try[.]sigma-whatsapp[.]com
try.sigma-whatsapp.com — 未验证. 证据摘要: VirusTotal 9/89 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, G-Data, Gridinsoft); URLScan capture; CF Radar malicious; PhishDestroy score 77/100. 注册商: Guizhou Zhongyu Zhike ….
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
try.sigma-whatsapp.com is a subdomain of sigma-whatsapp.com. PhishDestroy first observed the hostname on Sep 9, 2026. Current evidence score: 77/100 (critical).
Positive findings are stored from 2 sources: VirusTotal and Cloudflare Radar. VirusTotal recorded 9 detections among 89 engines: alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, G-Data, Gridinsoft, Kaspersky, OpenPhish, Seclookup, Sophos on Sep 9, 2026 at 03:14 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Sep 8, 2026 at 22:20 UTC. Google Safe Browsing returned no flag on Sep 9, 2026 at 03:15 UTC. URLScan captured the page on Sep 9, 2026 at 00:34 UTC.
The collector marked the hostname reachable on Sep 9, 2026 at 00:34 UTC, but did not retain the HTTP response code. Registration records for the registrable domain sigma-whatsapp.com list Guizhou Zhongyu Zhike Network Technology Co., Ltd. as the registrar and Sep 4, 2026 as the creation date. Registration preceded first observation by 4 days. At collection time, the hostname resolved to 172.67.220.129 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Google Trust Services / WE1 as the certificate issuer with validity through Dec 3, 2026; checked Sep 9, 2026 at 01:02 UTC.
The record contains 2 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.
网络安全情报
Detection timeline
-
VirusTotal
stage4.timeline.transition (+1) (Added: Gridinsoft)
-
VirusTotal
stage4.timeline.transition (+1) (Added: CRDF)
-
VirusTotal
stage4.timeline.transition (+5) (Added: Forcepoint ThreatSeeker, G-Data, Kaspersky, Seclookup, Sophos)
-
stage4.timeline.first_seen
stage4.timeline.first_value
威胁响应 Pipeline
公共封禁名单状态
Blocklist coverage
stage4.blocklist.scope_plural
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
Registration: sigma-whatsapp.com
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For the registrable domain sigma-whatsapp.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
所用技术 · 2 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 置信度 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 置信度 100%VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of try.sigma-whatsapp.com · checked Sep 9, 2026
所用技术
stage4.technology.identified_plural
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。