pc[.]whatsdnr[.]cc

The domain pc.whatsdnr.cc is a fraudulent site impersonating the legitimate WhatsApp Web platform. Its page title, "whatsapp網頁版直接登錄 - - 文件分享功能：支持多種格式的文件傳輸," claims to offer direct login and file sharing capabilities, indicating it is designed to deceive users into providing credentials or downloading malicious files. This poses a threat of credential theft and malware distribution.

Technical analysis shows the site was flagged by 15 out of 95 VirusTotal vendors, including ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, and CyRadar, and is listed on 2 blocklists. The domain was created on 2025-10-11, registered through Dominet (HK) Limited, and resolves to IP 103.254.73.162 in South Korea, hosted by AS205960 HDTIDC LIMITED. It uses nameservers ns1.domainnamedns.com and ns2.domainnamedns.com, has no SSL certificate, and has a GridinSoft trust score of 0 out of 100.

The site is currently offline or down, but its recent creation date and high detection rate indicate a clear malicious intent. The risk level is high for users who may encounter it while active, as it impersonates a well-known brand to facilitate phishing or malware distribution.