Phishing detection: siyarata-assets-workbench.whatsappapk.org
WhatsApp Screenshot
Screenshot captured by urlscan.io on 2026-09-04T16:28 UTC: our own render of this page came back blank.
Investigate
Domain
siyarata-assets-workbench.whatsappapk.org13 CT hosts on apex
IP
136.110.11.34
URL
https://siyarata-assets-workbench.whatsappapk.org
Cert
Let's Encrypt
Phishunt analysis Beta
24
low suspicionheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 urlscan.io
- +3.7 Brand in domain label
- +3.0 Site cluster
- +2.8 ASN reputation
- +1.1 No CSP header
- +0.9 Young certificate
- +0.7 Brand in cert SAN
- +0.6 Long domain
- +0.3 Free CA
- +0.2 Hyphens
- +0.2 Suspicious TLD
- +0.1 Deep subdomain
14 signals fired · detector v3.0.0
AI analysis AIBeta
Malware delivery
Site impersonates WhatsApp using a domain explicitly referencing an APK file, strongly suggesting distribution of a malicious WhatsApp application. Hosted on Google Cloud in Singapore, flagged by urlscan.io as malicious, and the TLS certificate covers the WhatsApp brand name directly.
Brand in domain labelBrand in cert SANurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-02 · confidence 75%
Domain & Network
Whois
Registrar
Squarespace Domains II LLC
Network
Country
Singapore
Hosting
Google LLC
ASN
AS396982
TLS Cert
Let's Encrypt
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise