{
  "uuid": "6051c37f-811b-4687-940e-2218c656b510",
  "domain": "build.static-whatsapp.com",
  "algorithm_version": "corr-1.3.0",
  "generated_at": "2026-09-07T05:00:32.125982+00:00",
  "cluster": {
    "key": "d6587d0fe22f",
    "size": 3,
    "host_count": 21,
    "url": "https://phishunt.io/campaigns/d6587d0fe22f/"
  },
  "count": 10,
  "limit": 10,
  "results": [
    {
      "uuid": "41d99970-16bb-4cbf-a991-0161e121c9c8",
      "domain": "photo.static-whatsapp.com",
      "url": "https://photo.static-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-06 05:24:39.545969+00:00",
      "relationship_score": 71,
      "evidence": [
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "static",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "6d/6d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "6d/6d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "1dc85935de6c5802f66efe8d590c13435783b422ff95fbacc657fcb868b93747",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "static-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e401d198cf67d88f",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "a333333333333333~a333333333333333 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/41d99970-16bb-4cbf-a991-0161e121c9c8/"
    },
    {
      "uuid": "d7fab2e9-fbf6-47cc-9c15-1201273ea570",
      "domain": "premium.static-whatsapp.com",
      "url": "https://premium.static-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-06 05:24:39.617488+00:00",
      "relationship_score": 71,
      "evidence": [
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "static",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "6d/6d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "6d/6d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "1dc85935de6c5802f66efe8d590c13435783b422ff95fbacc657fcb868b93747",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "static-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e401d198cf67d88f",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "a333333333333333~a333333333333333 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/d7fab2e9-fbf6-47cc-9c15-1201273ea570/"
    },
    {
      "uuid": "813c1899-6c6d-4d5a-809a-9660295af015",
      "domain": "staging.static-whatsapp.com",
      "url": "https://staging.static-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-06 05:24:39.843633+00:00",
      "relationship_score": 71,
      "evidence": [
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "static",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "6d/6d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "6d/6d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "1dc85935de6c5802f66efe8d590c13435783b422ff95fbacc657fcb868b93747",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "static-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e401d198cf67d88f",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "a333333333333333~a333333333333333 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/813c1899-6c6d-4d5a-809a-9660295af015/"
    },
    {
      "uuid": "214fb6ca-6a48-4481-a184-f38b007d7703",
      "domain": "stream.static-whatsapp.com",
      "url": "https://stream.static-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-06 05:24:39.917168+00:00",
      "relationship_score": 71,
      "evidence": [
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "static",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "6d/6d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "6d/6d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "1dc85935de6c5802f66efe8d590c13435783b422ff95fbacc657fcb868b93747",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "static-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e401d198cf67d88f",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "a333333333333333~a333333333333333 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/214fb6ca-6a48-4481-a184-f38b007d7703/"
    },
    {
      "uuid": "601c2be9-9e80-4fd7-81f8-5d4e349bc9e6",
      "domain": "local.static-whatsapp.com",
      "url": "https://local.static-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-06 05:24:39.389874+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "static",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "6d/6d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "6d/6d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "1dc85935de6c5802f66efe8d590c13435783b422ff95fbacc657fcb868b93747",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "static-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e401d198cf67d88f",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "a333333333333333~a333333333333333 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/601c2be9-9e80-4fd7-81f8-5d4e349bc9e6/"
    },
    {
      "uuid": "9a1d0efd-e030-4b63-ae3a-dc33581ac7ae",
      "domain": "patch.static-whatsapp.com",
      "url": "https://patch.static-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-06 05:24:39.476284+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "static",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "6d/6d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "6d/6d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "1dc85935de6c5802f66efe8d590c13435783b422ff95fbacc657fcb868b93747",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "static-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e401d198cf67d88f",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "a333333333333333~a333333333333333 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/9a1d0efd-e030-4b63-ae3a-dc33581ac7ae/"
    },
    {
      "uuid": "54abe7f4-6456-4956-8325-ec3ae7ceaf6e",
      "domain": "private.static-whatsapp.com",
      "url": "https://private.static-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-06 05:24:39.693394+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "static",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "6d/6d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "6d/6d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "1dc85935de6c5802f66efe8d590c13435783b422ff95fbacc657fcb868b93747",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "static-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e401d198cf67d88f",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "a333333333333333~a333333333333333 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/54abe7f4-6456-4956-8325-ec3ae7ceaf6e/"
    },
    {
      "uuid": "d5d1f9fa-0a53-4005-8b2c-b40391163043",
      "domain": "sandbox.static-whatsapp.com",
      "url": "https://sandbox.static-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-06 05:24:39.766666+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "static",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "6d/6d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "6d/6d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "1dc85935de6c5802f66efe8d590c13435783b422ff95fbacc657fcb868b93747",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "static-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e401d198cf67d88f",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "a333333333333333~a333333333333333 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/d5d1f9fa-0a53-4005-8b2c-b40391163043/"
    },
    {
      "uuid": "929b6d52-0706-4662-98a1-48f87606f5df",
      "domain": "works.static-whatsapp.com",
      "url": "https://works.static-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-06 05:24:40.020999+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "static",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "6d/6d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "6d/6d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "1dc85935de6c5802f66efe8d590c13435783b422ff95fbacc657fcb868b93747",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "static-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e401d198cf67d88f",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "a333333333333333~a333333333333333 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/929b6d52-0706-4662-98a1-48f87606f5df/"
    },
    {
      "uuid": "1af481a3-eeb3-4da8-b724-bcc3bfe5e257",
      "domain": "works.comm-whatsapp.com",
      "url": "https://works.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:48.664637+00:00",
      "relationship_score": 37,
      "evidence": [
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/6d",
          "contributed": 5
        },
        {
          "type": "temporal_72h",
          "value": "36.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "4d/6d",
          "contributed": 3
        },
        {
          "type": "favicon_phash_exact",
          "value": "e401d198cf67d88f",
          "contributed": 7.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/1af481a3-eeb3-4da8-b724-bcc3bfe5e257/"
    }
  ]
}