{
  "id": 480,
  "key": "9861f3cf7b97",
  "size": 10,
  "active_count": 10,
  "brands": [
    "allegro",
    "dpd"
  ],
  "confidence": "suspected cluster",
  "confidence_score": 0.663,
  "confidence_metrics": {
    "B": 0.429,
    "D": 0.38,
    "S": 1.0,
    "T": 0.994,
    "V": 1.0
  },
  "first_seen": "2026-08-22 17:02:40.169742+00:00",
  "last_activity": "2026-08-25 03:01:09.449884+00:00",
  "top_evidence": {
    "type": "favicon_phash_exact",
    "coverage": "10/10 members"
  },
  "url": "https://phishunt.io/campaigns/9861f3cf7b97/",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-08-25T05:00:30.023518+00:00",
  "evidence_summary": [
    {
      "type": "favicon_phash_exact",
      "value": "93b2394c6c365b1b",
      "members_matching": 10
    },
    {
      "type": "shared_final_host",
      "value": "allegrolokalnie.pl",
      "members_matching": 10
    },
    {
      "type": "ocr_similarity_full",
      "value": "jaccard=1.00",
      "members_matching": 8
    },
    {
      "type": "levenshtein_le2",
      "value": "allegrolokalnie~allegrolokalnie d=0",
      "members_matching": 7
    },
    {
      "type": "shared_distinctive_token",
      "value": "allegrolokalnie",
      "members_matching": 7
    },
    {
      "type": "domain_age_window",
      "value": "3d/0d",
      "members_matching": 7
    },
    {
      "type": "same_registrar",
      "value": "Global Domain Group LLC",
      "members_matching": 7
    },
    {
      "type": "screenshot_phash_full",
      "value": "e3344b5b136b1d61~e3344b5b136b1d61 d=0",
      "members_matching": 6
    },
    {
      "type": "temporal_24h",
      "value": "0.0h",
      "members_matching": 6
    },
    {
      "type": "temporal_24h",
      "value": "11.0h",
      "members_matching": 6
    },
    {
      "type": "domain_age_window",
      "value": "0d/0d",
      "members_matching": 5
    },
    {
      "type": "cert_age_window",
      "value": "0d/0d",
      "members_matching": 5
    },
    {
      "type": "same_ns_set",
      "value": "brodie.ns.cloudflare.com,margaret.ns.cloudflare.com",
      "members_matching": 4
    },
    {
      "type": "temporal_24h",
      "value": "6.1h",
      "members_matching": 4
    },
    {
      "type": "temporal_24h",
      "value": "5.0h",
      "members_matching": 4
    },
    {
      "type": "temporal_24h",
      "value": "6.0h",
      "members_matching": 4
    },
    {
      "type": "screenshot_phash_full",
      "value": "eb33164b5b144b69~eb34164b5b154b69 d=4",
      "members_matching": 3
    },
    {
      "type": "temporal_24h",
      "value": "4.9h",
      "members_matching": 3
    },
    {
      "type": "temporal_24h",
      "value": "16.0h",
      "members_matching": 3
    },
    {
      "type": "temporal_24h",
      "value": "3.0h",
      "members_matching": 3
    },
    {
      "type": "domain_age_window",
      "value": "3d/5d",
      "members_matching": 3
    },
    {
      "type": "cert_age_window",
      "value": "3d/5d",
      "members_matching": 3
    },
    {
      "type": "cert_fingerprint_exact",
      "value": "f93fc084dfb4065cbb568872e928727219fbe091c9e0e7d65c9b02d3c31e191b",
      "members_matching": 2
    },
    {
      "type": "cert_fingerprint_exact",
      "value": "c9b2dca54233abcb6275cbe63e47e5b674a2388cf36b2bfa1890824a6d40c4fb",
      "members_matching": 2
    },
    {
      "type": "screenshot_phash_full",
      "value": "eb34164b5b154b69~eb34164b5b154b69 d=0",
      "members_matching": 2
    },
    {
      "type": "screenshot_phash_full",
      "value": "eb33164b5b144b69~eb33164b5b144b69 d=0",
      "members_matching": 2
    },
    {
      "type": "same_ns_set",
      "value": "malcolm.ns.cloudflare.com,ollie.ns.cloudflare.com",
      "members_matching": 2
    },
    {
      "type": "shared_distinctive_token",
