web-was-whatsappweb[.]com[.]cn

This report analyzes the domain web-was-whatsappweb.com.cn, which is a social media scam site. The page title "WhatsApp 网页版" (WhatsApp Web Version) and the impersonation of the WhatsApp brand indicate the site was designed to deceive users into believing it is a legitimate WhatsApp web login portal. The threat posed is credential theft, as users attempting to log in would likely have their account credentials harvested by the threat actors operating the site.

Technical evidence shows the domain was flagged by 19 out of 95 VirusTotal vendors, including ADMINUSLabs, Criminal IP, alphaMountain.ai, Bfore.Ai PreCrime, and BitDefender. The domain was created on 2025-10-18 and registered through 四川域趣网络科技有限公司 (Sichuan Yuqu Network Technology Co., Ltd.). The IP address is 154.55.246.56, located in the United States and hosted by AS174 Cogent Communications, LLC. The domain lacks SSL certificate, and its nameservers are ns1.365.hk and ns2.365.hk. GridinSoft trust score is 0 out of 100, and the DOM risk score is 10.

As of the time of analysis, the site is DOWN or OFFLINE. The risk level is very high based on multiple security vendor flags, a trust score of zero, and the highest possible DOM risk score. Users who previously interacted with this site should consider their credentials compromised and change passwords immediately.