appweb-online-whatsapp.com.cn
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of appweb-online-whatsapp.com.cn
The domain appears to present itself as a Chinese-language informational page for WhatsApp Web, using branding and page text that reference browser-based messaging, cross-time-zone collaboration, QR-code login, synchronization, and end-to-end encryption. The screenshot shows a polished landing page focused on using WhatsApp on a laptop, with navigation items such as home, workflow, features, roles, and FAQ.
Based on the domain name, however, this does not appear to be an official WhatsApp-owned web address. The combination of "appweb-online-whatsapp" with a .com.cn extension may indicate a third-party site attempting to attract users looking for WhatsApp Web access or setup guidance. No clear operator identity is provided in the scan data, so ownership and legitimacy could not be independently verified from the available information.
Safety Assessment for appweb-online-whatsapp.com.cn
This domain was flagged by 22 out of 91 security engines at the time of the scan, with many of those detections classifying it as phishing or otherwise malicious. That level of multi-engine agreement is a strong risk indicator, especially when combined with the domain’s use of the WhatsApp name in a non-official-looking address. The page content also appears designed to resemble a WhatsApp-related service page, which may increase the likelihood of brand imitation or credential-harvesting behavior.
At the same time, some blacklist databases did not list the domain at the time of this scan, and the malware scan summary did not identify malicious files from the limited content it checked. Those cleaner signals do not outweigh the broader phishing consensus from security engines, particularly for a site that appears to imitate a well-known messaging platform. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate that, at the time of the scan, was set to expire on 2026-08-24. It appears to be served by nginx from IP address 45.202.5.4, hosted through Bunny Communications in Las Vegas, United States. The domain uses Dynadot name servers, and DNSSEC appears to be unsigned.
From a technical standpoint, the presence of TLS only indicates encrypted transport and should not be treated as proof of legitimacy. Additional concerns include unknown domain age, lack of DNSSEC, no ranking presence, and infrastructure details that do not by themselves establish a connection to the official WhatsApp service.
Share your experience with this website. Was it safe? Did you encounter any issues?