SafeMode - Analysis: wilfriedngounnou75-byte.github.io

Captura Visual

Screenshot of wilfriedngounnou75-byte.github.io

Informações de Detecção

http://wilfriedngounnou75-byte.github.io/YT-github.video

Detected Brand

La Banque Postale

Country

International

Confiança

100%

HTTP Status

200

Report ID

cd5cd247-8dd…

Analyzed

2026-03-02 14:18

Final URL (after redirects)

https://wilfriedngounnou75-byte.github.io/YT-github.video/

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T149D1876490086A67C1C391E4F7F2AB1B75A0C348D74367009AFD935DABDBCE8C6461E5
CONTENT ssdeep	192:UJ7ZIIIIIFDrPLMo+WD+S7uK0LzLBGtpnkVdiLB9:UJZIIIIIlPLv+WDZuldepn6did9

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	f19ed0e0e0931f0f
VISUAL aHash	e0e0e0e0e0e0e0e0
VISUAL dHash	8080480086828080
VISUAL wHash	f8f8fcf0e0e0e0e0
VISUAL colorHash	02007000000
VISUAL cropResistant	5072530002020202,282494a6929651ca,0000600c940c0000

Análise de Código

Risk Score 90/100

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Card Stealer

Telegram Exfiltration

🔬 Threat Analysis Report

• Ameaça: Phishing
• Alvo: Usuários da La Banque Postale
• Método: Falsificação de identidade
• Exfil: Bot do Telegram (8414960047:AAGOIbZ6HXXHJteWlaIsaZ8Pv5Ns6HzqLAE) pode roubar credenciais.
• Indicadores: Hospedagem gratuita, logotipo da marca, formulário.
• Risco: Alto

🔑 Telegram Bot Tokens (1)

8414960047:AAGO...s6HzqLAE

📊 Detalhamento da Pontuação de Risco

Total Risk Score

90/100

Contributing Factors

Free Hosting

The site is hosted on github.io, a free hosting service often abused by phishers.

Brand Impersonation

The site displays the La Banque Postale logo and attempts to replicate their login page.

Credential Harvesting

The site includes a form to collect user credentials.

Telegram Token Found

Telegram token found, indicative of data exfiltration.

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Banking Credential Harvester

Alvo

La Banque Postale users (International)

Método de Ataque

Brand impersonation

Canal de Exfiltração

Telegram Bot (8414960047:AAGOIbZ6H...)

Avaliação de Risco

CRITICAL - Automated credential harvesting with Telegram Bot (8414960047:AAGOIbZ6H...)

⚠️ Indicators of Compromise

1 Telegram bot token(s)
Kit types: Credential Harvester, Card Stealer

🏢 Análise de Falsificação de Marca

Impersonated Brand

La Banque Postale

Official Website

null

Fake Service

La Banque Postale Login

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

The phishing site attempts to steal La Banque Postale credentials by presenting a login form designed to mimic the legitimate site.

Secondary Method: Data Exfiltration via Telegram

Stolen credentials are likely sent to a Telegram bot (8414960047:AAGOIbZ6HXXHJteWlaIsaZ8Pv5Ns6HzqLAE), enabling the attacker to access the victim's account.