at-web-whatsapp[.]hl[.]cn
“WhatsApp 网页版”
at-web-whatsapp.hl.cn — 内容不可用. 品牌冒充:WhatsApp; 诈骗类型:Social Media Phishing. 证据摘要: VirusTotal 26/95 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, Cluster25); URLQuery 10 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 95/100. 注册商: Alibaba Cloud (China).
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This report analyzes a domain identified as a social media scam threat. The site's page title, "WhatsApp 网页版," and the scam type indicate it was designed to impersonate the official WhatsApp Web login interface. The threat posed is credential theft, as the fraudulent site would capture user login credentials for the WhatsApp messaging platform.
Technical evidence confirms the malicious nature of this domain. VirusTotal flagged the site with 26 detections out of 95 security vendors, with specific alerts from ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, and Cluster25. The domain is registered with Alibaba Cloud in China and was created on 2026-02-22. It resolves to IP address 168.76.144.220, hosted in Hong Kong on AS137951 (ASLINE LIMITED). The site uses a Let's Encrypt SSL certificate (R12) and is listed on one blocklist. Its nameservers are ns1.kenpains.com and ns2.kenpains.com.
The domain is currently offline and down. Based on the high detection rate and clear impersonation of a major brand, the risk level is assessed as high for any users who may have attempted to access it while active. The domain represents a confirmed credential phishing infrastructure.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | at-web-whatsapp.hl.cn |
malicious | Sinkholed |
| DNS4EU | at-web-whatsapp.hl.cn |
malicious | Sinkholed |
| Quad9 DNS | at-web-whatsapp.hl.cn |
malicious | Sinkholed |
| OpenDNS | at-web-whatsapp.hl.cn |
phishing | Phishing Block |
| Hagezi Threat Feed | at-web-whatsapp.hl.cn |
malicious | Sinkholed |
| DNS4EU | www.at-web-whatsapp.hl.cn |
malicious | Sinkholed |
| Hagezi Threat Feed | www.at-web-whatsapp.hl.cn |
malicious | Sinkholed |
| Cloudflare DNS | www.at-web-whatsapp.hl.cn |
malicious | Sinkholed |
| OpenDNS | www.at-web-whatsapp.hl.cn |
phishing | Phishing Block |
| Quad9 DNS | www.at-web-whatsapp.hl.cn |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
存档证据
证据与外部报告
PD-20260222-7D6D8C Recipient: vbd016@sina.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。