whatsapps[.]live
Verifica phishing e sicurezza per whatsapps.live
“WhatsApp”
whatsapps.live — Contenuto non disponibile (HTTP 502). Simulazione del marchio: Google; Tipo di truffa: Brand Impersonation. Riepilogo delle prove: VirusTotal 16 detections (engine total unavailable) (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CSIS Security Group); URLQuery 7 alerts; Google Safe Browsing flagged; CF Radar malicious; PhishDestroy score 95/100. Registrar: Dynadot.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Riepilogo delle prove
PhishDestroy first observed whatsapps.live on May 20, 2026. Stored content metadata identifies Google as the apparent target. The captured page title is “WhatsApp”. Evidence score: 95/100 (critical).
5 independent sources recorded positive findings: VirusTotal, Google Safe Browsing, DNS security resolvers, Cloudflare Radar, and URLQuery. VirusTotal stored 16 positive engine results: ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CSIS Security Group, ESET, Fortinet, G-Data; the total engine count is unavailable or inconsistent on Jun 14, 2026 at 22:42 UTC. Google Safe Browsing flagged the domain: Social Engineering on May 20, 2026 at 08:23 UTC. DNS security checks returned 7 blocking results across 14 tested policies: Adguard Family, Brand Whatsapp, Cloudflare Family, Cloudflare Security, Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. Cloudflare Radar classified the hostname as malicious and assigned the categories phishing and security threats; its verdict timestamp was not retained.
HTTP 502 was recorded on Aug 9, 2026 at 01:28 UTC; content was unavailable. Registration records for the domain list Dynadot Inc as the registrar and May 17, 2026 as the creation date. At collection time, the hostname resolved to 199.36.158.100 on AS54113 (Fastly, Inc.). The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | whatsapps.live/flutter_bootstrap.js |
audit | Hunting_JS_WebAssembly |
| Private YARA rules | www.gstatic.com/flutter-canvaskit/b5990e5ccc5e325fd24f0746e7d6689bbebc7c65/canvaskit.js |
audit | Hunting_JS_WebAssembly |
| Cloudflare DNS | whatsapps.live |
malicious | Sinkholed |
| OpenDNS | whatsapps.live |
phishing | Phishing Block |
| Hagezi Threat Feed | whatsapps.live |
malicious | Sinkholed |
| DigiCert UltraDNS | whatsapps.live |
malicious | Sinkholed |
| DNS4EU | whatsapps.live |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 4 identified
Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.
firebase.google.com Confidenza al 100%Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com Confidenza al 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Dati e relazioni esterneIndependent lookups and source reports
PD-20260520-DEB009 Recipient: abuse@dynadot.com Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.