Phishing detection: whatsappzoeiras.blogspot.com

WhatsApp
https://whatsappzoeiras.blogspot.com Access site
Screenshot
Screenshot of whatsappzoeiras.blogspot.com
Investigate
Domain whatsappzoeiras.blogspot.com0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 142.251.13.132
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://whatsappzoeiras.blogspot.com
urlscan Wayback archive.today
Cert WE2
crt.sh Censys Google CT
Phishunt analysis Beta
40 high suspicion likely_phishingheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +3.7 Brand in domain label
  • +3.4 Cert reuse
  • +3.4 Shared IP cluster
  • +3.0 OpenPhish
  • +2.0 Young domain
  • +1.3 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.6 Long domain
  • +0.6 Suspicious TLD
  • +0.3 Free CA
  • +0.2 Obfuscated JavaScript
  • +0.2 External scripts
  • +0.1 Deep subdomain
22 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates WhatsApp using the brand name in its Blogspot subdomain to target user credentials. It scores maximum on keyword analysis and is confirmed malicious by OpenPhish. Infrastructure is hosted on Google via the free Blogspot platform.

Brand in domain labelOpenPhishKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-09 · confidence 82%
Domain & Network
Whois
Registrar MarkMonitor Inc.
Network
IP 142.251.13.132
Country GermanyGermany
Hosting Google LLC
ASN AS15169
TLS Cert WE2
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
PaaS platform Blogger
Web form
Network / ASN Google LLC
Web form
Registrar MarkMonitor Inc.
abusecomplaints@markmonitor.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-09-09 13:14 UTC  ·  Last refreshed 2026-09-10 03:30 UTC