Security Scan: WhatsApp

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/336a6359-390f-42a8-b092-a9a3f7a32926 Domain and IP registration (RDAP)/api/v1/rdap/336a6359-390f-42a8-b092-a9a3f7a32926How often this domain was scanned/api/v1/domain/stats/shamcash-mu.vercel.app Scan history for this domain/api/v1/domain/history/shamcash-mu.vercel.app?limit=15

This website contacted 6 IPs in 1 country across 3 domains to perform 5 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://shamcash-mu.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake WhatsApp activation page on vercel.app harvesting phone numbers and exfiltrating data to a Telegram bot; flagged by Safe Browsing for social engineering. Avoid interaction.

Risk Factors (6)

Brand impersonation of WhatsApp on a domain it does not own

Phone-number harvesting form with urgency ('activated within 30 minutes') and fake error/support messaging

Telegram bot token embedded in page JavaScript — direct exfiltration channel for submitted data

Google Safe Browsing Social Engineering detection

Actor-abused cloud hosting (vercel.app) network alerts

Unranked/unattributable subdomain with no legitimate WhatsApp association

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

The domain name 'shamcash-mu.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'shamcash-mu'. Its registrable label 'vercel' stretches across 6 characters containing 2 vowels alongside 4 consonants. Splitting it apart reveals 2 words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.25s

Total Load Time

185 KB

Total Size

Language Analysis

Primary Language

🇸🇦Arabic

Code: ar

Confidence:80%

Script:Arabic

Direction:rtl

Detection Details

HTML Lang Attribute:ar

Text Length:559 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network79% confidence

Type: static

Method: ml+structural

All Detected Categories

social media network

79%

technology software

43%

phishing scam

31%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
0	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	6	-	-