Security Scan Report: whatsappsdzuan.cfd

Redirected to:
https://whatsappsdzuan.cfd/login.html
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is whatsappsdzuan.cfd and was registered 1 day ago.

Submitted URL: https://whatsappsdzuan.cfd

Effective URL:
https://whatsappsdzuan.cfd/login.html
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake WhatsApp Web login on a 1-day-old .cfd domain harvesting account and password credentials; flagged by Google Safe Browsing for social engineering. Confirmed phishing.

Risk Factors (6)
Brand impersonation of WhatsApp on a non-official domain
Credential-harvesting login form (password + account fields) on a 1-day-old domain
Google Safe Browsing Social Engineering detection
Domain 1 day old with zero reputation (unranked)
Suspicious .cfd TLD flagged by network IDS
Page text instructs users to enter an 'access password', a known phishing lure
Domain age information unavailable

Details

Page Title

登录 - WhatsApp Web

Scan Type

public

Domain Name Analysis

Within the .cfd top-level domain, 'whatsappsdzuan.cfd' is registered while skipping any subdomain. The second-level label 'whatsappsdzuan' is 14 characters long holding 4 vowels versus ten consonants. Word splitting yields 6 words: what, s, apps, d, zu, an. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

WhatsApp Web 本站已开启访问保护 请输入访问口令后继续 账号 密码

Page Load Overview

1.12s
Total Load Time
3 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:55 chars
Detector Agreement:50%

All Detected Languages

🇺🇸en(99%)🇨🇳zh(1%)

Website Classification

Primary Category

social media network84% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
84%
technology software
27%
phishing/scam
20%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2107.150.41.178United States
AS33387Nocix, LLC
31--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T112C1D877B39A04326A67A6642297D3683619D007A043D5387FEC4274EF89FC586FABC4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:xNezIoJ7F5wmZ91C966mb7wBF0h/X3afhGKh0YtNyiyAEtjfav+TRJIiJIwIA:jezIU7Ftn1C96F3wj0VHafhnh0R79m27

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5942:IANEKBAAZ8ECwIiwAYImgKABKAmAAAEEQABAQAhLwggBQQhAUQQAAQhiBAEEBIKg2AxiBaAASkEGiBAjAM6KDZASQQMEDQBF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:cc3333cccc3399cc
Difference Hash:0008303032320c10
Wavelet Hash:18003c3cfcfce4fc
Color Hash:38006000600

Other Hashes

Crop Resistant:0008303032320c10

Scan History

Scan history not available

Unable to load historical scan data