The Chrome error page HTML is built into the browser: you should never see it in the response from a website. This is a clear sign that the site is employing cloaking/anti-analysis techniques.
title: Fake Chrome error page
description: |
The Chrome error page HTML is built into the browser: you should never see it in the response from a website.
This is a clear sign that the site is employing cloaking/anti-analysis techniques.
references:
- https://twitter.com/phish_report/status/1537825544343011328
detection:
chromeHTMLFragments:
html|contains|all:
- "<body id=\"t\" class=\"neterror\" style=\"font-family: 'Segoe UI', Tahoma, sans-serif; font-size: 75%\" jstcache=\"0\">"
- "<div id=\"main-frame-error\" class=\"interstitial-wrapper\" jstcache=\"0\">"
condition: chromeHTMLFragments
tags:
- cloaking