pc[.]whatsawg[.]cc

The domain pc.whatsawg.cc is a phishing site engaged in brand impersonation, specifically targeting Facebook users. It presents itself as a legitimate WhatsApp international portal but is designed to harvest login credentials through deceptive pages. No crypto drainer kit was identified. As of the latest verification, pc.whatsawg.cc has been taken offline.

Technical indicators confirm the elevated risk posed by pc.whatsawg.cc. The domain is flagged by 14 of 95 VirusTotal security vendors, including ADMINUSLabs, alphaMountain.ai, and BitDefender. It appears on 2 security blocklists, PhishDestroy and PhishingDB, but is not flagged by Google Safe Browsing. Registered through Dominet (HK) Limited on October 11, 2025, the domain resolves to the IP address 103.99.210.56, hosted in South Korea under AS205960 HDTIDC LIMITED. No SSL certificate is present, and the observed page title reads 'whatsapp(國際版)官網| 聊天記錄導出功能的使用：便捷備份'. The domain uses nameservers ns1.domainnamedns.com and ns2.domainnamedns.com. Gridinsoft assigns it a trust score of 0/100.

Victims of pc.whatsawg.cc should immediately change any passwords entered on the site, particularly for Facebook or linked accounts. Enable two-factor authentication (2FA) on all critical services to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or messages sent without consent. Report the phishing domain to the impersonated brand (Facebook) via their official reporting channels. Additionally, submit the domain to security platforms like PhishTank or URLVoid to aid in broader detection efforts.