Known malicious kitcriticalphishing
Chinese WhatsApp Impersonation — main.js
family: whatsapp-cn-bf71
Short link:scanmalware.com/h/114
5-host Chinese WhatsApp brand impersonation: it-web-whatsapp.hl.cn, llg-whatsapp.com.cn, etc. Third-region sister of whatsapp-bd-771c (Bangladesh) and whatsapp-pk-96b1 (Pakistan) — same kit-as-a-service operator targeting more countries.
Anchors
Provenance
Added: 2026-05-27 07:09
5 hosts. WhatsApp impersonation, China cohort. Sister of bd-771c + pk-96b1.
Sightings (5)Atom feed
| Host | Scan | Script | Match | Scanned |
|---|---|---|---|---|
| whatsapp-web.xyz | 65a92f77… | https://whatsapp-web.xyz/static/js/main.6c724e39.js | byte | 2026-03-02 00:16 |
| it-web-whatsapp.hl.cn | c19b3ebe… | https://it-web-whatsapp.hl.cn/static/js/main.6c724e39.js | byte | 2026-02-25 15:50 |
| llg-whatsapp.com.cn | 3bdff214… | https://llg-whatsapp.com.cn/static/js/main.6c724e39.js | byte | 2026-01-09 06:37 |
| web.i-whatsapp.com.cn | ddc59d87… | https://web.i-whatsapp.com.cn/static/js/main.6c724e39.js | byte | 2026-01-06 15:49 |
| whatsappwt.com.cn | e79735c8… | https://whatsappwt.com.cn/static/js/main.6c724e39.js | byte | 2025-12-30 15:24 |