whatapp[.]hk[.]cn

Analysis of the domain whatapp.hk.cn shows a newly created Internet resource that is actively serving malicious content. The domain was registered on July 15 2026 through 万商云集（成都）科技股份有限公司 and is currently delegated to Cloudflare name servers clint.ns.cloudflare.com and leah.ns.cloudflare.com. DNS resolution points to the IP address 188.114.97.3, a Cloudflare edge node commonly used for content delivery and abuse hosting. VirusTotal scans have returned 14 positive detections out of 91 security vendors, indicating that multiple scanners have identified the domain as malicious. The limited age of the domain, combined with the use of a generic Cloudflare front‑end, suggests an intent to hide the true hosting location and to benefit from Cloudflare’s built‑in mitigation services. No additional infrastructure such as secondary A records, MX records, or CNAME chains has been observed, and the site’s page content has not been publicly disclosed, leaving the exact phishing lure unknown. Because the domain is classified as a generic phishing site, defenders should treat any traffic to whatapp.hk.cn as hostile. Recommended mitigations include adding the domain to network and email blocklists, monitoring DNS queries for the associated IP, and employing URL filtering solutions to prevent user access. Continuous re‑scanning of the domain is advised, as threat actors may modify the payload or host new phishing pages after the initial detection.