Security Scan Report: www.clone-whatsapp-nextjs.vercel.app

Redirected to:
https://clone-whatsapp-nextjs.vercel.app/auth/login
Site favicon
Submitted: Sep 10, 2026, 1:45:07 PMCompleted: Sep 10, 2026, 1:46:28 PMpubliccompleted

This website contacted 4 IPs in 1 country across 2 domains to perform 35 HTTP transactions. The main domain is clone-whatsapp-nextjs.vercel.app and was registered 6 years ago.

Submitted URL: http://www.clone-whatsapp-nextjs.vercel.app/

Effective URL:

https://clone-whatsapp-nextjs.vercel.app/auth/login
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Page impersonates WhatsApp and harvests login credentials on an unranked Vercel subdomain; treat as high‑risk phishing.

Risk Factors (5)
Brand impersonation of WhatsApp
Credential harvesting form
Unranked / unknown‑age subdomain on shared hosting
Suspicious dynamic JavaScript (Function constructor)
Absence of legitimate brand ownership verification
Domain age information unavailable

Details

Page Title

WhatsApp Web

Scan Type

public

Domain Name Analysis

The domain 'www.clone-whatsapp-nextjs.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'www.clone-whatsapp-nextjs'. Count 6 characters in 'vercel' with 2 vowels and 4 consonants. Segmentation suggests two words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://www.clone-whatsapp-nextjs.vercel.app/

Page Load Overview

3.89s
Total Load Time
404 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:957 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network93% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
93%
download file sharing
75%
technology software
71%
phishing scam
68%
blog personal website
42%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11216.198.79.67United States
AS16509Amazon.com, Inc.
8216.198.79.3United States
AS16509Amazon.com, Inc.
8216.198.79.195United States
AS16509Amazon.com, Inc.
864.29.17.195United States
AS16509Amazon.com, Inc.
354--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15DD16693ED15CE0E1361D5ADD65BB008821A943FCC389CA9B5DD81AF05E0FD9C6D3A71

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:L8IqAMZu4/0yZ4tDPVB4e4PvxIBPGDF3Nnv206XD21:w8Su4/HKDPVB4e4PvxIBPGDFxv2Ly1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6172:QWrGAAQASQjBQOhEAJDABCRKAAoIABqAAmAEoAAAqMAAgJHAzcAGAwEACEJImAMBAgEQEIgEooLcgCABApAAg4BQiQAgAAnC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9ecafeded2c2deff
Perceptual Hash:d54d9b642e9236c6
Difference Hash:329270b09696d848
Wavelet Hash:1c4a5c5e424e5e7d
Color Hash:#1f9363

Other Hashes

Crop Resistant:329270b09696d848

Scan History

Scan history not available

Unable to load historical scan data