VirusTotal
16 / 92 engine detections
打开报告whatsspp.app:冒充 WhatsApp,PhishDestroy 于 2026-10-25 检测到。风险:关键(100/100)。注册商:GNAME.COM。状态:最后已知的活跃状态。托管:Alibaba.com LLC。PhishDestroy 已发送1 份滥用举报。VirusTotal:16/92 个引擎标记。已列入 Spamhaus DBL。请勿输入登录凭据,也不要连接钱包。
“WhatsApp”
冒充 WhatsApp: whatsspp.app — 最后已知的活跃状态 (HTTP 200). 证据摘要: VirusTotal 16/92 (alphaMountain.ai, BitDefender, CRDF, CSIS Security Group, DNS8); URLQuery 2 det.…
The evidence summary below uses retained observations. Each source keeps its own collection date.
16 / 92 engine detections
打开报告2 det.
打开报告Phishing
打开报告DBL_PHISH
恶意
打开报告5 community references
打开报告结果反映各来源的采集时间。零检出不代表安全。OTX 引用为社区发布的内容。
不是。PhishDestroy 将 whatsspp.app 归类为“冒充 WhatsApp”(风险:关键,100/100),首次检测于 2026-10-25。VirusTotal:16/92 个引擎标记。已列入 Spamhaus DBL。请将该网站视为不安全。
不安全。请勿在 whatsspp.app 连接钱包、签署消息或批准代币。钓鱼网站会请求授权(approve、setApprovalForAll、Permit2),让运营者转走你的资产,而已确认的交易无法撤销。
更改你在该网站输入过的所有密码,并开启双重验证。如果你连接过钱包或签署过任何内容,请撤销授权,并将剩余资金转到新钱包;切勿透露助记词。分步指南:紧急处理指南。
对于该 gTLD,上述注册商依据 ICANN 认证协议运营。以下链接提供官方收费标准及现行的 DNS 滥用合规指南。
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
a.share-dns.comb.share-dns.net位置信息描述的是 IP 网络。
6d925c2dbbe076efa17761393e9b2110627658beb5046cc84526cb195f356ec1admin.whatsspp.appapi.whatsspp.appwhatsspp.appwww.whatsspp.app已保存的证书元数据。未带时区的证书日期按存档原样显示。传输加密并不能证明该网站值得信任。
Hostnames retained in the domain record or Certificate Transparency cache. A hostname alone does not establish current availability or malicious activity.
admin.whatsspp.appDomain recordapi.whatsspp.appDomain recordwww.whatsspp.appDomain recordThe original observation time is not recorded for these hostnames.
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
Google PageSpeed Insights — 移动端性能审核: whatsspp.app · checked Oct 25, 2026
由本地采集流程保留的带时间戳的响应元数据。以下各项数值均对应所显示的存档时间。
http://whatsspp.app/Server: openrestyContent-Type: text/htmlc5aad848076e79ceb1c1356cc655103c3bee62755e4738a7ca259704c2c07295byteskeep-alive448text/htmlSun, 25 Oct 2026 02:03:22 GMT"6adca503-1c0"Sat, 24 Oct 2026 12:30:59 GMTopenresty由采集器保留的数值;较长的值可能在采集时被截短。
估算时间描述的是一个观测时间窗口。它并不能证明注册商采取了措施,也不代表网站变为不可访问的确切时刻。
已存档的页面、网络和扫描器观测结果,按来源和观测时间分组。
观察到: · Retrieved:
| Uuid | 01a170d0-2bef-7734-9085-6b5a771e4994 |
|---|---|
| Final url | https://whatsspp.app/ |
| 状态 | 200 |
| 已重定向 | https-only |
| Redirects | [
{
"to": "https://whatsspp.app/",
"from": "http://whatsspp.app/",
"status": 307
}
] |
| Ip | 47.79.126.143 |
| Contacted IP addresses | [
"47.79.126.143"
] |
| Asns | [
"45102"
] |
| Countries | [
"SG"
] |
| Document hash | c5aad848076e79ceb1c1356cc655103c3bee62755e4738a7ca259704c2c07295 |
| Script hashes | [
"424979db9a77b7446c383330550137dc296b689d8b9a8d92ab2327a02868fb26"
] |
| Globals | [
"__svelte"
] |
| Tls | {
"san": [
"admin.whatsspp.app",
"api.whatsspp.app",
"whatsspp.app",
"www.whatsspp.app"
],
"cipher": "AES_128_GCM",
"issuer": "YE1",
"subject": "whatsspp.app",
"protocol": "TLS 1.3",
"valid_to": "2027-01-20T16:45:27Z",
"valid_from": "2026-10-22T16:45:28Z"
} |
| 域名年龄(天) | 1194 |
| Apex age days | 1194 |
| Tls age days | 2 |
| TLS 有效天数 | 89 |
| Requests | 9 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 97,
