WhatsApp

Messaging United Stateswhatsapp.comRank 7 of the most impersonated
Cert findings · 24 h
5
Cert findings · 7 days
65
21 reported or listed · 35 on phishing hosts · 9 on Spamhaus DROP
Registered lookalikes
365
23 listed by a source or an address list
Official domains
9
verified from WhatsApp's own sites and records

Registered lookalikes

Checked daily · 2026-11-04 22:41 UTC

Spellings of whatsapp.com registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.

Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.

23 of the 365 are listed by a source or resolve to a listed address, checked hourly.

  1. co-vvhatsapp.cc HK · AS135357 · HONG KONG KOWLOON TELECOMMU…Lookalike of whatsapp.com · similar-looking characters
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    co-vvhatsapp.cc
    Spelling
    Spelled like whatsapp.com with similar-looking characters
    First found
    2026-10-26 · the day DomainSpoof first saw a certificate naming it
    Registered
    2026-10-26 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    206.161.218.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · co-vvhatsapp.cc resolved to it 2026-11-05 01:32 UTC
    Addresses
    206.161.218.138 · Hong Kong · AS135357 PCCW22-HK - HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. whastapp.net HK · AS152194 · CTG Server LimitedLookalike of whatsapp.com · two letters swapped
    Address on Spamhaus DROP
    DetailsHide
    Domain
    whastapp.net
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-10-12 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on Spamhaus DROP
    134.122.174.134 is on Spamhaus DROP · whastapp.net resolved to it 2026-11-04 22:16 UTC
    Addresses
    134.122.174.134 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. wahtsapp.co HK · AS152194 · CTG Server LimitedLookalike of whatsapp.com · two letters swapped
    Address on Spamhaus DROP
    DetailsHide
    Domain
    wahtsapp.co
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-07-24 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on Spamhaus DROP
    202.95.12.140 is on Spamhaus DROP · wahtsapp.co resolved to it 2026-11-04 22:16 UTC
    Addresses
    202.95.12.140 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. whatxapp.vip HK · AS152194 · CTG Server LimitedLookalike of whatsapp.com · a letter from a neighbouring key
    Address on Spamhaus DROP
    DetailsHide
    Domain
    whatxapp.vip
    Spelling
    Spelled like whatsapp.com with a letter from a neighbouring key
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-06-30 · Gname.com Pte. Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on Spamhaus DROP
    202.95.12.140 is on Spamhaus DROP · whatxapp.vip resolved to it 2026-11-04 22:16 UTC
    Addresses
    202.95.12.140 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. wahtsapp.icu SG · AS4907 · BGPNET PTE. LTD.Lookalike of whatsapp.com · two letters swapped
    Address on Spamhaus DROP
    DetailsHide
    Domain
    wahtsapp.icu
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-06-18 · Gname.com Pte. Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on Spamhaus DROP
    137.220.155.110 is on Spamhaus DROP · wahtsapp.icu resolved to it 2026-11-04 22:16 UTC
    Addresses
    137.220.155.110 · Singapore · AS4907 BGPNETPTELTD-AS-AP - BGPNET PTE. LTD.
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. whatsapp-verify.chat US · AS16509 · Amazon.com, Inc.2 addressesLookalike of whatsapp.com · the name with the word “verify”
    Listed by MetaMaskAmazon Web Services
    DetailsHide
    Domain
    whatsapp-verify.chat
    Spelling
    The name of whatsapp.com with the word “verify”
    First found
    2026-11-01 · the day we first found it in the .chat zone file, already registered
    Registered
    2026-06-12 · Tucows Domains Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · whatsapp-verify.chat · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.148.104 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.20.46 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.148.104, 76.223.20.46): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. whatsappz.shop CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of whatsapp.com · an added character
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    whatsappz.shop
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .shop zone file, already registered
    Registered
    2026-05-08 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsappz.shop resolved to it 2026-11-05 01:32 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. whatzapp.io CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of whatsapp.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    whatzapp.io
    Spelling
    Spelled like whatsapp.com with a letter from a neighbouring key
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-03-16 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatzapp.io resolved to it 2026-11-04 22:16 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. whagsapp.com IT · AS39729 · REGISTER-AS REGISTER S.P.A.Lookalike of whatsapp.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    whagsapp.com
    Spelling
    Spelled like whatsapp.com with a letter from a neighbouring key
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-02-10 · Register SPA
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    195.110.124.133 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whagsapp.com resolved to it 2026-11-04 22:16 UTC
    Addresses
    195.110.124.133 · Italy · AS39729 REGISTER-AS REGISTER S.P.A.
    MX
    mail.register.it
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. securewhatsapponline.site DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…14 addressesLookalike of whatsapp.com · the name with an added word
    5 addresses on DomainSpoof’s phishing-host listHetzner +1
    DetailsHide
    Domain
    securewhatsapponline.site
    Spelling
    The name of whatsapp.com with an added word
    First found
    2026-11-01 · the day we first found it in the .site zone file, already registered
    Registered
    2026-01-17 · VIRTUA DRUG Kutatási Szolgáltató Korlátolt Felelősségű Társaság
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    5 addresses on DomainSpoof’s phishing-host list
    195.201.128.179 (securewhatsapponline.site resolved to it 2026-11-05 01:32 UTC), 46.62.237.138 (securewhatsapponline.site resolved to it 2026-11-05 01:32 UTC), 5.161.230.87 (securewhatsapponline.site resolved to it 2026-11-05 01:32 UTC), 5.161.47.86 (securewhatsapponline.site resolved to it 2026-11-05 01:32 UTC), 5.78.156.59 (securewhatsapponline.site resolved to it 2026-11-05 01:32 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    2406:da1e:214:c901:49:871:e9e1:eb92
    2600:1f1c:6db:8801:ca20:5f5a:5f45:48d0
    2a05:d014:179b:c400:b5e:feaf:a6dc:b508
    2a05:d014:179b:c400:2dc9:16fd:7cbd:e255
    2a05:d014:179b:c400:5ed8:1db0:4443:ca25
    2a05:d014:179b:c400:a327:40ee:24cc:6180
    2a05:d014:179b:c400:aa99:a226:6c94:e72
    2a05:d014:179b:c400:adda:f567:8e83:5e24
    Hetzner +1
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers. Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. whatsapp-bravery-package.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of whatsapp.com · the name with the word “bravery-package”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-bravery-package.xyz
    Spelling
    The name of whatsapp.com with the word “bravery-package”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-bravery-package.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. whasapp.group CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of whatsapp.com · a dropped letter
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    whasapp.group
    Spelling
    Spelled like whatsapp.com with a dropped letter
    First found
    2026-11-01 · the day we first found it in the .group zone file, already registered
    Registered
    2025-12-12 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whasapp.group resolved to it 2026-11-05 01:32 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. invoice-powerbi-whatsapp.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of whatsapp.com · the name with the word “invoice-powerbi”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    invoice-powerbi-whatsapp.xyz
    Spelling
    The name of whatsapp.com with the word “invoice-powerbi”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · invoice-powerbi-whatsapp.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. invoice-router-whatsapp.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of whatsapp.com · the name with the word “invoice-router”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    invoice-router-whatsapp.xyz
