ezy-whatsapp[.]com[.]cn

This domain, ezy-whatsapp.com.cn, poses a high-risk phishing threat by impersonating WhatsApp Web. Visitors to this site may be tricked into entering login credentials or personal information under the false pretense of accessing WhatsApp services. The page title explicitly mimics the legitimate WhatsApp Web interface, increasing the likelihood of deception for unsuspecting users. Analysis indicates this domain is part of a deliberate phishing infrastructure. It was registered on December 31, 2025, through 上海贝锐信息科技股份有限公司, a registrar often associated with suspicious domains. The domain resolves to the IP address 156.252.41.15, located in Hong Kong under AS9294 (GNET INC.). Security vendors have flagged this domain extensively, with 21 out of 95 engines on VirusTotal detecting it as malicious. Additionally, it appears on one security blocklist and is explicitly labeled as phishing by Google Safe Browsing. If you or someone you know visited ezy-whatsapp.com.cn, immediate action is required. First, do not enter any credentials or personal information if prompted. If any details were submitted, change passwords for WhatsApp and any other accounts using the same credentials. Enable multi-factor authentication where possible to add an extra layer of security. Monitor accounts for unusual activity, such as unauthorized logins or messages sent without consent. Consider running a security scan on the device used to access the site to check for malware or unwanted software. Finally, report the incident to your organization’s security team or a trusted cybersecurity professional for further guidance.