Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is ali28077778@outlook.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
jb-whatap[.]hk[.]cn
“WhatsApp 网页版:免安装快速入口|稳定掃碼登入,跨境商務聊天解決卡頓問題”
jb-whatap.hk.cn — 확인되지 않음. 사기 유형: Credential Phishing. 증거 요약: VirusTotal 18/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, Cluster25, CRDF); URLQuery 3 alerts; CF Radar malicious; PhishDestroy score 98/100. 등록기관: 万商云集(成都)科技股份有限公司.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
This domain, jb-whatap.hk.cn, is actively flagged as a high-risk credential phishing site targeting WhatsApp users. Analysis indicates the page title explicitly references WhatsApp Web functionality, presenting itself as a "快速入口" (quick entry) for browser-based access with claims of resolving cross-border chat latency issues. The domain was registered on June 24, 2026, through 万商云集(成都)科技股份有限公司 and currently resolves to 65.75.210.122, hosted on Cloudflare's infrastructure (AS13335). SSL certification is provided by Google Trust Services (WE1), and the site returns an HTTP 200 status, suggesting operational availability. Infrastructure analysis reveals Cloudflare nameservers (annabel.ns.cloudflare.com, igor.ns.cloudflare.com) and the use of Cloudflare Browser Insights alongside HTTP/3. The domain appears on one security blocklist and is referenced in a single AlienVault OTX threat intelligence pulse. VirusTotal reports 13 detections from 91 security vendors, confirming its malicious classification. The scam type is explicitly identified as credential phishing, with no evidence of additional payload delivery or secondary exploitation stages at this time. Defenders should prioritize blocking this domain at DNS and proxy levels, particularly in regions where WhatsApp is widely used for business communication. The combination of a recent registration, Cloudflare hosting, and a targeted WhatsApp theme suggests an opportunistic campaign designed to exploit users seeking unofficial or performance-enhanced access methods. No further brand impersonation or technical indicators (e.g., phishing kit fingerprints) are currently available for deeper attribution.
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | jb-whatap.hk.cn |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | jb-whatap.hk.cn |
malicious | Sinkholed |
| DNS4EU | jb-whatap.hk.cn |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
사용 기술 · 3 identified
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 신뢰도 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 신뢰도 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 신뢰도 100%VirusTotal 분석
증거 및 외부 보고서
PD-20260625-35D427 Recipient: ali28077778@outlook.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.