{
  "id": 1002,
  "key": "a6026b86a904",
  "size": 8,
  "host_count": 8,
  "active_count": 8,
  "brands": [
    "whatsapp"
  ],
  "confidence": "suspected cluster",
  "confidence_score": 0.613,
  "confidence_metrics": {
    "B": 0.0,
    "D": 0.362,
    "S": 1.0,
    "T": 1.0,
    "V": 1.0
  },
  "first_seen": "2026-10-20 22:16:33.595711+00:00",
  "last_activity": "2026-10-20 22:39:19.195196+00:00",
  "top_evidence": {
    "type": "same_template",
    "coverage": "8/8 members"
  },
  "url": "https://phishunt.io/campaigns/a6026b86a904/",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-10-24T05:00:53.726147+00:00",
  "evidence_summary": [
    {
      "type": "same_template",
      "value": "aaa-aaaaaaaa",
      "members_matching": 8
    },
    {
      "type": "temporal_24h",
      "value": "0.1h",
      "members_matching": 8
    },
    {
      "type": "domain_age_window",
      "value": "7d/7d",
      "members_matching": 8
    },
    {
      "type": "cert_age_window",
      "value": "2d/3d",
      "members_matching": 8
    },
    {
      "type": "temporal_24h",
      "value": "0.2h",
      "members_matching": 6
    },
    {
      "type": "temporal_24h",
      "value": "0.3h",
      "members_matching": 6
    },
    {
      "type": "cert_age_window",
      "value": "2d/2d",
      "members_matching": 6
    },
    {
      "type": "temporal_24h",
      "value": "0.0h",
      "members_matching": 5
    },
    {
      "type": "screenshot_phash_full",
      "value": "b6c92726d8cc1e66~b6c9372698c89e66 d=4",
      "members_matching": 4
    },
    {
      "type": "screenshot_phash_full",
      "value": "b6c9372698cc1e66~b6c9372698c89e66 d=2",
      "members_matching": 3
    },
    {
      "type": "screenshot_phash_full",
      "value": "b6c92726d8cc1e66~b6c9372698cc1e66 d=2",
      "members_matching": 3
    },
    {
      "type": "screenshot_phash_full",
      "value": "b6c92726d8cc1e66~b6c96326c98c1f66 d=6",
      "members_matching": 3
    },
    {
      "type": "screenshot_phash_full",
      "value": "b6c92726d8cc1e66~a6c92726c9cc9e66 d=4",
      "members_matching": 3
    },
    {
      "type": "screenshot_phash_full",
      "value": "b6c92726d8cc1e66~a6c96326c9cc1f66 d=6",
      "members_matching": 3
    },
    {
      "type": "screenshot_phash_full",
      "value": "b6c9372698c89e66~a6c92726c9cc9e66 d=6",
      "members_matching": 3
    },
    {
      "type": "ocr_similarity_partial",
      "value": "jaccard=0.79",
      "members_matching": 3
    },
    {
      "type": "screenshot_phash_full",
      "value": "b6c92726d8cc1e66~b6c92726d8cc1e66 d=0",
      "members_matching": 2
    },
    {
      "type": "screenshot_phash_full",
      "value": "a6c92726c9cc9e66~a6c96326c9cc1f66 d=4",
      "members_matching": 2
    },
    {
      "type": "screenshot_phash_full",
      "value": "b6c96326c98c1f66~a6c92726c9cc9e66 d=6",
      "members_matching": 2
    },
    {
      "type": "screenshot_phash_full",
      "value": "b6c96326c98c1f66~a6c96326c9cc1f66 d=2",
      "members_matching": 2
    },
    {
      "type": "screenshot_phash_full",
      "value": "b6c9372698cc1e66~a6c92726c9cc9e66 d=6",
      "members_matching": 2
    },
    {
      "type": "screenshot_phash_full",
      "value": "b6c9372698c89e66~b6c9372698c89e66 d=0",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "blb-whatsapp~ble-whatsapp d=1",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "blo-whatsapp~blv-whatsapp d=1",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "bms-whatsapp~bmv-whatsapp d=1",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "bmo-whatsapp~bms-whatsapp d=1",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "bmo-whatsapp~bmv-whatsapp d=1",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "blb-whatsapp~blo-whatsapp d=1",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "blb-whatsapp~blv-whatsapp d=1",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "blb-whatsapp~bmk-whatsapp d=2",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "blb-whatsapp~bmo-whatsapp d=2",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "blb-whatsapp~bms-whatsapp d=2",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "blb-whatsapp~bmv-whatsapp d=2",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "ble-whatsapp~blo-whatsapp d=1",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "ble-whatsapp~blv-whatsapp d=1",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "ble-whatsapp~bmk-whatsapp d=2",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "ble-whatsapp~bmo-whatsapp d=2",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "ble-whatsapp~bms-whatsapp d=2",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "ble-whatsapp~bmv-whatsapp d=2",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "blo-whatsapp~bmk-whatsapp d=2",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "blo-whatsapp~bms-whatsapp d=2",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "blv-whatsapp~bmk-whatsapp d=2",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "blv-whatsapp~bms-whatsapp d=2",
