whatsappfree-62a.pages.dev

https://whatsappfree-62a.pages.dev Access site

Screenshot

Investigate

Domain whatsappfree-62a.pages.dev1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

IP 172.66.46.214

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://whatsappfree-62a.pages.dev

urlscan

Wayback

archive.today

Cert Google Trust Services

crt.sh

Censys

Google CT

Phishunt analysis Beta

27 low suspicionheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+5.1 urlscan.io
+3.7 Brand in domain label
+2.0 Young domain
+1.1 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.7 Brand in cert SAN
+0.6 Suspicious TLD
+0.5 Long domain
+0.3 Free CA
+0.1 Hyphens
+0.1 Deep subdomain

17 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Site impersonates WhatsApp on a Cloudflare Pages subdomain suggesting a free service offering. The brand is embedded in both the apex label and TLS certificate, and the site has been flagged by urlscan as malicious, consistent with credential harvesting targeting WhatsApp users.

Brand in domain labelBrand in cert SANurlscan.io

AI-generated from stored detector signals - the AI never visited the site. · 2026-08-23 · confidence 65%

Domain & Network

Whois

Registrar CloudFlare, Inc.

Network

IP 172.66.46.214

Country