Highscore 55 · flagged Thursday, October 15, 2026

chatwhatsapp.win

Appeared in the .win zone on Thursday, October 15, 2026; by the end of that day the census found server error. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: whatsapp
+30
TLD with a high abuse rate
matched: win
+8
brand name behind Cloudflare
matched: cloudflare.com
+6
brand in page title, not in the name
matched: cloudflare
+20
Registrar
—
Nameserver provider
Nameservers
lorna.ns.cloudflare.com, roan.ns.cloudflare.com
First-day state
server error
HTTP status
530
Page title
Cloudflare Tunnel error | chatwhatsapp.win | Cloudflare
Has a form
no
Brand echoed
whatsapp

Model opinions

Second opinionlooks like abusetarget: WhatsAppconfidence 70%· claude-opus-5-5

The name pairs the distinctive WhatsApp brand with a cheap .win TLD that WhatsApp/Meta would not use, making it a brand-squat. The page is only a Cloudflare Tunnel 1033 error, so it shows no impersonation content yet; Cloudflare branding is the host's error page, not a target. A tunnel-backed origin on a fresh brand-squat fits a staged kit, but nothing deceptive is live.

First passlooks benignconfidence 95%· claude-haiku-4-5

The domain shows a standard Cloudflare Tunnel error page (HTTP 530, Error 1033), which is a legitimate hosting-provider placeholder indicating misconfiguration or tunnel downtime, not an attempt to impersonate WhatsApp or deceive visitors. The page contains only Cloudflare's own error messaging and administrative guidance, with no login form, credential capture, or deceptive content.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Thursday, October 15, 2026

Screenshot of chatwhatsapp.win taken by the zone census on 2026-10-15

Same data as JSON: /api/zone/domain/chatwhatsapp.win. This page is not indexed by search engines and does not link to the site it describes.