chatwhatsapp2v2[.]pages[.]dev

The domain chatwhatsapp2v2.pages.dev was registered on March 23, 2026 and is hosted on Cloudflare infrastructure in Canada (IP 188.114.96.3). DNS resolution uses the Cloudflare‑provided authoritative nameservers maleah.ns.cloudflare.com and merlin.ns.cloudflare.com. The site presented the page title "Chat WhatsApp Sekarang 🔥" and was classified as a Social Media Phishing campaign, specifically targeting WhatsApp users. Security telemetry shows the domain appears on one public blocklist and is listed by PhishDestroy.

Cloudflare’s security services are active, with HSTS and HTTP/3 enabled, and the site employed a Let’s Encrypt E8 certificate. VirusTotal analysis recorded four detections out of ninety‑four scanning engines, indicating a modest but non‑trivial malicious signal. Gridinsoft assigned a trust score of 0 / 100, reinforcing the malicious assessment. The current HTTP response is 403, and the domain is reported as taken offline.

While the page title and infrastructure details are confirmed, the exact phishing payload, credential‑stealing mechanisms, and any victim interaction remain unknown due to the offline status. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑activation of the host, and include the IP address 188.114.96.3 in threat‑intel feeds. Additional scrutiny of related Cloudflare‑hosted subdomains and any future TLS certificates is advised to detect potential re‑use of the same infrastructure for new phishing campaigns.