{
  "id": 257,
  "key": "0ab4e2dcc08a",
  "size": 3,
  "active_count": 3,
  "brands": [
    "santander"
  ],
  "confidence": "possible campaign",
  "confidence_score": 0.795,
  "confidence_metrics": {
    "B": 0.667,
    "D": 0.643,
    "S": 1.0,
    "T": 0.944,
    "V": 1.0
  },
  "first_seen": "2026-08-02 01:02:44.904496+00:00",
  "last_activity": "2026-08-05 01:01:48.826706+00:00",
  "top_evidence": {
    "type": "dom_signals_exact",
    "coverage": "3/3 members"
  },
  "url": "https://phishunt.io/campaigns/0ab4e2dcc08a/",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-08-09T05:00:26.687585+00:00",
  "evidence_summary": [
    {
      "type": "dom_signals_exact",
      "value": "(True, False, True, False)",
      "members_matching": 3
    },
    {
      "type": "same_asn",
      "value": "4766",
      "members_matching": 3
    },
    {
      "type": "same_ns_set",
      "value": "ns1.dothome.co.kr,ns11.dothome.co.kr,ns2.dothome.co.kr,ns3.dothome.co.kr",
      "members_matching": 3
    },
    {
      "type": "screenshot_phash_full",
      "value": "b2e3b0e3b2e2b283~b2e3b0e3b2e2b283 d=0",
      "members_matching": 3
    },
    {
      "type": "shared_distinctive_token",
      "value": "dothome",
      "members_matching": 3
    },
    {
      "type": "ocr_similarity_full",
      "value": "jaccard=0.93",
      "members_matching": 2
    },
    {
      "type": "ocr_similarity_full",
      "value": "jaccard=0.87",
      "members_matching": 2
    },
    {
      "type": "ocr_similarity_partial",
      "value": "jaccard=0.81",
      "members_matching": 2
    },
    {
      "type": "same_ip",
      "value": "112.175.185.138",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "12.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "72.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "60.0h",
      "members_matching": 2
    }
  ],
  "first_tracked": "2026-08-05T05:00:24.731694+00:00",
  "history": [
    {
      "at": "2026-08-05T05:00:24.731694+00:00",
      "event": "created",
      "size": 3,
      "joined": [
        "santander2026.dothome.co.kr",
        "santandermx.dothome.co.kr",
        "santanderweb.dothome.co.kr"
      ],
      "left": []
    }
  ],
  "members": [
    {
      "uuid": "03d2d72c-3b3f-4bcd-8399-3294d49c42ff",
      "domain": "santander2026.dothome.co.kr",
      "url": "https://santander2026.dothome.co.kr",
      "company": "santander",
      "status": "active",
      "first_seen": "2026-08-04 13:02:02.420001+00:00",
      "relationship_score": 74,
      "detail_url": "https://phishunt.io/suspicious/santander/03d2d72c-3b3f-4bcd-8399-3294d49c42ff/",
      "image": "screenshots/santander/03d2d72c-3b3f-4bcd-8399-3294d49c42ff.png",
      "phishunt_score": 35,
      "ip": "112.175.185.138",
      "asn": "4766",
      "org": "Korea Telecom",
      "country": "South Korea",
      "registrar": "-",
      "cert": "-",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "1",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "1"
    },
    {
      "uuid": "d5f3a607-0eaa-4583-9daf-1755e1cbea8b",
      "domain": "santandermx.dothome.co.kr",
      "url": "https://santandermx.dothome.co.kr",
      "company": "santander",
      "status": "active",
      "first_seen": "2026-08-02 01:02:44.904496+00:00",
      "relationship_score": 61,
      "detail_url": "https://phishunt.io/suspicious/santander/d5f3a607-0eaa-4583-9daf-1755e1cbea8b/",
      "image": "screenshots/santander/d582a2b3-7cdc-41fa-acad-97febaa855c7.png",
      "phishunt_score": 32,
      "ip": "112.175.185.134",
      "asn": "4766",
      "org": "Korea Telecom",
      "country": "South Korea",
      "registrar": "-",
      "cert": "-",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "1",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "f166a552-53f6-4f59-a44b-398dbd17bebb",
      "domain": "santanderweb.dothome.co.kr",
      "url": "http://santanderweb.dothome.co.kr",
      "company": "santander",
      "status": "active",
      "first_seen": "2026-08-05 01:01:48.826706+00:00",
      "relationship_score": 74,
      "detail_url": "https://phishunt.io/suspicious/santander/f166a552-53f6-4f59-a44b-398dbd17bebb/",
      "image": "screenshots/santander/815fa94d-a80b-46d6-ae5d-0d364b5a500f.png",
      "phishunt_score": 34,
      "ip": "112.175.185.138",
      "asn": "4766",
      "org": "Korea Telecom",
      "country": "South Korea",
      "registrar": "-",
      "cert": "-",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "1",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    }
  ]
}