{
  "uuid": "4263b090-9573-47c8-b9de-1a1516c577a0",
  "domain": "web.whatsapp.tw.cn",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-10-24T05:00:53.726147+00:00",
  "cluster": null,
  "count": 1,
  "limit": 10,
  "results": [
    {
      "uuid": "82235e5b-6ae7-4f85-92ec-b81d5aaf21bc",
      "domain": "whatsapp.tw.cn",
      "url": "https://whatsapp.tw.cn",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-23 17:22:46.952114+00:00",
      "relationship_score": 75,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "tw.cn",
          "contributed": 10.0
        },
        {
          "type": "same_ns_set",
          "value": "kiki.ns.cloudflare.com,vicky.ns.cloudflare.com",
          "contributed": 14.0
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "2d/2d",
          "contributed": 2.9
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "b5710837863b4abc5b39361d3f2039cc8bb251fd2ead9140cbd039a45b91f072",
          "contributed": 17.1
        },
        {
          "type": "san_overlap",
          "value": "tw.cn",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "ea84bb91ac66b319",
          "contributed": 11.7
        },
        {
          "type": "screenshot_phash_full",
          "value": "aa557777cc8c2322~aa5577779c983222 d=6",
          "contributed": 13.3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/82235e5b-6ae7-4f85-92ec-b81d5aaf21bc/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "188.114.96.0/20",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    }
  ]
}