      "members_matching": 2
    },
    {
      "type": "levenshtein_le2",
      "value": "bmk-whatsapp~bms-whatsapp d=1",
      "members_matching": 2
    },
    {
      "type": "ocr_similarity_full",
      "value": "jaccard=0.93",
      "members_matching": 2
    },
    {
      "type": "ocr_similarity_full",
      "value": "jaccard=0.96",
      "members_matching": 2
    },
    {
      "type": "ocr_similarity_full",
      "value": "jaccard=1.00",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "0.4h",
      "members_matching": 2
    },
    {
      "type": "cert_age_window",
      "value": "3d/3d",
      "members_matching": 2
    }
  ],
  "first_tracked": "2026-10-22T05:00:54.363548+00:00",
  "history": [
    {
      "at": "2026-10-22T05:00:54.363548+00:00",
      "event": "created",
      "size": 8,
      "joined": [
        "blb-whatsapp.com",
        "ble-whatsapp.com",
        "blo-whatsapp.com",
        "blv-whatsapp.com",
        "bmk-whatsapp.com",
        "bmo-whatsapp.com",
        "bms-whatsapp.com",
        "bmv-whatsapp.com"
      ],
      "left": []
    }
  ],
  "members": [
    {
      "uuid": "ba103df4-5230-41c5-88d8-042fd13cd602",
      "domain": "blb-whatsapp.com",
      "registrable_domain": "blb-whatsapp.com",
      "url": "http://blb-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 22:16:33.595711+00:00",
      "relationship_score": 51,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/whatsapp/ba103df4-5230-41c5-88d8-042fd13cd602/",
      "image": "screenshots/whatsapp/153d1591-d266-41a1-9201-93f7022b8a67.png",
      "phishunt_score": 25,
      "ip": "156.234.58.242",
      "asn": "138415",
      "org": "Yancy Limited",
      "country": "Hong Kong",
      "registrar": "GKG.Net, Inc.",
      "cert": "YR1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "88f25977-0b98-4ff7-bb77-fef53b346fd5",
      "domain": "ble-whatsapp.com",
      "registrable_domain": "ble-whatsapp.com",
      "url": "http://ble-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 22:18:28.911182+00:00",
      "relationship_score": 51,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/whatsapp/88f25977-0b98-4ff7-bb77-fef53b346fd5/",
      "image": "screenshots/whatsapp/2dca9eac-80dc-4021-882c-593c1c8012df.png",
      "phishunt_score": 25,
      "ip": "156.234.58.242",
      "asn": "138415",
      "org": "Yancy Limited",
      "country": "Hong Kong",
      "registrar": "GKG.Net, Inc.",
      "cert": "YR2",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "2211514e-3787-47f4-983d-8ca5597b6d9b",
      "domain": "blo-whatsapp.com",
      "registrable_domain": "blo-whatsapp.com",
      "url": "http://blo-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 22:24:46.814906+00:00",
      "relationship_score": 51,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/whatsapp/2211514e-3787-47f4-983d-8ca5597b6d9b/",
      "image": "screenshots/whatsapp/5fa4d1db-8a38-4ab5-84d0-b5f67279a174.png",
      "phishunt_score": 25,
      "ip": "156.234.58.242",
      "asn": "138415",
      "org": "Yancy Limited",
      "country": "Hong Kong",
      "registrar": "GKG.Net, Inc.",
      "cert": "YR1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "d9481dbf-f554-4cf0-a3d6-1b306296cd87",
      "domain": "blv-whatsapp.com",
      "registrable_domain": "blv-whatsapp.com",
      "url": "http://blv-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 22:28:54.242226+00:00",
      "relationship_score": 51,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/whatsapp/d9481dbf-f554-4cf0-a3d6-1b306296cd87/",
      "image": "screenshots/whatsapp/4c0ba82a-163e-46b1-93de-5f45a7c70340.png",
      "phishunt_score": 25,
      "ip": "156.234.58.242",
      "asn": "138415",
      "org": "Yancy Limited",
      "country": "Hong Kong",
      "registrar": "GKG.Net, Inc.",
      "cert": "YR2",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "ff514497-49bc-4ab6-bedf-4410aa765671",
      "domain": "bmk-whatsapp.com",
      "registrable_domain": "bmk-whatsapp.com",
      "url": "http://bmk-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 22:32:49.016307+00:00",
      "relationship_score": 45,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/whatsapp/ff514497-49bc-4ab6-bedf-4410aa765671/",
      "image": "screenshots/whatsapp/80218927-9901-4034-afc6-540f9b1daaff.png",
      "phishunt_score": 25,
      "ip": "156.234.58.242",
      "asn": "138415",
      "org": "Yancy Limited",
      "country": "Hong Kong",
      "registrar": "GKG.Net, Inc.",
      "cert": "YR1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "241811a7-c4be-4ddf-a8af-53923469f740",
      "domain": "bmo-whatsapp.com",
      "registrable_domain": "bmo-whatsapp.com",
      "url": "http://bmo-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 22:34:47.116945+00:00",
      "relationship_score": 48,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/whatsapp/241811a7-c4be-4ddf-a8af-53923469f740/",
      "image": "screenshots/whatsapp/029964da-1f5f-464f-99a9-54f1a195ed9d.png",
