{
  "uuid": "17c59491-da3c-405e-a74e-22ac945f0a11",
  "domain": "livepc.h5-whatsapp-zn.hl.cn",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-08-31T05:00:31.486626+00:00",
  "cluster": null,
  "count": 2,
  "limit": 10,
  "results": [
    {
      "uuid": "c961c2e0-75d5-4458-9b43-cebfe349ce0c",
      "domain": "me.h5-whatsapp-zn.hl.cn",
      "url": "https://me.h5-whatsapp-zn.hl.cn",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-08-23 01:03:17.911801+00:00",
      "relationship_score": 68,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "hl.cn",
          "contributed": 6.5
        },
        {
          "type": "same_asn",
          "value": "136038",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "192.197.113.111",
          "contributed": 14.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 9.2
        },
        {
          "type": "same_org",
          "value": "HDTIDC LIMITED",
          "contributed": 0.0
        },
        {
          "type": "temporal_72h",
          "value": "36.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "7d/8d",
          "contributed": 2.9
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "48e3066680a3f0789b6d9684dfced7885f56fc5016d6361183fb2560a19c48a6",
          "contributed": 17.1
        },
        {
          "type": "san_overlap",
          "value": "hl.cn",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "c6b03d4fc9e09636",
          "contributed": 14.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/c961c2e0-75d5-4458-9b43-cebfe349ce0c/"
    },
    {
      "uuid": "ec764242-29fc-4767-b6eb-3c0686476e68",
      "domain": "file-whatsappn.hl.cn",
      "url": "http://file-whatsappn.hl.cn/wordpress-6.8.3-pt_BR/wordpress/wp-content/themes/twentytwentythree/patterns/footer-default.php",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-08-26 01:02:29.868918+00:00",
      "relationship_score": 26,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "hl.cn",
          "contributed": 10.0
        },
        {
          "type": "temporal_72h",
          "value": "36.0h",
          "contributed": 4
        },
        {
          "type": "san_overlap",
          "value": "hl.cn",
          "contributed": 12.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/ec764242-29fc-4767-b6eb-3c0686476e68/"
    }
  ]
}