    Spelling
    The name of whatsapp.com with the word “invoice-router”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · invoice-router-whatsapp.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. invoice-whatsapp.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of whatsapp.com · the name with the word “invoice”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    invoice-whatsapp.xyz
    Spelling
    The name of whatsapp.com with the word “invoice”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · invoice-whatsapp.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. equality-package-whatsapp.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of whatsapp.com · the name with the word “equality-package”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    equality-package-whatsapp.xyz
    Spelling
    The name of whatsapp.com with the word “equality-package”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · equality-package-whatsapp.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. whattsapp.cc US · AS19318 · Interserver, IncLookalike of whatsapp.com · a doubled letter
    Address on DomainSpoof’s phishing-host listRegistry lookup queuedInterserverMX present
    DetailsHide
    Domain
    whattsapp.cc
    Spelling
    Spelled like whatsapp.com with a doubled letter
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2022-09-25 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    64.20.40.243 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whattsapp.cc resolved to it 2026-11-04 22:16 UTC
    Addresses
    64.20.40.243 · United States · AS19318 IS-AS-1 - Interserver, Inc · Interserver (shared hosting)
    Interserver
    Interserver (64.20.40.243): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mail.whattsapp.cc
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. wharsapp.com NL · AS49981 · WorldStream WorldStream B.V.Lookalike of whatsapp.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    wharsapp.com
    Spelling
    Spelled like whatsapp.com with a letter from a neighbouring key
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2022-01-07 · DropCatch.com 1517 LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    45.82.67.195 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wharsapp.com resolved to it 2026-11-04 22:16 UTC
    Addresses
    45.82.67.195 · Netherlands · AS49981 WorldStream WorldStream B.V.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. whatsappsupport.org CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of whatsapp.com · the name with an added word
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    whatsappsupport.org
    Spelling
    The name of whatsapp.com with an added word
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2021-01-13 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsappsupport.org resolved to it 2026-11-05 01:32 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. whatshapp.info DE · AS202108 · UDAG united-domains GmbHLookalike of whatsapp.com · an added character
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    whatshapp.info
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2016-02-16 · united-domains GmbH
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    89.31.143.90 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatshapp.info resolved to it 2026-11-05 01:32 UTC
    Addresses
    89.31.143.90 · Germany · AS202108 UDAG united-domains GmbH
    MX
    mx00.udag.de
    mx01.udag.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. whaysapp.com US · AS40244 · Turnkey Internet Inc.Lookalike of whatsapp.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listRegistry lookup queued
    DetailsHide
    Domain
    whaysapp.com
    Spelling
    Spelled like whatsapp.com with a letter from a neighbouring key
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2012-02-21 · Media Elite Holdings Limited, S.A.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    199.193.114.102 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whaysapp.com resolved to it 2026-11-04 22:16 UTC
    Addresses
    199.193.114.102 · United States · AS40244 TURNKEY-INTERNET - Turnkey Internet Inc.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. whtsapp.com AU · AS133618 · Trellian Pty. LimitedLookalike of whatsapp.com · a dropped letter
    Subdomain reported by PhishDestroyParking page · Above.comMX present
    DetailsHide
    Domain
    whtsapp.com
    Spelling
    Spelled like whatsapp.com with a dropped letter
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2010-10-20 · Above.com Pty Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Subdomain reported by PhishDestroy
    Reported by PhishDestroy · www.my.whtsapp.com under whtsapp.com · in the feed since 2026-10-25 23:31 UTC
    Addresses
    103.224.182.247 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates whtsapp.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.247): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. whatsapp.li DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of whatsapp.com · the ending .li
    Address on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide
    Domain
    whatsapp.li
    Spelling
    The name of whatsapp.com with the ending .li
    First found
    2026-11-02 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    217.160.0.15 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp.li resolved to it 2026-11-02 11:57 UTC
    Addresses
    217.160.0.15 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::28a
    IONOS
    IONOS (217.160.0.15): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.de
    mx01.ionos.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. iforgot-whatsapphelp.click US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · the name with an added word
    Cloudflare
    DetailsHide
    Domain
    iforgot-whatsapphelp.click
    Spelling
    The name of whatsapp.com with an added word
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2026-10-31 · Sav.com, LLC
    Addresses
    104.21.71.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.172.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:47f4
    2606:4700:3034::ac43:ac65
    Cloudflare
    Cloudflare (104.21.71.244, 172.67.172.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. whastapp.cloud US · AS13335 · Cloudflare, Inc.2 addressesLookalike of whatsapp.com · two letters swapped
    Cloudflare
    DetailsHide
    Domain
    whastapp.cloud
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2026-10-29 · Chengdu West Dimension Digital Technology Co., LTD
    Addresses
    104.21.44.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.44.112, 172.67.199.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. whastapp.ltd US · AS13335 · Cloudflare, Inc.2 addressesLookalike of whatsapp.com · two letters swapped
    Cloudflare
    DetailsHide
    Domain
    whastapp.ltd
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-11-01 · the day we first found it in the .ltd zone file, already registered
    Registered
    2026-10-29 · Chengdu West Dimension Digital Technology Co., Ltd.
    Addresses
    104.21.79.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.79.99, 172.67.169.235): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. whastapp.ren US · AS13335 · Cloudflare, Inc.2 addressesLookalike of whatsapp.com · two letters swapped
    Cloudflare
    DetailsHide
    Domain
    whastapp.ren
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-11-01 · the day we first found it in the .ren zone file, already registered
    Registered
    2026-10-29 · 成都西维数码科技有限公司
    Addresses
    104.21.11.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.11.25, 172.67.165.19): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. whastapp.wang US · AS13335 · Cloudflare, Inc.2 addressesLookalike of whatsapp.com · two letters swapped
    Cloudflare
    DetailsHide
    Domain
    whastapp.wang
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-11-01 · the day we first found it in the .wang zone file, already registered
    Registered
    2026-10-29 · 成都西维数码科技有限公司
    Addresses
    104.21.24.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.24.177, 172.67.219.221): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. whastapp.xin US · AS13335 · Cloudflare, Inc.2 addressesLookalike of whatsapp.com · two letters swapped
    Cloudflare
    DetailsHide
    Domain
    whastapp.xin
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-11-01 · the day we first found it in the .xin zone file, already registered
    Registered
    2026-10-29 · Chengdu West Dimension Digital Technology Co., Ltd.
