oug-wswhatsapp[.]cc
“web.whatsapp- 如何设置状态隐私:保护你的个人信息”
oug-wswhatsapp.cc — Contenido no disponible (HTTP 502). Suplantación de marca: WhatsApp; Tipo de estafa: Social Media Phishing. Resumen de las pruebas: VirusTotal 16/93 (alphaMountain.ai, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker); URLScan malicious verdict; PhishDestroy score 100/100. Registrador: Dominet (HK).
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain oug-wswhatsapp.cc is flagged for brand impersonation, targeting the popular messaging service WhatsApp. This domain impersonates the legitimate web.whatsapp.com by using a similar domain name and page title, which may mislead users into believing they are accessing an official WhatsApp page. The page title, 'web.whatsapp- 如何设置状态隐私:保护你的个人信息', translates to 'web.whatsapp- How to set status privacy: Protect your personal information', further enhancing the deceptive nature of the site.
Infrastructure analysis reveals that the domain has been flagged by 16 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. It is registered through Dominet (HK) Limited and resolves to the IP address 103.99.210.157, which is located in South Korea under the Autonomous System AS205960 HDTIDC LIMITED. The domain was created on October 02, 2025, and it currently has no active Google Safe Browsing (GSB) status. Additionally, the domain appears on 2 security blocklists, specifically PhishDestroy and PhishingDB. The SSL certificate for the domain is R13, which may be used to add a false sense of security to the impersonation attempt.
The domain is currently offline, which mitigates the immediate risk of user exposure. However, the infrastructure and registration details suggest that the domain could be reactivated or redeployed in the future. Security teams are advised to monitor for any signs of reactivation and to ensure that users are educated on the importance of verifying domain names and URLs. The domain should remain on blocklists and be flagged in security tools to prevent potential future misuse. The risk level is elevated due to the domain's impersonation of a trusted brand and its presence on multiple security blocklists.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Inteligencia forense
Análisis de VirusTotal
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.