Fake Chrome error page

The Chrome error page HTML is built into the browser: you should never see it in the response from a website. This is a clear sign that the site is employing cloaking/anti-analysis techniques.

References

IOK Rule (edit)

title: Fake Chrome error page
description: |
  The Chrome error page HTML is built into the browser: you should never see it in the response from a website.
  This is a clear sign that the site is employing cloaking/anti-analysis techniques.
references:
  - https://twitter.com/phish_report/status/1537825544343011328

detection:
  chromeHTMLFragments:
    html|contains|all:
      - "<body id=\"t\" class=\"neterror\" style=\"font-family: 'Segoe UI', Tahoma, sans-serif; font-size: 75%\" jstcache=\"0\">"
      - "<div id=\"main-frame-error\" class=\"interstitial-wrapper\" jstcache=\"0\">"
  condition: chromeHTMLFragments

tags:
  - cloaking