app-imu-whatshktw[.]com

This domain, app-imu-whatshktw.com, is flagged for brand impersonation, specifically targeting Facebook. The domain was created on October 08, 2025, and was registered through Dominet (HK) Limited. The infrastructure analysis reveals that it resolves to the IP address 91.204.227.139, which is located in South Korea and is part of the AS205960 HDTIDC LIMITED network. The domain has been taken offline as of the report date, July 23, 2026.

Scamadviser and Gridinsoft provide low trust scores of 1/100 and 0/100, respectively, indicating a high risk of malicious activity. The page title found is 'WhatsApp官方網站| 使用分享鏈接的技巧：便捷傳遞信息,' which translates to 'WhatsApp Official Website | Tips for Using Sharing Links: Convenient Information Transmission.' This suggests that the domain may have been used to impersonate WhatsApp, a popular messaging service, to deceive users. The domain appears on one security blocklist and has been flagged by 15 out of 95 security vendors, further confirming its malicious nature. AlienVault OTX has identified the domain in 14 threat intelligence pulses, indicating its involvement in known threat campaigns.

The domain lacks an SSL certificate, which is a common characteristic of phishing sites aiming to reduce the cost and complexity of their operations. Defenders should be aware of the high risk associated with this domain and ensure that it is blocked in network security configurations. Additionally, users should be educated to avoid clicking on links or entering personal information on any site that appears suspicious or does not have a valid SSL certificate. Monitoring for similar domains and educating users about brand impersonation tactics can help mitigate the risk of such attacks.