Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Información de Detección
http://yuy2pv7msxn89e0s3g.weiyikuai.top
Detected Brand
GoDaddy
Country
Unknown
Confianza
100%
HTTP Status
200
Report ID
486d3b9b-9aa…
Analyzed
2026-01-06 20:19
Final URL (after redirects)
https://expireddomains.com/domain/weiyikuai.top
Hashes de Contenido (Similitud HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1DCF20CA5C090993F0BF382E6F6B2772BB3D2D149CE42020A47FD83494BE6C95ED27559 |
|
CONTENT
ssdeep
|
384:MIibbCoHnnnsI8lc4t1TYAjHPsntK7950ZkVMt+hFtJjOxI4EWMQNRvXKPbmXKPr:MIibbCOnnnotFtJyePL |
Hashes Visuales (Similitud de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
bf3f6e41d0d0d0d0 |
|
VISUAL
aHash
|
8081ffffffffffff |
|
VISUAL
dHash
|
2a0729b45a52d480 |
|
VISUAL
wHash
|
0000819eaba9ffff |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
2a0729b45a52d480,0000402020204000 |
Análisis de Código
Risk Score
95/100
Nivel de Amenaza
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- https://privacy.gatekeeperconsent.com
- /login
- https://cmp.gatekeeperconsent.com
📡 API Calls Detected
- POST
- https://www.tiktok.com/@expireddomainscom
- https://www.youtube.com/@ExpiredDomainscom
- https://www.linkedin.com/company/expireddomainscom
- GET
- //identity.ezoic.com/subscribe
- https://x.com/ExpiredDomainHQ
- https://www.instagram.com/expireddomainscom/
- https://www.facebook.com/expireddomainscom/
- https://g.ezoic.net/detroitchicago/ezconfig
📤 Form Action Targets
- /search
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.