Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@rackip.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
km03[.]zjczwl[.]cn
“WhatsApp”
km03.zjczwl.cn — 未验证. 品牌冒充:WhatsApp; 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 14/91 (ADMINUSLabs, BitDefender, Chong Lua Dao, CyRadar, ESET); URLQuery 3 alerts; Google Safe Browsing flagged; CF Radar malicious; PhishDestroy score 95/100. 注册商: 四川域趣网络科技有限公司.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This site, km03.zjczwl.cn, is a WhatsApp impersonation scam. Its page title is "WhatsApp," indicating it attempts to present itself as the legitimate WhatsApp service. The threat posed is impersonation, where users may be deceived into providing credentials or personal data under the false pretense of interacting with WhatsApp.
Technical evidence confirms this threat. VirusTotal reports 24 out of 95 vendors flagged the domain, with detections from ADMINUSLabs, alphaMountain.ai, BitDefender, Cluster25, and CRDF. Google Safe Browsing flags the site for SOCIAL_ENGINEERING. The domain is registered with 四川域趣网络科技有限公司, created on 2025-07-03. It resolves to IP 118.107.16.100 in Hong Kong, hosted by AS152194 CTG Server Limited. No SSL certificate is present. Nameservers are bicycle.dnspod.net and sigrid.dnspod.net.
The site is currently DOWN/OFFLINE. It is listed on 1 blocklist. The DOM risk score is 83, indicating a high risk level. Despite being offline, the domain remains a significant threat due to its impersonation of WhatsApp and widespread detection.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | km03.zjczwl.cn |
malicious | Sinkholed |
| OpenDNS | km03.zjczwl.cn |
phishing | Phishing Block |
| DNS4EU | km03.zjczwl.cn |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of km03.zjczwl.cn · checked Mar 15, 2026
证据与外部报告
PD-20260315-41A2C4 Recipient: abuse@rackip.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。