web[.]h-whatsapp[.]com[.]cn

This domain, web.h-whatsapp.com.cn, poses a significant risk as it impersonates the Google brand, potentially misleading users into believing they are interacting with a legitimate Google service. The threat type is categorized as brand impersonation, which can lead to unauthorized access to personal information, including login credentials and sensitive data.

Analysis indicates that the domain was created on December 28, 2025, and is registered through 四川域趣网络科技有限公司. Infrastructure analysis reveals that the domain resolves to the IP address 156.252.40.23, which is located in Hong Kong under the Autonomous System Number AS9294 GNET INC. The domain has been flagged by 19 out of 95 security vendors on VirusTotal, indicating a moderate level of consensus among security experts regarding its malicious nature. Additionally, the domain appears on one security blocklist.

If an individual has visited this site, it is recommended to immediately change any passwords used on the site, especially those associated with Google accounts or other sensitive services. Users should also monitor their accounts for any unusual activity and consider enabling two-factor authentication for added security. For further peace of mind, running a full system scan using updated antivirus software is advisable to detect and remove any potential malware that may have been installed.