{
  "uuid": "4e75d299-a28d-465e-9377-0ed5def9ad2e",
  "domain": "webedge-whatsapp.com",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-10-24T05:00:53.726147+00:00",
  "cluster": null,
  "count": 7,
  "limit": 10,
  "results": [
    {
      "uuid": "83d449f5-fbe9-47e8-8bc5-ad10855a72f6",
      "domain": "dhcpnode-whatsapp.com",
      "url": "https://dhcpnode-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 21:34:49.438298+00:00",
      "relationship_score": 44,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.86",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "n1.xundns.com,n2.xundns.com",
          "contributed": 11.2
        },
        {
          "type": "domain_age_window",
          "value": "2d/2d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "b5ca342e4e94a66e~b5ca352e4a94e66a d=4",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/83d449f5-fbe9-47e8-8bc5-ad10855a72f6/",
      "service_range": null
    },
    {
      "uuid": "344d462b-6db1-4ddf-b06a-b02555950490",
      "domain": "dnshost-whatsapp.com",
      "url": "https://dnshost-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 21:56:52.467053+00:00",
      "relationship_score": 42,
      "evidence": [
        {
          "type": "ocr_similarity_partial",
          "value": "jaccard=0.75",
          "contributed": 6
        },
        {
          "type": "same_ns_set",
          "value": "n1.xundns.com,n2.xundns.com",
          "contributed": 11.2
        },
        {
          "type": "same_template",
          "value": "aaaaaaa-aaaaaaaa",
          "contributed": 8
        },
        {
          "type": "domain_age_window",
          "value": "2d/2d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.4h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=7.9",
          "contributed": 3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/344d462b-6db1-4ddf-b06a-b02555950490/",
      "service_range": null
    },
    {
      "uuid": "53312bc1-c42e-4f44-9eb1-0b441d3aa0dd",
      "domain": "apphost-whatsapp.com",
      "url": "http://apphost-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 22:13:22.926531+00:00",
      "relationship_score": 41,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.96",
          "contributed": 6.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaa-aaaaaaaa",
          "contributed": 8
        },
        {
          "type": "domain_age_window",
          "value": "2d/2d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.7h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/2d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "b5ca342e4e94a66e~b5ca342e4e94a66e d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/53312bc1-c42e-4f44-9eb1-0b441d3aa0dd/",
      "service_range": null
    },
    {
      "uuid": "9dc8235a-8421-4993-9476-eb65789787d4",
      "domain": "clouddns-whatsapp.com",
      "url": "https://clouddns-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 21:34:35.647117+00:00",
      "relationship_score": 39,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.96",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "n1.xundns.com,n2.xundns.com",
          "contributed": 11.2
        },
        {
          "type": "domain_age_window",
          "value": "2d/2d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "b5ca342e4e94a66e~b5ca342e4a94e66e d=2",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/9dc8235a-8421-4993-9476-eb65789787d4/",
      "service_range": null
    },
    {
      "uuid": "45d677b9-993c-4d96-bf87-f3138846c84b",
      "domain": "apihost-whatsapp.com",
      "url": "http://apihost-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 22:11:00.508610+00:00",
      "relationship_score": 38,
      "evidence": [
        {
          "type": "ocr_similarity_partial",
          "value": "jaccard=0.81",
          "contributed": 3.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaa-aaaaaaaa",
          "contributed": 8
        },
        {
          "type": "domain_age_window",
          "value": "2d/2d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.6h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "b5ca342e4e94a66e~b5ca352e4e94e26a d=4",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/45d677b9-993c-4d96-bf87-f3138846c84b/",
      "service_range": null
    },
    {
      "uuid": "91096c49-c0cb-4bd5-9b3c-f5f82c97f1cf",
      "domain": "appedge-whatsapp.com",
      "url": "http://appedge-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 22:12:53.497721+00:00",
      "relationship_score": 38,
      "evidence": [
        {
          "type": "ocr_similarity_partial",
          "value": "jaccard=0.82",
          "contributed": 3.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaa-aaaaaaaa",
          "contributed": 8
        },
        {
          "type": "domain_age_window",
          "value": "2d/2d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.6h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/2d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "b5ca342e4e94a66e~b5ca342e4e94e66a d=2",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/91096c49-c0cb-4bd5-9b3c-f5f82c97f1cf/",
      "service_range": null
    },
    {
      "uuid": "2d8cf947-b556-457c-8ae2-5b7d50c19acc",
      "domain": "gitnode-whatsapp.com",
      "url": "https://gitnode-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 21:40:09.692816+00:00",
      "relationship_score": 36,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.93",
          "contributed": 6.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaa-aaaaaaaa",
          "contributed": 8
        },
        {
          "type": "domain_age_window",
          "value": "2d/2d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.1h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "b5ca342e4e94a66e~b5ca342e4a94e66e d=2",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/2d8cf947-b556-457c-8ae2-5b7d50c19acc/",
      "service_range": null
    }
  ]
}