Phishing detection: wab-whatsapp.cc

WhatsApp
https://wab-whatsapp.cc Access site
Screenshot
Screenshot of wab-whatsapp.cc
Investigate
Domain wab-whatsapp.cc2 CT hosts on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 192.253.227.197
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://wab-whatsapp.cc
urlscan Wayback archive.today
Cert YR1
crt.sh Censys Google CT
Phishunt analysis Beta
31 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +6.1 Google Safe Browsing
  • +5.3 Keyword match
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +4.0 Young domain
  • +1.1 ASN reputation
  • +1.1 No CSP header
  • +0.9 Young certificate
  • +0.9 No registrar lock
  • +0.7 Brand in cert SAN
  • +0.7 Unrecognised DNS provider
  • +0.6 Registrar reputation
  • +0.6 Suspicious TLD
  • +0.3 Free CA
  • +0.3 Long domain
  • +0.1 Hyphens
17 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Lookalike domain impersonating WhatsApp, with the brand in the page title, screenshot text and certificate SAN. Registered the same day via a Hong Kong registrar and hosted on a Hong Kong server; flagged by Google Safe Browsing. Likely harvests account or login details.

Brand in titleBrand in cert SANGoogle Safe Browsing
AI-generated from stored detector signals - the AI never visited the site. · 2026-11-03 · confidence 80%
Domain & Network
Whois
Registrar Dominet (HK) Limited
Network
IP 192.253.227.197
Country Hong KongHong Kong
Hosting CTG Server Limited
ASN AS152194
TLS Cert YR1
External detection Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-11-03 05:19 UTC  ·  Last refreshed 2026-11-04 23:30 UTC