# linkedin-wanli.com blank capture of Wanli account tutorial page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/linkedin-wanli.com/ Machine-readable companion: https://phishdestroy.io/domain/linkedin-wanli.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-30 15:04:37 UTC - Last availability or vendor check: 2026-10-30 15:11:55 UTC - Stored record updated: 2026-10-30 15:37:21 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): LinkedIn ## Stored infrastructure - Observed IP address: 72.244.91.252 - Registrar in stored WHOIS data: Dominet (HK) Limited - Last stored HTTP status: 200 ## Evidence links - URLScan report: https://urlscan.io/result/01a18d5c-3b04-7673-b8a5-a5587154adb6/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/linkedin-wanli.com - Certificate Transparency search: https://crt.sh/?q=%25.linkedin-wanli.com - Web Archive lookup: https://web.archive.org/web/*/https://linkedin-wanli.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records that linkedin-wanli.com returned a blank capture despite metadata describing Wanli account tutorials. The capture of linkedin-wanli.com is blank: the screenshot shows an empty light-colored area with no visible text, logo, form or control, so no interaction can be observed. This conflicts with the page's own HTML metadata, which carries a Chinese title about Wanli account application methods and tutorials and a meta description promoting Wanli member registration and game access. Because the rendered page is empty, the metadata is the only recorded statement of the page's intended purpose, and it cannot be confirmed from the visible capture. The stored VirusTotal domain result reports 0 detections out of 92 engines. Package revision: 669fbb95d51ff3602aad995d1c7317d106c2590e7b1e272e31b3d7112cb0b0f6 Text generated (not scan time): 2026-10-30 16:36:58 Reviewed evidence snapshot: {"domain":"linkedin-wanli.com","screenshot_available":true,"page_title":"万利官网_账户申请方法与教程-口碑品牌","original_meta_description":"万利官网科技游戏公司以“万利会员开户”与“会员注册”为服务重点,建设万利游戏口碑与安全防护。会员注册流程强调安全、规范、便捷,帮助用户了解万利游戏、万利官网、万利入口与万利游戏官网。平台提供攻略参考,强化问题响应与极速维护,坚持公平公正。万利游戏以安全、绿色、诚信为核心,持续提升用户体验与品牌信任。","initial_ai_description":"The website impersonates LinkedIn by using 'linkedin' in the domain name, while the content is entirely in Chinese and discusses 'Wanli Account' application tutorials, which is unrelated to LinkedIn. This indicates brand impersonation.","capture_content_status":"blank","metadata_observed_on":"2026-10-30","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":0,"engines":92,"malicious":0,"suspicious":0,"retrieved_date":"2026-10-30","analysis_date":"2026-10-29","scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-30T15:06:50Z","final_host":"linkedin-wanli.com","captured_on":"2026-10-30"},"virustotal_public_summary":"The stored VirusTotal domain result reports 0 detections out of 92 engines.","page_paragraph_target_characters":573} Source facts (timestamps as stored): {"record_id":1713649,"first_recorded_at":"2026-10-30 16:04:37","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":0,"denominator":92,"malicious":0,"suspicious":0,"vendors":null,"observed_at":"2026-10-29T20:38:12Z","checked_at":"2026-10-30 16:36:49","fetched_at":"2026-10-30T15:36:49Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":0,"denominator":92,"malicious":null,"suspicious":null,"vendors":[],"observed_at":"2026-10-29 20:38:12","checked_at":"2026-10-30 16:36:49","fetched_at":"2026-10-30 15:36:50","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-10-30 16:36:51"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-30 16:30:06"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-10-30 16:11:55"}} ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a18d5c-3b04-7673-b8a5-a5587154adb6.png Captured: 2026-10-30 15:11:55 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a18663-0f52-70d8-acfe-45c3026f42c9.png Captured: 2026-10-30 15:04:37 UTC Source report: https://urlscan.io/result/01a18d5c-3b04-7673-b8a5-a5587154adb6/ - URLScan · 2026-10-30: