my[.]whtsapp[.]com

This domain, www.my.whtsapp.com, is currently flagged by the PhishDestroy mitigation service as a malicious phishing infrastructure and remains active as of the report date 31 July 2026. The domain was registered on 20 October 2010 through Above.com Pty Ltd., and its authoritative name servers are ns3.abovedomains.com and ns4.abovedomains.com. DNS resolution points to the IPv4 address 103.224.182.247, which is the sole hosting endpoint identified for this indicator. The domain appears on one public security blocklist, confirming that at least one external trust feed has categorized it as hostile.

No additional public detections, such as Safe Browsing entries or OTX references, are provided in the source data, and no page title or SSL certificate details have been disclosed, leaving the surface‑web characteristics of the site unverified. The limited telemetry suggests a classic generic phishing campaign, likely intended to harvest credentials by leveraging a URL that mimics a popular messaging service. However, without content analysis the exact luring technique, landing page structure, or targeted brand cannot be confirmed. The absence of further intelligence leaves uncertainty around the payload delivery method, the presence of malicious scripts, or any command‑and‑control callbacks.

Defenders should block DNS resolution to 103.224.182.247 and add www.my.whtsapp.com to local deny lists. Network monitoring should include alerts for HTTP or HTTPS traffic toward this host, and endpoint security solutions should be tuned to flag any credential‑submission attempts that involve the domain. Continuous monitoring of the domain’s reputation across multiple blocklist sources is advised, as additional detections may emerge. Incident response teams should treat any user interaction with the domain as potentially compromised and advise affected users to reset credentials and review account activity.