provision-whatsapp.com
Appeared in the .com zone on Sunday, September 6, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The name embeds the WhatsApp trademark with 'provision' (evoking WhatsApp device-linking/provisioning flows) yet serves no content of its own, merely bouncing visitors to www.yahoo.com on boutique nameservers (ns1/ns2.kenpains.com) — a classic holding/cloaking posture for a brand-squat awaiting a device-linking phish; the Yahoo branding and search form belong to the redirect destination, not this domain.
The domain 'provision-whatsapp.com' is a WhatsApp brand-squat that redirects to Yahoo's homepage with no legitimate business purpose. The nameservers (kenpains.com) are unrelated to both WhatsApp and Yahoo, indicating the attacker controls the redirect infrastructure. This is a classic typosquat/redirect abuse pattern designed to deceive visitors seeking WhatsApp into landing elsewhere.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Sunday, September 6, 2026
Same data as JSON: /api/zone/domain/provision-whatsapp.com. This page is not indexed by search engines and does not link to the site it describes.