{
  "uuid": "83d449f5-fbe9-47e8-8bc5-ad10855a72f6",
  "domain": "dhcpnode-whatsapp.com",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-10-24T05:00:53.726147+00:00",
  "cluster": null,
  "count": 5,
  "limit": 10,
  "results": [
    {
      "uuid": "9dc8235a-8421-4993-9476-eb65789787d4",
      "domain": "clouddns-whatsapp.com",
      "url": "https://clouddns-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 21:34:35.647117+00:00",
      "relationship_score": 44,
      "evidence": [
        {
          "type": "ocr_similarity_partial",
          "value": "jaccard=0.82",
          "contributed": 3.0
        },
        {
          "type": "same_ns_set",
          "value": "n1.xundns.com,n2.xundns.com",
          "contributed": 11.2
        },
        {
          "type": "same_template",
          "value": "aaaaaaaa-aaaaaaaa",
          "contributed": 8
        },
        {
          "type": "domain_age_window",
          "value": "2d/2d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "b5ca342e4a94e66e~b5ca352e4a94e66a d=2",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/9dc8235a-8421-4993-9476-eb65789787d4/",
      "service_range": null
    },
    {
      "uuid": "4e75d299-a28d-465e-9377-0ed5def9ad2e",
      "domain": "webedge-whatsapp.com",
      "url": "https://webedge-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 21:34:16.195045+00:00",
      "relationship_score": 44,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.86",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "n1.xundns.com,n2.xundns.com",
          "contributed": 11.2
        },
        {
          "type": "domain_age_window",
          "value": "2d/2d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "b5ca342e4e94a66e~b5ca352e4a94e66a d=4",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/4e75d299-a28d-465e-9377-0ed5def9ad2e/",
      "service_range": null
    },
    {
      "uuid": "577f32e7-09eb-4c79-93dc-0c7835dcc40e",
      "domain": "authnode-whatsapp.com",
      "url": "https://authnode-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 21:39:08.672823+00:00",
      "relationship_score": 38,
      "evidence": [
        {
          "type": "ocr_similarity_partial",
          "value": "jaccard=0.78",
          "contributed": 3.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaaa-aaaaaaaa",
          "contributed": 8
        },
        {
          "type": "domain_age_window",
          "value": "2d/2d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.1h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "b5ca352e4a94e66a~b5ca342e4e94a66e d=4",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/577f32e7-09eb-4c79-93dc-0c7835dcc40e/",
      "service_range": null
    },
    {
      "uuid": "15a6d5e5-9dd7-413b-9521-45a1c5ad341e",
      "domain": "resolver-whatsapp.com",
      "url": "https://resolver-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 22:02:02.489991+00:00",
      "relationship_score": 38,
      "evidence": [
        {
          "type": "ocr_similarity_partial",
          "value": "jaccard=0.83",
          "contributed": 3.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaaa-aaaaaaaa",
          "contributed": 8
        },
        {
          "type": "domain_age_window",
          "value": "2d/2d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.5h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "b5ca352e4a94e66a~b5ca352e4e94e26a d=2",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/15a6d5e5-9dd7-413b-9521-45a1c5ad341e/",
      "service_range": null
    },
    {
      "uuid": "a806e46b-aa64-489b-b342-a9fbd6eb13bf",
      "domain": "nodeedge-whatsapp.com",
      "url": "https://nodeedge-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-10-20 23:25:35.999374+00:00",
      "relationship_score": 36,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.86",
          "contributed": 6.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaaa-aaaaaaaa",
          "contributed": 8
        },
        {
          "type": "domain_age_window",
          "value": "2d/2d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "1.8h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/2d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "b5ca352e4a94e66a~b5ca342e4a94e66e d=2",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/a806e46b-aa64-489b-b342-a9fbd6eb13bf/",
      "service_range": null
    }
  ]
}