gbwhatsapp-pro[.]pages[.]dev

The domain gbwhatsapp-pro.pages.dev is currently identified as involved in targeted credential phishing, specifically impersonating the popular WhatsApp brand to deceive users into submitting sensitive login information. This threat is active and presents an elevated risk to unsuspecting individuals seeking unofficial WhatsApp services or versions.

Detailed intelligence shows that gbwhatsapp-pro.pages.dev is registered through Cloudflare, Inc., a known registrar for domain privacy and security services. The domain resolves to the IP address 172.66.47.39 and uses an SSL certificate issued by Let’s Encrypt, which may lend a false sense of legitimacy to untrained users. VirusTotal analysis flags this domain by 1 out of 95 security vendors, indicating some recognition of its malicious intent. While the relatively low number of detections might suggest emerging or low visibility, the presence on any security list should be treated seriously in risk assessments.

Currently marked as active with an elevated risk level, gbwhatsapp-pro.pages.dev should be blocked or closely monitored in organizational and personal security controls. Users are advised to avoid interacting with this domain or entering any credentials. Security professionals should consider adding this domain to internal blocklists and inform users about the specific credential phishing threat masquerading as WhatsApp. Continuous monitoring for new variants or related domains is also recommended to mitigate potential account compromise and data theft.