Suspicious
Phishings targeting WhatsApp
Suspicious and active websites
Phishings targeting Whatsapp
Suspicious and active websites
Active
25
New (7d)
5
Trend (7d)
↑150%
Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.
| Last check (UTC) | First seen (UTC) ▾ | URL | Screenshot | Flags | Details |
|---|---|---|---|---|---|
| 2026-09-30 03:30 | 2026-09-29 23:25 | ![]() |
GSB | Details | |
| 2026-09-30 03:30 | 2026-09-26 13:03 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-09-25 10:25 | ![]() |
urlscan | Details | |
| 2026-09-30 03:30 | 2026-09-23 13:04 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-09-23 13:03 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-09-21 01:01 | ![]() |
OpenPhish urlscan | Details | |
| 2026-09-30 03:30 | 2026-09-16 01:03 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-09-14 01:02 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-09-09 17:25 | ![]() |
GSB | Details | |
| 2026-09-30 03:30 | 2026-09-09 13:14 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-09-09 01:02 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-09-09 01:01 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-09-09 01:01 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-09-09 01:01 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-09-08 01:02 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-09-05 13:03 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-09-04 17:25 | ![]() |
GSB | Details | |
| 2026-09-30 03:30 | 2026-09-02 13:03 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-09-02 02:59 | ![]() |
urlscan | Details | |
| 2026-09-30 03:30 | 2026-08-29 13:17 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-08-29 13:12 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-08-29 13:08 | ![]() |
GSB OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-08-27 01:05 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-08-26 01:02 | ![]() |
OpenPhish | Details | |
| 2026-09-30 03:30 | 2026-08-23 13:03 | ![]() |
OpenPhish | Details |
Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.
| URL | Screenshot | Details |
|---|---|---|
| https://whatsapp11-cnj.pages.…
GSB |
![]() |
Details |
| http://whatsapp.checkleaked.c…
OpenPhish |
![]() |
Details |
| https://whatsapp-dp-images.in
urlscan |
![]() |
Details |
| https://cn.ember-whatsapp.com
OpenPhish |
![]() |
Details |
| https://whatsapp7g.blogspot.c…
OpenPhish |
![]() |
Details |
| https://cn-feed-whatsapp.com.…
OpenPhish urlscan |
![]() |
Details |
| https://app.wave-whatsapp.com
OpenPhish |
![]() |
Details |
| https://whatsapp.wooflers.com…
OpenPhish |
![]() |
Details |
| https://cfm-whatsapps.com
GSB |
![]() |
Details |
| https://whatsappzoeiras.blogs…
OpenPhish |
![]() |
Details |
| http://whatsappbrnoticias.blo…
OpenPhish |
![]() |
Details |
| http://zh.wave-whatsapp.com
OpenPhish |
![]() |
Details |
| http://secure.orbit-whatsapp.…
OpenPhish |
![]() |
Details |
| http://try.sigma-whatsapp.com
OpenPhish |
![]() |
Details |
| https://whatsapp.viewclass.co…
OpenPhish |
![]() |
Details |
| https://whatsapp-indonesia877…
OpenPhish |
![]() |
Details |
| https://whatsappcampaign.onli…
GSB |
![]() |
Details |
| https://whatsapp-fast.vercel.…
OpenPhish |
![]() |
Details |
| https://siyarata-assets-workb…
urlscan |
![]() |
Details |
| https://whatsapp-verify.blogs…
OpenPhish |
![]() |
Details |
| https://whatsapp.dir.com.my
OpenPhish |
![]() |
Details |
| https://whatsapp-iamsuyash.ve…
GSB OpenPhish |
![]() |
Details |
| http://whatsappfreewhatsapp.b…
OpenPhish |
![]() |
Details |
| http://file-whatsappn.hl.cn/w…
OpenPhish |
![]() |
Details |
| http://whatsapp-tools.lateino…
OpenPhish |
![]() |
Details |
AIHow to verify a real WhatsApp URL
- Legitimate WhatsApp URLs always end in
whatsapp.com(e.g.www.whatsapp.com,account.whatsapp.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like.xyz/.top/.vip— is not WhatsApp. - The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
- If you got the link from email, SMS, or social media, do not click it. Open
whatsapp.comfrom your browser bookmark or type the domain manually. - Real WhatsApp pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.























