{
  "id": 191,
  "key": "1dedcfa35d5a",
  "size": 6,
  "active_count": 6,
  "brands": [
    "apple",
    "coinbase",
    "microsoft"
  ],
  "confidence": "suspected cluster",
  "confidence_score": 0.533,
  "confidence_metrics": {
    "B": 0.333,
    "D": 0.22,
    "S": 1.0,
    "T": 0.754,
    "V": 1.0
  },
  "first_seen": "2026-05-22 02:36:07.822928+00:00",
  "last_activity": "2026-07-28 18:07:00.619691+00:00",
  "top_evidence": {
    "type": "favicon_phash_exact",
    "coverage": "6/6 members"
  },
  "url": "https://phishunt.io/campaigns/1dedcfa35d5a/",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-08-03T05:00:27.058159+00:00",
  "evidence_summary": [
    {
      "type": "favicon_phash_exact",
      "value": "cc91196f0e4a5b5b",
      "members_matching": 6
    },
    {
      "type": "same_asn",
      "value": "53831",
      "members_matching": 6
    },
    {
      "type": "same_registrar",
      "value": "Squarespace Domains II LLC",
      "members_matching": 6
    },
    {
      "type": "domain_age_window",
      "value": "10d/9d",
      "members_matching": 4
    },
    {
      "type": "same_ip",
      "value": "198.49.23.144",
      "members_matching": 4
    },
    {
      "type": "screenshot_phash_full",
      "value": "cd9f3be08c70c0d9~cd9f3be08c70c0d9 d=0",
      "members_matching": 4
    },
    {
      "type": "screenshot_phash_full",
      "value": "cd9f3be08870e0d9~cd9f3be08c70c0d9 d=2",
      "members_matching": 4
    },
    {
      "type": "domain_age_window",
      "value": "10d/10d",
      "members_matching": 3
    },
    {
      "type": "temporal_24h",
      "value": "11.0h",
      "members_matching": 3
    },
    {
      "type": "temporal_72h",
      "value": "26.1h",
      "members_matching": 3
    },
    {
      "type": "levenshtein_le2",
      "value": "security-help-microsoft~securityhelp-microsoft d=1",
      "members_matching": 2
    },
    {
      "type": "same_ip",
      "value": "198.185.159.144",
      "members_matching": 2
    },
    {
      "type": "same_ns_set",
      "value": "nsd1.squarespacedns.com,nsd2.squarespacedns.com,nsd3.squarespacedns.com,nsd4.squarespacedns.com",
      "members_matching": 2
    },
    {
      "type": "same_ns_set",
      "value": "nsc1.squarespacedns.com,nsc2.squarespacedns.com,nsc3.squarespacedns.com,nsc4.squarespacedns.com",
      "members_matching": 2
    },
    {
      "type": "same_template",
      "value": "aaaaaaaaaaaa-aaaaaaaaa",
      "members_matching": 2
    },
    {
      "type": "screenshot_phash_full",
      "value": "cd9f3be08c70c0d9~cd9f3be08870e0d9 d=2",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "0.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "37.0h",
      "members_matching": 2
    }
  ],
  "first_tracked": "2026-07-28T05:00:24.557420+00:00",
  "history": [
    {
      "at": "2026-07-29T05:00:29.781810+00:00",
      "event": "grew",
      "size": 6,
      "joined": [
        "icloudnets.com"
      ],
      "left": []
    },
    {
      "at": "2026-07-28T05:00:24.557420+00:00",
      "event": "created",
      "size": 5,
      "joined": [
        "helpscontact-coinbase.com",
        "helpsecurity-microsoft.com",
        "securedsupport-coinbase.com",
        "security-help-microsoft.com",
        "securityhelp-microsoft.com"
      ],
      "left": []
    }
  ],
  "members": [
    {
      "uuid": "081c2f19-8fbc-4f3c-85b8-fe306b0a4a26",
      "domain": "helpscontact-coinbase.com",
      "url": "https://helpscontact-coinbase.com",
      "company": "coinbase",
      "status": "active",
      "first_seen": "2026-05-22 02:36:07.822928+00:00",
      "relationship_score": 46,
      "detail_url": "https://phishunt.io/suspicious/coinbase/081c2f19-8fbc-4f3c-85b8-fe306b0a4a26/",
      "image": "screenshots/coinbase/081c2f19-8fbc-4f3c-85b8-fe306b0a4a26.png",
      "phishunt_score": 26,
      "ip": "198.49.23.144",
