wlntasaqp-kf[.]com
“WhatsApp”
wlntasaqp-kf.com — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Argent; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 16/95 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, CyRadar); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 95/100. Registrar: Dominet (HK).
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of wlntasaqp-kf.com indicates a confirmed brand impersonation scam targeting WhatsApp users, with elevated risk due to infrastructure and detection patterns. The domain, registered on October 20, 2025, through Dominet (HK) Limited, resolves to IP 43.156.253.37, hosted in Singapore under AS132203 (Tencent Building). No SSL certificate was detected, increasing susceptibility to interception or tampering. The page title explicitly displays 'WhatsApp,' aligning with the reported scam type of brand impersonation, though the exact content or attack vector remains unverified due to the site's offline status as of July 23, 2026. Security vendor detections are notable: 16 of 95 engines on VirusTotal flagged the domain, while AlienVault OTX lists it in two threat intelligence pulses, suggesting prior malicious activity.
The domain appears on one security blocklist and is blocked by PhishDestroy. Nameservers (ns7.alidns.com, ns8.alidns.com) are associated with Alibaba Cloud, a common hosting choice for both legitimate and malicious infrastructure. Gridinsoft assigns a trust score of 0/100, reinforcing its high-risk classification. Defenders should treat this domain as compromised.
While the site is offline, historical resolution to 43.156.253.37 and its registration details provide actionable indicators for network-level blocking. The combination of brand impersonation, lack of SSL, and detection by multiple vendors warrants immediate inclusion in deny lists. Further investigation into the hosting provider (Tencent/AS132203) may reveal additional linked infrastructure, though no direct evidence of a broader campaign is currently available. Monitor for re-activation or domain reuse under altered nameservers or IPs.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive