Medium riskfirst seen 2 h ago
guide.zh-web-whatsapps.com
67of 100
Credential phishing, aimed at social media users. 95% likely a scam.
Why it was flagged
How the score works- Name and certificate
- Registration and DNS
- VAKYN verdict
- registered 59 min ago+32
- "zh-web-whatsapps" contains brand keyword "whatsapp"+24
- certificate issued 1 min after registration+5
- 2 hyphens+3
- .com abuse prior−2
- registered for the minimum one year+2
- no mail servers+2
- certificate covers only this name+1
Evidence
Registration
- Age
- 1 h old
- Registrar
- CV. Rumahweb Indonesia
- Status
- clientTransferProhibited
Hosting
- Country
- United States
- Network
- NETLAB-SDN
- IP
- 38.95.74.232
DNS
- A
- 38.95.74.232
- NS
- a.share-dns.com, b.share-dns.net
- MX
- none
Certificate
- Issuer
- Let's Encrypt
- Names
- 1
- Seen
- 30 Oct 2026 08:21 UTC
VAKYN verdict
430 msEight questions about the site, each with how sure the answer is.
Likely used for phishing or a scam?
yes95% sure
- yes95%
- no5%
How dangerous for an ordinary visitor?
Probably malicious50% sure
- Probably malicious50%
- Clearly malicious46%
- Unclear2%
What is it most likely for?
credential phishing54% sure
- credential phishing54%
- legitimate11%
- malware download9%
Which brand does it pretend to be?
WhatsApp84% sure
- whatsapp84%
- none16%
Who is it aimed at?
social media users77% sure
- social media users77%
- developers10%
- general public8%
Would it ask visitors to sign in?
yes65% sure
- yes65%
- no35%
Would it ask visitors to pay?
no57% sure
- yes43%
- no57%
Plausible innocent explanation?
no95% sure
- yes5%
- no95%