whatsappgroup.vercel.app

https://whatsappgroup.vercel.app Access site

Screenshot

No screenshot available yet Captured automatically on the next refresh cycle

Investigate

Domain whatsappgroup.vercel.app0 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 216.198.79.3

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://whatsappgroup.vercel.app

urlscan

Wayback

archive.today

Cert WR1

crt.sh

Censys

Google CT

Phishunt analysis Beta

35 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+4.5 Brand in title
+3.7 Brand in domain label
+3.4 Cert reuse
+3.4 Shared IP cluster
+3.0 OpenPhish
+2.0 Young domain
+1.1 ASN reputation
+1.1 No CSP header
+0.6 Script exfil endpoint
+0.6 Suspicious TLD
+0.5 Long domain
+0.3 Free CA
+0.1 Deep subdomain

18 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Page on a free Vercel hosting subdomain that impersonates WhatsApp, using the brand in the domain and page title. It is listed in OpenPhish, shares infrastructure with other detections and contains a script that sends data to an exfiltration endpoint.

Script exfil endpointOpenPhishBrand in domain label

AI-generated from stored detector signals - the AI never visited the site. · 2026-10-13 · confidence 80%

Domain & Network

Whois

Registrar Tucows Domains Inc

Network

IP 216.198.79.3

Country