whatsapp-clone-delta-two[.]vercel[.]app

The domain whatsapp-clone-delta-two.vercel.app is currently active and is flagged for brand impersonation, specifically targeting Google. The threat level is high, and the domain has been identified as a potential phishing site by various security vendors and platforms.

Analysis indicates that the domain is flagged by 20 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain is registered through Tucows Domains Inc. and resolves to the IP address 216.198.79.131, which is located in the United States and associated with Amazon.com, Inc. (AS16509). The domain was created on February 21, 2026, and has an SSL certificate issued by Google Trust Services / WR1. The page title is 'WhatsApp Clone,' which does not align with the brand it is impersonating, adding to the deceptive nature of the site. The domain appears on one security blocklist, specifically PhishDestroy, and has a notable presence in Google Safe Browsing as a flagged phishing site.

The current status of the domain is active, posing a high risk to users who may be deceived into believing it is a legitimate Google service. To mitigate this threat, it is recommended that users avoid clicking on links or entering sensitive information on this domain. Security teams and network administrators should consider blocking access to this domain and monitoring for any related malicious activity. Additionally, users should verify the authenticity of any communications purporting to be from Google by directly accessing official Google websites and services.