sandbox.comm-whatsapp.com

https://sandbox.comm-whatsapp.com Access site

Screenshot

Investigate

Domain sandbox.comm-whatsapp.com40 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 156.234.67.92

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://sandbox.comm-whatsapp.com

urlscan

Wayback

archive.today

Cert YR1

crt.sh

Censys

Google CT

Phishunt analysis Beta

37 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+4.0 Young domain
+3.5 ASN reputation
+3.4 Cert reuse
+3.4 Shared IP cluster
+1.1 No CSP header
+0.9 Young certificate
+0.9 No registrar lock
+0.7 Brand in cert SAN
+0.7 Bulletproof DNS
+0.6 Final host mismatch
+0.6 Registrar reputation
+0.5 Long domain
+0.3 Free CA
+0.2 Suspicious TLD
+0.1 Hyphens
+0.1 Deep subdomain

22 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Site abuses WhatsApp branding on a 4-day-old comm-whatsapp.com domain hosted by Hong Kong provider Yancy Limited via a Chinese registrar. Part of a coordinated phishing cluster sharing IPs and redirect chains with scan-whatsapp.com, flagged by Google Safe Browsing as social engineering.

Google Safe BrowsingRedirect chainSite cluster

AI-generated from stored detector signals - the AI never visited the site. · 2026-09-04 · confidence 81%

Domain & Network

Whois

Registrar Guizhou Zhongyu Zhike Network Technology Co., Ltd.

Network

IP 156.234.67.92

Country

Hong Kong

Hosting Yancy Limited

ASN AS138415

TLS Cert YR1

External detection Google Safe Browsing

GSB category: SOCIAL_ENGINEERING

CleanOpenPhish · PhishTank · TweetFeed · urlscan.io

Campaign

Report this phishing

Submit to blocklists

Google Safe Browsing Microsoft SmartScreen APWG PhishTank

Tracked from 2026-09-04 17:24 UTC · Last refreshed 2026-09-05 03:30 UTC

Phishing detection: sandbox.comm-whatsapp.com