real-whatsapp[.]com[.]cn

This domain, real-whatsapp.com.cn, is flagged as a high-risk generic phishing threat. Registered on May 22, 2026, and currently active as of July 12, 2026, it resolves to IP address 43.226.17.65, which is hosted in Hong Kong by WAN Shou Network Technology Limited. The domain returns an HTTP status of 200 but presents a 404 Not Found page title, indicating either a placeholder or a non-functional landing page at the time of analysis. The SSL certificate is issued by TrustAsia Technologies, Inc. (LiteSSL RSA CA 2025), which is a legitimate certificate authority, but this does not indicate the domain's trustworthiness. Security telemetry is strongly negative: VirusTotal reports 17 out of 91 security vendors flagging this domain as malicious, and it appears on at least one security blocklist. Gridinsoft assigns a trust score of 0 out of 100. AlienVault OTX includes the domain in one threat intelligence pulse, and it is blocked by PhishDestroy. The domain name contains 'whatsapp' — a well-known messaging brand — which is a common social-engineering tactic to deceive users into believing the site is affiliated with WhatsApp. However, the exact page content has not been analysed, and no specific brand target or kit name is present in the available intelligence. Defenders should block this domain at the network and email gateway levels, monitor for any associated subdomains or IP changes, and educate users that legitimate WhatsApp services do not operate under this domain. The high detection rate and low trust score confirm this domain is unsafe for interaction.