whatsuam[.]cc

This domain, whatsuam.cc, is identified as a phishing site designed to impersonate Google while presenting a fraudulent WhatsApp web login interface in Chinese. The page title, "whatsapp在線登錄電腦 - - 使用狀態分享功能：記錄生活點滴," suggests an attempt to deceive users into believing they are accessing a legitimate WhatsApp service for desktop login. The domain specifically targets individuals seeking to synchronize WhatsApp status-sharing features, a tactic likely intended to harvest credentials or distribute malicious payloads under the guise of a trusted platform. Analysis indicates whatsuam.cc was registered on October 11, 2025, through Dominet (HK) Limited, a registrar frequently associated with high-risk domains. The domain resolves to the IP address 103.99.210.11, hosted under AS205960 (HDTIDC LIMITED) in South Korea, an autonomous system with a history of hosting phishing infrastructure. Security vendors have flagged the domain in 14 out of 95 detection engines on VirusTotal, while it appears on two independent security blocklists. Notably, the site lacks an SSL certificate, further reducing its legitimacy and increasing the risk of interception during credential transmission. Users who accessed whatsuam.cc should immediately revoke any entered credentials, particularly those associated with Google or WhatsApp accounts. It is recommended to scan the device for malware, as phishing pages often redirect to exploit kits or prompt downloads of malicious software. Monitoring for unauthorized account activity and enabling multi-factor authentication on all linked services is strongly advised. Given the domain’s elevated risk level and confirmed offline status, affected users should remain vigilant for follow-up phishing attempts via email or messaging platforms.