      "asn": "53831",
      "org": "Squarespace, Inc.",
      "country": "United States",
      "registrar": "Squarespace Domains II LLC",
      "cert": "Let's Encrypt",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "1"
    },
    {
      "uuid": "301d9f55-4ccb-496b-9e58-f7b6b134a669",
      "domain": "helpsecurity-microsoft.com",
      "url": "http://helpsecurity-microsoft.com",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-07-27 16:03:29.220801+00:00",
      "relationship_score": 66,
      "detail_url": "https://phishunt.io/suspicious/microsoft/301d9f55-4ccb-496b-9e58-f7b6b134a669/",
      "image": "screenshots/microsoft/838b707e-1666-4f02-b8f4-6beb7b9c924a.png",
      "phishunt_score": 23,
      "ip": "198.185.159.144",
      "asn": "53831",
      "org": "Squarespace, Inc.",
      "country": "United States",
      "registrar": "Squarespace Domains II LLC",
      "cert": "-",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "94b3d265-aa6c-4e61-a552-e9cb207dab60",
      "domain": "icloudnets.com",
      "url": "http://icloudnets.com",
      "company": "apple",
      "status": "active",
      "first_seen": "2026-07-28 18:07:00.619691+00:00",
      "relationship_score": 54,
      "detail_url": "https://phishunt.io/suspicious/apple/94b3d265-aa6c-4e61-a552-e9cb207dab60/",
      "image": "screenshots/apple/a3ce49f7-4704-451f-afd8-3b8a2e150635.png",
      "phishunt_score": 25,
      "ip": "198.49.23.144",
      "asn": "53831",
      "org": "Squarespace, Inc.",
      "country": "United States",
      "registrar": "Squarespace Domains II LLC",
      "cert": "-",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "5ab1b47f-1ff3-4b2f-baba-1b0059fca080",
      "domain": "securedsupport-coinbase.com",
      "url": "https://securedsupport-coinbase.com",
      "company": "coinbase",
      "status": "active",
      "first_seen": "2026-07-07 01:45:37.648989+00:00",
      "relationship_score": 50,
      "detail_url": "https://phishunt.io/suspicious/coinbase/5ab1b47f-1ff3-4b2f-baba-1b0059fca080/",
      "image": "screenshots/coinbase/5ab1b47f-1ff3-4b2f-baba-1b0059fca080.png",
      "phishunt_score": 22,
      "ip": "198.185.159.144",
      "asn": "53831",
      "org": "Squarespace, Inc.",
      "country": "United States",
      "registrar": "Squarespace Domains II LLC",
      "cert": "Let's Encrypt",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "1"
    },
    {
      "uuid": "ada3d426-c971-42f1-90ea-98785d486a8c",
      "domain": "security-help-microsoft.com",
      "url": "http://security-help-microsoft.com",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-07-27 05:05:16.298608+00:00",
      "relationship_score": 69,
      "detail_url": "https://phishunt.io/suspicious/microsoft/ada3d426-c971-42f1-90ea-98785d486a8c/",
      "image": "screenshots/microsoft/47bd77b8-1a1d-4b3a-a440-de3e9a83904f.png",
      "phishunt_score": 26,
      "ip": "198.49.23.144",
      "asn": "53831",
      "org": "Squarespace, Inc.",
      "country": "United States",
      "registrar": "Squarespace Domains II LLC",
      "cert": "-",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "f984983e-f9fd-4b54-a4a9-b79cf5b48fc2",
      "domain": "securityhelp-microsoft.com",
      "url": "http://securityhelp-microsoft.com",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-07-27 16:03:06.749249+00:00",
      "relationship_score": 69,
      "detail_url": "https://phishunt.io/suspicious/microsoft/f984983e-f9fd-4b54-a4a9-b79cf5b48fc2/",
      "image": "screenshots/microsoft/1d11e27a-972a-4276-8f20-fe88db840e3f.png",
      "phishunt_score": 25,
      "ip": "198.49.23.144",
      "asn": "53831",
      "org": "Squarespace, Inc.",
      "country": "United States",
      "registrar": "Squarespace Domains II LLC",
      "cert": "-",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    }
  ]
}