Security Scan Report: wicksappsoauth.click

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 11 HTTP transactions. The main domain is wicksappsoauth.click and was registered 3 weeks ago.

Submitted URL: https://wicksappsoauth.click/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed Discord phishing page on a 4-day-old lookalike domain: it copies Discord's branding and login UI and captures email/password via captcha.php. Safe Browsing flags social engineering. Do not enter credentials.

Risk Factors (5)
Brand impersonation of Discord on a non-Discord domain
Credential harvesting form (email + password) with a non-brand form action
Google Safe Browsing social engineering verdict
Newly registered domain (4 days) with no reputation
Circular redirect / possible cloaking behavior
Domain age information unavailable

Details

Page Title

Discord

Scan Type

public

Domain Name Analysis

You're looking at domain 'wicksappsoauth.click' on the .click top-level domain while skipping any subdomain. Count 14 characters in 'wicksappsoauth' split between five vowels and 9 consonants. Splitting it apart reveals three words: wicks, apps, oauth. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

J & jaa Sie Welcome back! We're so excited to see you again! EMAIL OR PHONE NUMBER PASSWORD Forgot your password? Need an account? Register Log in with QR Code Scan this with the Discord mobi...

Page Load Overview

1.84s
Total Load Time
351 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:253 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network33% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
33%
corporate
25%
phishing/scam
20%

Detected Features

Login Form
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.21.5.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.132.186Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
113--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12712B42347C94D3321A780D966E3A79D3FB1C41BCA1699447BBC57A67BC7EC1C823684

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:3MH3HVUWrY+1bFxHI/2+X3eVmhrTEwzkibibi:83hrY+f9I++neV4ie

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9606:bgpYEAcQB6IEBMWXmICgswpCEJlgM8IUYR5TJgoQ1kICMEIj4asZMQNi+qYCMRFhcoERFMhmspgWsAIIIMxACQwILxABAUQR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data