whats-znl[.]vip
whats-znl.vip — Konten tidak tersedia. Peniruan identitas merek: WhatsApp; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 17/95 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, CyRadar); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 95/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain whats-znl.vip is identified as a brand impersonation threat, specifically targeting the brand WhatsApp. The domain is currently offline and has been taken down.
Infrastructure analysis reveals that the domain is registered through Gname.com Pte. Ltd. and resolves to the IP address 20.2.208.17, which is located in Hong Kong (AS8075 Microsoft Corporation). The domain was created on October 08, 2025. It does not have an SSL certificate, which is a common indicator of a lack of security and trustworthiness. The domain appears on two security blocklists: PhishDestroy and PhishingDB. Additionally, it has been flagged by 17 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion among security professionals.
Given the current status of the domain being offline, it is recommended that users refrain from attempting to access it. Organizations should ensure that their security policies and mechanisms are updated to block this domain to prevent any potential residual risks. Continuous monitoring of similar domain names and IP addresses is advised to detect and mitigate any future brand impersonation attempts targeting WhatsApp.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive