gbwhata[.]pages[.]dev

This domain, gbwhata.pages.dev, poses a high-risk generic phishing threat. It masquerades as a legitimate site for GBWhatsApp, a modified version of WhatsApp, promising users the ability to view and recover deleted messages using an 'Anti-Delete Feature.' In reality, this is a classic credential harvesting and malware distribution scheme designed to steal personal information or compromise devices.

PhishDestroy's analysis reveals multiple red flags. The domain was registered through Cloudflare, Inc. on April 04, 2026, which is notably recent. It resolves to IP address 188.114.97.3 and uses an SSL certificate from Google Trust Services / WE1. VirusTotal shows that 1 out of 95 security vendors flag this domain as malicious, and it already appears on 1 security blocklist. The page title explicitly advertises the fake feature, indicating a targeted campaign against WhatsApp users.

Users should immediately avoid visiting this domain and never download any files or enter personal information on it. If you have already interacted with the site, change your WhatsApp credentials and run a full antivirus scan. Report the domain to your security team and consider blocking the IP 188.114.97.3 at the network level. Always use official app stores for downloads and be wary of third-party modifications like GBWhatsApp, which violate terms of service and often lead to security risks.