Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is vbd016@sina.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
web[.]whatstapp[.]hl[.]cn
“web.whatstapp.hl.cn”
web.whatstapp.hl.cn — 未验证. 品牌冒充:WhatsApp; 诈骗类型:Impersonation. 证据摘要: VirusTotal 17/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); URLQuery 4 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 95/100. 注册商: 成都垦派科技有限公司.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Analysis of the domain web.whatstapp.hl.cn, observed on July 12, 2026, indicates active malicious infrastructure. The domain resolves to IP 168.76.144.216, which is geolocated to Hong Kong and belongs to AS137951 (ASLINE LIMITED). Registration was performed on February 27, 2026 through 成都垦派科技有限公司, and the authoritative name servers are ns1.kenpains.com and ns2.kenpains.com. The site presents an HTTP 200 response and serves a valid Let's Encrypt certificate (R12). VirusTotal reports that 23 of 93 security vendors flag the domain, and it appears on one public blocklist. Gridinsoft assigns a trust score of 0/100, and PhishDestroy has already blocked the domain, yet it remains active. The evidence collectively supports a high‑risk classification as a generic phishing site. Uncertainty remains regarding the specific payload or credential‑collection mechanisms because the page content has not been examined. Defenders should block the IP address and domain at network perimeter, update URL filtering feeds with the observed nameservers and registrar details, and monitor for any related sub‑domains or future registrations using the same infrastructure. Ongoing observation is recommended to detect potential changes in hosting or certificate renewal.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | web.whatstapp.hl.cn |
malicious | Sinkholed |
| DNS4EU | web.whatstapp.hl.cn |
malicious | Sinkholed |
| OpenDNS | web.whatstapp.hl.cn |
phishing | Phishing Block |
| Quad9 DNS | web.whatstapp.hl.cn |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of web.whatstapp.hl.cn · checked Mar 6, 2026
证据与外部报告
PD-20260227-3D6A5A Recipient: vbd016@sina.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。