Campaigns

Suspected cluster e0ecc7816349ACTIVE

BetaShared-infrastructure grouping of public detections. Not an attribution claim.

Domains

2727 hosts

Active

Brands

First seen

Oct 20, 2026

Most recent detection

Oct 20, 2026

What these pages look like

Indicators

Domain	Brand	Score	Sources	Match	Status	First seen
1blf-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
2blj-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
3blk-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
4blm-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
5blp-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
6blt-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
7blx-whatsapp.com	WhatsApp	02525	TweetFeed	04848	ACTIVE	2026-10-20
8blz-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
9bma-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
10bmb-whatsapp.com	WhatsApp	02525	TweetFeed	04848	ACTIVE	2026-10-20
11bmm-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
12bmn-whatsapp.com	WhatsApp	02525	TweetFeed	04848	ACTIVE	2026-10-20
13bmx-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
14bmy-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
15bmz-whatsapp.com	WhatsApp	02525	TweetFeed	04848	ACTIVE	2026-10-20
16bna-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
17bnc-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
18bnj-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
19bnk-whatsapp.com	WhatsApp	03030	TweetFeed	04848	ACTIVE	2026-10-20
20bnn-whatsapp.com	WhatsApp	02525	TweetFeed	04848	ACTIVE	2026-10-20
21bno-whatsapp.com	WhatsApp	02525	TweetFeed	04848	ACTIVE	2026-10-20
22bnv-whatsapp.com	WhatsApp	02525	TweetFeed	04848	ACTIVE	2026-10-20
23bog-whatsapp.com	WhatsApp	02525	TweetFeed	04848	ACTIVE	2026-10-20
24bol-whatsapp.com	WhatsApp	02525	TweetFeed	04848	ACTIVE	2026-10-20
25bon-whatsapp.com	WhatsApp	02525	TweetFeed	04848	ACTIVE	2026-10-20
26boo-whatsapp.com	WhatsApp	02525	TweetFeed	04848	ACTIVE	2026-10-20
27bor-whatsapp.com	WhatsApp	02525	TweetFeed	04848	ACTIVE	2026-10-20

Why this confidence

54% suspected cluster

Link strength 22%

Evidence diversity 100%

Time compactness 100%

Strong-link share 0%

Size discount 98%

confidence = clamp(0.45×D + 0.25×V + 0.20×T + 0.10×B, 0, 1) × S. Thresholds: 70%+ possible campaign, 40%+ suspected cluster.

Evidence summary

27/27 similar name aaa-aaaaaaaa

27/27 registered together 7d/7d

27/27 certs issued together 2d/3d

26/27 similar text jaccard=0.93

25/27 appeared together (24h) 0.1h

Brands targeted

WhatsApp (27)

Timeline (first seen)

Oct 20 27

History

2026-10-25 created first tracked with 27 members

Rebuilt daily; history is kept for 180 days. A campaign keeps its identifier as members join or leave.

Strongest links

48 bmm-whatsapp.com ↔ bnv-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

48 blf-whatsapp.com ↔ blk-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

48 blf-whatsapp.com ↔ blm-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

48 blf-whatsapp.com ↔ bmx-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

48 blf-whatsapp.com ↔ bmz-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

48 blj-whatsapp.com ↔ blk-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

48 blj-whatsapp.com ↔ blp-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

48 blj-whatsapp.com ↔ blt-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

48 blj-whatsapp.com ↔ blx-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

48 blj-whatsapp.com ↔ blz-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

Supplemental links

Linked below the clustering threshold or by same-kit similarity - did not form this cluster.

45 blf-whatsapp.com ↔ blj-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

45 blf-whatsapp.com ↔ blp-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

45 blf-whatsapp.com ↔ blt-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

45 blf-whatsapp.com ↔ blx-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

45 blf-whatsapp.com ↔ blz-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

45 blf-whatsapp.com ↔ bma-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

45 blf-whatsapp.com ↔ bmm-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

45 blf-whatsapp.com ↔ bmn-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

45 blf-whatsapp.com ↔ bnc-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

45 blj-whatsapp.com ↔ blm-whatsapp.com similar text, similar name, registered together, appeared together (24h), certs issued together, same screenshot

Relationships

Showing the 50 strongest of 164.

bmm-whatsapp.com ↔ bnv-whatsapp.com 48 first reproduced 2026-10-25

bmm-whatsapp.com bnv-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	16.0	-
similar name	naming	9.0	-
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
similar text	content	3.0	-	screenshot_phash
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blf-whatsapp.com ↔ blk-whatsapp.com 48 first reproduced 2026-10-21

blf-whatsapp.com blk-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blf-whatsapp.com ↔ blm-whatsapp.com 48 first reproduced 2026-10-21

blf-whatsapp.com blm-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blf-whatsapp.com ↔ bmb-whatsapp.com 48 first reproduced 2026-10-22

blf-whatsapp.com bmb-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blf-whatsapp.com ↔ bmx-whatsapp.com 48 first reproduced 2026-10-21

blf-whatsapp.com bmx-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blf-whatsapp.com ↔ bmz-whatsapp.com 48 first reproduced 2026-10-21

blf-whatsapp.com bmz-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blf-whatsapp.com ↔ bna-whatsapp.com 48 first reproduced 2026-10-23

blf-whatsapp.com bna-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blf-whatsapp.com ↔ bnj-whatsapp.com 48 first reproduced 2026-10-22

blf-whatsapp.com bnj-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blf-whatsapp.com ↔ bnk-whatsapp.com 48 first reproduced 2026-10-25

blf-whatsapp.com bnk-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blf-whatsapp.com ↔ bnn-whatsapp.com 48 first reproduced 2026-10-23

blf-whatsapp.com bnn-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blf-whatsapp.com ↔ bnv-whatsapp.com 48 first reproduced 2026-10-25

