Highscore 44 · flagged Tuesday, September 15, 2026

app-whatsapp.ltd

Appeared in the .ltd zone on Tuesday, September 15, 2026; by the end of that day the census found active website about education. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: whatsapp
+30
brand name behind Cloudflare
matched: cloudflare.com
+6
brand name at a retail registrar
matched: Vantage of Convergence (Chengdu) Technol
+8
Registrar
Vantage of Convergence (Chengdu) Technology Co., Ltd.
Nameserver provider
Nameservers
chloe.ns.cloudflare.com, jaxson.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
whatsapp网页版 - 玩家社区口碑之选,从零开始的完整操作教程
Has a form
no
Brand echoed
whatsapp

Model opinions

Second opinionlooks like abusetarget: WhatsAppconfidence 74%· claude-opus-5

Domain app-whatsapp.ltd hosts a Chinese-language page titled "whatsapp网页版" presenting itself as the official WhatsApp Web client/tutorial with a "立即开始使用" call-to-action, and links out to a keyword-stuffed satellite network (java./sql./linux./ios./android./game.micro-whatsapp.com) — the classic Chinese SEO brand-squat cluster pushing unofficial WhatsApp clients/downloads. No credential form is present, so this is brand-squat/unofficial-app abuse rather than a proven credential phish, though a QR-

First passlooks like phishingtarget: WhatsAppconfidence 95%· claude-haiku-4-5

The domain app-whatsapp.ltd impersonates WhatsApp by using its brand name and presenting a fake 'WhatsApp web version' (whatsapp网页版) tutorial page in Chinese. The page falsely claims to offer desktop access to WhatsApp with QR-code login, message sync, and keyboard shortcuts—mimicking WhatsApp Web's actual features—to deceive users into believing this is an official or legitimate alternative access method. The links to micro-whatsapp.com subdomains (java, sql, mysql, linux, etc.) suggest infrast

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, September 15, 2026

Screenshot of app-whatsapp.ltd taken by the zone census on 2026-09-15

Same data as JSON: /api/zone/domain/app-whatsapp.ltd. This page is not indexed by search engines and does not link to the site it describes.