    Addresses
    104.21.82.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.82.227, 172.67.164.153): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. whastapp.cc US · AS13335 · Cloudflare, Inc.2 addressesLookalike of whatsapp.com · two letters swapped
    Cloudflare
    DetailsHide
    Domain
    whastapp.cc
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-29 · Chengdu West Dimension Digital Technology Co., Ltd.
    Addresses
    104.21.89.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.160.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.89.144, 172.67.160.221): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. whastapp.site US · AS13335 · Cloudflare, Inc.2 addressesLookalike of whatsapp.com · two letters swapped
    Cloudflare
    DetailsHide
    Domain
    whastapp.site
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-29 · Chengdu West Dimension Digital Technology Co., Ltd.
    Addresses
    104.21.59.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.179.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.59.154, 172.67.179.194): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. whastapp.store US · AS13335 · Cloudflare, Inc.2 addressesLookalike of whatsapp.com · two letters swapped
    Cloudflare
    DetailsHide
    Domain
    whastapp.store
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-29 · Chengdu West Dimension Digital Technology Co., Ltd.
    Addresses
    104.21.67.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.67.192, 172.67.180.32): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. whastapp.vip US · AS13335 · Cloudflare, Inc.2 addressesLookalike of whatsapp.com · two letters swapped
    Cloudflare
    DetailsHide
    Domain
    whastapp.vip
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-29 · Chengdu West Dimension Digital Technology Co., Ltd.
    Addresses
    104.21.0.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.0.102, 172.67.150.222): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. whastapp.xyz US · AS13335 · Cloudflare, Inc.2 addressesLookalike of whatsapp.com · two letters swapped
    Cloudflare
    DetailsHide
    Domain
    whastapp.xyz
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-29 · Chengdu West Dimension Digital Technology Co., Ltd.
    Addresses
    104.21.27.183 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.27.183, 172.67.169.157): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. co-vvhatsapp.topLookalike of whatsapp.com · similar-looking characters
    DetailsHide
    Domain
    co-vvhatsapp.top
    Spelling
    Spelled like whatsapp.com with similar-looking characters
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-26 · gadomains
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. co-vvhatsapp.shopLookalike of whatsapp.com · similar-looking characters
    Registry lookup queued
    DetailsHide
    Domain
    co-vvhatsapp.shop
    Spelling
    Spelled like whatsapp.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .shop zone file, already registered
    Registered
    2026-10-26 · GNAME.COM PTE. LTD.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. whatsapp.kred US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · the ending .kred
    Cloudflare
    DetailsHide
    Domain
    whatsapp.kred
    Spelling
    The name of whatsapp.com with the ending .kred
    First found
    2026-11-02 · the day the daily DNS check first found it registered
    Registered
    2026-10-19 · Dynadot Inc
    Addresses
    104.21.30.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.173.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:ad88
    2606:4700:3032::6815:1ebc
    Cloudflare
    Cloudflare (104.21.30.188, 172.67.173.136): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. updatewhatsapp.site US · AS16509 · Amazon.com, Inc.2 addressesLookalike of whatsapp.com · the name with an added word
    Amazon Web ServicesMX present
    DetailsHide
    Domain
    updatewhatsapp.site
    Spelling
    The name of whatsapp.com with an added word
    First found
    2026-11-01 · the day we first found it in the .site zone file, already registered
    Registered
    2026-10-14 · Porkbun LLC
    Addresses
    207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
    MX
    fwd1.porkbun.com
    fwd2.porkbun.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. whatasapp.blogLookalike of whatsapp.com · an added character
    DetailsHide
    Domain
    whatasapp.blog
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .blog zone file, already registered
    Registered
    2026-10-11 · Go Daddy, LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. whatasapp.funLookalike of whatsapp.com · an added character
    Registry lookup queued
    DetailsHide
    Domain
    whatasapp.fun
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .fun zone file, already registered
    Registered
    2026-10-11 · GoDaddy.com, LLC
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. whatasapp.lifeLookalike of whatsapp.com · an added character
    Registry lookup queued
    DetailsHide
    Domain
    whatasapp.life
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .life zone file, already registered
    Registered
    2026-10-11 · GoDaddy.com, LLC
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. whatasapp.live US · AS16509 · Amazon.com, Inc.2 addressesLookalike of whatsapp.com · an added character
    Registry lookup queuedAmazon Web Services
    DetailsHide
    Domain
    whatasapp.live
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-10-11 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. whatasapp.space US · AS16509 · Amazon.com, Inc.2 addressesLookalike of whatsapp.com · an added character
    Registry lookup queuedAmazon Web Services
    DetailsHide
    Domain
    whatasapp.space
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .space zone file, already registered
    Registered
    2026-10-11 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. whatasapp.store US · AS16509 · Amazon.com, Inc.2 addressesLookalike of whatsapp.com · an added character
    Registry lookup queuedAmazon Web Services
    DetailsHide
    Domain
    whatasapp.store
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .store zone file, already registered
    Registered
    2026-10-11 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. whatasapp.website US · AS16509 · Amazon.com, Inc.2 addressesLookalike of whatsapp.com · an added character
    Registry lookup queuedAmazon Web Services
    DetailsHide
    Domain
    whatasapp.website
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .website zone file, already registered
    Registered
    2026-10-11 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. whatasapp.xyz US · AS209242 · CLOUDFLARESPECTRUM Cloudfla…Lookalike of whatsapp.com · an added character
    Registry lookup queuedCloudflare
    DetailsHide
    Domain
    whatasapp.xyz
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-10-11 · GoDaddy.com, LLC
    Addresses
    160.153.0.55 · United States · AS209242 CLOUDFLARESPECTRUM Cloudflare London, LLC · Cloudflare (cdn)
    Cloudflare
    Cloudflare (160.153.0.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. watsapp.lat US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · a dropped letter
    Cloudflare
    DetailsHide
    Domain
    watsapp.lat
    Spelling
    Spelled like whatsapp.com with a dropped letter
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-10-11 · Spaceship, Inc.
