whats-vn-whatsapp[.]com[.]cn

This domain, whats-vn-whatsapp.com.cn, is a phishing site designed to impersonate WhatsApp and steal user login credentials. Visitors who enter their account details on this site risk having their WhatsApp accounts hijacked, personal messages exposed, or further targeted by fraudsters. The site may also distribute malware under the guise of a fake app update or verification process. Given the domain's focus on a widely used messaging platform, the potential impact is significant, particularly for users who reuse passwords across services. Analysis indicates this domain is malicious based on multiple technical indicators. It was created on May 22, 2026, and is hosted on an IP address (43.226.17.60) associated with a Hong Kong-based provider. VirusTotal reports that 20 out of 95 security vendors flag the domain as malicious, confirming its use in phishing campaigns. The domain appears on at least one security blocklist and was previously blocked by automated phishing detection systems. Its infrastructure, including the use of a .cn top-level domain, suggests an attempt to evade detection while targeting users familiar with WhatsApp's branding. If you visited whats-vn-whatsapp.com.cn or entered any information on the site, take immediate action to secure your account. First, change your WhatsApp password and enable two-step verification in the app settings. Check for any unauthorized devices logged into your account and log them out. Monitor your other accounts for suspicious activity, especially if you reused the compromised password. If you downloaded any files from the site, run a full scan on your device using updated security software. Report the incident to WhatsApp support and consider notifying contacts who may have received suspicious messages from your account.