Phishing detection: siyarata-assets-workbench.whatsappapk.org
WhatsApp Investigate
Domain
siyarata-assets-workbench.whatsappapk.org13 CT hosts on apex
IP
136.110.11.34
URL
https://siyarata-assets-workbench.whatsappapk.org
Cert
Let's Encrypt
Phishunt analysis Beta
26
low suspicionheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 urlscan.io
- +3.7 Brand in domain label
- +3.5 ASN reputation
- +3.0 Site cluster
- +1.7 Shared IP cluster
- +1.1 No CSP header
- +0.9 Young certificate
- +0.7 Brand in cert SAN
- +0.6 Long domain
- +0.3 Free CA
- +0.2 Hyphens
- +0.2 Suspicious TLD
- +0.1 Deep subdomain
15 signals fired · detector v3.0.0
AI analysis AIBeta
Malware delivery
Site impersonates WhatsApp using a domain explicitly referencing an APK file, strongly suggesting distribution of a malicious WhatsApp application. Hosted on Google Cloud in Singapore, flagged by urlscan.io as malicious, and the TLS certificate covers the WhatsApp brand name directly.
Brand in domain labelBrand in cert SANurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-02 · confidence 75%
Domain & Network
Whois
Registrar
Squarespace Domains II LLC
Network
IP
136.110.11.34 Google Cloud
Country
Singapore
Hosting
Google LLC
ASN
AS396982
TLS Cert
Let's Encrypt
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise