Is cdn2.waplus.io safe?
http://cdn2.waplus.io/
Checked on
How we checked
Coverage: strong · 5 of 6 applicable core capabilities
- Antivirus (57 of 93 engines answered): completed
- Google Safe Browsing: completed
- page reading · not available: did not fully complete
- page capture: completed
- domain records: completed
- web research: completed
Backend configuration host for WhatsApp Web extensions, with two antivirus detections
cdn2.waplus.io is not a website meant for visitors. A browser extension's privacy policy names it as a configuration address that the extension contacts to keep up with changes in WhatsApp Web. A security review describes a related extension that downloads settings from this host and then adds a button linking to a sibling extension. Two of 93 antivirus engines flag the host. The site's own pages could not be reviewed because it refuses direct access. We rate it Moderate Risk: there is no sign of phishing or a scam aimed at visitors, but the antivirus flags and the remotely controlled extension behaviour are worth caution.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 55/100
Moderate Risk covers scores 45–69. 2 findings pulled the score down; 3 pushed it up.
What pulled the score down
- Strong1 independent antivirus family reported an adverse result.
- ModerateOne public warning on a public review site: "On install, update, and periodically, the extension stores a config fetched from cdn2.waplus.io. When it has 'Drainage configuration' with wowLink="1", a…"
What pushed the score up
- SupportsThe browser threat feed shows no warning.
- SupportsThe saved TLS check found a valid encrypted connection
- SupportsThe registrable domain is 1794 days old (waplus.io, the parent domain of this subdomain host; it does not show how long the subdomain itself has existed)
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor). Community reviews never change the Safety Score.
01 · Investigation Brief
Investigation Brief
cdn2.waplus.io is not a website meant for visitors. A browser extension's privacy policy names it as a configuration address that the extension contacts to keep up with changes in WhatsApp Web. A security review describes a related extension that downloads settings from this host and then adds a button linking to a sibling extension. Two of 93 antivirus engines flag the host. The site's own pages could not be reviewed because it refuses direct access. We rate it Moderate Risk: there is no sign of phishing or a scam aimed at visitors, but the antivirus flags and the remotely controlled extension behaviour are worth caution.
What the evidence shows
The privacy policy of the Rocket Sender extension says the extension may contact https://cdn2.waplus.io/ for a compatibility configuration that helps it adapt to changes in WhatsApp Web.
A security review of the Privacy for WhatsApp extension reports that it stores a configuration fetched from this host when it is installed, when it updates and at regular intervals. When that configuration enables a particular setting, a script adds a button to the WhatsApp group screen that links to a sibling extension. In practice, this means the host can change what users of the extension see without a new version being published.
Technical checks versus operator risk
Two of 93 antivirus engines flag the host, and both detections come from a single family of antivirus products. The browser threat feed shows no warning, and the connection is properly encrypted.
Opening the host directly returns an access-denied error, and the screen shows a storage-bucket message, so the site's own pages could not be reviewed. The parent domain, waplus.io, is about 1794 days old, but that figure does not show how long this particular subdomain has existed.
Why the score is 55
1 independent antivirus family reported an adverse result. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
2/ 93
detectionsFresh result
2 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 2
- Suspicious
- 0
- Total
- 93
| Engine | Finding |
|---|---|
| BitDefenderMalicious | malware |
| G-DataMalicious | malware |
All 93 engine results
- BitDefender - malware - Malicious
- G-Data - malware - Malicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Unrated
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- BitDefendercomputersandsoftware
- Forcepoint ThreatSeekerinformation technology
- Sophosinformation technology
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
The bucket you access does not belong to you.
What the captured page showed
1 observation- 01
The bucket you access does not belong to you.
03 · Investigation Story
Investigation story
What the site claims
No page claim could be verified for cdn2.waplus.io because no usable page content or saved capture was available.
What we observed
The page itself could not be fully inspected, so the report relies on the other saved checks.
What independent research found
2 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
Web research findings
Independent findings for cdn2.waplus.io, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- Is Privacy for WhatsApp Safe? - Security Reviewopen
"On install, update, and periodically, the extension stores a config fetched from cdn2.waplus.io. When it has 'Drainage configuration' with wowLink="1", a script injects a button into the group UI, linking to a sibling extension."
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domaincdn2.waplus.io
- Redirects tocdn2.waplus.io
- Hosted byCloudflare, Inc.
Domain Timeline
- Dec 2, 2021Domain registered
First appeared in WHOIS records — 4 years old when this review was saved.
- Oct 31, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
Domain & Encryption
Cloudflare DNS is used by legitimate and scam sites alike, so it does not identify who runs the site.
Certificate issued for waplus.io.
A shared Cloudflare address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Redirect Chain
The site refused our redirect check, so this chain may be incomplete.
- 1301http://cdn2.waplus.io/
- 2403https://cdn2.waplus.io/
Server Reputation
05 · Evidence Ledger
Evidence ledger
- Antiviruscomplete
- Browser threat feedcomplete
- Page contentunavailable
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
1 independent antivirus family reported an adverse result.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
One public warning on a public review site: "On install, update, and periodically, the extension stores a config fetched from cdn2.waplus.io. When it has 'Drainage configuration' with wowLink="1", a…"
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 2 of 93 engines flagged | Completed | Adverse | fresh · analysed Oct 31, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 31, 2026 |
| Page content | Page content was not available for semantic review | Unavailable | No saved finding | Not available |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 31, 2026 |
| Independent research | 2 independent findings were saved | Completed | Adverse | this scan · Oct 31, 2026 |
- Antivirus
- Result2 of 93 engines flagged
- CompletionCompletedFindingAdverse
- Freshnessfresh · analysed Oct 31, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 31, 2026
- Page content
- ResultPage content was not available for semantic review
- CompletionUnavailableFindingNo saved finding
- FreshnessNot available
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 31, 2026
- Independent research
- Result2 independent findings were saved
- CompletionCompletedFindingAdverse
- Freshnessthis scan · Oct 31, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is cdn2.waplus.io a scam or is it safe?
Is cdn2.waplus.io safe to use?
Has cdn2.waplus.io been flagged by antivirus engines?
Is cdn2.waplus.io on any phishing or malware blacklists?
How old is the cdn2.waplus.io domain?
Does cdn2.waplus.io have a valid SSL certificate?
Where is cdn2.waplus.io hosted?
How often is the cdn2.waplus.io report updated?
08 · Final Verdict
Final verdict
Backend configuration host for WhatsApp Web extensions, with two antivirus detections
cdn2.waplus.io is not a website meant for visitors. A browser extension's privacy policy names it as a configuration address that the extension contacts to keep up with changes in WhatsApp Web. A security review describes a related extension that downloads settings from this host and then adds a button linking to a sibling extension. Two of 93 antivirus engines flag the host. The site's own pages could not be reviewed because it refuses direct access. We rate it Moderate Risk: there is no sign of phishing or a scam aimed at visitors, but the antivirus flags and the remotely controlled extension behaviour are worth caution.
09 · Community
Community
Are you the owner of cdn2.waplus.io?Verify and reply