helloworld-apps[.]com[.]cn

PhishDestroy first observed helloworld-apps.com.cn on Jun 24, 2026. Stored content metadata identifies Kraken as the apparent target. The captured page title is “Kraken交易平台-安心购买加密货币”. Stored page analysis classifies the content as brand impersonation. Current evidence score: 78/100 (critical).

Positive findings are stored from 4 sources: VirusTotal, MetaMask, SEAL, and Spamhaus DBL. VirusTotal recorded 2 detections among 91 engines: Fortinet, Gridinsoft on Jul 18, 2026 at 18:45 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 8, 2026 at 02:20 UTC. Spamhaus DBL: DBL_PHISH on Jul 24, 2026 at 18:30 UTC. Non-positive and contextual checks: URLQuery recorded no positive detection on Jun 24, 2026 at 10:57 UTC. Google Safe Browsing returned no flag on Jun 24, 2026 at 11:00 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:32 UTC.

The collector marked the hostname reachable on Aug 7, 2026 at 22:14 UTC, but did not retain the HTTP response code. Registration records for the domain list Dominet (HK)Limited as the registrar and May 6, 2026 as the creation date. At collection time, the hostname resolved to 47.239.173.17 on AS45102 (ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd., CN). The recorded endpoint location is Hong Kong, HK. The stored server header is nginx. DOM analysis on Jun 24, 2026 at 14:20 UTC returned 78/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. TLS metadata lists Let's Encrypt / YR2 as the certificate issuer with validity through Sep 19, 2026; checked Jun 24, 2026 at 13:00 UTC.

The content indicators and 4 positive source findings support the current Kraken-themed brand impersonation classification.