SafeMode - Analysis: lafoiunrtyui.dynv6.net

Captura Visual

No screenshot available

Informações de Detecção

https://lafoiunrtyui.dynv6.net/FORT/fryob/index.php

Detected Brand

Crédit Agricole

Country

France

Confiança

100%

HTTP Status

200

Report ID

dd95ad42-f56…

Analyzed

2025-12-21 11:02

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T15562506190A05C3B429393C1B6359B1A37DAC74ACA8B574197F8839A1FF6C64DC0F72E
CONTENT ssdeep	192:tMwwxkMaNkIZI7H1S6QrQHQPEihNytR0xMv0e/xVSYw0L12:tMwJk7H1S6QrQHQPZe0xM8e/fPwO12

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b333c4d41cced54c
VISUAL aHash	ff0f0f0f0f0fffff
VISUAL dHash	d81b5b5b1b980018
VISUAL wHash	0c0909090f0fffff
VISUAL colorHash	06000000c00
VISUAL cropResistant	d81b5b5b1b980018,a280a02b2b808080,812929326949a541

Análise de Código

Nível de Ameaça ALTO

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing kit
• Target: Crédit Agricole customers
• Method: Fake login form that asks for the department code
• Exfil: Unknown, likely a credential harvesting site
• Indicators: Domain mismatch, suspicious domain name, form asking for personal information
• Risk: HIGH - Immediate credential theft