Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
No screenshot available
Detection Info
http://aohkccsygwci.top/login
Detected Brand
Unknown
Country
USA
Confidence
100%
HTTP Status
200
Report ID
24541288-174…
Analyzed
2025-12-20 20:44
Final URL (after redirects)
https://expireddomains.com/domain/aohkccsygwci.top
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1C0F20DB5C090A53F0BB382E6B6B2772BB3D2D148CE43020A57FD83594FE6C91ED26559 |
|
CONTENT
ssdeep
|
384:YYiHXCG8nnnsWWcqJf0RtJeEHKRqD+4AZRxdMt+hFtJ1QJ4EWyONRt+XT2C+XT2r:YYiHXCLnnnWfac3FtJgP8g |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
bf3e6fd190d0c0d0 |
|
VISUAL
aHash
|
8081ffffffffffff |
|
VISUAL
dHash
|
2a07319cba5a5181 |
|
VISUAL
wHash
|
0000817f9faba9ff |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
2a07319cba5a5181,008060909090a000 |
Code Analysis
Risk Score
70/100
Threat Level
ALTO
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Threat: Brand impersonation phishing
• Target: GoDaddy customers
• Method: Displaying GoDaddy logo on a non-GoDaddy domain to sell domains under false pretenses
• Exfil: Potentially gathers user data or sells domains at inflated prices
• Indicators: Domain mismatch, brand impersonation
• Risk: HIGH - Fraudulent sale of services
🔐 Credential Harvesting Forms
🎯 Kit Endpoints
- https://cmp.gatekeeperconsent.com
- /login
- https://privacy.gatekeeperconsent.com
📡 API Calls Detected
- https://www.youtube.com/@ExpiredDomainscom
- https://g.ezoic.net/detroitchicago/ezconfig
- https://www.instagram.com/expireddomainscom/
- https://www.linkedin.com/company/expireddomainscom
- GET
- https://www.tiktok.com/@expireddomainscom
- https://x.com/ExpiredDomainHQ
- https://www.facebook.com/expireddomainscom/
- POST
- //
📤 Form Action Targets
- /search
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
No screenshot
Unknown
https://discord-support.info
Dec 27, 2025
No screenshot
Unknown
http://kyivskaafisha.space
Dec 24, 2025
No screenshot
Unknown
https://expireddomains.com/domain/meine-db.online
Dec 24, 2025
No screenshot
Unknown
http://3ke2r1fo6ui00.weiyikuai.top
Dec 24, 2025
No screenshot
Unknown
http://aohkccsygwci.top
Dec 24, 2025
Scan History for aohkccsygwci.top
Found 4 other scans for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.