# what-apps.com — MALICIOUS > what-apps.com is a confirmed social engineering phishing site. Google Safe Browsing and 18/95 VirusTotal engines flag this high-risk app scam. ## Summary PhishDestroy identifies what-apps.com as a high-risk social engineering phishing domain actively distributing fraudulent applications. This site poses an immediate threat to unsuspecting users seeking legitimate app downloads, as it leverages deceptive branding to trick victims into installing malicious software or surrendering sensitive data. This domain was flagged by Google Safe Browsing under the SOCIAL_ENGINEERING category and is detected by 18 out of 95 VirusTotal security vendors. The domain what-apps.com was registered through GoDaddy.com, LLC on March 10, 2026, and resolves to IP address 18.140.66.183. The site employs a Let's Encrypt SSL certificate to appear legitimate, despite its malicious intent. These indicators, combined with its recent creation and low trust scores, solidify its classification as a high-risk phishing threat. Users should avoid interacting with what-apps.com entirely and report the domain to their IT security teams or abuse contacts immediately. Organizations are advised to block traffic to IP 18.140.66.183 and update firewall rules to prevent access to this domain. Always verify app sources through official channels and use endpoint protection tools to detect and mitigate potential infections from such fraudulent domains. ## Threat Details - Verdict: MALICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 2026-03-10 09:16:09 - Registrar: GoDaddy.com, LLC - IP: 18.140.66.183 ## Detection Status - VirusTotal: 18 vendors flagged - Google Safe Browsing: FLAGGED - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/f077eafb-dae9-4304-8707-4a408af5e94f - PhishDestroy: https://phishdestroy.io/domain/what-apps.com/ - LLM endpoint: https://phishdestroy.io/domain/what-apps.com/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/what-apps.com/ Last updated: 2026-03-29