whatsappwebapp.cfd
Appeared in the .cfd zone on Friday, October 23, 2026; by the end of that day the census found active website about education. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The name squats the WhatsApp brand on a cheap .cfd TLD. The page is a Chinese-language 'WhatsApp网页版' SEO guide whose 36 links all stay on-site (the '打开网页版' button does not go to web.whatsapp.com). This fits the brand-squat lure template used to funnel searchers toward fake WhatsApp web or download pages, though no credential form or QR capture is visible yet.
The domain whatsappwebapp.cfd impersonates WhatsApp by mimicking its web interface branding and instructing users to visit web.whatsapp.com, while the page itself is hosted on a different domain designed to capture QR-code login flows. The sealed-room architecture (no offsite links, internal form posting) combined with the brand name in the domain and Chinese-language content replicating WhatsApp Web's appearance indicates a credential-harvesting phish targeting non-English speakers.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Friday, October 23, 2026

Same data as JSON: /api/zone/domain/whatsappwebapp.cfd. This page is not indexed by search engines and does not link to the site it describes.