"malicious": true
},
"overall": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"whatsapp"
],
"malicious": true,
"categories": [
"phishing"
]
},
"urlscan": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"WhatsApp"
],
"malicious": true,
"categories": [
"phishing"
]
}
} |
| HTTP headers | {
"server": "openresty",
"content-type": "text/html"
} |
观察到: · Retrieved:
| Uuid | bc1506fa-655f-443a-99eb-7e1d1e9e11d3 |
|---|---|
| Final url | https://whatsspp.app/ |
| 状态 | 200 |
| History | [
{
"url": "https://whatsspp.app/",
"status": 200
}
] |
| DOM structure hash | 244428a6071aae7c93fd24f79cba669624b8ae84af3514962270cd3d100d75b9 |
| Document hash | c5aad848076e79ceb1c1356cc655103c3bee62755e4738a7ca259704c2c07295 |
| Phishing v2 | [
"phishing"
] |
| Url risks | [
"Phishing"
] |
| 域名风险 | [
"Phishing",
"Security threats",
"CIPA Filter",
"CIPA"
] |
| Radar rank | {
"bucket": ">200000"
} |
| DNS 记录 | [
{
"name": "whatsspp.app",
"type": "A",
"value": "47.79.126.143"
}
] |
| DNSSEC 有效 | false |
| Ip | 47.79.126.143 |
| Verdict | {
"tags": [
"phishing"
],
"malicious": true,
"categories": [
"phishing"
]
} |
| 注册记录 | {
"registrar": "GNAME.COM PTE. LTD.",
"created": "2026-10-22T17:08:33Z",
"updated": "2026-10-22T17:08:33Z",
"expires": "2027-10-22T17:08:33Z",
"nameservers": [
"a5.share-dns.com",
"b5.share-dns.net"
]
} |
观察到: · Retrieved:
| Vendor result counts | {
"timeout": 0,
"harmless": 46,
"malicious": 15,
"suspicious": 1,
"undetected": 30
} |
|---|---|
| Vendor labels | {
"CRDF": "malicious",
"DNS8": "phishing",
"Ermes": "phishing",
"G-Data": "phishing",
"Sophos": "malware",
"Webroot": "malicious",
"Emsisoft": "phishing",
"Fortinet": "phishing",
"Netcraft": "malicious",
"SOCRadar": "suspicious",
"Kaspersky": "phishing",
"LevelBlue": "phishing",
"Gridinsoft": "phishing",
"BitDefender": "phishing",
"alphaMountain.ai": "phishing",
"CSIS Security Group": "phishing"
} |
| Reputation | 0 |
| Categories | {
"alphaMountain.ai": "Phishing, Newly Registered (alphaMountain.ai)"
} |
| 创建 | 2023-07-18T00:00:00Z |
| Updated | 2023-07-18T00:00:00Z |
| 首次发现 | 2024-03-05T16:41:30Z |
| DNS 记录 | [
{
"ttl": 600,
"type": "A",
"value": "47.79.126.143"
},
{
"ttl": 600,
"type": "SOA",
"rname": "master.share-dns.com",
"value": "a.share-dns.com"
},
{
"ttl": 21600,
"type": "NS",
"value": "b.share-dns.net"
},
{
"ttl": 21600,
"type": "NS",
"value": "a.share-dns.com"
}
] |
| Dns at | 2026-10-23T22:47:31Z |
| Jarm | 27d40d40d00040d00042d43d000000e1ea2a807a629b496b664cf07ad7c08d |
| Certificate | {
"san": [
"admin.whatsspp.app",
"api.whatsspp.app",
"whatsspp.app",
"www.whatsspp.app"
],
"issuer": "Let's Encrypt / YE1",
"serial": "54d9055d2b3ce2b0719967d22e536c274b1",
"sha256": "6d925c2dbbe076efa17761393e9b2110627658beb5046cc84526cb195f356ec1",
"subject": "whatsspp.app",
"valid_to": "2027-01-20T16:45:27Z",
"valid_from": "2026-10-22T16:45:28Z"
} |
| Registry data | {
"status": [
"client transfer prohibited"
],
"events": {
"expiration": "2027-10-22T17:08:33Z",
"registration": "2026-10-22T17:08:33Z",
"last update of RDAP database": "2026-10-22T17:08:39Z"
},
