Security Scan Report: www.whatssep-group4k.vercel.app

Submitted: Sep 30, 2026, 12:45:34 PMCompleted: Sep 30, 2026, 12:50:39 PMpubliccompleted

Error: Scan exceeded maximum duration of 180 seconds

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Unranked Vercel subdomain using WhatsApp branding and an Arabic group-join lure behind a JavaScript gate, with geolocation API calls. No forms, no credential harvesting, no malware or Indicator-of-Compromise hits — suspicious but not proven malicious.

Risk Factors (3)
WhatsApp branding on a non-official, unranked vercel.app subdomain with a misspelled-looking name ('whatssep')
JavaScript-gated landing page whose full behaviour cannot be verified from static HTML
Page scripts POST to third-party geolocation services (ipinfo.io, ipapi.co), consistent with visitor-country based redirect logic
Safety Factors (4)
No credential, login, or payment form of any kind (0 forms, 0 password fields, 0 payment fields)
No credential exfiltration detected; all JavaScript is served from the site's own domain
No Indicators of Compromise, no JavaScript YARA malware patterns, no known kit-roster hits
WhatsApp group-invite landing pages are a common legitimate pattern, and the Suricata alerts are generic hosting-service reputation tags, not content malware
Domain age information unavailable

Details

Page Title

WhatsApp

Scan Type

public

Domain Name Analysis

The domain 'www.whatssep-group4k.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'www.whatssep-group4k'. The core label 'vercel' covers 6 characters containing two vowels alongside 4 consonants. Breaking it apart gives 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Screenshot not available

Page Load Overview

N/A
Total Load Time
N/A
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:60%
Script:Arabic
Direction:rtl

Detection Details

HTML Lang Attribute:en
Text Length:91 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as ar

Website Classification

Primary Category

social media network75% confidence
Type: static
Method: ml+structural

All Detected Categories

social media network
75%
technology software
54%
adult content
51%
documentation technical
49%
government public service
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
164.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
02--

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data