    Addresses
    104.21.35.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:2317
    2606:4700:3037::ac43:d39f
    Cloudflare
    Cloudflare (104.21.35.23, 172.67.211.159): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. whatsapps.contact US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · an added character
    Cloudflare
    DetailsHide
    Domain
    whatsapps.contact
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .contact zone file, already registered
    Registered
    2026-10-10 · Cloudflare, Inc
    Addresses
    104.21.43.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:2bfc
    2606:4700:3036::ac43:c045
    Cloudflare
    Cloudflare (104.21.43.252, 172.67.192.69): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. whatseapp.online US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · an added character
    Cloudflare
    DetailsHide
    Domain
    whatseapp.online
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-10-08 · Web Commerce Communications Limited dba WebNic.cc
    Addresses
    104.21.1.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.129.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:1bf
    2606:4700:3033::ac43:81db
    Cloudflare
    Cloudflare (104.21.1.191, 172.67.129.219): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. whatssapp.blogLookalike of whatsapp.com · a doubled letter
    No address or mail server yet
    DetailsHide
    Domain
    whatssapp.blog
    Spelling
    Spelled like whatsapp.com with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .blog zone file, already registered
    Registered
    2026-10-07 · Go Daddy, LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. whatssapp.buzzLookalike of whatsapp.com · a doubled letter
    No address or mail server yetRegistry lookup queued
    DetailsHide
    Domain
    whatssapp.buzz
    Spelling
    Spelled like whatsapp.com with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .buzz zone file, already registered
    Registered
    2026-10-07 · GoDaddy.com, LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. whatsdapp.fun US · AS16509 · Amazon.com, Inc.2 addressesLookalike of whatsapp.com · an added character
    Amazon Web Services
    DetailsHide
    Domain
    whatsdapp.fun
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .fun zone file, already registered
    Registered
    2026-10-02 · Name.com, Inc.
    Addresses
    216.150.1.129 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.150.16.129 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.150.1.129, 216.150.16.129): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. whateapp.netLookalike of whatsapp.com · a letter from a neighbouring key
    No address or mail server yet
    DetailsHide
    Domain
    whateapp.net
    Spelling
    Spelled like whatsapp.com with a letter from a neighbouring key
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-10-02 · Gname.com Pte. Ltd.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. what-sapp.sbs US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · an added hyphen
    Cloudflare
    DetailsHide
    Domain
    what-sapp.sbs
    Spelling
    Spelled like whatsapp.com with an added hyphen
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-09-29 · Dynadot Inc
    Addresses
    104.21.74.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:4ab0
    2606:4700:3032::ac43:cca8
    Cloudflare
    Cloudflare (104.21.74.176, 172.67.204.168): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. whtsapp.app US · AS932 · XNNET LLCLookalike of whatsapp.com · a dropped letter
    DetailsHide
    Domain
    whtsapp.app
    Spelling
    Spelled like whatsapp.com with a dropped letter
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-09-28 · NameSilo, LLC
    Addresses
    103.214.174.211 · United States · AS932 XNNET - XNNET LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. whatsapps.org CY · AS47583 · AS-HOSTINGER Hostinger Inte…4 addressesLookalike of whatsapp.com · an added character
    Hostinger CDN
    DetailsHide
    Domain
    whatsapps.org
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-09-26 · HOSTINGER operations, UAB
    Addresses
    191.101.104.8 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)
    212.1.212.81 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)
    2a02:4780:1d:127d:af87:142c:1d34:2b93
    2a02:4780:21:791b:b54f:efe6:7ea0:2e5
    Hostinger CDN
    Hostinger CDN (191.101.104.8, 212.1.212.81): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. account-whatsapp.help US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · the name with the word “account”
    Cloudflare
    DetailsHide
    Domain
    account-whatsapp.help
    Spelling
    The name of whatsapp.com with the word “account”
    First found
    2026-11-01 · the day we first found it in the .help zone file, already registered
    Registered
    2026-09-21 · Sav.com, LLC
    Addresses
    104.21.27.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:1b1b
    2606:4700:3033::ac43:8cf1
    Cloudflare
    Cloudflare (104.21.27.27, 172.67.140.241): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. waatsapp.proLookalike of whatsapp.com · a changed character
    No address or mail server yet
    DetailsHide
    Domain
    waatsapp.pro
    Spelling
    Spelled like whatsapp.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-09-20 · Name.com, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. wnatsapp.shop GB · AS207461 · host-industry HOSTING INDUS…Lookalike of whatsapp.com · a letter from a neighbouring key
    DetailsHide
    Domain
    wnatsapp.shop
    Spelling
    Spelled like whatsapp.com with a letter from a neighbouring key
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-09-16 · GNAME.COM PTE. LTD.
    Addresses
    45.147.28.98 · United Kingdom · AS207461 host-industry HOSTING INDUSTRY LIMITED
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. whatxapp.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · a letter from a neighbouring key
    Cloudflare
    DetailsHide
    Domain
    whatxapp.com
    Spelling
    Spelled like whatsapp.com with a letter from a neighbouring key
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-09-14 · Chengdu West Dimension Digital Technology Co., Ltd.
    Addresses
    104.21.14.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:e5a
    2606:4700:3036::ac43:9e89
    Cloudflare
    Cloudflare (104.21.14.90, 172.67.158.137): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. whatsapp.latino US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · the ending .latino
    Cloudflare
    DetailsHide
    Domain
    whatsapp.latino
    Spelling
    The name of whatsapp.com with the ending .latino
    First found
    2026-11-02 · the day the daily DNS check first found it registered
    Registered
    2026-09-13 · Gname.com Pte. Ltd.
    Addresses
    104.21.61.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:cf68
    2606:4700:3037::6815:3d51
    Cloudflare
    Cloudflare (104.21.61.81, 172.67.207.104): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. xn--whtsapp-iwa.comLookalike of whatsapp.com · international characters, shown as whátsapp.com
    No address or mail server yet
    DetailsHide
    Domain
    xn--whtsapp-iwa.com
    Spelling
    Spelled like whatsapp.com with international characters, shown as whátsapp.com
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-09-09 · Tucows Domains Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. whatsappp.fun US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · a doubled letter
    Cloudflare
    DetailsHide
    Domain
    whatsappp.fun
    Spelling
    Spelled like whatsapp.com with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .fun zone file, already registered
    Registered
    2026-09-05 · NameSilo, LLC
    Addresses
    104.21.53.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:d166
    2606:4700:3032::6815:3540
    Cloudflare
    Cloudflare (104.21.53.64, 172.67.209.102): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. whaatsapp.shop CN · AS132203 · Tencent Building, Kejizhong…Lookalike of whatsapp.com · a doubled letter
    Tencent Cloud
    DetailsHide
    Domain
    whaatsapp.shop
    Spelling
    Spelled like whatsapp.com with a doubled letter
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-09-05 · GNAME.COM PTE. LTD.
