{
  "uuid": "c3298b70-68b2-444e-95c7-7e3aac9839d7",
  "domain": "notify.comm-whatsapp.com",
  "algorithm_version": "corr-1.3.0",
  "generated_at": "2026-09-08T05:00:33.765344+00:00",
  "cluster": {
    "key": "a566bb7e172e",
    "size": 3,
    "host_count": 18,
    "url": "https://phishunt.io/campaigns/a566bb7e172e/"
  },
  "count": 10,
  "limit": 10,
  "results": [
    {
      "uuid": "be1a931e-0dfc-4419-b1f2-a4ecd94c2f5a",
      "domain": "plan.comm-whatsapp.com",
      "url": "https://plan.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-07 17:25:48.051020+00:00",
      "relationship_score": 78,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.88",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "7d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "7d/7d",
          "contributed": 2.9
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "93b29228b22205fa3e201e108f18e19bcac0916f7a7ffaefed7e378f1aecdc76",
          "contributed": 17.1
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/be1a931e-0dfc-4419-b1f2-a4ecd94c2f5a/"
    },
    {
      "uuid": "285575c4-9947-4bc4-af00-e0f14fe1d615",
      "domain": "cn.comm-whatsapp.com",
      "url": "https://cn.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-07 05:24:33.157506+00:00",
      "relationship_score": 66,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.88",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "7d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "12.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "7d/7d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/285575c4-9947-4bc4-af00-e0f14fe1d615/"
    },
    {
      "uuid": "b22a37b4-128f-4b57-a225-ad97abb6675f",
      "domain": "weekly.comm-whatsapp.com",
      "url": "https://weekly.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-07 17:25:48.359369+00:00",
      "relationship_score": 66,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "7d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "7d/7d",
          "contributed": 2.9
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "93b29228b22205fa3e201e108f18e19bcac0916f7a7ffaefed7e378f1aecdc76",
          "contributed": 17.1
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/b22a37b4-128f-4b57-a225-ad97abb6675f/"
    },
    {
      "uuid": "a89411a2-c065-4c3c-b4df-f458b7f3cbc3",
      "domain": "build.comm-whatsapp.com",
      "url": "https://build.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:47.788336+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.88",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_7d",
          "value": "72.0h",
          "contributed": 2
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/a89411a2-c065-4c3c-b4df-f458b7f3cbc3/"
    },
    {
      "uuid": "caeab633-3a83-412c-8f3e-05fe4e10b9b1",
      "domain": "patch.comm-whatsapp.com",
      "url": "https://patch.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:47.962362+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.88",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_7d",
          "value": "72.0h",
          "contributed": 2
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/caeab633-3a83-412c-8f3e-05fe4e10b9b1/"
    },
    {
      "uuid": "8e66aed0-3c4c-4fbf-9eb2-5c14ac20f181",
      "domain": "private.comm-whatsapp.com",
      "url": "https://private.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:48.267001+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.88",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_7d",
          "value": "72.0h",
          "contributed": 2
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/8e66aed0-3c4c-4fbf-9eb2-5c14ac20f181/"
    },
    {
      "uuid": "1a1d1b40-28e8-46af-b409-bfa349feb85e",
      "domain": "desktop.comm-whatsapp.com",
      "url": "https://desktop.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-07 05:24:33.240525+00:00",
      "relationship_score": 56,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "7d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_24h",
          "value": "12.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "7d/7d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/1a1d1b40-28e8-46af-b409-bfa349feb85e/"
    },
    {
      "uuid": "a3a20b82-0c24-4d47-bb2b-c97ef6ec10b1",
      "domain": "calendar.scan-whatsapp.com",
      "url": "https://calendar.scan-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:49.355151+00:00",
      "relationship_score": 48,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.88",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_7d",
          "value": "72.0h",
          "contributed": 2
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/a3a20b82-0c24-4d47-bb2b-c97ef6ec10b1/"
    },
    {
      "uuid": "3c79f56e-36ac-44b1-9a9a-40562b9a773e",
      "domain": "docs.scan-whatsapp.com",
      "url": "https://docs.scan-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:49.649919+00:00",
      "relationship_score": 48,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ip",
          "value": "156.234.67.88",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_7d",
          "value": "72.0h",
          "contributed": 2
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/3c79f56e-36ac-44b1-9a9a-40562b9a773e/"
    },
    {
      "uuid": "371526b6-b9aa-479e-9549-dadbdcce3a9f",
      "domain": "local.comm-whatsapp.com",
      "url": "https://local.comm-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-04 17:24:47.881477+00:00",
      "relationship_score": 48,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.98",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.kenpains.com,ns2.kenpains.com",
          "contributed": 3.5
        },
        {
          "type": "shared_final_host",
          "value": "consent.yahoo.com",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "comm",
          "contributed": 5.0
        },
        {
          "type": "domain_age_window",
          "value": "4d/7d",
          "contributed": 5
        },
        {
          "type": "temporal_7d",
          "value": "72.0h",
          "contributed": 2
        },
        {
          "type": "san_overlap",
          "value": "comm-whatsapp.com",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "e266cd9993338e92",
          "contributed": 7.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "9e516136654e3567~9e516136654e3567 d=0",
          "contributed": 8.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/371526b6-b9aa-479e-9549-dadbdcce3a9f/"
    }
  ]
}