outconfiadd[.]webcindario[.]com

PhishDestroy has identified outconfiadd.webcindario.com as a high-risk domain engaged in WhatsApp credential phishing. This domain was specifically designed to deceive users into believing they are accessing a legitimate WhatsApp web interface, as evidenced by its page title "Cargando - WhatsApp." The threat level is high because the site attempts to harvest sensitive login credentials, which could lead to account takeover and identity theft.

Technical indicators paint a clear picture of malicious intent. VirusTotal analysis shows 17 out of 95 security vendors flagging this domain as malicious, and Google Safe Browsing explicitly categorizes it as phishing. The domain was registered on June 8, 2026, through Tucows Domains Inc., and resolves to IP address 5.57.226.202. It appears on at least one security blocklist and uses an SSL certificate issued by Let's Encrypt / R12, which provides a false sense of security to visitors. The domain currently remains offline, but its past activity poses ongoing risk to users who may have interacted with it.

To protect against WhatsApp phishing, users should always verify the URL before entering credentials and enable two-factor authentication on their WhatsApp account. If you have already entered information on this site, change your password immediately and revoke any active sessions. Report the domain to Google Safe Browsing and your email provider. PhishDestroy recommends using a password manager to avoid manual entry on suspicious pages and to regularly monitor for unauthorized access to your accounts.