{
  "id": 1178,
  "key": "72f66562793c",
  "size": 9,
  "host_count": 9,
  "active_count": 9,
  "brands": [
    "allegro"
  ],
  "confidence": "suspected cluster",
  "confidence_score": 0.589,
  "confidence_metrics": {
    "B": 0.158,
    "D": 0.282,
    "S": 1.0,
    "T": 0.981,
    "V": 1.0
  },
  "first_seen": "2026-11-09 23:01:22.748028+00:00",
  "last_activity": "2026-11-12 20:01:41.615961+00:00",
  "top_evidence": {
    "type": "favicon_phash_exact",
    "coverage": "9/9 members"
  },
  "url": "https://phishunt.io/campaigns/72f66562793c/",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-11-13T05:00:35.639586+00:00",
  "evidence_summary": [
    {
      "type": "favicon_phash_exact",
      "value": "93b2394c6c365b1b",
      "members_matching": 9
    },
    {
      "type": "shared_final_host",
      "value": "allegrolokalnie.pl",
      "members_matching": 9
    },
    {
      "type": "cert_age_window",
      "value": "0d/0d",
      "members_matching": 8
    },
    {
      "type": "screenshot_phash_full",
      "value": "f3324e4b136b0c6b~f3324e4b136b0c6b d=0",
      "members_matching": 6
    },
    {
      "type": "levenshtein_le2",
      "value": "allegrolokalnie~allegrolokalnie d=0",
      "members_matching": 6
    },
    {
      "type": "ocr_similarity_full",
      "value": "jaccard=1.00",
      "members_matching": 6
    },
    {
      "type": "domain_age_window",
      "value": "3d/0d",
      "members_matching": 6
    },
    {
      "type": "domain_age_window",
      "value": "0d/0d",
      "members_matching": 6
    },
    {
      "type": "shared_distinctive_token",
      "value": "allegrolokalnie",
      "members_matching": 6
    },
    {
      "type": "temporal_24h",
      "value": "2.0h",
      "members_matching": 4
    },
    {
      "type": "dominant_colors_match",
      "value": "dist=35.4",
      "members_matching": 4
    },
    {
      "type": "same_ns_set",
      "value": "leanna.ns.cloudflare.com,rocco.ns.cloudflare.com",
      "members_matching": 3
    },
    {
      "type": "same_registrar",
      "value": "Eranet International Limited",
      "members_matching": 3
    },
    {
      "type": "same_registrar",
      "value": "Hosting Concepts B.V. d/b/a Registrar.eu",
      "members_matching": 3
    },
    {
      "type": "same_ns_set",
      "value": "blakely.ns.cloudflare.com,merlin.ns.cloudflare.com",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "19.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "13.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "7.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "8.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "1.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "21.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "17.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "20.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "66.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "47.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "39.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "27.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "26.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "41.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "67.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "40.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "49.0h",
      "members_matching": 2
    },
    {
      "type": "dominant_colors_match",
      "value": "dist=1.0",
      "members_matching": 2
    }
  ],
  "first_tracked": "2026-11-13T05:00:35.639586+00:00",
  "history": [
    {
      "at": "2026-11-13T05:00:35.639586+00:00",
      "event": "created",
      "size": 9,
      "joined": [
        "allegro.o5413443.top",
        "allegro.o54134483.top",
        "allegro.ofe83204.sbs",
        "allegrolokalnie.nr-238sn34.sbs",
        "allegrolokalnie.o102040.shop",
        "allegrolokalnie.o108940.shop",
        "allegrolokalnie.o5433443.top",
        "allegrolokalnie.pl74892.pl",
        "allegrolokalnie.smart-92492.cfd"
      ],
      "left": []
    }
  ],
  "members": [
    {
      "uuid": "27c21580-9af2-4db1-a6cf-09da581a5d5e",
      "domain": "allegro.o5413443.top",
      "registrable_domain": "o5413443.top",
      "url": "https://allegro.o5413443.top",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-12 18:02:39.680081+00:00",
      "relationship_score": 54,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/allegro/27c21580-9af2-4db1-a6cf-09da581a5d5e/",
      "image": "screenshots/allegro/8cf07ae5-3430-444e-81d0-4e6a394a5d4f.png",
      "phishunt_score": 45,
      "ip": "172.67.183.110",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Eranet International Limited",
      "cert": "YE2",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "46c2d612-c460-442a-bb29-4f73314d08e3",
      "domain": "allegro.o54134483.top",
      "registrable_domain": "o54134483.top",
      "url": "http://allegro.o54134483.top",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-12 20:01:41.615961+00:00",
      "relationship_score": 49,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/allegro/46c2d612-c460-442a-bb29-4f73314d08e3/",
      "image": "screenshots/allegro/22f6b926-cd77-4e15-892f-cc5ed7de77db.png",
      "phishunt_score": 48,
      "ip": "188.114.96.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Eranet International Limited",
      "cert": "YE1",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "6eb26847-8541-4809-965e-e702e7674125",
      "domain": "allegro.ofe83204.sbs",
      "registrable_domain": "ofe83204.sbs",
      "url": "http://allegro.ofe83204.sbs",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-11 01:04:09.975293+00:00",
