{
  "uuid": "b22a37b4-128f-4b57-a225-ad97abb6675f",
  "domain": "weekly.comm-whatsapp.com",
  "algorithm_version": "corr-1.3.0",
  "generated_at": "2026-09-08T05:00:33.765344+00:00",
  "cluster": {
    "key": "a566bb7e172e",
    "size": 3,
    "host_count": 18,
    "url": "https://phishunt.io/campaigns/a566bb7e172e/"
  },
  "count": 10,
  "limit": 10,
  "results": [
    {
      "uuid": "1a1d1b40-28e8-46af-b409-bfa349feb85e",
      "domain": "desktop.comm-whatsapp.com",
      "url": "https://desktop.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-07 05:24:33.240525+00:00",
      "relationship_score": 66,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "7d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "12.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "7d/7d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/1a1d1b40-28e8-46af-b409-bfa349feb85e/"
    },
    {
      "uuid": "c3298b70-68b2-444e-95c7-7e3aac9839d7",
      "domain": "notify.comm-whatsapp.com",
      "url": "https://notify.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-07 17:25:47.975231+00:00",
      "relationship_score": 66,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "7d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "7d/7d",
          "contributed": 2.9
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "93b29228b22205fa3e201e108f18e19bcac0916f7a7ffaefed7e378f1aecdc76",
          "contributed": 17.1
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/c3298b70-68b2-444e-95c7-7e3aac9839d7/"
    },
    {
      "uuid": "be1a931e-0dfc-4419-b1f2-a4ecd94c2f5a",
      "domain": "plan.comm-whatsapp.com",
      "url": "https://plan.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-07 17:25:48.051020+00:00",
      "relationship_score": 66,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "7d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "7d/7d",
          "contributed": 2.9
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "93b29228b22205fa3e201e108f18e19bcac0916f7a7ffaefed7e378f1aecdc76",
          "contributed": 17.1
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/be1a931e-0dfc-4419-b1f2-a4ecd94c2f5a/"
    },
    {
      "uuid": "371526b6-b9aa-479e-9549-dadbdcce3a9f",
      "domain": "local.comm-whatsapp.com",
      "url": "https://local.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:47.881477+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_7d",
          "value": "72.0h",
          "contributed": 2
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/371526b6-b9aa-479e-9549-dadbdcce3a9f/"
    },
    {
      "uuid": "6dc6f811-b49b-4246-b1f0-fcab40001c37",
      "domain": "photo.comm-whatsapp.com",
      "url": "https://photo.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:48.052056+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_7d",
          "value": "72.0h",
          "contributed": 2
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/6dc6f811-b49b-4246-b1f0-fcab40001c37/"
    },
    {
      "uuid": "e7ad0330-8052-4ecf-929f-fbf74f140415",
      "domain": "premium.comm-whatsapp.com",
      "url": "https://premium.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:48.159554+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_7d",
          "value": "72.0h",
          "contributed": 2
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/e7ad0330-8052-4ecf-929f-fbf74f140415/"
    },
    {
      "uuid": "0dc7a062-8183-47df-97c1-7c52fa72a1c1",
      "domain": "sandbox.comm-whatsapp.com",
      "url": "https://sandbox.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:48.368749+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_7d",
          "value": "72.0h",
          "contributed": 2
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/0dc7a062-8183-47df-97c1-7c52fa72a1c1/"
    },
    {
      "uuid": "285575c4-9947-4bc4-af00-e0f14fe1d615",
      "domain": "cn.comm-whatsapp.com",
      "url": "https://cn.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-07 05:24:33.157506+00:00",
      "relationship_score": 56,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "7d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "12.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "7d/7d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/285575c4-9947-4bc4-af00-e0f14fe1d615/"
    },
    {
      "uuid": "a7d39322-0bae-4b0e-9b6d-a6897a6252e9",
      "domain": "desktop.sec-whatsapp.com",
      "url": "https://desktop.sec-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-07 05:24:35.681284+00:00",
      "relationship_score": 56,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "7d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "12.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "7d/7d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/a7d39322-0bae-4b0e-9b6d-a6897a6252e9/"
    },
    {
      "uuid": "442b5ac0-423e-4d52-a2ca-4fe0a9d9fb49",
      "domain": "playground.sec-whatsapp.com",
      "url": "https://playground.sec-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-07 05:24:36.246791+00:00",
      "relationship_score": 56,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.92",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "7d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "12.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "7d/7d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/442b5ac0-423e-4d52-a2ca-4fe0a9d9fb49/"
    }
  ]
}