Security Report: whatsomar.download - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3ee5b591-487a-4c8c-b172-56e2a6c1890f Domain and IP registration (RDAP)/api/v1/rdap/3ee5b591-487a-4c8c-b172-56e2a6c1890fHow often this domain was scanned/api/v1/domain/stats/whatsomar.download Scan history for this domain/api/v1/domain/history/whatsomar.download?limit=15

This website contacted 15 IPs in 1 country across 9 domains to perform 57 HTTP transactions. The main domain is whatsomar.download and was registered 3 years 2 months ago.

Submitted URL: https://whatsomar.download/

AI Security Verdict

Moderate Risk

Confidence: 72%

Risk Score

Unofficial site using the WhatsApp brand to push a 'WhatsApp Omar' modded APK advertised as ban-proof. No credential phishing or malware hit, but unverified APK distribution and brand misuse make it high-risk.

Risk Factors (4)

Use of Meta/WhatsApp brand and product naming on a non-official domain to drive APK downloads

Distribution of a modified messaging app that explicitly claims to bypass account bans

Unverified APK binaries offered for direct download (possible malware/PUP vector)

Download portal with likely affiliate/ad monetization and no transparency about the file's origin or integrity

Safety Factors (5)

No password, payment, or credential-harvesting fields detected in the verified form facts

No Indicators of Compromise, hunting rule malware matches, Safe Browsing hits, or IDS alerts in this scan

Forms present are a site search box and a standard comment/review form

No cross-origin credential exfiltration or obfuscated malicious JavaScript detected

Established domain (1152 days old) with no strong malicious indicators — risk clamped from 7 to 5

Domain age information unavailable

Details

Page Title

تحميل واتساب عمر اخر تحديث 2026 | download obwhatsapp

Scan Type

public

Favicon Hash

MMH3: 1800040165

MD5: 290ede2fe0061ce4f82abecc2d59a61c

Domain Name Analysis

Domain 'whatsomar.download' uses the .download top-level domain with no subdomain. The second-level label 'whatsomar' is 9 characters long containing three vowels alongside six consonants. It segments into three words: what, s, omar. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

الرئيسية < وتس اب ‎jar‏ > تحميل واتساب عمر آخر تحديث 2026 | ‎download obwhatsapp‏ تحميل واتساب ‎joc‏ اخر تحديث 2026 | ‎download obwhatsapp‏ واتس اب ‎jac‏ ‏وتساب عمر تحديث ‎apk‏ ضد الحظر تحميل تحديث و...

Page Load Overview

2.29s

Total Load Time

1.5 MB

Total Size

Language Analysis

Primary Language

🇸🇦Arabic

Code: ar

Confidence:80%

Script:Arabic

Direction:rtl

Detection Details

HTML Lang Attribute:ar

Text Length:34,351 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software50% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

50%

social media network

40%

corporate

35%

adult content

28%

phishing/scam

20%

Detected Features

Comments

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	172.67.130.87Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.110.155Google · CDN	United States	AS15169Google LLC
3	142.251.20.97Google · CDN	United States	AS15169Google LLC
3	216.239.32.36Google · CDN	United States	AS15169Google LLC
3	142.251.14.157Google · CDN	United States	AS15169Google LLC
3	192.178.183.132Google · CDN	United States	AS15169Google LLC
3	104.21.7.165Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.110.154Google · CDN	United States	AS15169Google LLC
3	142.251.110.157Google · CDN	United States	AS15169Google LLC
3	216.239.34.36Google · CDN	United States	AS15169Google LLC
57	15	-	-