# Phishing sites impersonating WhatsApp

PhishDestroy has recorded 580 phishing domains impersonating WhatsApp since 2025-08-02, 33 of them in the last 30 days. The most used registrars are Gname.com and Dominet (HK); the most common TLDs are .com and .cn. The official WhatsApp domain is whatsapp.com: any other site asking for your login or wallet is not WhatsApp.

580Domains, all time

33Last 30 days

282Online at last check

62Confirmed takedowns

## New domains in the last 90 days

WhatsApp phishing domains detected per day: 141 from 2026-07-25 to 2026-10-22; peak 10.

## How to tell a fake WhatsApp site

Official domain: whatsapp.com.

Words most often added to the brand in reported domains: whats, whatapp, chat, whatsappweb, whatsappp, whatsapwacz, whatshktw, whatsapps, one, wahst.
- Type the address yourself or use a bookmark; phishing links for WhatsApp arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- WhatsApp does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest WhatsApp phishing domains

The 50 most recently detected domains impersonating WhatsApp
Domain | First detected | Status at last check | Registrar | 
[videeyss.online](https://phishdestroy.io/domain/videeyss.online/) | 2026-10-19 | Online | GoDaddy.com | 
[whatsapp.imake-app.com](https://phishdestroy.io/domain/whatsapp.imake-app.com/) | 2026-10-19 | Online | GoDaddy.com | 
[yaccc.top](https://phishdestroy.io/domain/yaccc.top/) | 2026-10-18 | Online | Gname.com | 
[bldfuel.shop](https://phishdestroy.io/domain/bldfuel.shop/) | 2026-10-17 | Online | Dynadot | 
[bldlab.shop](https://phishdestroy.io/domain/bldlab.shop/) | 2026-10-17 | Online | Dynadot | 
[novidadedasemana.com](https://phishdestroy.io/domain/novidadedasemana.com/) | 2026-10-17 | Offline | GoDaddy.com | 
[kumazimut.com](https://phishdestroy.io/domain/kumazimut.com/) | 2026-10-17 | Online | Gransy, s.r.o | 
[webportalacess.com](https://phishdestroy.io/domain/webportalacess.com/) | 2026-10-16 | Online | NICENIC | 
[uklicence.co.uk](https://phishdestroy.io/domain/uklicence.co.uk/) | 2026-10-16 | Online | Verpex | 
[melissacamassola.com.br](https://phishdestroy.io/domain/melissacamassola.com.br/) | 2026-10-16 | Online | — | 
[alvoradams.com.br](https://phishdestroy.io/domain/alvoradams.com.br/) | 2026-10-16 | Online | — | 
[wswsweb-whatsapp.com](https://phishdestroy.io/domain/wswsweb-whatsapp.com/) | 2026-10-15 | Offline | EU Technology (HK) | 
[whatdom.icu](https://phishdestroy.io/domain/whatdom.icu/) | 2026-10-15 | Offline | GoDaddy.com | 
[policlinicariovermelho.com.br](https://phishdestroy.io/domain/policlinicariovermelho.com.br/) | 2026-10-14 | Online | — | 
[entruststakess.sbs](https://phishdestroy.io/domain/entruststakess.sbs/) | 2026-10-13 | Online | Global Domain | 
[io-strategy.com](https://phishdestroy.io/domain/io-strategy.com/) | 2026-10-13 | Online | GoDaddy.com | 
[whatsapp-grupo.online](https://phishdestroy.io/domain/whatsapp-grupo.online/) | 2026-10-11 | Online | GoDaddy.com | 
[vexun.site](https://phishdestroy.io/domain/vexun.site/) | 2026-10-11 | Online | Porkbun | 
[aksesbelajar.com](https://phishdestroy.io/domain/aksesbelajar.com/) | 2026-10-11 | Online | CV. Rumahweb Indonesia | 
[z1me4.shop](https://phishdestroy.io/domain/z1me4.shop/) | 2026-10-11 | Unknown | GNAME.COM | 
[ahsappanjur.com](https://phishdestroy.io/domain/ahsappanjur.com/) | 2026-10-11 | Online | GoDaddy.com | 
[escorter.info](https://phishdestroy.io/domain/escorter.info/) | 2026-10-11 | Online | NameCheap | 
[cmturismo.com.br](https://phishdestroy.io/domain/cmturismo.com.br/) | 2026-10-11 | Online | — | 
[feratotogaz.com](https://phishdestroy.io/domain/feratotogaz.com/) | 2026-10-11 | Online | Atak Domain | 
[bestonlinepharm.com](https://phishdestroy.io/domain/bestonlinepharm.com/) | 2026-10-11 | Online | HOSTINGER operations | 
[ascadolodge.com](https://phishdestroy.io/domain/ascadolodge.com/) | 2026-10-10 | Online | HOSTINGER operations | 
[diverge.finance](https://phishdestroy.io/domain/diverge.finance/) | 2026-10-10 | Online | GoDaddy Online Services Cayman Islands | 
[chat-whatsapp.nijz.site](https://phishdestroy.io/domain/chat-whatsapp.nijz.site/) | 2026-10-09 | Online | NAMECHEAP | 
[coshou.com](https://phishdestroy.io/domain/coshou.com/) | 2026-10-08 | Online | HiChina (www.net.cn) | 
[rizetronescort.com](https://phishdestroy.io/domain/rizetronescort.com/) | 2026-10-07 | Online | NICENIC | 
[whatsapp.checkleaked.com](https://phishdestroy.io/domain/whatsapp.checkleaked.com/) | 2026-09-26 | Online | NAMECHEAP | 
[prosmart.com.tr](https://phishdestroy.io/domain/prosmart.com.tr/) | 2026-09-23 | Online | — | 
[kdelektrikelektronik.com](https://phishdestroy.io/domain/kdelektrikelektronik.com/) | 2026-09-23 | Online | Isimtescil Bilisim A.S | 
[benzpharmacy.com](https://phishdestroy.io/domain/benzpharmacy.com/) | 2026-09-21 | Offline | CNOBIN INFORMATION TECHNOLOGY | 
[undian-resmi312.blogspot.com](https://phishdestroy.io/domain/undian-resmi312.blogspot.com/) | 2026-09-11 | Online | MarkMonitor | 
[fmpafrica.com.ng](https://phishdestroy.io/domain/fmpafrica.com.ng/) | 2026-09-10 | Online | HostAfrica | 
[pesta-shopee-22.blogspot.com](https://phishdestroy.io/domain/pesta-shopee-22.blogspot.com/) | 2026-09-09 | Online | Google | 
[stackearnxchang.com](https://phishdestroy.io/domain/stackearnxchang.com/) | 2026-09-09 | Online | Registrar.eu | 
[b41dc.shop](https://phishdestroy.io/domain/b41dc.shop/) | 2026-09-09 | Offline | GNAME.COM | 
[vrooomin.com](https://phishdestroy.io/domain/vrooomin.com/) | 2026-09-07 | Offline | DropCatch.com 854 | 
[bancofalabella-colombia.co](https://phishdestroy.io/domain/bancofalabella-colombia.co/) | 2026-09-07 | Offline | PublicDomainRegistry.com | 
[zoom-whatsapp.com](https://phishdestroy.io/domain/zoom-whatsapp.com/) | 2026-09-07 | Offline | Guizhou Zhongyu Zhike Network Technology | 
[flexcareerhub.com](https://phishdestroy.io/domain/flexcareerhub.com/) | 2026-09-07 | Online | Gransy, s.r.o | 
[multxchangezone.click](https://phishdestroy.io/domain/multxchangezone.click/) | 2026-09-06 | Online | NAMECHEAP | 
[profarmapramshop.com](https://phishdestroy.io/domain/profarmapramshop.com/) | 2026-09-06 | Online | Global Domain | 
[bscita.online](https://phishdestroy.io/domain/bscita.online/) | 2026-09-05 | Online | HOSTINGER operations | 
[meranova.top](https://phishdestroy.io/domain/meranova.top/) | 2026-09-05 | Offline | Gname.com | 
[whatsapp-indonesia877.blogspot.com](https://phishdestroy.io/domain/whatsapp-indonesia877.blogspot.com/) | 2026-09-05 | Online | Google | 
[web.hash-whats-whatapp.com.cn](https://phishdestroy.io/domain/web.hash-whats-whatapp.com.cn/) | 2026-09-05 | Online | 万商云集（成都）科技股份有限公司 | 
[agfomento.pro](https://phishdestroy.io/domain/agfomento.pro/) | 2026-09-05 | Online | GoDaddy.com | 

