Known malicious kithighphishing
Pakistan WhatsApp Impersonation — chunk-vendors
family: whatsapp-pk-96b1
Pakistan-targeting WhatsApp brand impersonation: pak2whatsapp.com, pak3whatsapp.com, pakwhatsapp.com, pk2wapp.com, pk3wagetmoney.com, pk7wagetmoney.com. Sister of the existing `whatsapp-bd-771c` Bangladesh cohort — same kit-as-a-service operator targeting different countries.
Fingerprint anchors
Provenance
Added by: analyst
Added: 2026-05-26 18:58
6 hosts. Sister of whatsapp-bd-771c.
Sightings (6)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| pak3whatsapp.com | c465f051… | https://pak3whatsapp.com/static/js/chunk-vendors.f511f25b.js | byte | 2026-05-23 23:38 |
| pak2whatsapp.com | 2d6a3f03… | https://pak2whatsapp.com/static/js/chunk-vendors.f511f25b.js | byte | 2026-05-23 23:24 |
| pakwhatsapp.com | 1d3b4657… | https://pakwhatsapp.com/static/js/chunk-vendors.f511f25b.js | byte | 2026-05-23 22:25 |
| pk2wapp.com | 4fb29d7c… | https://pk2wapp.com/static/js/chunk-vendors.f511f25b.js | byte | 2026-05-23 22:25 |
| pk7wagetmoney.com | 3b1d341f… | https://pk7wagetmoney.com/static/js/chunk-vendors.f511f25b.js | byte | 2026-05-23 07:58 |
| pk3wagetmoney.com | e65a831e… | https://pk3wagetmoney.com/static/js/chunk-vendors.f511f25b.js | byte | 2026-05-23 00:50 |