      "phishunt_score": 25,
      "ip": "156.234.58.242",
      "asn": "138415",
      "org": "Yancy Limited",
      "country": "Hong Kong",
      "registrar": "GKG.Net, Inc.",
      "cert": "YR1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "46b06e85-4186-4741-be44-359f69b4a23b",
      "domain": "bms-whatsapp.com",
      "registrable_domain": "bms-whatsapp.com",
      "url": "http://bms-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 22:37:09.484691+00:00",
      "relationship_score": 51,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/whatsapp/46b06e85-4186-4741-be44-359f69b4a23b/",
      "image": "screenshots/whatsapp/2a8b8918-019b-475e-9833-056db5127051.png",
      "phishunt_score": 25,
      "ip": "156.234.58.242",
      "asn": "138415",
      "org": "Yancy Limited",
      "country": "Hong Kong",
      "registrar": "GKG.Net, Inc.",
      "cert": "YR2",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "8e4b7cc9-0d8c-4490-9e37-f586895efda9",
      "domain": "bmv-whatsapp.com",
      "registrable_domain": "bmv-whatsapp.com",
      "url": "http://bmv-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 22:39:19.195196+00:00",
      "relationship_score": 51,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/whatsapp/8e4b7cc9-0d8c-4490-9e37-f586895efda9/",
      "image": "screenshots/whatsapp/e7222898-838e-45a6-8b02-bc7b0bc2ff6f.png",
      "phishunt_score": 25,
      "ip": "156.234.58.242",
      "asn": "138415",
      "org": "Yancy Limited",
      "country": "Hong Kong",
      "registrar": "GKG.Net, Inc.",
      "cert": "YR2",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": ""
    }
  ],
  "domains": [
    {
      "domain": "blb-whatsapp.com",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "blb-whatsapp.com"
      ],
      "uuids": [
        "ba103df4-5230-41c5-88d8-042fd13cd602"
      ]
    },
    {
      "domain": "ble-whatsapp.com",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "ble-whatsapp.com"
      ],
      "uuids": [
        "88f25977-0b98-4ff7-bb77-fef53b346fd5"
      ]
    },
    {
      "domain": "blo-whatsapp.com",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "blo-whatsapp.com"
      ],
      "uuids": [
        "2211514e-3787-47f4-983d-8ca5597b6d9b"
      ]
    },
    {
      "domain": "blv-whatsapp.com",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "blv-whatsapp.com"
      ],
      "uuids": [
        "d9481dbf-f554-4cf0-a3d6-1b306296cd87"
      ]
    },
    {
      "domain": "bmk-whatsapp.com",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "bmk-whatsapp.com"
      ],
      "uuids": [
        "ff514497-49bc-4ab6-bedf-4410aa765671"
      ]
    },
    {
      "domain": "bmo-whatsapp.com",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "bmo-whatsapp.com"
      ],
      "uuids": [
        "241811a7-c4be-4ddf-a8af-53923469f740"
      ]
    },
    {
      "domain": "bms-whatsapp.com",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "bms-whatsapp.com"
      ],
      "uuids": [
        "46b06e85-4186-4741-be44-359f69b4a23b"
      ]
    },
    {
      "domain": "bmv-whatsapp.com",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "bmv-whatsapp.com"
      ],
      "uuids": [
        "8e4b7cc9-0d8c-4490-9e37-f586895efda9"
      ]
    }
  ],
  "relationships": [
    {
      "domain_a": "blb-whatsapp.com",
      "domain_b": "ble-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/ba103df4-5230-41c5-88d8-042fd13cd602/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/88f25977-0b98-4ff7-bb77-fef53b346fd5/",
      "score": 51,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "blo-whatsapp.com",
      "domain_b": "blv-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/2211514e-3787-47f4-983d-8ca5597b6d9b/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/d9481dbf-f554-4cf0-a3d6-1b306296cd87/",
      "score": 51,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "bms-whatsapp.com",
      "domain_b": "bmv-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/46b06e85-4186-4741-be44-359f69b4a23b/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/8e4b7cc9-0d8c-4490-9e37-f586895efda9/",
      "score": 51,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "bmo-whatsapp.com",
      "domain_b": "bms-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/241811a7-c4be-4ddf-a8af-53923469f740/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/46b06e85-4186-4741-be44-359f69b4a23b/",
      "score": 48,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_partial",
          "category": "content",
          "contributed": 3.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "bmo-whatsapp.com",
      "domain_b": "bmv-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/241811a7-c4be-4ddf-a8af-53923469f740/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/8e4b7cc9-0d8c-4490-9e37-f586895efda9/",
      "score": 48,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_partial",
          "category": "content",
          "contributed": 3.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "blb-whatsapp.com",