https://screenshots.phishdestroy.io/us/01a18d57-88e8-758d-8e7f-7ec7ab5ccb26.png Captured: 2026-10-30 15:04:54 UTC Source report: https://urlscan.io/result/01a18d57-88e8-758d-8e7f-7ec7ab5ccb26/ SHA-256: 72f76f6d38e0ad23f530d5f1420b886c34a3a68130e65534171bd27105ac7c3d - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/92b00875-af00-4dc6-b22c-31b46067853d.png Captured: 2026-10-30 15:06:50 UTC Source report: https://radar.cloudflare.com/scan/92b00875-af00-4dc6-b22c-31b46067853d SHA-256: 89de5b28c5882c39b3f3a9e58b2c9db3fa848a4cc8943e8564e4cd323e476120 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-30T15:13:15Z", "uuid": "01a18d5c-3b04-7673-b8a5-a5587154adb6", "scanned_at": "2026-10-30T15:10:01Z", "final_url": "https://linkedin-wanli.com/", "status": 200, "ip": "72.244.91.252", "domains": [ "hga88.xyz", "a6.zkf88.top", "www.google-analytics.com", "bat.bing.com", "www.googletagmanager.com", "server.ok3688.top", "cdn.chatway.app", "js.passport.qihucdn.com", "lv.sogou.com", "zz.bdstatic.com" ], "ips": [ "154.12.90.192", "2001:4860:4802:36::178", "2620:1ec:33::10", "154.12.90.187", "2a00:1450:4001:c25::61", "72.244.91.252" ], "asns": [ "401696", "15169", "8075", "393437" ], "countries": [ "HK", "US", "DE" ], "link_domains": [ "m806.mos011.com", "m645.mos011.com", "m407.mos077.com", "m172.mos077.com", "m061.mos077.com", "mos011.com", "www.mos011.com", "mos022.com", "www.mos022.com", "mos033.com", "www.mos033.com", "mos055.com", "www.mos055.com", "mos066.com", "mos077.com", "www.mos077.com", "hga027.com", "www.hga027.com", "hga030.com", "www.hga030.com", "hga035.com", "www.hga035.com", "hga038.com", "www.hga038.com", "hga039.com", "www.hga039.com", "hga050.com", "www.hga050.com", "134.159.80.63", "134.159.80.64" ], "doc_hash": "a4a2307ae36692647d568246565a34d690c3308703578b72fc0451495ebab7c7", "script_hashes": [ "ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629" ], "globals": [ "gtag", "dataLayer", "UET", "UET_init", "UET_push", "google_tag_data", "google_tag_manager", "gaGlobal" ], "cookies": [ "PHPSESSID", "_ga_7C9ACFBCA4", "_ga" ], "tls": { "san": [ "t1.dfredian.com", "baidu-hga027.com", "bing-hga030.com", "sogou-hga035.com", "weixin-hga038.com", "zhihu-hga039.com", "sohu-hga050.com", "doubao-mos011.com", "douyin-mos022.com", "sina-mos033.com" ], "cipher": "AES_256_GCM", "issuer": "LiteSSL RSA CA 2025", "subject": "t1.dfredian.com", "protocol": "TLS 1.3", "valid_to": "2027-01-27T04:59:59Z", "valid_from": "2026-10-29T05:00:00Z" }, "domain_age_days": 1, "apex_age_days": 1, "tls_age_days": 1, "tls_valid_days": 89, "requests": 25, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 100, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx", "content-type": "text/html; charset=UTF-8", "strict-transport-security": "max-age=31536000" } }, "cf": { "v": 1, "fetched_at": "2026-10-30T15:07:31Z", "uuid": "92b00875-af00-4dc6-b22c-31b46067853d", "scanned_at": "2026-10-30T15:06:50Z", "final_url": "https://linkedin-wanli.com/", "status": 200, "history": [ { "url": "https://linkedin-wanli.com/", "status": 200 } ], "dom_hash": "5bed2086ed7162a5a77123600e76ad4d1f297fbb89ba2ffd74bef834a07eca6b", "doc_hash": "a4a2307ae36692647d568246565a34d690c3308703578b72fc0451495ebab7c7", "domain_risks": [ "Newly Seen Domains", "Security Risks", "New Domains" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "linkedin-wanli.com", "type": "A", "value": "72.244.91.252" } ], "dnssec_valid": false, "ip": "127.0.1.21", "whois": { "registrar": "Dominet (HK) Limited", "created": "2026-10-29T05:39:06Z", "updated": "2026-10-29T05:39:06Z", "expires": "2027-10-29T05:39:06Z", "nameservers": [ "ns1.domainnamedns.com", "ns2.domainnamedns.