    Addresses
    43.160.254.27 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
    Tencent Cloud
    Tencent Cloud (43.160.254.27): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. whatsapp-update.help GB · AS212913 · TIMEHOST-AS TIME-HOST LTDLookalike of whatsapp.com · the name with the word “update”
    DetailsHide
    Domain
    whatsapp-update.help
    Spelling
    The name of whatsapp.com with the word “update”
    First found
    2026-11-01 · the day we first found it in the .help zone file, already registered
    Registered
    2026-09-01 · Dynadot Inc
    Addresses
    130.49.181.82 · United Kingdom · AS212913 TIMEHOST-AS TIME-HOST LTD
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. whatsapps.buzz GB · AS199404 · WHG-IN WHG Hosting Services…Lookalike of whatsapp.com · an added character
    Registry lookup queuedMX present
    DetailsHide
    Domain
    whatsapps.buzz
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .buzz zone file, already registered
    Registered
    2026-09-01 · GoDaddy.com, LLC
    Addresses
    209.42.28.127 · United Kingdom · AS199404 WHG-IN WHG Hosting Services Ltd
    MX
    whatsapps.buzz
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. whatzapp.co US · AS16509 · Amazon.com, Inc.2 addressesLookalike of whatsapp.com · a letter from a neighbouring key
    Amazon Web Services
    DetailsHide
    Domain
    whatzapp.co
    Spelling
    Spelled like whatsapp.com with a letter from a neighbouring key
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-08-31 · Dynadot Inc
    Addresses
    216.150.1.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.150.16.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.150.1.193, 216.150.16.193): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. what-sapp.pro US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · an added hyphen
    Cloudflare
    DetailsHide
    Domain
    what-sapp.pro
    Spelling
    Spelled like whatsapp.com with an added hyphen
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-08-20 · Dynadot Inc
    Addresses
    104.21.0.245 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:f5
    2606:4700:3037::ac43:977d
    Cloudflare
    Cloudflare (104.21.0.245, 172.67.151.125): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. whatsappn.win US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · an added character
    Cloudflare
    DetailsHide
    Domain
    whatsappn.win
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2026-08-18 · Gname.com Pte. Ltd.
    Addresses
    104.21.69.159 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::ac43:d258
    2606:4700:3037::6815:459f
    Cloudflare
    Cloudflare (104.21.69.159, 172.67.210.88): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. whotsapp.mom CN · AS132203 · Tencent Building, Kejizhong…Lookalike of whatsapp.com · a changed character
    Tencent Cloud
    DetailsHide
    Domain
    whotsapp.mom
    Spelling
    Spelled like whatsapp.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .mom zone file, already registered
    Registered
    2026-08-17 · Gname.com Pte. Ltd.
    Addresses
    43.160.254.27 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
    Tencent Cloud
    Tencent Cloud (43.160.254.27): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. whaatsapp.app US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · a doubled letter
    Registry lookup queuedCloudflare
    DetailsHide
    Domain
    whaatsapp.app
    Spelling
    Spelled like whatsapp.com with a doubled letter
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-08-09 · GoDaddy.com, LLC
    Addresses
    104.21.15.254 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:a59e
    2606:4700:3037::6815:ffe
    Cloudflare
    Cloudflare (104.21.15.254, 172.67.165.158): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. what-sapp.digital CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of whatsapp.com · an added hyphen
    Parking page · Hostinger suspended-domain page
    DetailsHide
    Domain
    what-sapp.digital
    Spelling
    Spelled like whatsapp.com with an added hyphen
    First found
    2026-11-01 · the day we first found it in the .digital zone file, already registered
    Registered
    2026-08-08 · HOSTINGER operations, UAB
    Addresses
    2.57.91.93 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger suspended-domain page (parking page)
    Parking page · Hostinger suspended-domain page
    The registry delegates what-sapp.digital to Hostinger suspended-domain page’s nameservers, which answer for it. Hostinger suspended-domain page (2.57.91.93): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. whast-app.top US · AS979 · NetLab GlobalLookalike of whatsapp.com · two letters swapped
    DetailsHide
    Domain
    whast-app.top
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-08-06 · Dominet (HK) Limited
    Addresses
    64.81.112.169 · United States · AS979 NETLAB-SDN - NetLab Global
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. whtasapp.vip US · AS979 · NetLab GlobalLookalike of whatsapp.com · two letters swapped
    DetailsHide
    Domain
    whtasapp.vip
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-08-04 · Porkbun
    Addresses
    64.83.34.65 · United States · AS979 NETLAB-SDN - NetLab Global
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. whatsnapp.wang US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · an added character
    Cloudflare
    DetailsHide
    Domain
    whatsnapp.wang
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .wang zone file, already registered
    Registered
    2026-07-28 · Dominet (HK) Limited
    Addresses
    104.21.10.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:a41
    2606:4700:3034::ac43:90b8
    Cloudflare
    Cloudflare (104.21.10.65, 172.67.144.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. what-saapp.cyou HK · AS9312 · xTom3 addressesLookalike of whatsapp.com · a doubled letter
    DetailsHide
    Domain
    what-saapp.cyou
    Spelling
    Spelled like whatsapp.com with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .cyou zone file, already registered
    Registered
    2026-07-26 · Dynadot Inc
    Addresses
    157.119.103.34 · Hong Kong · AS9312 XTOM - xTom
    157.119.103.52 · Hong Kong · AS9312 XTOM - xTom
    177.3.42.219 · Hong Kong · AS140227 HKCICL-AS-AP - Hong Kong Communications International Co., Limited
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. whetsapp.icu US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · a changed character
    Cloudflare
    DetailsHide
    Domain
    whetsapp.icu
    Spelling
    Spelled like whatsapp.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-07-16 · Gname.com Pte. Ltd.
    Addresses
    104.21.79.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:8b4d
    2606:4700:3032::6815:4f06
    Cloudflare
    Cloudflare (104.21.79.6, 172.67.139.77): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. whqtsapp.icu US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · a letter from a neighbouring key
    Cloudflare
    DetailsHide
    Domain
    whqtsapp.icu
    Spelling
    Spelled like whatsapp.com with a letter from a neighbouring key
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-07-16 · Gname.com Pte. Ltd.
    Addresses
    104.21.95.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:5f11
    2606:4700:3036::ac43:a929
    Cloudflare
    Cloudflare (104.21.95.17, 172.67.169.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. whwtsapp.icu US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · a letter from a neighbouring key
    Cloudflare
    DetailsHide
    Domain
    whwtsapp.icu
    Spelling
    Spelled like whatsapp.com with a letter from a neighbouring key
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-07-16 · Gname.com Pte. Ltd.
    Addresses
    104.21.59.208 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:3bd0
    2606:4700:3037::ac43:b7aa
    Cloudflare
    Cloudflare (104.21.59.208, 172.67.183.170): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. whaatsapp.linkLookalike of whatsapp.com · a doubled letter
    No address or mail server yet
    DetailsHide
    Domain
    whaatsapp.link
    Spelling
    Spelled like whatsapp.com with a doubled letter
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-07-14 · Key-Systems, LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. whastapp.sbsLookalike of whatsapp.com · two letters swapped
    No address or mail server yet
    DetailsHide
    Domain
    whastapp.sbs
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-07-14 · NameSilo, LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. trackwhatsapp.online DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of whatsapp.com · the name with an added word
    Registry lookup queuedHetzner
    DetailsHide
    Domain
    trackwhatsapp.online
    Spelling
    The name of whatsapp.com with an added word
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-07-13 · GoDaddy.com, LLC
    Addresses
    89.167.83.191 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (89.167.83.191): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. whats4pp.onlineLookalike of whatsapp.com · similar-looking characters
    No address or mail server yet
    DetailsHide
    Domain
    whats4pp.online
    Spelling
    Spelled like whatsapp.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-07-09 · HOSTINGER operations, UAB
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. whaisapp.icu US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · a changed character
    Cloudflare
    DetailsHide
    Domain
    whaisapp.icu
    Spelling
    Spelled like whatsapp.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-07-05 · Gname.com Pte. Ltd.
