Security Scan Report: safe-whatsapp.com

Submitted: Completed: publiccompleted
This website contacted 17 IPs in 3 countries across 10 domains to perform 21 HTTP transactions. The main domain is safe-whatsapp.com and was registered 1 year 1 month ago.

Submitted URL: https://safe-whatsapp.com

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Expired, parked safe-whatsapp.com borrowing WhatsApp's name while Google Safe Browsing reports Social Engineering. No forms or malware today, but brand-impersonating host with an active phishing flag — avoid.

Risk Factors (4)
Safe Browsing Social Engineering (phishing) detection active for this site
Deceptive hostname impersonating another company's brand (WhatsApp) on a non-official domain
Expired domain parked on a third-party monetization/ad network (abovedomains.com, findresultsseek.com) with brand-themed search bait
No verifiable ownership, contact, or legal information on the page
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'safe-whatsapp.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'safe-whatsapp' is 13 characters long holding four vowels versus 8 consonants, plus 1 hyphen. Segmentation suggests 4 words: safe, what, s, app. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

This domain name has expired.jPlease contact, your,domain registrar,te renew,the domain: safe-whatsapp:com Related Searches REMOVE\VIRUS FROM ANDROID, PHONE > BESTFREE'ANTIVIRUS: WHATSAPP,MESSENG...

Page Load Overview

1.79s
Total Load Time
299 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

Text Length:132 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content52% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

adult content
52%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5103.224.182.189San Diego, California, United States
AS133618Trellian Pty. Limited
118.245.60.80Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.204.240.1Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1185.111.111.154Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
185.9.207.144Frankfurt am Main, Hesse, Germany
AS202053UpCloud Ltd
1195.181.170.19Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
1185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
15.22.215.48Frankfurt am Main, Hesse, Germany
AS202053UpCloud Ltd
179.127.216.204Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
2117--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T142E2B4154AF20421059720319EBF6AC477754A27758CAC087D8C6A80FFAEABB4DB67F4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:NBZBsjBjrAyhtbgt4MiIO/5/9SLZ5X8eQP8zsD8zsbQLGC:hMML9Qas+sbs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33840:hpqXSoBVwGXqClLUEwhxlpBZwksBCiS7iEyoRACEz+CETljV9gVBFKAIIRGgABiQgQHAUOBBAI1lLpUAMgJO1BAAOC8T4KQg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000c300000000ff
Perceptual Hash:a8609f4a9f4ab365
Difference Hash:71969697b7b3b33b
Wavelet Hash:0042ffc75b1818ff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data