Highscore 55 · flagged Saturday, September 19, 2026

whatsapp8.cyou

Appeared in the .cyou zone on Saturday, September 19, 2026; by the end of that day the census found empty page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: whatsapp
+30
brand plus digits
matched: whatsapp8
+8
TLD with a high abuse rate
matched: cyou
+8
brand name and brand-styled page
matched: whatsapp
+15
Registrar
Nameserver provider
Nameservers
a4.share-dns.com, b4.share-dns.net
First-day state
empty page
HTTP status
200
Page title
WhatsApp Security Center
Has a form
no
Brand echoed
whatsapp

Model opinions

Second opinionlooks like phishingtarget: WhatsAppconfidence 93%· claude-opus-5

Domain whatsapp8.cyou hosts a page titled "WhatsApp Security Center" with WhatsApp's logo and green branding, offering "login recovery" and "verification support" via 24/7 live chat agents — a fake support desk designed to walk victims into handing over WhatsApp verification codes (the 'We Never Ask for Codes' disclaimer is classic misdirection); the chat widget is an operator waiting, not a real Meta property.

First passlooks like phishingtarget: WhatsAppconfidence 98%· claude-haiku-4-5

The domain whatsapp8.cyou impersonates WhatsApp by using the brand name, WhatsApp logo, and the page title 'WhatsApp Security Center' to deceive visitors into believing this is an official WhatsApp support portal. The page offers 'Account protection, login recovery and verification support' with a 'Chat Now' button and claims to provide 'live security agents,' a classic social-engineering tactic to lure users into disclosing credentials or personal data under the pretense of account recovery.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Saturday, September 19, 2026

Screenshot of whatsapp8.cyou taken by the zone census on 2026-09-19

Same data as JSON: /api/zone/domain/whatsapp8.cyou. This page is not indexed by search engines and does not link to the site it describes.