When you visit a3-whatapp.hl.cn, you are immediately sent to Yahoo Hong Kong. That alone is suspicious — legitimate businesses don’t redirect visitors away from their own site. But the real problem is the domain name. It includes “whatapp,” a clear attempt to look like WhatsApp, one of the most-phished brands in the world. The domain was registered today, hosted in Moldova, and has no content, no archive history, and no contact details. This is the pattern of a short-lived phishing domain set up to steal login credentials or spread malware. If you came across a link to a3-whatapp.hl.cn, do not click it. There is no reason to trust a site that doesn’t even show its own homepage.
This site failed important safety checks — please read this before going any further.
Be careful — Dangerous
No — a3-whatapp.hl.cn doesn't look safe
15/ 100 trust score
In plain English
This site is dangerous. The domain was registered just hours ago, it immediately redirects to another site, and the name is designed to look like WhatsApp. There is no real content here, only signs of a setup meant to trick you.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
1
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
2
Close the tab
Especially if you got here from an email, text message or social media ad.
3
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
4
Warn others
Report the site and share this check with anyone who sent you the link.
Better safe than sorry. Stay covered everywhere: NordVPN's Threat Protection blocks known scam sites before they load.
Try NordVPN →
Cross-referenced 25 live signals from Google Safe Browsing, VirusTotal, WHOIS and more on Jul 22, 2026.
How we score →
Where the score comes from
We look at six areas. Here's how a3-whatapp.hl.cn did in each.
30
Security
The site has a valid certificate and modern protections like HSTS, but it also accepts outdated TLS versions and immediately redirects to another domain. That redirect makes the security setup irrelevant for the user.
10
Identity
The domain was created today and the name mimics WhatsApp — a classic impersonation tactic. The registrant is a private individual in China, and there is no evidence of a real business behind this.
30
Reputation
No blacklists or Google Web Risk flags yet, but the domain has zero history, no archive, and no external reviews. A brand-new domain with no track record is inherently risky.
10
Transparency
There is no actual website content here — just a redirect. No contact info, about page, or social presence. The WHOIS contact exists but is not trustworthy for a site that looks like a phishing attempt.
10
Compliance
Since the site offers no content or service, it has no legal pages. That is expected for a redirect page, but it also means there is zero accountability.
30
Infrastructure
DNS resolves but there is no email handling, no DNSSEC, and the hosting network in Moldova is unusual for a domain registered in China. The setup feels thrown together.
What we checked
The 25 signals behind this report.
Security & Transport
Certificate Issuer
Let's Encrypt
Clickjacking Protection
Present
Content Security Policy
Present
Google Web Risk
Clean
HSTS Header
Present
Legacy TLS
Accepted
Redirect Check
Redirects away
SSL Certificate
Valid
Server
ATS
TLS Version
TLS 1.3
Identity & WHOIS
Branding
Missing
Domain Age
0 days
Infrastructure & DNS
DNS Blacklists
Clean
DNS Resolution
1 IP(s)
DNSSEC
Not enabled
DNSSEC
unsigned
Email (MX Records)
None
Hosting Network (ASN)
AS48753 AVAHOHST
Name Servers
2 server(s)
Reputation & Reach
Sitemap
Misconfigured
Tranco Rank
Not ranked
Trustpilot
No Trustpilot profile
Web Archive History
No archive found
robots.txt
Present
Other
Site Redirect
Redirects to hk.yahoo.com
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.