      "domain_b": "blo-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/ba103df4-5230-41c5-88d8-042fd13cd602/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/2211514e-3787-47f4-983d-8ca5597b6d9b/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "blb-whatsapp.com",
      "domain_b": "blv-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/ba103df4-5230-41c5-88d8-042fd13cd602/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/d9481dbf-f554-4cf0-a3d6-1b306296cd87/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "blb-whatsapp.com",
      "domain_b": "bmk-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/ba103df4-5230-41c5-88d8-042fd13cd602/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/ff514497-49bc-4ab6-bedf-4410aa765671/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "blb-whatsapp.com",
      "domain_b": "bmo-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/ba103df4-5230-41c5-88d8-042fd13cd602/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/241811a7-c4be-4ddf-a8af-53923469f740/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "blb-whatsapp.com",
      "domain_b": "bms-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/ba103df4-5230-41c5-88d8-042fd13cd602/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/46b06e85-4186-4741-be44-359f69b4a23b/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "blb-whatsapp.com",
      "domain_b": "bmv-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/ba103df4-5230-41c5-88d8-042fd13cd602/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/8e4b7cc9-0d8c-4490-9e37-f586895efda9/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "ble-whatsapp.com",
      "domain_b": "blo-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/88f25977-0b98-4ff7-bb77-fef53b346fd5/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/2211514e-3787-47f4-983d-8ca5597b6d9b/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "ble-whatsapp.com",
      "domain_b": "blv-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/88f25977-0b98-4ff7-bb77-fef53b346fd5/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/d9481dbf-f554-4cf0-a3d6-1b306296cd87/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "ble-whatsapp.com",
      "domain_b": "bmk-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/88f25977-0b98-4ff7-bb77-fef53b346fd5/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/ff514497-49bc-4ab6-bedf-4410aa765671/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "ble-whatsapp.com",
      "domain_b": "bmo-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/88f25977-0b98-4ff7-bb77-fef53b346fd5/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/241811a7-c4be-4ddf-a8af-53923469f740/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "ble-whatsapp.com",
      "domain_b": "bms-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/88f25977-0b98-4ff7-bb77-fef53b346fd5/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/46b06e85-4186-4741-be44-359f69b4a23b/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "ble-whatsapp.com",
      "domain_b": "bmv-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/88f25977-0b98-4ff7-bb77-fef53b346fd5/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/8e4b7cc9-0d8c-4490-9e37-f586895efda9/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "blo-whatsapp.com",
      "domain_b": "bmk-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/2211514e-3787-47f4-983d-8ca5597b6d9b/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/ff514497-49bc-4ab6-bedf-4410aa765671/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "blo-whatsapp.com",
      "domain_b": "bms-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/2211514e-3787-47f4-983d-8ca5597b6d9b/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/46b06e85-4186-4741-be44-359f69b4a23b/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "blv-whatsapp.com",
      "domain_b": "bmk-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/d9481dbf-f554-4cf0-a3d6-1b306296cd87/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/ff514497-49bc-4ab6-bedf-4410aa765671/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "blv-whatsapp.com",
      "domain_b": "bms-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/d9481dbf-f554-4cf0-a3d6-1b306296cd87/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/46b06e85-4186-4741-be44-359f69b4a23b/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "bmk-whatsapp.com",
      "domain_b": "bms-whatsapp.com",
      "detail_url_a": "https://phishunt.io/suspicious/whatsapp/ff514497-49bc-4ab6-bedf-4410aa765671/",
      "detail_url_b": "https://phishunt.io/suspicious/whatsapp/46b06e85-4186-4741-be44-359f69b4a23b/",
      "score": 45,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-10-21",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 16.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "same_template",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    }
  ],
  "relationships_truncated": false,
  "state": "live"
}