash
e0e0e0e0e0e0e0e0
VISUAL dHash
8080480086828080
VISUAL wHash
f8f8fcf0e0e0e0e0
VISUAL colorHash
02007000000
VISUAL cropResistant
5072530002020202,282494a6929651ca,0000600c940c0000

Análisis de Código

Risk Score 90/100
Nivel de Amenaza ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 Card Stealer
Telegram Exfiltration

🔬 Threat Analysis Report

• Amenaza: Phishing de credenciales
• Objetivo: Usuarios de La Banque Postale
• Método: Suplantación y recopilación de credenciales
• Exfil: Bot de Telegram
• Indicadores: Dominio no coincidente, formulario para credenciales
• Riesgo: Alto

🔑 Telegram Bot Tokens (1)

  • 8528800223:AAFA...ukk9FdJs

📊 Desglose de Puntuación de Riesgo

Total Risk Score
90/100

Contributing Factors

Suspicious Domain
The domain is not associated with La Banque Postale.
Credential Harvesting Form
The page contains a form requesting sensitive information (identifier).

🔬 Análisis Integral de Amenazas

Tipo de Amenaza
Banking Credential Harvester
Objetivo
La Banque Postale users (International)
Método de Ataque
Brand impersonation
Canal de Exfiltración
Telegram Bot (8528800223:AAFAP6kMi...)
Evaluación de Riesgo
CRITICAL - Automated credential harvesting with Telegram Bot (8528800223:AAFAP6kMi...)

⚠️ Indicators of Compromise

  • 1 Telegram bot token(s)
  • Kit types: Credential Harvester, Card Stealer

🏢 Análisis de Suplantación de Marca

Impersonated Brand
La Banque Postale
Official Website
null
Fake Service
Login

⚔️ Metodología de Ataque

Primary Method: Credential Phishing

The attacker creates a fake login page that mimics the appearance of La Banque Postale. Users are tricked into entering their credentials, which are then harvested by the attacker.

📡 Infraestructura de Comando y Control Telegram

Bot Token (Masked)
8528800223:AAFA...ukk9FdJs
Bot ID
8528800223
Group/Chat ID
Unknown
Operator Language
Unknown

💬 Message Templates (3)

ID Portugués Inglés Trigger

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio
resnepost.dynv6.net
Registered
Unknown
Registrar
Unknown
Estado
Unknown

🤖 AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
La Banque Postale
http://wilfriedngounnou75-byte.github.io/YT-github.video
Mar 02, 2026
 Screenshot
La Banque Postale
https://wilfriedngounnou75-byte.github.io/YT-github.video/
Mar 02, 2026
 Screenshot
La Banque Postale
https://resnepost.dynv6.net/Banqu_postal/Banque_postale/inde...
Feb 14, 2026
 Screenshot
La Banque Postale
https://resnepost.dynv6.net/Banqu_postal/Banque_postale/inde...
Feb 13, 2026

Scan History for resnepost.dynv6.net

Found 2 other scans for this domain

😰
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.