fuquanbao[.]com

Analysis as of July 23, 2026 indicates that fuquanbao.com is associated with a brand‑impersonation campaign targeting WhatsApp users. The domain was registered on February 17, 2017 through Gname.com Pte. Ltd. and resolves to the IP address 35.188.173.136, which belongs to Google LLC (AS396982) and is geolocated in the United States. The authoritative name servers are ns1.julydns.com and ns2.julydns.com. No TLS certificate is presented, and an HTTP request returns a 403 status code, suggesting that the web server is intentionally denying access or that the site has been taken offline. The page title returned by the server is “WhatsApp Web”, directly matching the brand target and confirming intent to masquerade as the official WhatsApp Web interface.

Threat‑intelligence feeds corroborate malicious intent. Sixteen of ninety‑five VirusTotal scanners flagged the domain, and it appears on at least one public security blocklist, currently listed by PhishDestroy. AlienVault OTX references the domain in fourteen separate pulses, indicating repeated observation by the research community. Reputation services assign extremely low trust scores: Gridinsoft rates the domain 0 out of 100, and Scamadviser assigns a 1‑point score, both reflecting a consensus of high risk. Because the site is presently offline, direct content analysis is unavailable, and the exact phishing kit or credential‑capture mechanisms cannot be confirmed.

Nevertheless, the combination of brand‑impersonation page title, high detection rate, low reputation scores, and inclusion in multiple threat‑intel sources provides strong evidence that the domain was used for credential‑stealing or session‑hijacking attempts against WhatsApp users. Defenders should add fuquanbao.com to network‑level deny lists, block traffic to its hosting IP 35.188.173.136, and monitor for any re‑activation of the domain or creation of similar domains using the same registrar or name‑server pair.