GrizzlyGrizzly
Recent phishing
Phishing

Impersonating WhatsApp

Intent: Credential collection

  • Domain is not operated by WhatsApp
  • DNS nameservers do not match WhatsApp's known infrastructure
  • TLS certificate has no organization information
  • SPF record does not reference WhatsApp's infrastructure

WhatsApp-branded sign-in page requesting email address and password

Scanned 56 days ago · Aug 4, 2026, 18:32 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: whatsapp.stephenpaulraj.com — Grizzly