{
  "id": 442,
  "key": "0b215bc647ee",
  "size": 5,
  "active_count": 5,
  "brands": [
    "paypal"
  ],
  "confidence": "possible campaign",
  "confidence_score": 0.812,
  "confidence_metrics": {
    "B": 0.7,
    "D": 0.648,
    "S": 1.0,
    "T": 1.0,
    "V": 1.0
  },
  "first_seen": "2026-08-22 09:01:41.416718+00:00",
  "last_activity": "2026-08-22 09:02:46.613528+00:00",
  "top_evidence": {
    "type": "screenshot_phash_full",
    "coverage": "5/5 members"
  },
  "url": "https://phishunt.io/campaigns/0b215bc647ee/",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-08-23T05:00:29.116526+00:00",
  "evidence_summary": [
    {
      "type": "screenshot_phash_full",
      "value": "f22bd22b5c470774~f22bd22b5c470774 d=0",
      "members_matching": 5
    },
    {
      "type": "favicon_phash_exact",
      "value": "ce3369cc3326499b",
      "members_matching": 5
    },
    {
      "type": "shared_final_host",
      "value": "paypal-details.com",
      "members_matching": 5
    },
    {
      "type": "ocr_similarity_full",
      "value": "jaccard=1.00",
      "members_matching": 5
    },
    {
      "type": "temporal_24h",
      "value": "0.0h",
      "members_matching": 5
    },
    {
      "type": "same_ip",
      "value": "95.85.237.47",
      "members_matching": 4
    },
    {
      "type": "rare_issuer_match",
      "value": "YE1",
      "members_matching": 4
    },
    {
      "type": "same_template",
      "value": "aaaaaa-aaaaaaa",
      "members_matching": 3
    },
    {
      "type": "same_ns_set",
      "value": "ns1.anycastdns.cz,ns2.anycastdns.cz",
      "members_matching": 2
    },
    {
      "type": "domain_age_window",
      "value": "10d/7d",
      "members_matching": 2
    },
    {
      "type": "domain_age_window",
      "value": "10d/13d",
      "members_matching": 2
    },
    {
      "type": "domain_age_window",
      "value": "7d/5d",
      "members_matching": 2
    },
    {
      "type": "domain_age_window",
      "value": "4d/5d",
      "members_matching": 2
    },
    {
      "type": "domain_age_window",
      "value": "4d/7d",
      "members_matching": 2
    },
    {
      "type": "same_registrar",
      "value": "Fewmoretaps OU d/b/a Trustname.com",
      "members_matching": 2
    },
    {
      "type": "same_registrar",
      "value": "Dominet (HK) Limited",
      "members_matching": 2
    },
    {
      "type": "cert_age_window",
      "value": "10d/11d",
      "members_matching": 2
    },
    {
      "type": "cert_age_window",
      "value": "7d/5d",
      "members_matching": 2
    },
    {
      "type": "cert_age_window",
      "value": "4d/5d",
      "members_matching": 2
    }
  ],
  "first_tracked": "2026-08-23T05:00:29.116526+00:00",
  "history": [
    {
      "at": "2026-08-23T05:00:29.116526+00:00",
      "event": "created",
      "size": 5,
      "joined": [
        "paypal-check.com",
        "paypal-details.com",
        "paypal-invoice.com",
        "paypal-payout.com",
        "paypal-receipt.xyz"
      ],
      "left": []
    }
  ],
  "members": [
    {
      "uuid": "0dae4d7e-e84a-45d6-87ba-4a03ba3742a7",
      "domain": "paypal-check.com",
      "url": "http://paypal-check.com",
      "company": "paypal",
      "status": "active",
      "first_seen": "2026-08-22 09:01:41.416718+00:00",
      "relationship_score": 78,
      "detail_url": "https://phishunt.io/suspicious/paypal/0dae4d7e-e84a-45d6-87ba-4a03ba3742a7/",
      "image": "screenshots/paypal/02eb9c36-6662-47ba-812e-4d5c161f6d84.png",
      "phishunt_score": 40,
      "ip": "95.85.237.47",
      "asn": "200823",
      "org": "MHost LLC",
      "country": "Germany",
      "registrar": "Fewmoretaps OU d/b/a Trustname.com",
      "cert": "YE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "048220e1-b13c-452b-9d94-ff38a3704a1e",
      "domain": "paypal-details.com",
      "url": "http://paypal-details.com",
      "company": "paypal",
      "status": "active",
      "first_seen": "2026-08-22 09:02:16.166534+00:00",
      "relationship_score": 62,
      "detail_url": "https://phishunt.io/suspicious/paypal/048220e1-b13c-452b-9d94-ff38a3704a1e/",
      "image": "screenshots/paypal/430a478c-3e41-440e-8abd-788c2bd8d8ea.png",
      "phishunt_score": 42,
      "ip": "188.114.97.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Dominet (HK) Limited",
      "cert": "WE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "39df5068-0883-41ba-8d1c-ed8e561131fb",
      "domain": "paypal-invoice.com",
      "url": "http://paypal-invoice.com",
      "company": "paypal",
      "status": "active",
      "first_seen": "2026-08-22 09:01:58.450544+00:00",
      "relationship_score": 74,
      "detail_url": "https://phishunt.io/suspicious/paypal/39df5068-0883-41ba-8d1c-ed8e561131fb/",
      "image": "screenshots/paypal/7de41455-de2d-4f19-b26e-f11bba277480.png",
      "phishunt_score": 40,
      "ip": "95.85.237.47",
      "asn": "200823",
      "org": "MHost LLC",
      "country": "Germany",
      "registrar": "Dominet (HK) Limited",
      "cert": "YE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "28d960ef-1131-4cfa-971a-df2f26a62bd0",
      "domain": "paypal-payout.com",
      "url": "http://paypal-payout.com",
      "company": "paypal",
      "status": "active",
      "first_seen": "2026-08-22 09:02:32.483945+00:00",
      "relationship_score": 78,
      "detail_url": "https://phishunt.io/suspicious/paypal/28d960ef-1131-4cfa-971a-df2f26a62bd0/",
      "image": "screenshots/paypal/9d864645-4bdf-4e03-87b0-33e0760a2ab4.png",
      "phishunt_score": 40,
      "ip": "95.85.237.47",
      "asn": "200823",
      "org": "MHost LLC",
      "country": "Germany",
      "registrar": "Fewmoretaps OU d/b/a Trustname.com",
      "cert": "YE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "3c96aa84-a5a5-4fcf-b586-534f592d5a88",
      "domain": "paypal-receipt.xyz",
      "url": "http://paypal-receipt.xyz",
      "company": "paypal",
      "status": "active",
      "first_seen": "2026-08-22 09:02:46.613528+00:00",
      "relationship_score": 74,
      "detail_url": "https://phishunt.io/suspicious/paypal/3c96aa84-a5a5-4fcf-b586-534f592d5a88/",
      "image": "screenshots/paypal/86d3bbfd-6f82-43c7-983e-552af56c8e26.png",
      "phishunt_score": 42,
      "ip": "95.85.237.47",
      "asn": "200823",
      "org": "MHost LLC",
      "country": "Germany",
      "registrar": "Global Domain Group LLC",
      "cert": "YE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    }
  ]
}