ik-mo-whatsapp[.]com[.]cn
“WhatsApp | 安全可靠的免费私密消息和通话”
ik-mo-whatsapp.com.cn — 内容不可用. 品牌冒充:WhatsApp; 诈骗类型:Social Media Phishing. 证据摘要: VirusTotal 25/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 5 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 95/100. 注册商: 成都垦派科技有限公司.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This report analyzes the domain ik-mo-whatsapp.com.cn, which was identified as a social media scam. The page title, "WhatsApp | 安全可靠的免费私密消息和通话" (translated as "WhatsApp | Safe and reliable free private messages and calls"), indicates the site impersonates the legitimate WhatsApp messaging service. The threat posed is a phishing or credential harvesting campaign targeting users seeking the WhatsApp platform, potentially leading to account compromise or data theft.
Technical evidence shows the domain was flagged by 25 out of 95 VirusTotal vendors, including ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, and CyRadar. It is registered with 成都垦派科技有限公司 (Chengdu Kenpai Technology Co., Ltd.) and was created on 2026-02-25. The site resolves to IP address 43.226.17.32, located in South Korea (KR), under AS64050 BGP Network Limited. The SSL certificate is issued by Let's Encrypt (R12), and the nameservers are ns1.kenpains.com and ns2.kenpains.com. The domain has one blocklist entry.
As of the latest check, the domain is DOWN/OFFLINE. The GridinSoft trust rating is 0 out of 100, indicating a high-risk status. Given the impersonation of a major brand, multiple antivirus detections, and the offline state, the risk level is assessed as high, though the current unavailability limits immediate active threat.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | ik-mo-whatsapp.com.cn |
malicious | Sinkholed |
| Hagezi Threat Feed | ik-mo-whatsapp.com.cn |
malicious | Sinkholed |
| OpenDNS | ik-mo-whatsapp.com.cn |
phishing | Phishing Block |
| Cloudflare DNS | ik-mo-whatsapp.com.cn |
malicious | Sinkholed |
| DNS4EU | ik-mo-whatsapp.com.cn |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 2 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of ik-mo-whatsapp.com.cn · checked Mar 1, 2026
证据与外部报告
PD-20260225-58F3B2 Recipient: sztarkzvio@gmail.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。