{
  "uuid": "a3a20b82-0c24-4d47-bb2b-c97ef6ec10b1",
  "domain": "calendar.scan-whatsapp.com",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-09-05T05:00:37.059149+00:00",
  "cluster": {
    "key": "0a89fb41d92c",
    "size": 16,
    "url": "https://phishunt.io/campaigns/0a89fb41d92c/"
  },
  "count": 10,
  "limit": 10,
  "results": [
    {
      "uuid": "3c79f56e-36ac-44b1-9a9a-40562b9a773e",
      "domain": "docs.scan-whatsapp.com",
      "url": "https://docs.scan-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:49.649919+00:00",
      "relationship_score": 91,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.88",
          "contributed": 17.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 6.9
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 5.8
        },
        {
          "type": "shared_distinctive_token",
          "value": "scan",
          "contributed": 8.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "a247bb37fc4a6cc7db32f1919401ce97acf413bfb5bc9f29032210c56b69d3dd",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "scan-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/3c79f56e-36ac-44b1-9a9a-40562b9a773e/"
    },
    {
      "uuid": "d178a671-b184-45bc-9aee-7c98d722016a",
      "domain": "meet.scan-whatsapp.com",
      "url": "https://meet.scan-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:49.848843+00:00",
      "relationship_score": 91,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.88",
          "contributed": 17.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 6.9
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 5.8
        },
        {
          "type": "shared_distinctive_token",
          "value": "scan",
          "contributed": 8.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "a247bb37fc4a6cc7db32f1919401ce97acf413bfb5bc9f29032210c56b69d3dd",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "scan-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/d178a671-b184-45bc-9aee-7c98d722016a/"
    },
    {
      "uuid": "4eaa3c2b-ef3b-4f30-8b3a-28eb976a23e9",
      "domain": "desktop.scan-whatsapp.com",
      "url": "https://desktop.scan-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:49.547291+00:00",
      "relationship_score": 79,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "scan",
          "contributed": 8.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "a247bb37fc4a6cc7db32f1919401ce97acf413bfb5bc9f29032210c56b69d3dd",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "scan-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/4eaa3c2b-ef3b-4f30-8b3a-28eb976a23e9/"
    },
    {
      "uuid": "3b04720a-03f3-49db-8bf4-611f99631d7e",
      "domain": "job.scan-whatsapp.com",
      "url": "https://job.scan-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:49.759473+00:00",
      "relationship_score": 79,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "scan",
          "contributed": 8.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "a247bb37fc4a6cc7db32f1919401ce97acf413bfb5bc9f29032210c56b69d3dd",
          "contributed": 14.4
        },
        {
          "type": "san_overlap",
          "value": "scan-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/3b04720a-03f3-49db-8bf4-611f99631d7e/"
    },
    {
      "uuid": "a89411a2-c065-4c3c-b4df-f458b7f3cbc3",
      "domain": "build.comm-whatsapp.com",
      "url": "https://build.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:47.788336+00:00",
      "relationship_score": 69,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.88",
          "contributed": 17.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 6.9
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 5.8
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/a89411a2-c065-4c3c-b4df-f458b7f3cbc3/"
    },
    {
      "uuid": "caeab633-3a83-412c-8f3e-05fe4e10b9b1",
      "domain": "patch.comm-whatsapp.com",
      "url": "https://patch.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:47.962362+00:00",
      "relationship_score": 69,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.88",
          "contributed": 17.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 6.9
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 5.8
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/caeab633-3a83-412c-8f3e-05fe4e10b9b1/"
    },
    {
      "uuid": "8e66aed0-3c4c-4fbf-9eb2-5c14ac20f181",
      "domain": "private.comm-whatsapp.com",
      "url": "https://private.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:48.267001+00:00",
      "relationship_score": 69,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.88",
          "contributed": 17.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 6.9
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 5.8
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/8e66aed0-3c4c-4fbf-9eb2-5c14ac20f181/"
    },
    {
      "uuid": "3af3d897-a053-44ad-8686-8f2b131bc1e7",
      "domain": "staging.comm-whatsapp.com",
      "url": "https://staging.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:48.467080+00:00",
      "relationship_score": 69,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.88",
          "contributed": 17.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 6.9
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 5.8
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/3af3d897-a053-44ad-8686-8f2b131bc1e7/"
    },
    {
      "uuid": "371526b6-b9aa-479e-9549-dadbdcce3a9f",
      "domain": "local.comm-whatsapp.com",
      "url": "https://local.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:47.881477+00:00",
      "relationship_score": 57,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/371526b6-b9aa-479e-9549-dadbdcce3a9f/"
    },
    {
      "uuid": "6dc6f811-b49b-4246-b1f0-fcab40001c37",
      "domain": "photo.comm-whatsapp.com",
      "url": "https://photo.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:48.052056+00:00",
      "relationship_score": 57,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "138415",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Yancy Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/4d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "4d/4d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/6dc6f811-b49b-4246-b1f0-fcab40001c37/"
    }
  ]
}