Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is lnnv22@sina.com.
The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
drk-whatsapp[.]hk[.]cn
“WhatsApp Web”
drk-whatsapp.hk.cn — 확인되지 않음. 브랜드 사칭: WhatsApp; 사기 유형: Credential Phishing. 증거 요약: VirusTotal 25/91 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, Chong Lua Dao); URLQuery 3 alerts; URLScan malicious verdict; Google Safe Browsing flagged; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 98/100. 등록기관: 万商云集(成都)科技股份有限公司.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
This domain, drk-whatsapp.hk.cn, is identified as a high-risk credential theft operation specifically impersonating WhatsApp Web. Analysis confirms the domain was actively harvesting user login credentials by mimicking the legitimate WhatsApp Web interface. As of the latest assessment, the domain has been taken offline, though residual risks may persist for users who previously interacted with it. Infrastructure analysis reveals the domain was registered through 万商云集(成都)科技股份有限公司 on June 02, 2026, an anomalous creation date suggesting potential use of falsified registration details. The domain resolved to the IP address 52.184.98.194, hosted under AS396982 (Google LLC) in Hong Kong. Security vendor assessments flagged the domain as malicious, with 25 of 95 VirusTotal vendors detecting it as a threat. Google Safe Browsing classified it as phishing, and it appeared on at least one security blocklist. The SSL certificate was issued by Let's Encrypt (YR1), a common tactic to lend superficial legitimacy to fraudulent sites. Current status indicates the domain is offline, reducing immediate exposure risks. However, organizations and users should remain vigilant for similar impersonation attempts targeting messaging platforms. Recommended actions include blocking the domain and its associated IP address (52.184.98.194) at the network level, conducting retrospective log analysis to identify prior interactions, and educating users on recognizing credential theft tactics. Monitoring for newly registered domains with similar naming patterns (e.g., WhatsApp-themed subdomains) is advised to preempt future threats. Users who accessed the domain should reset credentials for any accounts potentially exposed during the interaction.
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | drk-whatsapp.hk.cn |
malicious | Sinkholed |
| Cloudflare DNS | drk-whatsapp.hk.cn |
malicious | Sinkholed |
| OpenDNS | drk-whatsapp.hk.cn |
phishing | Phishing Block |
위협 대응 Pipeline
공개 차단 목록 상태
사용 기술 · 5 identified
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com 신뢰도 100%Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 신뢰도 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 신뢰도 100%jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 신뢰도 100%VirusTotal 분석
증거 및 외부 보고서
PD-20260602-61F6B3 Recipient: lnnv22@sina.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.