app-wp-whatsappweb[.]com[.]cn

Analysis indicates that the domain app-wp-whatsappweb.com.cn was registered on 21 February 2026 and currently resolves to the IP address 45.200.20.8, which is hosted in Hong Kong and attributed to Megalayer Technology Co., Limited. The domain has been taken offline, but its recent activity places it on at least one public blocklist and it is listed as blocked by PhishDestroy. VirusTotal scans show that 18 of 93 security engines flagged the domain as malicious, and Gridinsoft assigned a trust score of 0 / 100, reflecting a high confidence of abuse. AlienVault OTX records the domain in fifteen separate threat‑intel pulses, reinforcing its association with malicious campaigns.

The primary threat category is identified as social‑media phishing, suggesting attempts to harvest credentials or personal data by masquerading as a legitimate social‑media service. Defenders should add the domain and its resolved IP address to deny‑list rules in DNS filtering, firewall, and proxy solutions, and ensure that any historical logs containing traffic to this host are retained for forensic review. Continuous monitoring of outbound connections to the 45.200.20.8 address is advised, as the hosting infrastructure may be reused for additional malicious domains.

Organizations using threat‑intel feeds should verify that their feeds ingest the latest OTX pulses and blocklist entries related to this domain. Because the site is offline, immediate exploitation is unlikely, but the infrastructure footprint indicates a broader campaign that could resurface under new domains. Maintaining up‑to‑date endpoint protection and reinforcing user awareness training around unsolicited social‑media login requests remain essential mitigation steps.