Security Scan Report: omarwhats.app

Submitted: Completed: publiccompleted
This website contacted 26 IPs in 2 countries across 19 domains to perform 172 HTTP transactions. The main domain is omarwhats.app and was registered 5 years ago.

Submitted URL: https://omarwhats.app

AI Security Verdict

Confirmed Scam

Confidence: 85%

9
Risk Score

Fake WhatsApp mod APK distribution site flagged by threat intelligence as Android fakeapp/Triada malware; do not download or install anything from this page.

Risk Factors (5)
Content-malware threat-intel hits (android fakeapp, Triada) on the primary domain and URL
Distribution of a modded/fake WhatsApp APK promising ban-evasion features
Brand misuse: presents a WhatsApp variant on an unofficial domain
Injected unrelated third-party advertising content visible to users
Unranked domain with minimal legitimacy signals
Domain age information unavailable

Details

Page Title

تنزيل واتساب عمر 2024 اخر اصدار للاندرويد ضد الحظر APK

Scan Type

public

Domain Name Analysis

The domain name 'omarwhats.app' uses the application-focused generic top-level domain (.app). Count 9 characters in 'omarwhats' with three vowels and six consonants. Segmentation suggests three words: omar, what, s. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Fisher Investments Hur kan du generera 40 000 kr i passiv inkomst per manad? whatsapp dahabi | obwhatsapp الرئيسية < وتس اب عمر > واتساب عمر 2024 اخر اصدار للاتدرويد ضد الحظر واتساب عمر 2024 اخر...

Page Load Overview

3.20s
Total Load Time
2.9 MB
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:80%
Script:Arabic
Direction:rtl

Detection Details

HTML Lang Attribute:ar
Text Length:86,105 chars
Detector Agreement:80%

Website Classification

Primary Category

social media network60% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
60%
corporate
35%
technology software
35%
adult content
33%
forum
25%

Detected Features

Search
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22104.21.57.173Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6172.67.147.222Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.14.97Google · CDNUnited States
AS15169Google LLC
6142.251.13.157Google · CDNUnited States
AS15169Google LLC
6216.239.32.36Google · CDNUnited States
AS15169Google LLC
6142.251.127.138Google · CDNUnited States
AS15169Google LLC
6192.178.183.95Google · CDNUnited States
AS15169Google LLC
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
6142.251.14.154Google · CDNUnited States
AS15169Google LLC
6142.251.110.132Google · CDNUnited States
AS15169Google LLC
17226--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D8D5C81BF5E21A33D2A689E0927B373C7B38CD1E8BC14CB45843676E478ADE6174918D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:8j6+/VvrSM8b7ORDcpkNnYP0PzLYd0NzZYr0fzieF/ZvrST8b7rN/ZvrST8h75Ph:+zcMtooMOXITMjJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2853982:0fQJQKGEPQkIMJgAACQEeuUuJTBwwISCJqyYA32EAYIADAAidSNxAiIGOAOUiAQKYGCFUAAwA4HqFoEQCGtTFEgQASoIAPDK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff3c9bbbff1f1d
Perceptual Hash:8a6713657d4f430e
Difference Hash:d2e1dd2323c135b9
Wavelet Hash:00ff3c99b97d1c0c
Color Hash:N/A

Other Hashes

Crop Resistant:d2e1dd2323c135b9

Scan History

Scan history not available

Unable to load historical scan data