Security Report: 5095dnjweb.docss-whatsapp.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cb1a4f8b-a01d-4617-9363-9db2eba9339a Domain and IP registration (RDAP)/api/v1/rdap/cb1a4f8b-a01d-4617-9363-9db2eba9339aHow often this domain was scanned/api/v1/domain/stats/5095dnjweb.docss-whatsapp.com Scan history for this domain/api/v1/domain/history/5095dnjweb.docss-whatsapp.com?limit=15

This website contacted 6 IPs in 1 country across 4 domains to perform 9 HTTP transactions. The main domain is docss-whatsapp.com and was registered 1 month ago.

Submitted URL: https://5095dnjweb.docss-whatsapp.com/

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Unranked 47-day-old domain reproducing WhatsApp Web's QR login screen, with obfuscated script hiding a threat-feed host and beaconing to an unrelated host. Strong brand-impersonation shape; do not scan the QR or enter a phone number.

Risk Factors (6)

Impersonation of the WhatsApp brand on a domain that is not WhatsApp's

Unranked domain (not in Cisco Umbrella top 1M) despite claiming a major brand

Recently registered domain (47 days) hosting a copy of a major service's login screen

Obfuscated script concealing a threat-feed host (ipapi.co)

Script telemetry to unranked third-party host open-tongji.xyz

No legitimate support, ownership, or corporate information tying the host to WhatsApp

Domain age information unavailable

Details

Page Title

服务器错误 / Server Error - 502

Scan Type

public

Domain Name Analysis

The domain name '5095dnjweb.docss-whatsapp.com' uses the commercial generic top-level domain (.com) and includes subdomain '5095dnjweb'. The second-level label 'docss-whatsapp' is 14 characters long containing 3 vowels alongside 10 consonants, notching 1 hyphen. It segments into 5 words: do, css, what, s, app. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.08s

Total Load Time

329 KB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:60%

Script:Han

Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN

Text Length:257 chars

Detector Agreement:33%

Website Classification

Primary Category

documentation technical68% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

68%

technology software

55%

government public service

31%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	23.248.226.85	United States	AS138415Yancy Limited
1	142.251.110.95Google · CDN	United States	AS15169Google LLC
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.20.94Google · CDN	United States	AS15169Google LLC
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	23.248.226.86	United States	AS138415Yancy Limited
9	6	-	-