Security Scan: WhatsApp

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8344a848-a758-4a08-8e49-fe9deb259bac Domain and IP registration (RDAP)/api/v1/rdap/8344a848-a758-4a08-8e49-fe9deb259bacHow often this domain was scanned/api/v1/domain/stats/shamcash-mu.vercel.app Scan history for this domain/api/v1/domain/history/shamcash-mu.vercel.app?limit=15

This website contacted 6 IPs in 1 country across 3 domains to perform 5 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://shamcash-mu.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake WhatsApp activation page on a free Vercel subdomain that harvests phone numbers and ships them to a Telegram bot; flagged by Safe Browsing for social engineering. Do not enter any number.

Risk Factors (6)

Brand impersonation of WhatsApp on a free Vercel subdomain that is not an official WhatsApp domain

Telegram-bot exfiltration code embedded in an inline script

Google Safe Browsing Social Engineering threat on the URL

Unverified phishing report against the primary domain (single source)

Harvesting of phone numbers under a false 'account activation' pretext with fake support/error messages ('جهازك غير مدعوم', 'يجب تسجيل الدخول أولاً')

Free shared-hosting subdomain with no independent reputation (not in Cisco Umbrella top 1M)

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'shamcash-mu.vercel.app' is registered and includes subdomain 'shamcash-mu'. Its registrable label 'vercel' stretches across 6 characters containing two vowels alongside four consonants. Tokenizing the label suggests 2 words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

< WhatsApp lus! dueat 8452 30 JS Gluily le chbu> ands aia

Page Load Overview

0.31s

Total Load Time

185 KB

Total Size

Language Analysis

Primary Language

🇸🇦Arabic

Code: ar

Confidence:80%

Script:Arabic

Direction:rtl

Detection Details

HTML Lang Attribute:ar

Text Length:559 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network79% confidence

Type: static

Method: ml+structural

All Detected Categories

social media network

79%

technology software

43%

phishing scam

31%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
0	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	6	-	-