ScanMalware.com

Security Scan Report: webenv-whatsapp.com

Redirected to:
https://de.yahoo.com/?p=us
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/67f662c2-9a71-475f-9972-231e2f6e50a2Domain and IP registration (RDAP)/api/v1/rdap/67f662c2-9a71-475f-9972-231e2f6e50a2How often this domain was scanned/api/v1/domain/stats/webenv-whatsapp.comScan history for this domain/api/v1/domain/history/webenv-whatsapp.com?limit=15
This website contacted 43 IPs in 6 countries across 49 domains to perform 973 HTTP transactions. The main domain is webenv-whatsapp.com and was registered 3 days ago.

Submitted URL: https://webenv-whatsapp.com

Effective URL:
https://de.yahoo.com/?p=us
Redirected

AI Security Verdict

Moderate Risk

Confidence: 82%

5
Risk Score

This disposable or newly registered address only forwards visitors to a well-known site, a common way to hide a scam from security scanners — rated moderate risk on that basis.

Risk Factors (3)
Entry hostname webenv-whatsapp.com is unrelated to Yahoo and carries a single-source, unverified generic abuse-reputation report (outbound-abuse style, not content malware)
One eval() call present in page scripts — common in ad/framework bundlers and not meaningful on its own
Four INFO-level Suricata alerts (potential webshell PHP system command heuristic) fired on browsing behavior — informational only, uncorroborated by any IoC, YARA or Safe Browsing hit
Safety Factors (2)
Final URL de.yahoo.com is the brand owner's own established domain (Umbrella top 1M)
Third-party script hosts are popular, ranked analytics/ad domains (collector.yahoo.net, google-analytics.com, scorecardresearch.com, taboola)
Domain age information unavailable

Details

Page Title

Yahoo! Deutschland | Mail, Wetter, Suche, Politik, Nachrichten, Finanzen, Sport & Videos

Scan Type

public

Domain Name Analysis

Domain 'webenv-whatsapp.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'webenv-whatsapp' spans 15 characters containing four vowels alongside ten consonants; bonus characters include 1 hyphen. Word splitting yields six words: we, be, nv, what, s, app. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://webenv-whatsapp.com

Page Load Overview

4.41s
Total Load Time
18.2 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de-DE
Text Length:10,777 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing52% confidence
Type: spa
Method: ml+structural

All Detected Categories

download file sharing
52%
technology software
51%
corporate
35%
news media journalism
32%
forum
20%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
49156.234.58.211Hong Kong, Hong Kong
AS138415Yancy Limited
2287.248.119.251United Kingdom
AS203220Yahoo-UK Limited
2287.248.119.252United Kingdom
AS203220Yahoo-UK Limited
223.161.82.31Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
22142.251.14.155Google · CDNUnited States
AS15169Google LLC
22146.75.121.44Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
22108.132.98.138Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
2287.248.116.217Amsterdam, North Holland, Netherlands
AS203219Yahoo-UK Limited
2234.95.69.49Google · CDNKansas City, Missouri, United States
AS396982Google LLC
22192.178.183.97Google · CDNUnited States
AS15169Google LLC
97343--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A3253A36F072C82EF76F1D8971703F296147932AE602EAE9B29CC2555387CF48A6715C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:8cbug7uwAS1FQcp1HNRcS1FQV/FDlZk9hU8AeK5DIExN4zzS8XemFFk:GC1tReFezS8XesG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:990346:BJJaMzgCQBxMpGjJqiOwgOTEmZUBTRIiI8Db4noABNAAbwSiICMCzCDACEBO8EgYAIIjMgGQBAghtWZxDIAgCEjRklcF4APJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffc3ff81e3c1c1
Perceptual Hash:e39c63b6ca913469
Difference Hash:2f17963b0b4e4f0b
Wavelet Hash:ffc7c3cf81838181
Color Hash:#e0836c

Other Hashes

Crop Resistant:2f17963b0b4e4f0b,7fac9437f1e9c93f,9b1b323c34325f7f,c0c08030c088a080,9d8d9db99d8d898f,536903496565d0d0

Scan History

Scan history not available

Unable to load historical scan data