      "value": "ploferta23189192",
      "members_matching": 2
    },
    {
      "type": "apex_subdomain_overlap",
      "value": "ploferta23189192.rest",
      "members_matching": 2
    },
    {
      "type": "shared_distinctive_token",
      "value": "ploferta3217832819",
      "members_matching": 2
    },
    {
      "type": "apex_subdomain_overlap",
      "value": "ploferta3217832819.sbs",
      "members_matching": 2
    },
    {
      "type": "shared_distinctive_token",
      "value": "lokalna",
      "members_matching": 2
    },
    {
      "type": "shared_distinctive_token",
      "value": "oferta",
      "members_matching": 2
    },
    {
      "type": "ocr_similarity_full",
      "value": "jaccard=0.92",
      "members_matching": 2
    },
    {
      "type": "ocr_similarity_full",
      "value": "jaccard=0.91",
      "members_matching": 2
    },
    {
      "type": "ocr_similarity_full",
      "value": "jaccard=0.98",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "8.1h",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "13.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "11.1h",
      "members_matching": 2
    },
    {
      "type": "temporal_24h",
      "value": "2.0h",
      "members_matching": 2
    },
    {
      "type": "domain_age_window",
      "value": "3d/3d",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "53.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "47.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "58.0h",
      "members_matching": 2
    },
    {
      "type": "cert_age_window",
      "value": "3d/3d",
      "members_matching": 2
    }
  ],
  "first_tracked": "2026-08-25T05:00:30.023518+00:00",
  "history": [
    {
      "at": "2026-08-25T05:00:30.023518+00:00",
      "event": "created",
      "size": 10,
      "joined": [
        "allegro.pi-ofeta089139.shop",
        "allegro.ploferta23189192.rest",
        "allegro.ploferta3217832819.sbs",
        "allegrolokalnie.lokalna-948271.sbs",
        "allegrolokalnie.lokalna-ofeta92112.cfd",
        "allegrolokalnie.oferta-lokalana694502304235.lol",
        "allegrolokalnie.oferta-lokalna8654968923445.shop",
        "allegrolokalnie.pl-dpd24.pl",
        "allegrolokalnie.ploferta23189192.rest",
        "allegrolokalnie.ploferta3217832819.sbs"
      ],
      "left": []
    }
  ],
  "members": [
    {
      "uuid": "16abd1b5-175c-4c1d-8eb5-0226790b38d0",
      "domain": "allegro.pi-ofeta089139.shop",
      "url": "http://allegro.pi-ofeta089139.shop",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-08-22 23:00:57.985890+00:00",
      "relationship_score": 47,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/allegro/16abd1b5-175c-4c1d-8eb5-0226790b38d0/",
      "image": "screenshots/allegro/a405a947-cdfa-4d08-a6d2-d048c45a8fe7.png",
      "phishunt_score": 32,
      "ip": "172.67.150.105",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "-",
      "cert": "WE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "4e64eebe-22ee-4c20-82be-3ef6746dcae8",
      "domain": "allegro.ploferta23189192.rest",
      "url": "http://allegro.ploferta23189192.rest",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-08-24 16:01:43.952642+00:00",
      "relationship_score": 86,
      "relationship_tier": "high",
      "detail_url": "https://phishunt.io/suspicious/allegro/4e64eebe-22ee-4c20-82be-3ef6746dcae8/",
      "image": "screenshots/allegro/dd6d90f5-92ab-4d94-abb1-fa3261e6e84d.png",
      "phishunt_score": 39,
      "ip": "172.67.136.179",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Global Domain Group LLC",
      "cert": "WE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "0bcaeb97-4488-4ee6-bded-b0441717269e",
      "domain": "allegro.ploferta3217832819.sbs",
      "url": "http://allegro.ploferta3217832819.sbs",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-08-24 11:02:23.261723+00:00",