blf-whatsapp.com bnv-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blf-whatsapp.com ↔ bog-whatsapp.com 48 first reproduced 2026-10-22

blf-whatsapp.com bog-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blf-whatsapp.com ↔ bon-whatsapp.com 48 first reproduced 2026-10-25

blf-whatsapp.com bon-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ blk-whatsapp.com 48 first reproduced 2026-10-21

blj-whatsapp.com blk-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ blp-whatsapp.com 48 first reproduced 2026-10-21

blj-whatsapp.com blp-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ blt-whatsapp.com 48 first reproduced 2026-10-21

blj-whatsapp.com blt-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ blx-whatsapp.com 48 first reproduced 2026-10-21

blj-whatsapp.com blx-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ blz-whatsapp.com 48 first reproduced 2026-10-21

blj-whatsapp.com blz-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ bma-whatsapp.com 48 first reproduced 2026-10-21

blj-whatsapp.com bma-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ bmm-whatsapp.com 48 first reproduced 2026-10-21

blj-whatsapp.com bmm-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ bmn-whatsapp.com 48 first reproduced 2026-10-21

blj-whatsapp.com bmn-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ bnc-whatsapp.com 48 first reproduced 2026-10-21

blj-whatsapp.com bnc-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ bnj-whatsapp.com 48 first reproduced 2026-10-22

blj-whatsapp.com bnj-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ bno-whatsapp.com 48 first reproduced 2026-10-22

blj-whatsapp.com bno-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ bol-whatsapp.com 48 first reproduced 2026-10-24

blj-whatsapp.com bol-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ bon-whatsapp.com 48 first reproduced 2026-10-25

blj-whatsapp.com bon-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ boo-whatsapp.com 48 first reproduced 2026-10-25

blj-whatsapp.com boo-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blj-whatsapp.com ↔ bor-whatsapp.com 48 first reproduced 2026-10-24

blj-whatsapp.com bor-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blk-whatsapp.com ↔ blm-whatsapp.com 48 first reproduced 2026-10-21

blk-whatsapp.com blm-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blk-whatsapp.com ↔ blp-whatsapp.com 48 first reproduced 2026-10-21

blk-whatsapp.com blp-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blk-whatsapp.com ↔ blz-whatsapp.com 48 first reproduced 2026-10-21

blk-whatsapp.com blz-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blk-whatsapp.com ↔ bmm-whatsapp.com 48 first reproduced 2026-10-21

blk-whatsapp.com bmm-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blk-whatsapp.com ↔ bmx-whatsapp.com 48 first reproduced 2026-10-21

blk-whatsapp.com bmx-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blk-whatsapp.com ↔ bmz-whatsapp.com 48 first reproduced 2026-10-21

blk-whatsapp.com bmz-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blk-whatsapp.com ↔ bnj-whatsapp.com 48 first reproduced 2026-10-22

blk-whatsapp.com bnj-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blk-whatsapp.com ↔ bnk-whatsapp.com 48 first reproduced 2026-10-25

blk-whatsapp.com bnk-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blk-whatsapp.com ↔ bnv-whatsapp.com 48 first reproduced 2026-10-25

blk-whatsapp.com bnv-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blk-whatsapp.com ↔ bog-whatsapp.com 48 first reproduced 2026-10-22

blk-whatsapp.com bog-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blk-whatsapp.com ↔ bol-whatsapp.com 48 first reproduced 2026-10-24

blk-whatsapp.com bol-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blk-whatsapp.com ↔ bor-whatsapp.com 48 first reproduced 2026-10-24

blk-whatsapp.com bor-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blm-whatsapp.com ↔ bma-whatsapp.com 48 first reproduced 2026-10-21

blm-whatsapp.com bma-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blm-whatsapp.com ↔ bmb-whatsapp.com 48 first reproduced 2026-10-22

blm-whatsapp.com bmb-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blm-whatsapp.com ↔ bmx-whatsapp.com 48 first reproduced 2026-10-21

blm-whatsapp.com bmx-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blm-whatsapp.com ↔ bna-whatsapp.com 48 first reproduced 2026-10-23

blm-whatsapp.com bna-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blm-whatsapp.com ↔ bnj-whatsapp.com 48 first reproduced 2026-10-22

blm-whatsapp.com bnj-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blm-whatsapp.com ↔ bnk-whatsapp.com 48 first reproduced 2026-10-25

blm-whatsapp.com bnk-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blm-whatsapp.com ↔ bnn-whatsapp.com 48 first reproduced 2026-10-23

blm-whatsapp.com bnn-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blm-whatsapp.com ↔ bnv-whatsapp.com 48 first reproduced 2026-10-25

blm-whatsapp.com bnv-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blm-whatsapp.com ↔ bog-whatsapp.com 48 first reproduced 2026-10-22

blm-whatsapp.com bog-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

blp-whatsapp.com ↔ blx-whatsapp.com 48 first reproduced 2026-10-21

blp-whatsapp.com blx-whatsapp.com

Signal	Category	Contributed	IDF	Notes
same screenshot	visual	12.8	×0.80
similar name	naming	9.0	-
similar text	content	6.0	-	screenshot_phash
similar name	naming	6.0	-
appeared together (24h)	temporal	6	-
registered together	registration	5	-
certs issued together	tls	3	-

Discounted observations

similar colors

visual

0.0

screenshot_phash

Infrastructure footprint

IP addresses

156.234.58.242 27/27

ASNs

138415 27/27

Hosting orgs

Yancy Limited 27/27

Registrars

GKG.Net, Inc. 27/27

TLS certs

YR1 14/27

YR2 13/27

Export JSON CSV TXT

corr-1.4.0 · built 2026-10-25 05:00 UTC - rebuilt daily