hk-whatsapp[.]icu

This domain, hk-whatsapp.icu, poses a direct brand impersonation threat targeting WhatsApp users. Analysis indicates the site was designed to mimic legitimate WhatsApp security verification pages, as evidenced by its page title, 'whatsApp安全检测中心,' which translates to 'WhatsApp Security Detection Center.' Such impersonation schemes typically aim to harvest user credentials, personal data, or distribute malicious payloads under the guise of official branding. The domain’s infrastructure and content were crafted to exploit trust in the WhatsApp brand, potentially leading to account takeovers or further social engineering attacks. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on November 10, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with suspicious registrations. It resolves to the IP address 134.122.187.186, hosted by AS152194 CTG Server Limited in Hong Kong, a network segment with a history of hosting fraudulent domains. Security vendors on VirusTotal flagged this domain at a rate of 20/95, and it appears on two independent security blocklists, including PhishDestroy and PhishingDB. Notably, the domain lacks an SSL certificate, a red flag for any site handling sensitive user data. Users who visited hk-whatsapp.icu should take immediate remediation steps to mitigate potential risks. First, avoid entering any credentials or personal information on the site, as it is confirmed offline but may have already captured data during its active period. If credentials were submitted, reset passwords for WhatsApp and any other accounts where the same credentials were reused. Monitor accounts for unauthorized activity, such as logins from unfamiliar devices or locations. Additionally, consider running a reputable security scan on devices used to access the domain to detect any malware or backdoors that may have been installed. Report the domain to relevant security teams or consumer protection agencies to aid in broader mitigation efforts.