Criticalscore 71 · flagged Monday, September 28, 2026

atlas-whatsapp.sbs

Appeared in the .sbs zone on Monday, September 28, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: whatsapp
+30
TLD with a high abuse rate
matched: sbs
+8
brand name and brand-styled page
matched: whatsapp
+15
form on a brand-styled page
matched: has_form
+18
Registrar
—
Nameserver provider
Nameservers
cosmos.dns-parking.com, nova.dns-parking.com
First-day state
active website
HTTP status
200
Page title
Login - WHATSAPP NUMBER MANAGER
Has a form
yes
Brand echoed
whatsapp

Model opinions

Second opinionlooks like abusetarget: WhatsAppconfidence 55%· claude-opus-5-5

The page is not a fake WhatsApp login. It is a self-hosted Indonesian 'WhatsApp Number Manager' admin panel with its own 'Anime HQ' branding and default demo credentials (admin/admin123), so it does not attempt to capture WhatsApp credentials. Still, the throwaway .sbs name is built on the WhatsApp brand, and bulk-number management panels like this commonly support spam or gambling customer-service operations, so it fits brand-squat or abuse infrastructure rather than benign.

First passlooks like phishingtarget: WhatsAppconfidence 95%· claude-haiku-4-5

Domain name impersonates WhatsApp ('atlas-whatsapp'), page title claims 'WHATSAPP NUMBER MANAGER', and a login form with username/password fields is presented to capture credentials. The presence of demo credentials and Indonesian language ('Ingat Saya', 'MASUK KE DASHBOARD') suggests this is a functional phishing kit designed to harvest WhatsApp account access.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

Same data as JSON: /api/zone/domain/atlas-whatsapp.sbs. This page is not indexed by search engines and does not link to the site it describes.