blog-whatsappx.hl.cn - phishunt.io

https://blog-whatsappx.hl.cn Access site

Screenshot

Investigate

Domain blog-whatsappx.hl.cn3 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

See every phishunt record for this domain

IP 188.114.97.3

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://blog-whatsappx.hl.cn

urlscan

Wayback

archive.today

Cert WE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

24 low suspicionheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+3.4 Shared IP cluster
+3.0 OpenPhish
+1.9 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.7 Brand in cert SAN
+0.6 Suspicious TLD
+0.5 Young certificate
+0.4 Long domain
+0.3 Free CA
+0.1 Hyphens
+0.1 Deep subdomain

16 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Impersonates WhatsApp under an obfuscated .cn subdomain with high character entropy, likely to harvest credentials. Confirmed by OpenPhish. Hosted behind Cloudflare and shares an IP cluster with other phishing sites, with no HTTP security headers present.

OpenPhishShared IP clusterKeyword match

AI-generated from stored detector signals - the AI never visited the site. · 2026-09-13 · confidence 78%

Domain & Network

Whois

Network

IP 188.114.97.3

Country