plan.comm-whatsapp.com

https://plan.comm-whatsapp.com Access site

Screenshot

Investigate

Domain plan.comm-whatsapp.com40 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 156.234.67.88

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://plan.comm-whatsapp.com

urlscan

Wayback

archive.today

Cert YR2

crt.sh

Censys

Google CT

Phishunt analysis Beta

35 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+3.5 ASN reputation
+3.4 Shared IP cluster
+3.2 Young domain
+2.3 Cert reuse
+1.1 No CSP header
+0.9 No registrar lock
+0.7 Brand in cert SAN
+0.7 Unrecognised DNS provider
+0.6 Final host mismatch
+0.6 Registrar reputation
+0.5 Young certificate
+0.5 Long domain
+0.3 Free CA
+0.2 Suspicious TLD
+0.1 Hyphens
+0.1 Deep subdomain

22 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Site poses as a WhatsApp communications planning service and appears designed to harvest account credentials. Hosted by Yancy Limited in Hong Kong on ASN 138415 with a Chinese registrar; TLS certificate links it to a cluster of WhatsApp-branded social engineering domains.

Google Safe BrowsingKeyword matchCert reuse

AI-generated from stored detector signals - the AI never visited the site. · 2026-09-07 · confidence 76%

Domain & Network

Whois

Registrar Guizhou Zhongyu Zhike Network Technology Co., Ltd.

Network

IP 156.234.67.88

Country

Hong Kong

Hosting Yancy Limited

ASN AS138415

TLS Cert YR2

External detection Google Safe Browsing

GSB category: SOCIAL_ENGINEERING

CleanOpenPhish · PhishTank · TweetFeed · urlscan.io

Campaign

Report this phishing

Submit to blocklists

Google Safe Browsing Microsoft SmartScreen APWG PhishTank

Tracked from 2026-09-07 17:25 UTC · Last refreshed 2026-09-08 03:30 UTC

Phishing detection: plan.comm-whatsapp.com