    Addresses
    104.21.76.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:bf97
    2606:4700:3033::6815:4c55
    Cloudflare
    Cloudflare (104.21.76.85, 172.67.191.151): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. whattsapp.cam US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · a doubled letter
    Cloudflare
    DetailsHide
    Domain
    whattsapp.cam
    Spelling
    Spelled like whatsapp.com with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .cam zone file, already registered
    Registered
    2026-07-05 · Dynadot Inc
    Addresses
    104.21.74.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:9c6a
    2606:4700:3037::6815:4a57
    Cloudflare
    Cloudflare (104.21.74.87, 172.67.156.106): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. whastapp.icu US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · two letters swapped
    Cloudflare
    DetailsHide
    Domain
    whastapp.icu
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-07-05 · Gname.com Pte. Ltd.
    Addresses
    104.21.58.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:3ac0
    2606:4700:3037::ac43:a371
    Cloudflare
    Cloudflare (104.21.58.192, 172.67.163.113): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. whadtsapp.icu US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · an added character
    Cloudflare
    DetailsHide
    Domain
    whadtsapp.icu
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-07-02 · Gname.com Pte. Ltd.
    Addresses
    104.21.46.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.140.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::ac43:8cc0
    2606:4700:3037::6815:2ea9
    Cloudflare
    Cloudflare (104.21.46.169, 172.67.140.192): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. whaetsapp.icu US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · an added character
    Cloudflare
    DetailsHide
    Domain
    whaetsapp.icu
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-07-02 · Gname.com Pte. Ltd.
    Addresses
    104.21.61.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:3d32
    2606:4700:3034::ac43:ce7b
    Cloudflare
    Cloudflare (104.21.61.50, 172.67.206.123): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. whartsapp.icu US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · an added character
    Cloudflare
    DetailsHide
    Domain
    whartsapp.icu
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-07-02 · Gname.com Pte. Ltd.
    Addresses
    104.21.63.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.144.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:3f50
    2606:4700:3037::ac43:9037
    Cloudflare
    Cloudflare (104.21.63.80, 172.67.144.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. whatsappi.app US · AS16509 · Amazon.com, Inc.2 addressesLookalike of whatsapp.com · an added character
    Amazon Web Services
    DetailsHide
    Domain
    whatsappi.app
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-06-29 · Name.com, Inc.
    Addresses
    216.150.16.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.150.16.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.150.16.1, 216.150.16.193): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. whaatsapp.vip DE · AS51167 · CONTABO Contabo GmbHLookalike of whatsapp.com · a doubled letter
    Contabo
    DetailsHide
    Domain
    whaatsapp.vip
    Spelling
    Spelled like whatsapp.com with a doubled letter
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-06-27 · Gname.com Pte. Ltd.
    Addresses
    169.58.161.215 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (169.58.161.215): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. watsapp.pro US · AS13335 · Cloudflare, Inc.4 addressesLookalike of whatsapp.com · a dropped letter
    Cloudflare
    DetailsHide
    Domain
    watsapp.pro
    Spelling
    Spelled like whatsapp.com with a dropped letter
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-06-23 · Dynadot Inc
    Addresses
    104.21.0.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:8051
    2606:4700:3035::6815:d9
    Cloudflare
    Cloudflare (104.21.0.217, 172.67.128.81): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. whatasapp.icuLookalike of whatsapp.com · an added character
    No address or mail server yet
    DetailsHide
    Domain
    whatasapp.icu
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-06-23 · Gname.com Pte. Ltd.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. whatisapp.icuLookalike of whatsapp.com · an added character
    No address or mail server yet
    DetailsHide
    Domain
    whatisapp.icu
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-06-23 · Gname.com Pte. Ltd.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. whalsapp.icuLookalike of whatsapp.com · a changed character
    No address or mail server yet
    DetailsHide
    Domain
    whalsapp.icu
    Spelling
    Spelled like whatsapp.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-06-17 · Gname.com Pte. Ltd.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. whasapp.icuLookalike of whatsapp.com · a dropped letter
    No address or mail server yet
    DetailsHide
    Domain
    whasapp.icu
    Spelling
    Spelled like whatsapp.com with a dropped letter
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-06-17 · Gname.com Pte. Ltd.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. whatsappa.cfd DE · AS51167 · CONTABO Contabo GmbHLookalike of whatsapp.com · an added character
    Contabo
    DetailsHide
    Domain
    whatsappa.cfd
    Spelling
    Spelled like whatsapp.com with an added character
    First found
    2026-11-01 · the day we first found it in the .cfd zone file, already registered
    Registered
    2026-06-16 · Gname.com Pte. Ltd.
    Addresses
    169.58.161.215 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (169.58.161.215): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. wahtsapp.app DE · AS51167 · CONTABO Contabo GmbHLookalike of whatsapp.com · two letters swapped
    Contabo
    DetailsHide
    Domain
    wahtsapp.app
    Spelling
    Spelled like whatsapp.com with two letters swapped
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-06-16 · GNAME.COM PTE. LTD.
    Addresses
    169.58.161.215 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (169.58.161.215): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. whatssapp.app DE · AS51167 · CONTABO Contabo GmbHLookalike of whatsapp.com · a doubled letter
    Contabo
    DetailsHide
    Domain
    whatssapp.app
    Spelling
    Spelled like whatsapp.com with a doubled letter
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-06-15 · GNAME.COM PTE. LTD.
    Addresses
    169.58.161.215 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (169.58.161.215): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. whatssapp.cc CA · AS25820 · IT7 Networks IncLookalike of whatsapp.com · a doubled letter
    Registry lookup queued
    DetailsHide
    Domain
    whatssapp.cc
    Spelling
    Spelled like whatsapp.com with a doubled letter
    First found
    2026-10-27 · the day the daily DNS check first found it registered
    Registered
    2026-06-15 · GoDaddy.com, LLC
    Addresses
    67.216.198.66 · Canada · AS25820 IT7NET - IT7 Networks Inc
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC

Registered domains using the name

Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches WhatsApp's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.

100 of 411 shown: listed ones first, then the newest registrations.

