Phishing detection: siyarata-assets-workbench.whatsappapk.org

WhatsApp
https://siyarata-assets-workbench.whatsappapk.org Access site
Screenshot
Screenshot of siyarata-assets-workbench.whatsappapk.org

Screenshot captured by urlscan.io on 2026-09-04T16:28 UTC: our own render of this page came back blank.

Investigate
Domain siyarata-assets-workbench.whatsappapk.org13 CT hosts on apex
URL https://siyarata-assets-workbench.whatsappapk.org
Cert Let's Encrypt
Phishunt analysis Beta
24 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 urlscan.io
  • +3.7 Brand in domain label
  • +3.0 Site cluster
  • +2.8 ASN reputation
  • +1.1 No CSP header
  • +0.9 Young certificate
  • +0.7 Brand in cert SAN
  • +0.6 Long domain
  • +0.3 Free CA
  • +0.2 Hyphens
  • +0.2 Suspicious TLD
  • +0.1 Deep subdomain
14 signals fired · detector v3.0.0
AI analysis AIBeta
Malware delivery

Site impersonates WhatsApp using a domain explicitly referencing an APK file, strongly suggesting distribution of a malicious WhatsApp application. Hosted on Google Cloud in Singapore, flagged by urlscan.io as malicious, and the TLS certificate covers the WhatsApp brand name directly.

Brand in domain labelBrand in cert SANurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-02 · confidence 75%
Domain & Network
Whois
Network
Country SingaporeSingapore
Hosting Google LLC
ASN AS396982
TLS Cert Let's Encrypt
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Network / ASN Google LLC
Registrar Squarespace Domains II LLC

Tracked from 2026-09-02 02:59 UTC  ·  Last refreshed 2026-09-10 03:30 UTC