      "relationship_score": 59,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/allegro/6eb26847-8541-4809-965e-e702e7674125/",
      "image": "screenshots/allegro/34912fdf-6986-4594-9f1a-3920ed5c4489.png",
      "phishunt_score": 48,
      "ip": "188.114.96.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu",
      "cert": "YE1",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "081e0107-b015-4f85-91ff-d6b7b2084254",
      "domain": "allegrolokalnie.nr-238sn34.sbs",
      "registrable_domain": "nr-238sn34.sbs",
      "url": "https://allegrolokalnie.nr-238sn34.sbs/oferta/msi-gaming-trio-geforce-rtx-5060-ti-16gb-oc-gddr7/J9oHpeQL",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-11 22:01:34.500166+00:00",
      "relationship_score": 62,
      "relationship_tier": "high",
      "detail_url": "https://phishunt.io/suspicious/allegro/081e0107-b015-4f85-91ff-d6b7b2084254/",
      "image": "screenshots/allegro/bd3d5b92-9fe1-4821-bf33-5d505bff61c3.png",
      "phishunt_score": 32,
      "ip": "2.59.219.224",
      "asn": "200019",
      "org": "ALEXHOST S.R.L.",
      "country": "Switzerland",
      "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu",
      "cert": "-",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "dc44dd48-a1f7-401a-ae31-3c154dc692db",
      "domain": "allegrolokalnie.o102040.shop",
      "registrable_domain": "o102040.shop",
      "url": "https://allegrolokalnie.o102040.shop",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-11 14:03:05.861925+00:00",
      "relationship_score": 59,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/allegro/dc44dd48-a1f7-401a-ae31-3c154dc692db/",
      "image": "screenshots/allegro/537cc3c5-0499-4613-beaf-5b692358168e.png",
      "phishunt_score": 37,
      "ip": "104.21.83.74",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Registrar.eu",
      "cert": "YE1",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "b4d5407d-312c-4e7b-872c-25e38ed22199",
      "domain": "allegrolokalnie.o108940.shop",
      "registrable_domain": "o108940.shop",
      "url": "https://allegrolokalnie.o108940.shop",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-11 21:02:36.285153+00:00",
      "relationship_score": 58,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/allegro/b4d5407d-312c-4e7b-872c-25e38ed22199/",
      "image": "screenshots/allegro/54e6209e-c8bb-47de-9398-a976838fdc05.png",
      "phishunt_score": 36,
      "ip": "104.21.60.189",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Registrar.eu",
      "cert": "YE1",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "d02aee8e-4744-49ca-aa52-9a7dd2234768",
      "domain": "allegrolokalnie.o5433443.top",
      "registrable_domain": "o5433443.top",
      "url": "https://allegrolokalnie.o5433443.top",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-12 17:01:34.984499+00:00",
      "relationship_score": 63,
      "relationship_tier": "high",
      "detail_url": "https://phishunt.io/suspicious/allegro/d02aee8e-4744-49ca-aa52-9a7dd2234768/",
      "image": "screenshots/allegro/f8f389ac-e171-442e-8fe3-dd7b225ea565.png",
      "phishunt_score": 46,
      "ip": "188.114.97.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Eranet International Limited",
      "cert": "YE2",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "bc1967e4-a86a-4494-8e5b-76615e88da34",
      "domain": "allegrolokalnie.pl74892.pl",
      "registrable_domain": "pl74892.pl",
      "url": "https://allegrolokalnie.pl74892.pl",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-09 23:01:22.748028+00:00",
      "relationship_score": 63,
      "relationship_tier": "high",
      "detail_url": "https://phishunt.io/suspicious/allegro/bc1967e4-a86a-4494-8e5b-76615e88da34/",
      "image": "screenshots/allegro/bc1967e4-a86a-4494-8e5b-76615e88da34.png",
      "phishunt_score": 40,
      "ip": "104.21.41.117",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Dynadot LLC",
      "cert": "YE1",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "7623f4f0-6a6e-4ebc-b933-9e27f504be6c",
      "domain": "allegrolokalnie.smart-92492.cfd",
      "registrable_domain": "smart-92492.cfd",
      "url": "https://allegrolokalnie.smart-92492.cfd",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-12 00:02:10.487185+00:00",
      "relationship_score": 50,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/allegro/7623f4f0-6a6e-4ebc-b933-9e27f504be6c/",
      "image": "screenshots/allegro/18c31f9e-a897-43e0-a7d4-e996be81b43a.png",
      "phishunt_score": 41,
      "ip": "172.67.170.73",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu",
      "cert": "YE1",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    }
  ],
  "domains": [
    {
      "domain": "nr-238sn34.sbs",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "allegrolokalnie.nr-238sn34.sbs"
      ],
      "uuids": [
        "081e0107-b015-4f85-91ff-d6b7b2084254"
      ]
    },
    {
      "domain": "o102040.shop",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "allegrolokalnie.o102040.shop"
      ],
      "uuids": [
        "dc44dd48-a1f7-401a-ae31-3c154dc692db"
      ]
    },
    {
      "domain": "o108940.shop",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "allegrolokalnie.o108940.shop"
      ],
      "uuids": [
        "b4d5407d-312c-4e7b-872c-25e38ed22199"
      ]
    },
    {
      "domain": "o5413443.top",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "allegro.o5413443.top"
      ],
      "uuids": [
        "27c21580-9af2-4db1-a6cf-09da581a5d5e"
      ]
    },
    {
      "domain": "o54134483.top",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "allegro.o54134483.top"
      ],
      "uuids": [
        "46c2d612-c460-442a-bb29-4f73314d08e3"
      ]
    },
    {
