e-b-whatsapp[.]com[.]cn
“WhatsApp 网页版”
e-b-whatsapp.com.cn — Non verificato. Tipo di truffa: Social Media Phishing. Riepilogo delle prove: VirusTotal 16/91 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, ESET); URLQuery 4 alerts; CF Radar malicious; PhishDestroy score 95/100. Registrar: 厦门三五互联信息有限公司.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
The domain e-b-whatsapp.com.cn is classified as a generic phishing infrastructure impersonating WhatsApp Web services, currently associated with credential harvesting attempts targeting messaging platform users. Although the domain is now offline, it previously hosted a fake login interface mimicking WhatsApp 网页版 to deceive end users into submitting sensitive authentication data.
Technical analysis shows the domain was created on February 21, 2026 and registered through 厦门三五互联信息有限公司. It resolved to IP 154.221.8.150 hosted in Hong Kong under AS137951 (ASLINE LIMITED). The domain has no SSL certificate deployed, increasing interception risk during active operation. It appears on 1 security blocklist and is flagged by 23 out of 95 VirusTotal security vendors, indicating a strong multi-engine consensus of malicious behavior. The page title recorded as WhatsApp 网页版 confirms explicit brand impersonation designed to increase user trust and engagement.
At present, the domain is taken offline, reducing immediate exposure risk. However, historical infrastructure and detection signals indicate it was actively used for phishing campaigns prior to shutdown. The absence of SSL, combined with high VirusTotal detection volume and brand impersonation tactics, suggests a high-confidence malicious classification. Recommended actions include maintaining DNS-level blocking, preserving forensic indicators for threat intelligence correlation, and monitoring for infrastructure reuse under similar naming patterns. Users previously exposed to the domain should be advised to change credentials and enable multi-factor authentication to mitigate potential compromise.
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | e-b-whatsapp.com.cn |
phishing | Phishing Block |
| Cloudflare DNS | e-b-whatsapp.com.cn |
malicious | Sinkholed |
| Hagezi Threat Feed | e-b-whatsapp.com.cn |
malicious | Sinkholed |
| DNS4EU | e-b-whatsapp.com.cn |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 3 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisi di VirusTotal
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo