{
  "uuid": "d49045b7-5096-4271-8816-2124605617e5",
  "domain": "app.wave-whatsapp.com",
  "algorithm_version": "corr-1.3.0",
  "generated_at": "2026-09-17T05:00:52.339094+00:00",
  "cluster": null,
  "count": 3,
  "limit": 10,
  "results": [
    {
      "uuid": "a37b86f1-1a81-444f-93b0-2b7e16fd36c9",
      "domain": "zh.wave-whatsapp.com",
      "url": "http://zh.wave-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-09 01:01:42.932115+00:00",
      "relationship_score": 53,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "wave-whatsapp.com",
          "contributed": 10.0
        },
        {
          "type": "same_ns_set",
          "value": "dana.ns.cloudflare.com,pedro.ns.cloudflare.com",
          "contributed": 11.2
        },
        {
          "type": "shared_distinctive_token",
          "value": "wave",
          "contributed": 10.0
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "72e7103660289566b0357b6ae69664f4cfc502ea19a4c3a052054cb232f63fb6",
          "contributed": 18.0
        },
        {
          "type": "san_overlap",
          "value": "wave-whatsapp.com",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/a37b86f1-1a81-444f-93b0-2b7e16fd36c9/"
    },
    {
      "uuid": "c3256465-c6bb-4316-ad3d-2b3529cd72d3",
      "domain": "wiki.orbit-whatsapp.com",
      "url": "http://wiki.orbit-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-17 01:03:16.989130+00:00",
      "relationship_score": 29,
      "evidence": [
        {
          "type": "same_ns_set",
          "value": "dana.ns.cloudflare.com,pedro.ns.cloudflare.com",
          "contributed": 11.2
        },
        {
          "type": "domain_age_window",
          "value": "12d/12d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "24.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "11d/12d",
          "contributed": 3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/c3256465-c6bb-4316-ad3d-2b3529cd72d3/"
    },
    {
      "uuid": "b7265727-4220-43f7-aae7-96e7ce548dba",
      "domain": "ws-im.my-whatsapp.com",
      "url": "http://ws-im.my-whatsapp.com",
      "company": "whatsapp",
      "status": "active",
      "first_seen": "2026-09-17 01:03:33.536156+00:00",
      "relationship_score": 29,
      "evidence": [
        {
          "type": "same_ns_set",
          "value": "dana.ns.cloudflare.com,pedro.ns.cloudflare.com",
          "contributed": 11.2
        },
        {
          "type": "domain_age_window",
          "value": "12d/13d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Guizhou Zhongyu Zhike Network Technology Co., Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "24.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "11d/13d",
          "contributed": 3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/whatsapp/b7265727-4220-43f7-aae7-96e7ce548dba/"
    }
  ]
}