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-30T15:36:49Z", "analysis_at": "2026-10-29T20:38:12Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }, "reputation": 0, "registrar": "Dominet (HK) Limited", "created": "2026-10-29T05:39:06Z", "expires": "2027-10-29T05:39:06Z", "updated": "2026-10-29T05:39:06Z", "first_seen": "2026-10-29T06:33:46Z", "dns": [ { "ttl": 3600, "type": "NS", "value": "ns3.domainnamedns.com" }, { "ttl": 3600, "type": "NS", "value": "ns4.domainnamedns.com" }, { "ttl": 3600, "type": "NS", "value": "ns2.domainnamedns.com" }, { "ttl": 600, "type": "A", "value": "72.244.91.252" }, { "ttl": 3600, "type": "SOA", "rname": "support.namens.net", "value": "ns1.domainnamedns.com" }, { "ttl": 3600, "type": "NS", "value": "ns1.domainnamedns.com" } ], "dns_at": "2026-10-29T20:43:19Z", "jarm": "3fd3fd0003fd3fd00042d42d0000002059a3b916699461c5923779b77cf06b", "cert": { "san": [ "t1.dfredian.com", "baidu-hga027.com", "bing-hga030.com", "sogou-hga035.com", "weixin-hga038.com", "zhihu-hga039.com", "sohu-hga050.com", "doubao-mos011.com", "douyin-mos022.com", "sina-mos033.com" ], "issuer": "TrustAsia Technologies, Inc. / LiteSSL RSA CA 2025", "serial": "78999f3b5e437c6dc2d4c6de2ff97ff52ed842d1", "sha256": "19c7bd4a4e6402417ad35ef3560e896bb03a2668797d05ee2cb384a6ea7e41d3", "subject": "t1.dfredian.com", "valid_to": "2027-01-27T04:59:59Z", "valid_from": "2026-10-29T05:00:00Z" }, "whois": { "registrar": "Dominet (HK) Limited", "registrar_iana_id": "3775", "registrar_url": "http://www.alibabacloud.com", "created": "2026-10-29T05:39:06Z", "updated": "2026-10-29T05:39:06Z", "expires": "2027-10-29T05:39:06Z", "status": [ "ok" ], "nameservers": [ "ns1.domainnamedns.com", "ns2.domainnamedns.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "active" ], "events": { "expiration": "2027-10-29T05:39:06Z", "registration": "2026-10-29T05:39:06Z", "registrar expiration": "2027-10-29T05:39:06Z", "last update of RDAP database": "2026-10-29T05:39:07Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-30T15:07:54Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "linkedin-wanli.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-30T15:05:22Z", "first": "2026-10-30T15:05:22Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 6845 }, "social_tags": { "title": "万利官网_账户申请方法与教程-口碑品牌", "keywords": "万利账户申请教程官网,万利账户申请,万利开户教程,万利官网申请,万利账户注册,万利申请指南,万利账户教程,企业官网,官网", "description": "万利官网科技游戏公司以“万利会员开户”与“会员注册”为服务重点,建设万利游戏口碑与安全防护。会员注册流程强调安全、规范、便捷,帮助用户了解万利游戏、万利官网、万利入口与万利游戏官网。平台提供攻略参考,强化问题响应与极速维护,坚持公平公正。万利游戏以安全、绿色、诚信为核心,持续提升用户体验与品牌信任。" }, "mixed_content": { "no_sri": [ "https://www.googletagmanager.com/gtag/js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 509, "tls": 322, "wait": 628, "connect": 415, "download": 0 }, "response_ms": 1874 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 26152, "co2_grams": 0.001, "cleaner_than": 51 }, "dns_server": { "ns": [ { "ip": "54.151.142.119", "host": "ns3.domainnamedns.com" }, { "ip": "216.106.185.75", "host": "ns1.domainnamedns.com" }, { "ip": "38.114.114.183", "host": "ns2.domainnamedns.com" }, { "ip": "67.220.72.51", "host": "ns4.domainnamedns.com" } ], "zone": "linkedin-wanli.com" }, "cookies": { "cookies": [ { "name": "PHPSESSID", "session": true }, { "name": "_ga_7C9ACFBCA4" }, { "name": "_ga" } ] }, "location": { "ip": "72.244.91.252", "asn": "393437", "org": "Klayer LLC", "city": "Los Angeles", "country": "US" }, "ssl": { "issuer": "TrustAsia Technologies, Inc. / LiteSSL RSA CA 2025", "subject": "t1.dfredian.com" }, "dns": { "A": [ "72.244.91.252" ], "NS": [ "ns1.domainnamedns.com", "ns4.domainnamedns.com", "ns2.domainnamedns.com", "ns3.domainnamedns.com" ], "SOA": "{\"nsname\": \"ns1.domainnamedns.com\", \"hostmaster\": \"support.namens.net\", \"serial\": 1793252710, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 180}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "72.244.91.252", "family": 4 }, "redirects": { "chain": [ "https://linkedin-wanli.com" ] }, "subdomains": { "count": 1, "subdomains": [ "www.linkedin-wanli.com" ] }, "linked_pages": { "internal_count": 3 }, "whois": { "registrar": "Dominet (HK) Limited", "created": "2026-10-29T05:39:06Z", "updated": "2026-10-29T05:39:06Z", "expires": "2027-10-29T05:39:06Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "ns1.domainnamedns.com", "ns2.domainnamedns.com" ] }, "headers": { "headers": { "server": "nginx", "content-type": "text/html; charset=UTF-8", "strict-transport-security": "max-age=31536000" } } } } ```