chatwhatsapp.win
Appeared in the .win zone on Thursday, October 15, 2026; by the end of that day the census found server error. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The name pairs the distinctive WhatsApp brand with a cheap .win TLD that WhatsApp/Meta would not use, making it a brand-squat. The page is only a Cloudflare Tunnel 1033 error, so it shows no impersonation content yet; Cloudflare branding is the host's error page, not a target. A tunnel-backed origin on a fresh brand-squat fits a staged kit, but nothing deceptive is live.
The domain shows a standard Cloudflare Tunnel error page (HTTP 530, Error 1033), which is a legitimate hosting-provider placeholder indicating misconfiguration or tunnel downtime, not an attempt to impersonate WhatsApp or deceive visitors. The page contains only Cloudflare's own error messaging and administrative guidance, with no login form, credential capture, or deceptive content.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, October 15, 2026

Same data as JSON: /api/zone/domain/chatwhatsapp.win. This page is not indexed by search engines and does not link to the site it describes.