xrhj-wahtsapp[.]com

The domain xrhj-wahtsapp.com has been identified as a threat due to its brand impersonation activities targeting Apple. This domain hosted a phishing page with the title 'whatsapp网页版入口- 语音通话中的常见问题及解决方法', indicating an attempt to deceive users into believing they are interacting with a legitimate service related to a well-known communication platform. The impersonation of Apple's branding is likely intended to exploit user trust and harvest sensitive information.

Evidence supporting this assessment includes the domain's appearance on two security blocklists and its resolution to the IP address 103.80.133.77, located in South Korea under AS205960, HDTIDC LIMITED. The domain was registered through GKG.NET, INC. on September 28, 2025, and utilized a Let's Encrypt SSL certificate (R12). Notably, VirusTotal reports that 18 out of 95 security vendors have flagged this domain as malicious, underscoring the elevated risk it poses to users.

Users who have visited xrhj-wahtsapp.com should immediately perform a thorough security check on their devices to ensure no malware or unauthorized access has occurred. It is advisable to change passwords for accounts that may have been compromised and enable two-factor authentication where possible. Additionally, users should remain vigilant of any unsolicited communications or requests for personal information, as these may be attempts to further exploit compromised data. If any suspicious activity is detected, users should report it to the relevant authorities or security services for further investigation.