Phishing sites impersonating WhatsApp

PhishDestroy has recorded 580 phishing domains impersonating WhatsApp since 2025-08-02, 33 of them in the last 30 days. The most used registrars are Gname.com and Dominet (HK); the most common TLDs are .com and .cn. The official WhatsApp domain is whatsapp.com: any other site asking for your login or wallet is not WhatsApp.

580
Domains, all time
33
Last 30 days
282
Online at last check
62
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 12026-07-27: 102026-07-28: 12026-07-29: 12026-07-30: 12026-07-31: 42026-08-01: 32026-08-02: 52026-08-03: 22026-08-04: 52026-08-05: 02026-08-06: 32026-08-07: 12026-08-08: 32026-08-09: 22026-08-10: 32026-08-11: 42026-08-12: 22026-08-13: 02026-08-14: 72026-08-15: 12026-08-16: 12026-08-17: 12026-08-18: 22026-08-19: 02026-08-20: 12026-08-21: 22026-08-22: 02026-08-23: 22026-08-24: 22026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 22026-08-29: 12026-08-30: 02026-08-31: 72026-09-01: 02026-09-02: 22026-09-03: 42026-09-04: 32026-09-05: 72026-09-06: 22026-09-07: 42026-09-08: 02026-09-09: 32026-09-10: 12026-09-11: 12026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 12026-09-22: 02026-09-23: 22026-09-24: 02026-09-25: 02026-09-26: 12026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 12026-10-08: 12026-10-09: 12026-10-10: 22026-10-11: 92026-10-12: 02026-10-13: 22026-10-14: 12026-10-15: 22026-10-16: 42026-10-17: 42026-10-18: 12026-10-19: 22026-10-20: 02026-10-21: 02026-10-22: 0
WhatsApp phishing domains detected per day: 141 from 2026-07-25 to 2026-10-22; peak 10.

How to tell a fake WhatsApp site

Official domain: whatsapp.com.

Words most often added to the brand in reported domains: whats, whatapp, chat, whatsappweb, whatsappp, whatsapwacz, whatshktw, whatsapps, one, wahst.

  • Type the address yourself or use a bookmark; phishing links for WhatsApp arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • WhatsApp does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest WhatsApp phishing domains

The 50 most recently detected domains impersonating WhatsApp
DomainFirst detectedStatus at last checkRegistrar
videeyss.online2026-10-19OnlineGoDaddy.com
whatsapp.imake-app.com2026-10-19OnlineGoDaddy.com
yaccc.top2026-10-18OnlineGname.com
bldfuel.shop2026-10-17OnlineDynadot
bldlab.shop2026-10-17OnlineDynadot
novidadedasemana.com2026-10-17OfflineGoDaddy.com
kumazimut.com2026-10-17OnlineGransy, s.r.o
webportalacess.com2026-10-16OnlineNICENIC
uklicence.co.uk2026-10-16OnlineVerpex
melissacamassola.com.br2026-10-16Online—
alvoradams.com.br2026-10-16Online—
wswsweb-whatsapp.com2026-10-15OfflineEU Technology (HK)
whatdom.icu2026-10-15OfflineGoDaddy.com
policlinicariovermelho.com.br2026-10-14Online—
entruststakess.sbs2026-10-13OnlineGlobal Domain
io-strategy.com2026-10-13OnlineGoDaddy.com
whatsapp-grupo.online2026-10-11OnlineGoDaddy.com
vexun.site2026-10-11OnlinePorkbun
aksesbelajar.com2026-10-11OnlineCV. Rumahweb Indonesia
z1me4.shop2026-10-11UnknownGNAME.COM
ahsappanjur.com2026-10-11OnlineGoDaddy.com
escorter.info2026-10-11OnlineNameCheap
cmturismo.com.br2026-10-11Online—
feratotogaz.com2026-10-11OnlineAtak Domain
bestonlinepharm.com2026-10-11OnlineHOSTINGER operations
ascadolodge.com2026-10-10OnlineHOSTINGER operations
diverge.finance2026-10-10OnlineGoDaddy Online Services Cayman Islands
chat-whatsapp.nijz.site2026-10-09OnlineNAMECHEAP
coshou.com2026-10-08OnlineHiChina (www.net.cn)
rizetronescort.com2026-10-07OnlineNICENIC
whatsapp.checkleaked.com2026-09-26OnlineNAMECHEAP
prosmart.com.tr2026-09-23Online—
kdelektrikelektronik.com2026-09-23OnlineIsimtescil Bilisim A.S
benzpharmacy.com2026-09-21OfflineCNOBIN INFORMATION TECHNOLOGY
undian-resmi312.blogspot.com2026-09-11OnlineMarkMonitor
fmpafrica.com.ng2026-09-10OnlineHostAfrica
pesta-shopee-22.blogspot.com2026-09-09OnlineGoogle
stackearnxchang.com2026-09-09OnlineRegistrar.eu
b41dc.shop2026-09-09OfflineGNAME.COM
vrooomin.com2026-09-07OfflineDropCatch.com 854
bancofalabella-colombia.co2026-09-07OfflinePublicDomainRegistry.com
zoom-whatsapp.com2026-09-07OfflineGuizhou Zhongyu Zhike Network Technology
flexcareerhub.com2026-09-07OnlineGransy, s.r.o
multxchangezone.click2026-09-06OnlineNAMECHEAP
profarmapramshop.com2026-09-06OnlineGlobal Domain
bscita.online2026-09-05OnlineHOSTINGER operations
meranova.top2026-09-05OfflineGname.com
whatsapp-indonesia877.blogspot.com2026-09-05OnlineGoogle
web.hash-whats-whatapp.com.cn2026-09-05Online万商云集（成都）科技股份有限公司
agfomento.pro2026-09-05OnlineGoDaddy.com

All 580 WhatsApp reports

Where they are registered and hosted

Registrars

  1. Gname.com75
  2. Dominet (HK)42
  3. 成都垦派科技有限公司40
  4. 万商云集（成都）科技股份有限公司37
  5. GoDaddy.com31
  6. 四川域趣网络科技有限公司18
  7. Cloudflare17
  8. 北京新网数码信息技术有限公司15

Top-level domains

  1. .com166
  2. .cn143
  3. .cc55
  4. .vip44
  5. .br14
  6. .shop14
  7. .online13
  8. .app13

Hosting networks

  1. Cloudflare, Inc.71
  2. KIDC HDTIDC LIMITED, HK49
  3. MICROSOFT-CORP-MSN-AS-BLOCK, US41
  4. CLOUDFLARENET - Cloudflare, Inc., US20
  5. CLOUDFLARENET, US19
  6. GNETINC-AS-AP GNET INC., US17
  7. BGP Network Limited17
  8. CTGSERVERLIMITED-AS-AP CTG Server Limited, HK14

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is WhatsApp; share of all PhishDestroy reports: 0.26%.