Medium riskfirst seen 2 h ago
whastapp.xyz
59of 100
Credential phishing, aimed at social media users. 97% likely a scam.
Why it was flagged
How the score works- Name and certificate
- Registration and DNS
- VAKYN verdict
- registered 18 h ago+32
- "whastapp" ≈ "whatsapp", edit distance 1+24
- certificate issued 17 h after registration+5
- .xyz abuse prior−3
- registered for the minimum one year+2
- no mail servers, not resolving yet−1
Evidence
Registration
- Age
- 19 h old
- Registrar
- Chengdu West Dimension Digital Technology Co., Ltd.
- Status
- serverTransferProhibited, addPeriod
Hosting
- not checked
DNS
- NS
- harley.ns.cloudflare.com, tegan.ns.cloudflare.com
- MX
- none
Certificate
- Issuer
- Let's Encrypt
- Names
- 2
- Seen
- 30 Oct 2026 08:29 UTC
VAKYN verdict
372 msEight questions about the site, each with how sure the answer is.
Likely used for phishing or a scam?
yes97% sure
- yes97%
- no3%
How dangerous for an ordinary visitor?
Probably malicious49% sure
- Clearly malicious50%
- Probably malicious49%
- Unclear1%
What is it most likely for?
credential phishing61% sure
- credential phishing61%
- unclear10%
- malware download8%
Which brand does it pretend to be?
WhatsApp89% sure
- whatsapp89%
- none11%
Who is it aimed at?
social media users94% sure
- social media users94%
- general public4%
- bank customers1%
Would it ask visitors to sign in?
no51% sure
- yes49%
- no51%
Would it ask visitors to pay?
no63% sure
- yes37%
- no63%
Plausible innocent explanation?
no97% sure
- yes3%
- no97%