web-wwhatsaapp[.]com[.]cn

The domain web-wwhatsaapp.com.cn was registered on October 19, 2025 by 四川域趣网络科技有限公司 and is currently taken offline. DNS resolution points to the IPv4 address 154.55.240.34, which is hosted by Cogent Communications (AS174) in the United States. The authoritative nameservers are ns1.365.hk and ns2.365.hk, indicating a Hong Kong‑based DNS infrastructure. No TLS certificate is presented for the site, confirming that it was served over plain HTTP only.

Reputation data shows a Gridinsoft trust score of 0 out of 100, and the domain appears on a single security blocklist. VirusTotal analysis recorded 17 detections out of 95 scanned engines, reflecting moderate consensus among antivirus vendors that the domain is malicious. Additionally, AlienVault OTX lists the domain in 16 separate threat‑intel pulses, reinforcing its classification as a malicious indicator. The page title observed during prior scans was "WhatsApp 网页版," and the campaign is categorized as a brand impersonation targeting Microsoft, despite the WhatsApp‑related title.

PhishDestroy has already blocked the domain, and the combination of registrar, hosting, lack of encryption, and multiple independent detections suggests a well‑structured phishing infrastructure. Defenders should immediately add web-wwhatsaapp.com.cn and its resolved IP 154.55.240.34 to URL filtering and network‑level blocklists. Monitoring for new domains using the same registrar or name server pair (ns1.365.hk, ns2.365.hk) is advised, as is reviewing outbound traffic for connections to Cogent AS174 that may indicate related activity. Given the zero trust score and multiple vendor flags, any email or web traffic referencing this domain should be treated as hostile and quarantined pending further investigation.