{
  "uuid": "1af481a3-eeb3-4da8-b724-bcc3bfe5e257",
  "domain": "works.comm-whatsapp.com",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-09-05T05:00:37.059149+00:00",
  "cluster": {
    "key": "0a89fb41d92c",
    "size": 16,
    "url": "https://phishunt.io/campaigns/0a89fb41d92c/"
  },
  "count": 10,
  "limit": 10,
  "results": [
    {
      "uuid": "371526b6-b9aa-479e-9549-dadbdcce3a9f",
      "domain": "local.comm-whatsapp.com",
      "url": "https://local.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:47.881477+00:00",
      "relationship_score": 84,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 17.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 6.9
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 5.8
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 8.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "18b69f3ebe479734f9dea68831bb8896a6594f5fc08533fe08ac7d4b612e6840",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/371526b6-b9aa-479e-9549-dadbdcce3a9f/"
    },
    {
      "uuid": "6dc6f811-b49b-4246-b1f0-fcab40001c37",
      "domain": "photo.comm-whatsapp.com",
      "url": "https://photo.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:48.052056+00:00",
      "relationship_score": 84,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 17.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 6.9
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 5.8
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 8.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "18b69f3ebe479734f9dea68831bb8896a6594f5fc08533fe08ac7d4b612e6840",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/6dc6f811-b49b-4246-b1f0-fcab40001c37/"
    },
    {
      "uuid": "e7ad0330-8052-4ecf-929f-fbf74f140415",
      "domain": "premium.comm-whatsapp.com",
      "url": "https://premium.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:48.159554+00:00",
      "relationship_score": 84,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 17.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 6.9
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 5.8
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 8.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "18b69f3ebe479734f9dea68831bb8896a6594f5fc08533fe08ac7d4b612e6840",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/e7ad0330-8052-4ecf-929f-fbf74f140415/"
    },
    {
      "uuid": "0dc7a062-8183-47df-97c1-7c52fa72a1c1",
      "domain": "sandbox.comm-whatsapp.com",
      "url": "https://sandbox.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:48.368749+00:00",
      "relationship_score": 84,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 17.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 6.9
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 5.8
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 8.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "18b69f3ebe479734f9dea68831bb8896a6594f5fc08533fe08ac7d4b612e6840",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/0dc7a062-8183-47df-97c1-7c52fa72a1c1/"
    },
    {
      "uuid": "2b150352-e8fc-456d-a672-ba7d3f5c30ba",
      "domain": "stream.comm-whatsapp.com",
      "url": "https://stream.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:48.567836+00:00",
      "relationship_score": 84,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 17.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 6.9
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 5.8
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 8.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "18b69f3ebe479734f9dea68831bb8896a6594f5fc08533fe08ac7d4b612e6840",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/2b150352-e8fc-456d-a672-ba7d3f5c30ba/"
    },
    {
      "uuid": "a89411a2-c065-4c3c-b4df-f458b7f3cbc3",
      "domain": "build.comm-whatsapp.com",
      "url": "https://build.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:47.788336+00:00",
      "relationship_score": 72,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 8.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "18b69f3ebe479734f9dea68831bb8896a6594f5fc08533fe08ac7d4b612e6840",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/a89411a2-c065-4c3c-b4df-f458b7f3cbc3/"
    },
    {
      "uuid": "caeab633-3a83-412c-8f3e-05fe4e10b9b1",
      "domain": "patch.comm-whatsapp.com",
      "url": "https://patch.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:47.962362+00:00",
      "relationship_score": 72,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 8.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "18b69f3ebe479734f9dea68831bb8896a6594f5fc08533fe08ac7d4b612e6840",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/caeab633-3a83-412c-8f3e-05fe4e10b9b1/"
    },
    {
      "uuid": "8e66aed0-3c4c-4fbf-9eb2-5c14ac20f181",
      "domain": "private.comm-whatsapp.com",
      "url": "https://private.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:48.267001+00:00",
      "relationship_score": 72,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 8.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "18b69f3ebe479734f9dea68831bb8896a6594f5fc08533fe08ac7d4b612e6840",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/8e66aed0-3c4c-4fbf-9eb2-5c14ac20f181/"
    },
    {
      "uuid": "3af3d897-a053-44ad-8686-8f2b131bc1e7",
      "domain": "staging.comm-whatsapp.com",
      "url": "https://staging.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:48.467080+00:00",
      "relationship_score": 72,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 8.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "18b69f3ebe479734f9dea68831bb8896a6594f5fc08533fe08ac7d4b612e6840",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/3af3d897-a053-44ad-8686-8f2b131bc1e7/"
    },
    {
      "uuid": "4eaa3c2b-ef3b-4f30-8b3a-28eb976a23e9",
      "domain": "desktop.scan-whatsapp.com",
      "url": "https://desktop.scan-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:49.547291+00:00",
      "relationship_score": 62,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 17.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 6.9
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 5.8
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/4eaa3c2b-ef3b-4f30-8b3a-28eb976a23e9/"
    }
  ]
}