whats-xep[.]vip
Domain Security & Threat Intelligence Report
The domain whats-xep.vip posed as a deceptive site mimicking WhatsApp, targeting users for credential theft. It received a significant threat score of 16/95 on VirusTotal, indicating a high likelihood of malicious intent. As a phishing domain, it could have compromised user accounts, leading to potential data breaches.
Registered with Gname.com Pte. Ltd., the domain had been active for 135 days before being taken down. The IP address associated with this phishing site is 20.205.130.221. Blocklisting services flagged it twice, with evidence pointing to its malicious use. Such domains are often utilized in campaigns to harvest personal information from unsuspecting users.
PhishDestroy actively reported and monitored the domain, ultimately leading to its removal from circulation. The current status of the site is dead, indicating that it is no longer operational and poses no further threat to users. Continuous monitoring for similar threats is essential to prevent future incidents.
Threat Response Pipeline
Public Blocklist Status
Forensic Evidence Capture
Domain Intelligence
a2.share-dns.com
b.share-dns.net
b2.share-dns.net
complaint@gname.com
VirusTotal Analysis
Evidence & External Reports
URLScan Report
VirusTotal
URLQuery
Wayback Machine
WHOIS Lookup
Shodan
ScamAdviser
ChainAbuse
Were You Affected by This Site?
If you have interacted with this domain, entered personal information, or connected a cryptocurrency wallet — take immediate action. Below are resources to help you report the incident and protect yourself.
Report to Your Local Authorities
Select your country to see local cybercrime reporting contacts and complaint templates.
Related Domain Reports
Other Domains on 20.205.130.221
More Domains at Gname.com Pte. Ltd.
Stay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive