pc[.]whatsass[.]cc

This domain, pc.whatsass.cc, poses a credential theft threat by impersonating the official WhatsApp mobile website. The site displays a page titled 'whatsapp官網手機版 - | 琯理聯系人列表的技巧：快速添加與刪除,' targeting Chinese-speaking users with a fake login interface designed to harvest account credentials. Visitors who enter their login details risk unauthorized access to their messaging accounts, potential data exfiltration, and further exploitation through social engineering or malware distribution. Analysis indicates the domain was registered on October 11, 2025, through Dominet (HK) Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 103.99.210.61, hosted under AS205960 (HDTIDC LIMITED) in South Korea, and lacks basic security measures such as an SSL certificate. Security vendors on VirusTotal flagged the domain 14 out of 95 times, with detection engines including PhishDestroy and PhishingDB classifying it as malicious. The domain appears on two security blocklists, reinforcing its elevated risk classification. Users who visited pc.whatsass.cc should immediately revoke any entered credentials by changing their WhatsApp password and enabling two-factor authentication. Devices used to access the site should undergo a security scan to detect potential malware or unauthorized access. Monitor linked accounts for suspicious activity, such as unauthorized logins or message forwarding. If financial or personal data was exposed, consider reporting the incident to relevant data protection authorities. Avoid reusing passwords across platforms to mitigate further risk.