{
  "uuid": "1238ffdf-84a8-44b4-b767-e54554896a95",
  "domain": "canary.sec-whatsapp.com",
  "algorithm_version": "corr-1.3.0",
  "generated_at": "2026-09-10T05:00:41.091776+00:00",
  "cluster": null,
  "count": 10,
  "limit": 10,
  "results": [
    {
      "uuid": "ae000b99-94f7-42e0-8d9d-eb2e19b84ef2",
      "domain": "public.sec-whatsapp.com",
      "url": "https://public.sec-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-08 05:25:53.487456+00:00",
      "relationship_score": 58,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "8d/8d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "8d/8d",
          "contributed": 2.9
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "8269a676fa614df6979b4ce2904dfb4b3d3eb25704c39db8c137e49f50d50aed",
          "contributed": 17.1
        },
        {
          "type": "san_overlap",
          "value": "sec-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/ae000b99-94f7-42e0-8d9d-eb2e19b84ef2/"
    },
    {
      "uuid": "a7d39322-0bae-4b0e-9b6d-a6897a6252e9",
      "domain": "desktop.sec-whatsapp.com",
      "url": "https://desktop.sec-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-07 05:24:35.681284+00:00",
      "relationship_score": 51,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "7d/8d",
          "contributed": 5
        },
        {
          "type": "temporal_72h",
          "value": "24.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "7d/8d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "sec-whatsapp.com",
          "contributed": 12.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/a7d39322-0bae-4b0e-9b6d-a6897a6252e9/"
    },
    {
      "uuid": "b22a37b4-128f-4b57-a225-ad97abb6675f",
      "domain": "weekly.comm-whatsapp.com",
      "url": "https://weekly.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-07 17:25:48.359369+00:00",
      "relationship_score": 41,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "7d/8d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "12.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "7d/8d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/b22a37b4-128f-4b57-a225-ad97abb6675f/"
    },
    {
      "uuid": "285575c4-9947-4bc4-af00-e0f14fe1d615",
      "domain": "cn.comm-whatsapp.com",
      "url": "https://cn.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-07 05:24:33.157506+00:00",
      "relationship_score": 39,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "7d/8d",
          "contributed": 5
        },
        {
          "type": "temporal_72h",
          "value": "24.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "7d/8d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/285575c4-9947-4bc4-af00-e0f14fe1d615/"
    },
    {
      "uuid": "1a1d1b40-28e8-46af-b409-bfa349feb85e",
      "domain": "desktop.comm-whatsapp.com",
      "url": "https://desktop.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-07 05:24:33.240525+00:00",
      "relationship_score": 39,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "7d/8d",
          "contributed": 5
        },
        {
          "type": "temporal_72h",
          "value": "24.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "7d/8d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/1a1d1b40-28e8-46af-b409-bfa349feb85e/"
    },
    {
      "uuid": "a89411a2-c065-4c3c-b4df-f458b7f3cbc3",
      "domain": "build.comm-whatsapp.com",
      "url": "https://build.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:47.788336+00:00",
      "relationship_score": 29,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "temporal_7d",
          "value": "84.0h",
          "contributed": 2
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/a89411a2-c065-4c3c-b4df-f458b7f3cbc3/"
    },
    {
      "uuid": "a3a20b82-0c24-4d47-bb2b-c97ef6ec10b1",
      "domain": "calendar.scan-whatsapp.com",
      "url": "https://calendar.scan-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:49.355151+00:00",
      "relationship_score": 29,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "temporal_7d",
          "value": "84.0h",
          "contributed": 2
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/a3a20b82-0c24-4d47-bb2b-c97ef6ec10b1/"
    },
    {
      "uuid": "4eaa3c2b-ef3b-4f30-8b3a-28eb976a23e9",
      "domain": "desktop.scan-whatsapp.com",
      "url": "https://desktop.scan-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:49.547291+00:00",
      "relationship_score": 29,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "temporal_7d",
          "value": "84.0h",
          "contributed": 2
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/4eaa3c2b-ef3b-4f30-8b3a-28eb976a23e9/"
    },
    {
      "uuid": "3c79f56e-36ac-44b1-9a9a-40562b9a773e",
      "domain": "docs.scan-whatsapp.com",
      "url": "https://docs.scan-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:49.649919+00:00",
      "relationship_score": 29,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "temporal_7d",
          "value": "84.0h",
          "contributed": 2
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/3c79f56e-36ac-44b1-9a9a-40562b9a773e/"
    },
    {
      "uuid": "371526b6-b9aa-479e-9549-dadbdcce3a9f",
      "domain": "local.comm-whatsapp.com",
      "url": "https://local.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:47.881477+00:00",
      "relationship_score": 29,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "temporal_7d",
          "value": "84.0h",
          "contributed": 2
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/371526b6-b9aa-479e-9549-dadbdcce3a9f/"
    }
  ]
}