"registrar": "Gname.com Pte. Ltd.",
"registrar_iana_id": "1923"
} |
| Mail configuration | {
"spf_lookups": 0
} |
|---|---|
| CAA 记录 | {
"domain": "whatsspp.app"
} |
| Protective DNS results | {
"resolvers": 12,
"blocked_by": [
"CloudFlare Family"
],
"blocked_count": 1
} |
| 页面标题与元数据 | {
"title": "WhatsApp",
"robots": "noindex,nofollow"
} |
| Trackers | {
"requests": 8
} |
| 表单与混合内容 | {
"third_party_scripts": 0
} |
| 状态 | {
"up": true,
"code": 200,
"timings": {
"dns": 376,
"tls": 182,
"wait": 176,
"connect": 175,
"download": 0
},
"response_ms": 909
} |
| TLS connection | {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
} |
| Ports | {
"open": [
22,
80,
443
]
} |
| Carbon | {
"bytes": 448,
"co2_grams": 0,
"cleaner_than": 95
} |
| Dns server | {
"ns": [
{
"ip": "172.64.53.25",
"host": "a.share-dns.com"
},
{
"ip": "162.159.27.88",
"host": "b.share-dns.net"
}
],
"zone": "whatsspp.app"
} |
| Location | {
"ip": "47.79.126.143",
"asn": "45102",
"org": "Alibaba.com LLC",
"city": "Singapore",
"country": "SG"
} |
| Ssl | {
"issuer": "Let's Encrypt / YE1",
"subject": "whatsspp.app"
} |
| DNS 记录 | {
"A": [
"47.79.126.143"
],
"NS": [
"a.share-dns.com",
"b.share-dns.net"
],
"SOA": "{\"nsname\": \"a.share-dns.com\", \"hostmaster\": \"master.share-dns.com\", \"serial\": 1792689094, \"refresh\": 3600, \"retry\": 1200, \"expire\": 86400, \"minttl\": 600}"
} |
| Dnssec | {
"ds": false,
"rrsig": false,
"dnskey": false
} |
| Hsts | {
"message": "Site does not serve any HSTS headers."
} |
| HTTP security policies | {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": false,
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
} |
| Get ip | {
"ip": "47.79.126.143",
"family": 4
} |
| Redirects | {
"chain": [
"https://whatsspp.app"
]
} |
| HTTP headers | {
"headers": {
"server": "openresty",
"content-type": "text/html"
}
} |
由监测程序和来源采集器保留的带日期变更记录。最新观测排在最前;来源状态并不能证明站点已被下架。
可访问
比较浏览器与爬虫各自收到的内容,并检查是否存在 Keitaro 流量分发。
whatsspp.app PD-20261025-1667E0 Recipient: legal@gname.com Registrar: Gname.com Pte. Ltd. (Singapore) Policy Violations: Illegal Activities section forbids phishing, fraud, fake sites, malware distribution; registrar investigates and may suspend or delete domain Applicable Laws: Computer Misuse Act 1993 §§3+, Penal Code §§415–420 (cheating), Online Criminal Harms Act (OCHA)
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
IC3 does not accept attachments. Keep original evidence for investigators. IC3 guidance
Federal tips line1-800-CALL-FBICurrent service: Report Fraud. England, Wales and Northern Ireland. Scotland: 101.
Contact centre0300 123 2040选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent
请根据您提供过的信息选择相应的步骤。请将本报告的副本与您自己的记录一并保存。
停止使用可疑网站。请通过官方应用或您已信任的网址访问真正的服务。
请将原始邮件、收据、消息和截图保存在安全的地方。基于事实的时间线有助于受理机构了解事件经过。 IC3 evidence guidance ↗
whatsspp.app)即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。
举报并不能保证追回损失或启动调查,但及时、准确的交易数据可以帮助执法机构和服务提供商追踪事件。
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
本报告汇总了已保存的页面快照、注册与网络记录、扫描器结果以及 PhishDestroy 举报历史。每个来源均保留各自的观测日期。打开来源报告即可查看原始结果。
快照记录的是当时显示的内容。扫描器结果记录的是该服务商在检查时的评估。有效证书或零检出结果都不能保证安全。