AiTM Phishing Page Geolocation Fingerprint Script (api.country.is + rcfh_country cookie + OAuth redirect)

Duo Tech@duotech

•updated Aug 10, 2026•1•0•4

Detects AiTM phishing page geolocation fingerprint script referencing api.country.is, setting an rcfh_country cookie, and redirecting via oauth2/v2.0/authorize.