whats-zvh[.]vip

The domain whats-zvh.vip poses as a deceptive website mimicking WhatsApp, aiming to harvest user credentials. With a VirusTotal detection score of 15 out of 95, this domain has been flagged as a phishing threat. The impersonation strategy employed by this domain makes it particularly dangerous for users seeking to access their accounts through trusted platforms.

Registered with Gname.com Pte. Ltd., this domain is 142 days old and hosted on an IP address of 20.2.67.40. Although it has relatively few blocklist entries, the presence of multiple detections indicates malicious intent. The domain's recent activity suggests it operated as a phishing site targeting users under the guise of a trusted application.

The domain is currently inactive following its removal from the internet. PhishDestroy has reported this phishing threat and has ensured it is blocklisted, with ongoing monitoring to prevent any re-emergence. This case highlights the ongoing risk associated with phishing schemes targeting popular communication platforms.