ik-mo-whatsapp[.]com[.]cn
“WhatsApp | 安全可靠的免费私密消息和通话”
ik-mo-whatsapp.com.cn — 콘텐츠를 사용할 수 없음. 브랜드 사칭: WhatsApp; 사기 유형: Social Media Phishing. 증거 요약: VirusTotal 25/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 5 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 95/100. 등록기관: 成都垦派科技有限公司.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
This report analyzes the domain ik-mo-whatsapp.com.cn, which was identified as a social media scam. The page title, "WhatsApp | 安全可靠的免费私密消息和通话" (translated as "WhatsApp | Safe and reliable free private messages and calls"), indicates the site impersonates the legitimate WhatsApp messaging service. The threat posed is a phishing or credential harvesting campaign targeting users seeking the WhatsApp platform, potentially leading to account compromise or data theft.
Technical evidence shows the domain was flagged by 25 out of 95 VirusTotal vendors, including ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, and CyRadar. It is registered with 成都垦派科技有限公司 (Chengdu Kenpai Technology Co., Ltd.) and was created on 2026-02-25. The site resolves to IP address 43.226.17.32, located in South Korea (KR), under AS64050 BGP Network Limited. The SSL certificate is issued by Let's Encrypt (R12), and the nameservers are ns1.kenpains.com and ns2.kenpains.com. The domain has one blocklist entry.
As of the latest check, the domain is DOWN/OFFLINE. The GridinSoft trust rating is 0 out of 100, indicating a high-risk status. Given the impersonation of a major brand, multiple antivirus detections, and the offline state, the risk level is assessed as high, though the current unavailability limits immediate active threat.
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | ik-mo-whatsapp.com.cn |
malicious | Sinkholed |
| Hagezi Threat Feed | ik-mo-whatsapp.com.cn |
malicious | Sinkholed |
| OpenDNS | ik-mo-whatsapp.com.cn |
phishing | Phishing Block |
| Cloudflare DNS | ik-mo-whatsapp.com.cn |
malicious | Sinkholed |
| DNS4EU | ik-mo-whatsapp.com.cn |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
사용 기술 · 2 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
VirusTotal 분석
보관된 증거
사이트 성능 분석
Google PageSpeed Insights — mobile performance audit of ik-mo-whatsapp.com.cn · checked Mar 1, 2026
증거 및 외부 보고서
PD-20260225-58F3B2 Recipient: sztarkzvio@gmail.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.