e-b-whatsapp[.]com[.]cn

The domain e-b-whatsapp.com.cn is classified as a generic phishing infrastructure impersonating WhatsApp Web services, currently associated with credential harvesting attempts targeting messaging platform users. Although the domain is now offline, it previously hosted a fake login interface mimicking WhatsApp 网页版 to deceive end users into submitting sensitive authentication data.

Technical analysis shows the domain was created on February 21, 2026 and registered through 厦门三五互联信息有限公司. It resolved to IP 154.221.8.150 hosted in Hong Kong under AS137951 (ASLINE LIMITED). The domain has no SSL certificate deployed, increasing interception risk during active operation. It appears on 1 security blocklist and is flagged by 23 out of 95 VirusTotal security vendors, indicating a strong multi-engine consensus of malicious behavior. The page title recorded as WhatsApp 网页版 confirms explicit brand impersonation designed to increase user trust and engagement.

At present, the domain is taken offline, reducing immediate exposure risk. However, historical infrastructure and detection signals indicate it was actively used for phishing campaigns prior to shutdown. The absence of SSL, combined with high VirusTotal detection volume and brand impersonation tactics, suggests a high-confidence malicious classification. Recommended actions include maintaining DNS-level blocking, preserving forensic indicators for threat intelligence correlation, and monitoring for infrastructure reuse under similar naming patterns. Users previously exposed to the domain should be advised to change credentials and enable multi-factor authentication to mitigate potential compromise.