      "domain": "o5433443.top",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "allegrolokalnie.o5433443.top"
      ],
      "uuids": [
        "d02aee8e-4744-49ca-aa52-9a7dd2234768"
      ]
    },
    {
      "domain": "ofe83204.sbs",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "allegro.ofe83204.sbs"
      ],
      "uuids": [
        "6eb26847-8541-4809-965e-e702e7674125"
      ]
    },
    {
      "domain": "pl74892.pl",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "allegrolokalnie.pl74892.pl"
      ],
      "uuids": [
        "bc1967e4-a86a-4494-8e5b-76615e88da34"
      ]
    },
    {
      "domain": "smart-92492.cfd",
      "host_count": 1,
      "active_count": 1,
      "hosts": [
        "allegrolokalnie.smart-92492.cfd"
      ],
      "uuids": [
        "7623f4f0-6a6e-4ebc-b933-9e27f504be6c"
      ]
    }
  ],
  "relationships": [
    {
      "domain_a": "allegrolokalnie.o5433443.top",
      "domain_b": "allegrolokalnie.pl74892.pl",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/d02aee8e-4744-49ca-aa52-9a7dd2234768/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/bc1967e4-a86a-4494-8e5b-76615e88da34/",
      "score": 63,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-11-13",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 10.6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 4.4,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (72h)",
          "signal": "temporal_72h",
          "category": "temporal",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.nr-238sn34.sbs",
      "domain_b": "allegrolokalnie.o5433443.top",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/081e0107-b015-4f85-91ff-d6b7b2084254/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/d02aee8e-4744-49ca-aa52-9a7dd2234768/",
      "score": 62,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-11-13",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 10.6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 4.4,
          "idf_factor": 0.5,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.nr-238sn34.sbs",
      "domain_b": "allegrolokalnie.pl74892.pl",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/081e0107-b015-4f85-91ff-d6b7b2084254/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/bc1967e4-a86a-4494-8e5b-76615e88da34/",
      "score": 60,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-11-12",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 10.6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 4.4,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (72h)",
          "signal": "temporal_72h",
          "category": "temporal",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegro.ofe83204.sbs",
      "domain_b": "allegrolokalnie.o102040.shop",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/6eb26847-8541-4809-965e-e702e7674125/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/dc44dd48-a1f7-401a-ae31-3c154dc692db/",
      "score": 59,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-12",
      "evidence": [
        {
          "label": "same nameservers",
          "signal": "same_ns_set",
          "category": "infra",
          "contributed": 14.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.o102040.shop",
      "domain_b": "allegrolokalnie.o108940.shop",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/dc44dd48-a1f7-401a-ae31-3c154dc692db/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/b4d5407d-312c-4e7b-872c-25e38ed22199/",
      "score": 58,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-12",
      "evidence": [
        {
          "label": "same nameservers",
          "signal": "same_ns_set",
          "category": "infra",
          "contributed": 14.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 10.6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 4.4,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": []
    },
    {
      "domain_a": "allegrolokalnie.o102040.shop",
      "domain_b": "allegrolokalnie.o5433443.top",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/dc44dd48-a1f7-401a-ae31-3c154dc692db/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/d02aee8e-4744-49ca-aa52-9a7dd2234768/",
      "score": 58,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-13",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 10.6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 4.4,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (72h)",
          "signal": "temporal_72h",
          "category": "temporal",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.o102040.shop",
      "domain_b": "allegrolokalnie.pl74892.pl",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/dc44dd48-a1f7-401a-ae31-3c154dc692db/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/bc1967e4-a86a-4494-8e5b-76615e88da34/",
      "score": 58,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-12",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 10.6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 4.4,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (72h)",
          "signal": "temporal_72h",
          "category": "temporal",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.nr-238sn34.sbs",
      "domain_b": "allegrolokalnie.o102040.shop",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/081e0107-b015-4f85-91ff-d6b7b2084254/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/dc44dd48-a1f7-401a-ae31-3c154dc692db/",
      "score": 57,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-12",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 10.6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 4.4,
          "idf_factor": 0.5,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegro.o5413443.top",