  1. mywhatsapp.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “whatsapp”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    mywhatsapp.online
    Match
    A registered domain containing “whatsapp”, one of the names we match for WhatsApp
    Zone file copy
    2026-10-31 · the day of the .online zone file copy it was found in
    Registered
    2026-10-24 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · mywhatsapp.online resolved to it 2026-11-05 01:32 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. whatsapp-download.appContains “whatsapp”
    Reported by PhishDestroyRegistry lookup queued
    DetailsHide
    Domain
    whatsapp-download.app
    Match
    A registered domain containing “whatsapp”, one of the names we match for WhatsApp
    Zone file copy
    2026-10-31 · the day of the .app zone file copy it was found in
    Registered
    2026-06-16 · GoDaddy.com, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · whatsapp-download.app · in the feed since 2026-11-03 21:22 UTC
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. whatsapp-connect.tech US · AS25773 · RADWARE INC.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-connect.tech
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .tech zone file, already registered
    Registered
    2026-04-29 · eNom, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    66.22.16.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-connect.tech resolved to it 2026-11-05 01:32 UTC
    Addresses
    66.22.16.138 · United States · AS25773 RADWARE-CLOUD-SERVICES - RADWARE INC.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. trackeamentowhatsappttheu.shop CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “whatsapp”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    trackeamentowhatsappttheu.shop
    Match
    A registered domain containing “whatsapp”, one of the names we match for WhatsApp
    Zone file copy
    2026-10-31 · the day of the .shop zone file copy it was found in
    Registered
    2026-04-29 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · trackeamentowhatsappttheu.shop resolved to it 2026-11-05 01:32 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. sol-whatsapp.lol MD · AS200019 · AlexHost ALEXHOST S.R.L.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    sol-whatsapp.lol
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .lol zone file, already registered
    Registered
    2026-04-25 · Gname.com Pte. Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    37.221.67.157 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · sol-whatsapp.lol resolved to it 2026-11-05 01:32 UTC
    Addresses
    37.221.67.157 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    MX
    mail.sol-whatsapp.lol
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. xn--reserva-whatsapp-cardpio-58b.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…2 addressesMatched to WhatsApp by name
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    xn--reserva-whatsapp-cardpio-58b.online
    Match
    A domain matched to WhatsApp by name
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-04-24 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · xn--reserva-whatsapp-cardpio-58b.online resolved to it 2026-11-05 01:32 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    2a02:4780:84::32
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. web-whatsapp.lol MD · AS200019 · AlexHost ALEXHOST S.R.L.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    web-whatsapp.lol
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .lol zone file, already registered
    Registered
    2026-04-16 · Gname.com Pte. Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    37.221.67.157 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · web-whatsapp.lol resolved to it 2026-11-05 01:32 UTC
    Addresses
    37.221.67.157 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    MX
    mail.web-whatsapp.lol
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. wed-whatsapp.org HK · AS152194 · CTG Server LimitedContains “whatsapp”
    Address on Spamhaus DROP
    DetailsHide
    Domain
    wed-whatsapp.org
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-04-04 · Gname.com Pte. Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on Spamhaus DROP
    143.92.58.197 is on Spamhaus DROP · wed-whatsapp.org resolved to it 2026-11-05 01:32 UTC
    Addresses
    143.92.58.197 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. ios-whatsapp.cyou MD · AS200019 · AlexHost ALEXHOST S.R.L.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    ios-whatsapp.cyou
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .cyou zone file, already registered
    Registered
    2026-04-01 · Gname.com Pte. Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    81.180.92.199 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ios-whatsapp.cyou resolved to it 2026-11-05 01:32 UTC
    Addresses
    81.180.92.199 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    MX
    mail.ios-whatsapp.cyou
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. ios-whatsapp.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    ios-whatsapp.icu
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-04-01 · Gname.com Pte. Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    91.199.133.247 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ios-whatsapp.icu resolved to it 2026-11-05 01:32 UTC
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    MX
    mx.ios-whatsapp.icu
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. i-whatsapp.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    i-whatsapp.icu
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-03-28 · Gname.com Pte. Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    91.199.133.247 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · i-whatsapp.icu resolved to it 2026-11-05 01:32 UTC
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    MX
    mx.i-whatsapp.icu
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. i-whatsapp.cyou MD · AS200019 · AlexHost ALEXHOST S.R.L.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    i-whatsapp.cyou
    Match
    A registered domain containing “whatsapp”, one of the names we match for WhatsApp
    Zone file copy
    2026-10-31 · the day of the .cyou zone file copy it was found in
    Registered
    2026-03-28 · Gname.com Pte. Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    91.199.133.247 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · i-whatsapp.cyou resolved to it 2026-11-05 01:32 UTC
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    MX
    mx.i-whatsapp.cyou
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. api-whatsapp.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “whatsapp”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    api-whatsapp.online
    Match
    A registered domain containing “whatsapp”, one of the names we match for WhatsApp
    Zone file copy
    2026-10-31 · the day of the .online zone file copy it was found in
    Registered
    2026-02-25 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · api-whatsapp.online resolved to it 2026-11-05 01:32 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. whatsapp-call.fun CY · AS47583 · AS-HOSTINGER Hostinger Inte…2 addressesContains “whatsapp”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    whatsapp-call.fun
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .fun zone file, already registered
    Registered
    2026-02-16 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-call.fun resolved to it 2026-11-05 01:32 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    2a02:4780:84::32
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. whatsapp-proxy-pl.online RU · AS197695 · AS-REGRU "Domain names regi…Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-proxy-pl.online
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-02-06 · Registrar of Domain Names REG.RU LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    95.163.244.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-proxy-pl.online resolved to it 2026-11-05 01:32 UTC
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. whatsappbrasil.shop CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “whatsapp”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    whatsappbrasil.shop
    Match
    A registered domain containing “whatsapp”, one of the names we match for WhatsApp
    Zone file copy
    2026-10-31 · the day of the .shop zone file copy it was found in
    Registered
    2026-02-03 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsappbrasil.shop resolved to it 2026-11-05 01:32 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. me-chama-no-whatsapp-1198209-0259.shop CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “whatsapp”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    me-chama-no-whatsapp-1198209-0259.shop
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .shop zone file, already registered
    Registered
    2026-01-08 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · me-chama-no-whatsapp-1198209-0259.shop resolved to it 2026-11-05 01:32 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. whatsapp-automation.cloud CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “whatsapp”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    whatsapp-automation.cloud
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2026-01-05 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-automation.cloud resolved to it 2026-11-05 01:32 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. whatsapp-recruiting.info DE · AS202108 · UDAG united-domains GmbHContains “whatsapp”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    whatsapp-recruiting.info
    Match
    A registered domain containing “whatsapp”, one of the names we match for WhatsApp
    Zone file copy
    2026-10-31 · the day of the .info zone file copy it was found in
    Registered
    2026-01-02 · united-domains GmbH
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    89.31.143.90 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-recruiting.info resolved to it 2026-11-05 01:32 UTC
    Addresses
    89.31.143.90 · Germany · AS202108 UDAG united-domains GmbH
    MX
    mx00.udag.de
    mx01.udag.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. whatsappsales.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “whatsapp”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    whatsappsales.site
    Match
    A registered domain containing “whatsapp”, one of the names we match for WhatsApp
    Zone file copy
    2026-10-31 · the day of the .site zone file copy it was found in
    Registered
    2025-12-26 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsappsales.site resolved to it 2026-11-05 01:32 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. usage-whatsapp-chain.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    usage-whatsapp-chain.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · usage-whatsapp-chain.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. vcenter-pytorch-whatsapp.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    vcenter-pytorch-whatsapp.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vcenter-pytorch-whatsapp.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. volume-zabbix-whatsapp.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    volume-zabbix-whatsapp.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · volume-zabbix-whatsapp.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. wave-whatsapp-nomad.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    wave-whatsapp-nomad.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wave-whatsapp-nomad.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. wealth-whatsapp-force.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    wealth-whatsapp-force.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wealth-whatsapp-force.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. webgpu-cookie-whatsapp.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    webgpu-cookie-whatsapp.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · webgpu-cookie-whatsapp.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. whatsapp-adobe.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-adobe.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-adobe.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. whatsapp-ant.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-ant.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-ant.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. whatsapp-api-cli.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-api-cli.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-api-cli.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. whatsapp-apply.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-apply.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-apply.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. whatsapp-bigint.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-bigint.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-bigint.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. whatsapp-binary.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-binary.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-binary.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. whatsapp-catch.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-catch.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-catch.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. whatsapp-cipher-leader.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-cipher-leader.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-cipher-leader.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. whatsapp-circleci.