co-web-whatsapp[.]hl[.]cn
“WhatsApp Web - 安全可靠的通讯平台”
co-web-whatsapp.hl.cn — 内容不可用. 品牌冒充:["whatsapp"]; 诈骗类型:Social Media Phishing. 证据摘要: VirusTotal 22/93 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, Cluster25); URLQuery 4 alerts; CF Radar malicious; PhishDestroy score 95/100. 注册商: Alibaba Cloud (China).
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, co-web-whatsapp.hl.cn, is confirmed as a WhatsApp Web credential phishing site designed to harvest user login credentials. The page mimics the legitimate WhatsApp Web interface, displaying the title 'WhatsApp Web - 安全可靠的通讯平台' to deceive users into entering sensitive information such as phone numbers, passwords, or two-factor authentication codes. The site targets individuals seeking quick access to messaging services, exploiting trust in the WhatsApp brand to facilitate unauthorized account access or identity theft.
Analysis indicates the domain was registered on February 23, 2026, through Alibaba Cloud (China) and resolves to the IP address 168.76.144.212, hosted under AS137951 (ASLINE LIMITED) in Hong Kong. VirusTotal detections show 22 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist, and its SSL certificate, issued by Let's Encrypt (R12), does not mitigate its fraudulent intent. Infrastructure review confirms the domain is currently offline, though residual risk remains for users who may have interacted with it prior to takedown.
Users who visited co-web-whatsapp.hl.cn should immediately revoke any entered credentials, particularly WhatsApp login details. Reset passwords for associated accounts and enable multi-factor authentication where available. Monitor accounts for unauthorized activity, such as unexpected messages or login attempts. If financial or personal data was submitted, consider reporting the incident to relevant authorities and credit monitoring services. Organizations should update security policies to block the domain and its resolving IP (168.76.144.212) across network defenses to prevent future exposure.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | co-web-whatsapp.hl.cn |
malicious | Sinkholed |
| OpenDNS | co-web-whatsapp.hl.cn |
phishing | Phishing Block |
| DNS4EU | co-web-whatsapp.hl.cn |
malicious | Sinkholed |
| Quad9 DNS | co-web-whatsapp.hl.cn |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of co-web-whatsapp.hl.cn · checked Mar 1, 2026
证据与外部报告
PD-20260223-45B876 Recipient: vbd016@sina.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。