{
  "id": 196,
  "key": "0c1b79ab9b24",
  "size": 8,
  "active_count": 8,
  "brands": [
    "ingspain"
  ],
  "confidence": "possible campaign",
  "confidence_score": 0.749,
  "confidence_metrics": {
    "B": 0.464,
    "D": 0.562,
    "S": 1.0,
    "T": 1.0,
    "V": 1.0
  },
  "first_seen": "2026-07-11 19:51:26.334792+00:00",
  "last_activity": "2026-07-12 15:41:25.341855+00:00",
  "top_evidence": {
    "type": "ocr_similarity_full",
    "coverage": "8/8 members"
  },
  "url": "https://phishunt.io/campaigns/0c1b79ab9b24/",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-08-04T05:00:24.599305+00:00",
  "evidence_summary": [
    {
      "type": "ocr_similarity_full",
      "value": "jaccard=1.00",
      "members_matching": 8
    },
    {
      "type": "same_registrar",
      "value": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
      "members_matching": 8
    },
    {
      "type": "screenshot_phash_full",
      "value": "aaadadadbc1c50d0~aaadadadbc1c50d0 d=0",
      "members_matching": 8
    },
    {
      "type": "shared_distinctive_token",
      "value": "ingdirect",
      "members_matching": 8
    },
    {
      "type": "shared_final_host",
      "value": "credicentrocoop.com",
      "members_matching": 8
    },
    {
      "type": "temporal_24h",
      "value": "19.8h",
      "members_matching": 8
    },
    {
      "type": "temporal_24h",
      "value": "0.0h",
      "members_matching": 7
    },
    {
      "type": "domain_age_window",
      "value": "7d/4d",
      "members_matching": 5
    },
    {
      "type": "same_ns_set",
      "value": "david.ns.cloudflare.com,liz.ns.cloudflare.com",
      "members_matching": 5
    },
    {
      "type": "domain_age_window",
      "value": "4d/3d",
      "members_matching": 4
    },
    {
      "type": "domain_age_window",
      "value": "7d/5d",
      "members_matching": 4
    },
    {
      "type": "domain_age_window",
      "value": "7d/7d",
      "members_matching": 3
    },
    {
      "type": "domain_age_window",
      "value": "5d/3d",
      "members_matching": 3
    },
    {
      "type": "domain_age_window",
      "value": "5d/4d",
      "members_matching": 3
    },
    {
      "type": "same_ns_set",
      "value": "keyla.ns.cloudflare.com,malcolm.ns.cloudflare.com",
      "members_matching": 3
    },
    {
      "type": "domain_age_window",
      "value": "4d/4d",
      "members_matching": 2
    },
    {
      "type": "domain_age_window",
      "value": "3d/3d",
      "members_matching": 2
    },
    {
      "type": "same_template",
      "value": "aaaaaaaaa-aaaaaaa-aaaaaaa",
      "members_matching": 2
    },
    {
      "type": "shared_distinctive_token",
      "value": "soporte",
      "members_matching": 2
    },
    {
      "type": "shared_distinctive_token",
      "value": "alerta",
      "members_matching": 2
    }
  ],
  "first_tracked": "2026-07-18T19:36:44.997352+00:00",
  "history": [
    {
      "at": "2026-07-18T19:36:44.997352+00:00",
      "event": "created",
      "size": 8,
      "joined": [
        "ingdirect-alerta-clientes.com",
        "ingdirect-cliente-gestion.com",
        "ingdirect-clientes-alerta.com",
        "ingdirect-gestiones-incidencia.com",
        "ingdirect-ingreso-usuarios.com",
        "ingdirect-soporte-servicios.com",
        "ingdirect-usuario-soporte.com",
        "ingdirect-web-validado.com"
      ],
      "left": []
    }
  ],
  "members": [
    {
      "uuid": "13b037cb-a3c8-4cca-8053-f481f2720efa",
      "domain": "ingdirect-alerta-clientes.com",
      "url": "https://ingdirect-alerta-clientes.com",
      "company": "ingspain",
      "status": "active",
      "first_seen": "2026-07-12 15:41:21.744161+00:00",
      "relationship_score": 65,
      "detail_url": "https://phishunt.io/suspicious/ingspain/13b037cb-a3c8-4cca-8053-f481f2720efa/",
      "image": "screenshots/ingspain/13b037cb-a3c8-4cca-8053-f481f2720efa.png",
      "phishunt_score": 30,
      "ip": "172.67.135.230",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
      "cert": "-",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": ""
    },
    {
      "uuid": "cf141307-2c57-44bb-bdf6-f1cc5639af50",
      "domain": "ingdirect-cliente-gestion.com",
      "url": "https://ingdirect-cliente-gestion.com",
      "company": "ingspain",
      "status": "active",
      "first_seen": "2026-07-11 19:51:26.334792+00:00",
      "relationship_score": 65,
