Security Scan: WhatsApp

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/39b57878-9947-4e23-947f-f6107f6f3cbb Domain and IP registration (RDAP)/api/v1/rdap/39b57878-9947-4e23-947f-f6107f6f3cbbHow often this domain was scanned/api/v1/domain/stats/shamcash-mu.vercel.app Scan history for this domain/api/v1/domain/history/shamcash-mu.vercel.app?limit=15

This website contacted 5 IPs in 1 country across 3 domains to perform 5 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://shamcash-mu.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Fake WhatsApp activation page on a vercel.app subdomain harvesting phone numbers and exfiltrating them via an embedded Telegram bot token; confirmed by Safe Browsing and two phishing feeds.

Risk Factors (7)

Impersonation of WhatsApp brand on a domain it does not own

Telegram bot token in page JavaScript — direct exfiltration channel for harvested data

Credential/data harvesting form soliciting phone numbers under false pretenses

Multi-source corroborated phishing threat-intel match on the primary domain

Google Safe Browsing Social Engineering detection

Hosted on abuse-prone free platform subdomain (vercel.app) with unknown actual creation date

Deceptive messaging ('your WhatsApp account will be activated in 30 minutes', 'device not supported') to pressure victims

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'shamcash-mu.vercel.app' is registered; it also runs on subdomain 'shamcash-mu'. The core label 'vercel' covers 6 characters split between two vowels and four consonants. Segmentation suggests two words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

608 وتقتهد 6 سيتم تفعيل حسابك على واتساب خلال 30 دقيقة رقم الهاتف /63هد 22 | شروط الخدمة ‎٠‏ سياسة الخصوصية

Page Load Overview

0.40s

Total Load Time

185 KB

Total Size

Language Analysis

Primary Language

🇸🇦Arabic

Code: ar

Confidence:80%

Script:Arabic

Direction:rtl

Detection Details

HTML Lang Attribute:ar

Text Length:559 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network79% confidence

Type: static

Method: ml+structural

All Detected Categories

social media network

79%

technology software

43%

phishing scam

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
1	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	5	-	-