      "domain_b": "allegrolokalnie.o5433443.top",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/27c21580-9af2-4db1-a6cf-09da581a5d5e/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/d02aee8e-4744-49ca-aa52-9a7dd2234768/",
      "score": 54,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-13",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegro.ofe83204.sbs",
      "domain_b": "allegrolokalnie.nr-238sn34.sbs",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/6eb26847-8541-4809-965e-e702e7674125/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/081e0107-b015-4f85-91ff-d6b7b2084254/",
      "score": 51,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-12",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.nr-238sn34.sbs",
      "domain_b": "allegrolokalnie.smart-92492.cfd",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/081e0107-b015-4f85-91ff-d6b7b2084254/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/7623f4f0-6a6e-4ebc-b933-9e27f504be6c/",
      "score": 50,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-12",
      "evidence": [
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 10.6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 4.4,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": []
    },
    {
      "domain_a": "allegro.o5413443.top",
      "domain_b": "allegro.o54134483.top",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/27c21580-9af2-4db1-a6cf-09da581a5d5e/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/46c2d612-c460-442a-bb29-4f73314d08e3/",
      "score": 49,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-13",
      "evidence": [
        {
          "label": "same nameservers",
          "signal": "same_ns_set",
          "category": "infra",
          "contributed": 14.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": []
    },
    {
      "domain_a": "allegrolokalnie.o5433443.top",
      "domain_b": "allegrolokalnie.smart-92492.cfd",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/d02aee8e-4744-49ca-aa52-9a7dd2234768/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/7623f4f0-6a6e-4ebc-b933-9e27f504be6c/",
      "score": 49,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-13",
      "evidence": [
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 10.6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 4.4,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": []
    },
    {
      "domain_a": "allegro.o5413443.top",
      "domain_b": "allegro.ofe83204.sbs",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/27c21580-9af2-4db1-a6cf-09da581a5d5e/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/6eb26847-8541-4809-965e-e702e7674125/",
      "score": 48,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-13",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (72h)",
          "signal": "temporal_72h",
          "category": "temporal",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegro.o5413443.top",
      "domain_b": "allegrolokalnie.pl74892.pl",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/27c21580-9af2-4db1-a6cf-09da581a5d5e/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/bc1967e4-a86a-4494-8e5b-76615e88da34/",
      "score": 48,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-13",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (72h)",
          "signal": "temporal_72h",
          "category": "temporal",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegro.ofe83204.sbs",
      "domain_b": "allegrolokalnie.o5433443.top",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/6eb26847-8541-4809-965e-e702e7674125/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/d02aee8e-4744-49ca-aa52-9a7dd2234768/",
      "score": 48,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-13",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (72h)",
          "signal": "temporal_72h",
          "category": "temporal",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegro.ofe83204.sbs",
      "domain_b": "allegrolokalnie.pl74892.pl",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/6eb26847-8541-4809-965e-e702e7674125/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/bc1967e4-a86a-4494-8e5b-76615e88da34/",
      "score": 48,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-12",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "appeared together (72h)",
          "signal": "temporal_72h",
          "category": "temporal",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.pl74892.pl",
      "domain_b": "allegrolokalnie.smart-92492.cfd",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/bc1967e4-a86a-4494-8e5b-76615e88da34/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/7623f4f0-6a6e-4ebc-b933-9e27f504be6c/",
      "score": 47,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-12",
      "evidence": [
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 10.6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 4.4,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (72h)",
          "signal": "temporal_72h",
          "category": "temporal",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": []
    },
    {
      "domain_a": "allegro.o5413443.top",
      "domain_b": "allegrolokalnie.nr-238sn34.sbs",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/27c21580-9af2-4db1-a6cf-09da581a5d5e/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/081e0107-b015-4f85-91ff-d6b7b2084254/",
      "score": 47,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-11-13",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 6.0,
          "idf_factor": 0.5,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    }
  ],
  "relationships_truncated": false,
  "state": "live"
}