ScanMalware.com

Security Scan Report: clientcdn-whatsapp.com

Redirected to:
https://clientcdn-whatsapp.com/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2672ae9d-2cdb-4348-b71d-3b1ff66d3512Domain and IP registration (RDAP)/api/v1/rdap/2672ae9d-2cdb-4348-b71d-3b1ff66d3512How often this domain was scanned/api/v1/domain/stats/clientcdn-whatsapp.comScan history for this domain/api/v1/domain/history/clientcdn-whatsapp.com?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is clientcdn-whatsapp.com and was registered 4 weeks ago.

Submitted URL: http://clientcdn-whatsapp.com

Effective URL:
https://clientcdn-whatsapp.com/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

5-day-old, unranked domain borrowing the WhatsApp name with no real content — only a PHP error pointing at another site. No forms or malware found, but the deceptive hostname and disposable infrastructure make it untrustworthy.

Risk Factors (3)
Deceptive hostname imitating a major messaging brand on an unrelated, 5-day-old domain
Domain serves only a broken server error with cross-path references to another site (one.deepnets.fyi), typical of disposable malicious infrastructure
No legitimate site content, ownership disclosure, or service backing the WhatsApp-branded name
Safety Factors (5)
No credential, login, or payment form present (verified: 0 forms, 0 password fields, 0 payment fields)
No hunting rule/JavaScript malware patterns, no network IDS alerts, no Safe Browsing hit
No credential exfiltration or cross-origin script activity detected
Threat-intel matches are generic abuse-reputation only and were not counted as content evidence
No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'clientcdn-whatsapp.com' is registered. The second-level label 'clientcdn-whatsapp' is 18 characters long containing 4 vowels alongside 13 consonants, along with 1 hyphen. Word splitting yields six words: client, cd, n, what, s, app. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Fatal error: Uncaught Error: Call to a member function execute() on boo! in Avww/wwwroot/one.deepnets.fyi/index.php:520 Stack trace: #0 /www/wwwroot/one.deepnets.fyi/index.php(895): {closure}() #1 {ma...

Page Load Overview

3.67s
Total Load Time
5 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:59%
Script:Latin
Direction:ltr

Detection Details

Text Length:269 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software40% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
40%
news media journalism
34%
government public service
30%
cryptocurrency blockchain
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3156.234.58.211Hong Kong, Hong Kong
AS138415Yancy Limited
31--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CEE026F90634E3F9AC102847B74762CD232342164F8365D83F80C45C1C99CA85C2FA8C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:qzxO96En0HHz5UTG5bTJ9SKsdPH4VjVsH5sdPHkT9mIEpkXcsdPH075Kt4qqz:kxPEnuzOGFiPQ5sHiPMmIEpMcAPI5Kt4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:22164f8b84c22c3e3e250b2281aee6a7

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:ea6a6a6a6a6a4a6a
Difference Hash:9500000000000000
Wavelet Hash:007f0f0f0f0f0f0f
Color Hash:N/A

Other Hashes

Crop Resistant:9500000000000000

Scan History

Scan history not available

Unable to load historical scan data