at-web-whatsapp[.]hl[.]cn
“WhatsApp 网页版”
at-web-whatsapp.hl.cn — 콘텐츠를 사용할 수 없음. 브랜드 사칭: WhatsApp; 사기 유형: Social Media Phishing. 증거 요약: VirusTotal 26/95 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, Cluster25); URLQuery 10 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 95/100. 등록기관: Alibaba Cloud (China).
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
This report analyzes a domain identified as a social media scam threat. The site's page title, "WhatsApp 网页版," and the scam type indicate it was designed to impersonate the official WhatsApp Web login interface. The threat posed is credential theft, as the fraudulent site would capture user login credentials for the WhatsApp messaging platform.
Technical evidence confirms the malicious nature of this domain. VirusTotal flagged the site with 26 detections out of 95 security vendors, with specific alerts from ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, and Cluster25. The domain is registered with Alibaba Cloud in China and was created on 2026-02-22. It resolves to IP address 168.76.144.220, hosted in Hong Kong on AS137951 (ASLINE LIMITED). The site uses a Let's Encrypt SSL certificate (R12) and is listed on one blocklist. Its nameservers are ns1.kenpains.com and ns2.kenpains.com.
The domain is currently offline and down. Based on the high detection rate and clear impersonation of a major brand, the risk level is assessed as high for any users who may have attempted to access it while active. The domain represents a confirmed credential phishing infrastructure.
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | at-web-whatsapp.hl.cn |
malicious | Sinkholed |
| DNS4EU | at-web-whatsapp.hl.cn |
malicious | Sinkholed |
| Quad9 DNS | at-web-whatsapp.hl.cn |
malicious | Sinkholed |
| OpenDNS | at-web-whatsapp.hl.cn |
phishing | Phishing Block |
| Hagezi Threat Feed | at-web-whatsapp.hl.cn |
malicious | Sinkholed |
| DNS4EU | www.at-web-whatsapp.hl.cn |
malicious | Sinkholed |
| Hagezi Threat Feed | www.at-web-whatsapp.hl.cn |
malicious | Sinkholed |
| Cloudflare DNS | www.at-web-whatsapp.hl.cn |
malicious | Sinkholed |
| OpenDNS | www.at-web-whatsapp.hl.cn |
phishing | Phishing Block |
| Quad9 DNS | www.at-web-whatsapp.hl.cn |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
VirusTotal 분석
보관된 증거
증거 및 외부 보고서
PD-20260222-7D6D8C Recipient: vbd016@sina.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.