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-circleci.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-circleci.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. whatsapp-clubhouse-javascript.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-clubhouse-javascript.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-clubhouse-javascript.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. whatsapp-cobol-golang.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-cobol-golang.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-cobol-golang.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. whatsapp-command.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-command.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-command.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. whatsapp-commit-yield.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-commit-yield.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-commit-yield.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. whatsapp-consumer.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-consumer.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-consumer.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. whatsapp-context.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-context.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-context.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. whatsapp-cookie-voter.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-cookie-voter.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-cookie-voter.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. whatsapp-courage-router.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-courage-router.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-courage-router.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. whatsapp-crypto-provider.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-crypto-provider.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-crypto-provider.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. whatsapp-debugger-cap.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-debugger-cap.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-debugger-cap.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. whatsapp-decimal-sdk.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-decimal-sdk.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-decimal-sdk.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. whatsapp-design-gateway.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-design-gateway.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-design-gateway.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. whatsapp-dimension-ant.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-dimension-ant.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-dimension-ant.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. whatsapp-dirty-rocket.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-dirty-rocket.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-dirty-rocket.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. whatsapp-dry.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-dry.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-dry.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. whatsapp-duty-channel.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-duty-channel.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-duty-channel.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. whatsapp-electron-this.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-electron-this.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-electron-this.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. whatsapp-erlang-proof.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-erlang-proof.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-erlang-proof.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. whatsapp-esxi-sentry.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-esxi-sentry.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-esxi-sentry.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. whatsapp-extends-quora.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-extends-quora.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-extends-quora.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. whatsapp-false-prometheus.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-false-prometheus.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-false-prometheus.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. whatsapp-fast-algorithm.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-fast-algorithm.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-fast-algorithm.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. whatsapp-filter-laptop.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-filter-laptop.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-filter-laptop.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. whatsapp-fortran-sign.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-fortran-sign.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-fortran-sign.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. whatsapp-function.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-function.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-function.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. whatsapp-github-scope.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-github-scope.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-github-scope.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. whatsapp-governance-crypto.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-governance-crypto.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-governance-crypto.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. whatsapp-graphql.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-graphql.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-graphql.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. whatsapp-grpc-graphic.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-grpc-graphic.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-grpc-graphic.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. whatsapp-headset.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-headset.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-headset.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. whatsapp-home-socket.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-home-socket.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-home-socket.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. whatsapp-how-birth.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-how-birth.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-how-birth.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. whatsapp-improve-clickup.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-improve-clickup.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-improve-clickup.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. whatsapp-instance-script.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-instance-script.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-instance-script.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. whatsapp-java-grant.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-java-grant.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-java-grant.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. whatsapp-joy-glassfish.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-joy-glassfish.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-joy-glassfish.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. whatsapp-json-weblogic.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-json-weblogic.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-json-weblogic.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. whatsapp-kibana-dynatrace.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-kibana-dynatrace.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-kibana-dynatrace.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. whatsapp-layout-trello.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-layout-trello.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-layout-trello.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. whatsapp-left-router.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-left-router.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-left-router.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. whatsapp-life-low.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-life-low.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-life-low.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. whatsapp-linear-widget.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-linear-widget.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-linear-widget.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. whatsapp-linux-splunk.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-linux-splunk.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-linux-splunk.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. whatsapp-market.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-market.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-market.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. whatsapp-matlab.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-matlab.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-matlab.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. whatsapp-microchip-consensus.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-microchip-consensus.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-microchip-consensus.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. whatsapp-mobile-graphic.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-mobile-graphic.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-mobile-graphic.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. whatsapp-mount-weakness.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-mount-weakness.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-mount-weakness.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. whatsapp-namespace.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-namespace.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-namespace.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. whatsapp-nest-method.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-nest-method.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-nest-method.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. whatsapp-offset-rails.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-offset-rails.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-offset-rails.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. whatsapp-online-planet.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-online-planet.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-online-planet.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. whatsapp-opencl-these.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-opencl-these.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-opencl-these.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. whatsapp-organ.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-organ.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-organ.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. whatsapp-partition-eiffel.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-partition-eiffel.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-partition-eiffel.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. whatsapp-perl-verilog.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-perl-verilog.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-perl-verilog.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. whatsapp-plotly.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-plotly.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-plotly.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. whatsapp-powerbi-honor.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-powerbi-honor.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-powerbi-honor.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. whatsapp-powerbi.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-powerbi.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-powerbi.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. whatsapp-prototype.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-prototype.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-prototype.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. whatsapp-python-pads.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-python-pads.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-python-pads.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. whatsapp-python.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-python.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-python.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. whatsapp-quarkus.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-quarkus.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-quarkus.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. whatsapp-queue.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-queue.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-queue.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. whatsapp-rate.xyz JP · AS7506 · GMO Internet, Inc.Contains “whatsapp”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-rate.xyz
    Match
    A domain containing “whatsapp”, one of the names we match for WhatsApp
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-rate.xyz resolved to it 2026-11-05 01:32 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC

More brands in Messaging

All brands →