Security Scan Report: whatsapp.spacevip.com.br

Redirected to:
https://whatsapp.spacevip.com.br/login.php
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 4 domains to perform 15 HTTP transactions. The main domain is spacevip.com.br and was registered 20 years ago.

Submitted URL: https://whatsapp.spacevip.com.br

Effective URL:
https://whatsapp.spacevip.com.br/login.php
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

A WhatsApp-branded login page hosted on an unrelated spacevip.com.br subdomain that harvests email/password credentials — textbook brand impersonation phishing, not an official WhatsApp or Meta site.

Risk Factors (4)
Impersonation of a different entity's brand (WhatsApp) on a domain that is not the brand's official domain
Credential capture form (email + password) presented under that impersonated brand
Brand impersonation combined with credential collection — the defining phishing shape, not mitigated by parent-domain age
Domain absent from Cisco Umbrella top 1M while claiming to be a major global brand
Domain age information unavailable

Details

Page Title

WhatsApp - Login

Scan Type

public

Domain Name Analysis

The domain name 'whatsapp.spacevip.com.br' uses the Brazilian country-code top-level domain (.com.br), featuring subdomain 'whatsapp'. The second-level label 'spacevip' is 8 characters long with 3 vowels and 5 consonants. It segments into two words: space, vip. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Bem-vindo de volta Entre na sua conta para continuar G Continuar com Google f Continuar com Facebook Não tem uma conta? Cadastre-se

Page Load Overview

2.04s
Total Load Time
815 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:166 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network98% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
98%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
366.7.218.190United States
AS33182HostDime.com, Inc.
3142.251.127.95Google · CDNUnited States
AS15169Google LLC
3104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
155--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CA81305014F508735223D1D4769ABA133E82C8078B2EDE143BAC8BEDAFC7D86C8D7589

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:AT5pFfEjEjJHxC4XVbu9GDsYIOwXYmC5rTgldvXI9BRG:ATfFfKjeVKQsYIOwXY7rTBBRG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4173:CAKhCASBF4YECCABhAAQTACBDABABgAAAMEIAQAAwgCAfFAlBCBRIAIAABCAAEgBAAJMAACCBCoEQhEdAi8MBRBQAggBIBgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0010181818181800
Perceptual Hash:dc66269933993366
Difference Hash:0034323232323230
Wavelet Hash:f8f8f8f8d8d89880
Color Hash:00002e00000

Scan History

Scan history not available

Unable to load historical scan data