      "detail_url": "https://phishunt.io/suspicious/ingspain/cf141307-2c57-44bb-bdf6-f1cc5639af50/",
      "image": "screenshots/ingspain/cf141307-2c57-44bb-bdf6-f1cc5639af50.png",
      "phishunt_score": 34,
      "ip": "188.114.96.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
      "cert": "-",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": ""
    },
    {
      "uuid": "c4f0a746-1867-489c-be4d-f7c5b6c204ee",
      "domain": "ingdirect-clientes-alerta.com",
      "url": "https://ingdirect-clientes-alerta.com",
      "company": "ingspain",
      "status": "active",
      "first_seen": "2026-07-12 15:41:24.313056+00:00",
      "relationship_score": 63,
      "detail_url": "https://phishunt.io/suspicious/ingspain/c4f0a746-1867-489c-be4d-f7c5b6c204ee/",
      "image": "screenshots/ingspain/c4f0a746-1867-489c-be4d-f7c5b6c204ee.png",
      "phishunt_score": 34,
      "ip": "188.114.96.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
      "cert": "-",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": ""
    },
    {
      "uuid": "eb5aaa78-6688-4685-939c-7b6debe3995c",
      "domain": "ingdirect-gestiones-incidencia.com",
      "url": "https://ingdirect-gestiones-incidencia.com",
      "company": "ingspain",
      "status": "active",
      "first_seen": "2026-07-12 15:41:21.815151+00:00",
      "relationship_score": 65,
      "detail_url": "https://phishunt.io/suspicious/ingspain/eb5aaa78-6688-4685-939c-7b6debe3995c/",
      "image": "screenshots/ingspain/eb5aaa78-6688-4685-939c-7b6debe3995c.png",
      "phishunt_score": 30,
      "ip": "104.21.15.235",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
      "cert": "-",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": ""
    },
    {
      "uuid": "9295692d-118f-40f1-9a83-23291e5d97d2",
      "domain": "ingdirect-ingreso-usuarios.com",
      "url": "https://ingdirect-ingreso-usuarios.com",
      "company": "ingspain",
      "status": "active",
      "first_seen": "2026-07-12 15:41:25.265247+00:00",
      "relationship_score": 63,
      "detail_url": "https://phishunt.io/suspicious/ingspain/9295692d-118f-40f1-9a83-23291e5d97d2/",
      "image": "screenshots/ingspain/9295692d-118f-40f1-9a83-23291e5d97d2.png",
      "phishunt_score": 31,
      "ip": "172.67.206.26",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
      "cert": "-",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": ""
    },
    {
      "uuid": "4109d73f-c1cf-48fd-977a-b5f97f3ea4f4",
      "domain": "ingdirect-soporte-servicios.com",
      "url": "https://ingdirect-soporte-servicios.com",
      "company": "ingspain",
      "status": "active",
      "first_seen": "2026-07-12 15:41:25.341855+00:00",
      "relationship_score": 65,
      "detail_url": "https://phishunt.io/suspicious/ingspain/4109d73f-c1cf-48fd-977a-b5f97f3ea4f4/",
      "image": "screenshots/ingspain/4109d73f-c1cf-48fd-977a-b5f97f3ea4f4.png",
      "phishunt_score": 34,
      "ip": "188.114.96.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
      "cert": "-",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": ""
    },
    {
      "uuid": "b75cdb17-191a-41ae-84da-076d97475730",
      "domain": "ingdirect-usuario-soporte.com",
      "url": "https://ingdirect-usuario-soporte.com",
      "company": "ingspain",
      "status": "active",
      "first_seen": "2026-07-12 15:41:23.714874+00:00",
      "relationship_score": 65,
      "detail_url": "https://phishunt.io/suspicious/ingspain/b75cdb17-191a-41ae-84da-076d97475730/",
      "image": "screenshots/ingspain/b75cdb17-191a-41ae-84da-076d97475730.png",
      "phishunt_score": 34,
      "ip": "188.114.97.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
      "cert": "-",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": ""
    },
    {
      "uuid": "c76ab4b3-c1ea-497d-91fe-6ce2027faf4d",
      "domain": "ingdirect-web-validado.com",
      "url": "https://ingdirect-web-validado.com",
      "company": "ingspain",
      "status": "active",
      "first_seen": "2026-07-12 15:41:24.414734+00:00",
      "relationship_score": 63,
      "detail_url": "https://phishunt.io/suspicious/ingspain/c76ab4b3-c1ea-497d-91fe-6ce2027faf4d/",
      "image": "screenshots/ingspain/c76ab4b3-c1ea-497d-91fe-6ce2027faf4d.png",
      "phishunt_score": 34,
      "ip": "188.114.97.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
      "cert": "-",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": ""
    }
  ]
}