ScanMalware.com

Security Scan Report: 655vuo.gm-whatsappt.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e23dcdbb-b5ee-43c7-ba69-07beff1ccb51Domain and IP registration (RDAP)/api/v1/rdap/e23dcdbb-b5ee-43c7-ba69-07beff1ccb51How often this domain was scanned/api/v1/domain/stats/655vuo.gm-whatsappt.comScan history for this domain/api/v1/domain/history/655vuo.gm-whatsappt.com?limit=15
This website contacted 3 IPs in 2 countries across 1 domain to perform 2 HTTP transactions. The main domain is gm-whatsappt.com and was registered 3 weeks ago.

Submitted URL: https://655vuo.gm-whatsappt.com/index.php?k=J3PuafFcgeb3pyEZoYQ

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Domain hosts a known, analyst-vetted WhatsApp linked-device hijack phishing kit (YARA-confirmed) on a 26-day-old lookalike host; do not visit or scan any QR/pairing code.

Risk Factors (4)
Known malicious phishing kit identified by analyst-vetted roster and YARA (WhatsApp linked-device hijack)
Brand impersonation of WhatsApp on an unrelated, unranked domain
Domain registered 26 days ago (very new)
Obfuscated inline JavaScript using encoding/decoding routines
Domain age information unavailable

Details

Page Title

404 Not Foundother network

Scan Type

public

Domain Name Analysis

The domain name '655vuo.gm-whatsappt.com' uses the commercial generic top-level domain (.com) and includes subdomain '655vuo'. The second-level label 'gm-whatsappt' is 12 characters long containing two vowels alongside nine consonants; it also includes 1 hyphen. Breaking it apart gives 5 words: gm, what, s, a, ppt. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://655vuo.gm-whatsappt.com/index.php?k=J3PuafFcgeb3pyEZoYQ

Page Load Overview

1.22s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.252.173.117United States
AS153706Stack Network Sdn. Bhd.
0172.252.173.116United States
AS153706Stack Network Sdn. Bhd.
0156.234.84.19Hong Kong, Hong Kong
AS138415Yancy Limited
23--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C00123CB8840C805C7A10A35AEA9F40D81AFD48A8E55CC5919D6E46C06E4FDD8B5F9C4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:qTpTXOjg0JEw/zlWiN+1Q8v52i6oo3ynUy8CiMALRCa+xIbB0jzgLVQq4AFPvV4j:0pCc0llJ+1Q8v52i16h0fqUGLLVSePvG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:675:AAAAASABABCABAAAAAAAQAAAAAAAAAAAAAAAAAAgAAAAAAIAQAAAAAAAAAAABAAAAAAAAAAAJAABAABAAAAgIAkAAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:e666666666666623
Difference Hash:0c00000000000000
Wavelet Hash:00fff3f300000000
Color Hash:#53ac59

Other Hashes

Crop Resistant:0c00000000000000

Scan History

Scan history not available

Unable to load historical scan data