[All 580 WhatsApp reports](https://phishdestroy.io/domain/?brand=WhatsApp)

## Where they are registered and hosted

### Registrars

- [Gname.com](https://phishdestroy.io/registrar/name-com/)75
- [Dominet (HK)](https://phishdestroy.io/registrar/dominet/)42
- 成都垦派科技有限公司40
- 万商云集（成都）科技股份有限公司37
- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)31
- 四川域趣网络科技有限公司18
- Cloudflare17
- 北京新网数码信息技术有限公司15

### Top-level domains

- [.com](https://phishdestroy.io/tld/com/)166
- [.cn](https://phishdestroy.io/tld/cn/)143
- [.cc](https://phishdestroy.io/tld/cc/)55
- [.vip](https://phishdestroy.io/tld/vip/)44
- [.br](https://phishdestroy.io/tld/br/)14
- [.shop](https://phishdestroy.io/tld/shop/)14
- [.online](https://phishdestroy.io/tld/online/)13
- [.app](https://phishdestroy.io/tld/app/)13

### Hosting networks

- Cloudflare, Inc.71
- KIDC HDTIDC LIMITED, HK49
- MICROSOFT-CORP-MSN-AS-BLOCK, US41
- CLOUDFLARENET - Cloudflare, Inc., US20
- CLOUDFLARENET, US19
- GNETINC-AS-AP GNET INC., US17
- BGP Network Limited17
- CTGSERVERLIMITED-AS-AP CTG Server Limited, HK14

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is WhatsApp; share of all PhishDestroy reports: 0.26%.

Canonical: https://phishdestroy.io/brand/whatsapp/