      "relationship_score": 100,
      "relationship_tier": "high",
      "detail_url": "https://phishunt.io/suspicious/allegro/0bcaeb97-4488-4ee6-bded-b0441717269e/",
      "image": "screenshots/allegro/0bcaeb97-4488-4ee6-bded-b0441717269e.png",
      "phishunt_score": 49,
      "ip": "172.67.199.141",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Global Domain Group LLC",
      "cert": "WE1",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "dc85e7e3-8172-46f4-97e8-3895de67f3b0",
      "domain": "allegrolokalnie.lokalna-948271.sbs",
      "url": "http://allegrolokalnie.lokalna-948271.sbs",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-08-24 22:04:47.933488+00:00",
      "relationship_score": 73,
      "relationship_tier": "high",
      "detail_url": "https://phishunt.io/suspicious/allegro/dc85e7e3-8172-46f4-97e8-3895de67f3b0/",
      "image": "screenshots/allegro/6fb81583-79ee-4a83-a623-82ab892a2279.png",
      "phishunt_score": 36,
      "ip": "172.67.211.111",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Global Domain Group LLC",
      "cert": "WE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "6c53762c-2eb8-4995-be9c-46d8f0d350bf",
      "domain": "allegrolokalnie.lokalna-ofeta92112.cfd",
      "url": "https://allegrolokalnie.lokalna-ofeta92112.cfd",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-08-24 22:05:11.154397+00:00",
      "relationship_score": 74,
      "relationship_tier": "high",
      "detail_url": "https://phishunt.io/suspicious/allegro/6c53762c-2eb8-4995-be9c-46d8f0d350bf/",
      "image": "screenshots/allegro/2753ef3c-62d7-473b-8024-935a60e5082b.png",
      "phishunt_score": 39,
      "ip": "188.114.97.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Global Domain Group LLC",
      "cert": "WE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "a03e2fb8-b42b-4dc9-bcd0-883f46d24819",
      "domain": "allegrolokalnie.oferta-lokalana694502304235.lol",
      "url": "http://allegrolokalnie.oferta-lokalana694502304235.lol",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-08-25 03:01:09.449884+00:00",
      "relationship_score": 73,
      "relationship_tier": "high",
      "detail_url": "https://phishunt.io/suspicious/allegro/a03e2fb8-b42b-4dc9-bcd0-883f46d24819/",
      "image": "screenshots/allegro/33bc9d09-0ead-4269-b68e-513fdeb208c1.png",
      "phishunt_score": 35,
      "ip": "172.67.175.188",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Global Domain Group LLC",
      "cert": "WE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "fef20679-d9c1-4f7d-8745-a529e187911c",
      "domain": "allegrolokalnie.oferta-lokalna8654968923445.shop",
      "url": "http://allegrolokalnie.oferta-lokalna8654968923445.shop",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-08-22 17:02:40.169742+00:00",
      "relationship_score": 60,
      "relationship_tier": "medium",
      "detail_url": "https://phishunt.io/suspicious/allegro/fef20679-d9c1-4f7d-8745-a529e187911c/",
      "image": "screenshots/allegro/fef20679-d9c1-4f7d-8745-a529e187911c.png",
      "phishunt_score": 29,
      "ip": "104.21.16.14",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "-",
      "cert": "WE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "3361e037-630d-449a-935f-c049afe51a19",
      "domain": "allegrolokalnie.pl-dpd24.pl",
      "url": "https://allegrolokalnie.pl-dpd24.pl",
      "company": "dpd",
      "status": "active",
      "first_seen": "2026-08-24 14:01:43.557000+00:00",
      "relationship_score": 69,
      "relationship_tier": "high",
      "detail_url": "https://phishunt.io/suspicious/dpd/3361e037-630d-449a-935f-c049afe51a19/",
      "image": "screenshots/dpd/a9098d84-25b3-4776-9dd0-4323b20e6c21.png",
      "phishunt_score": 36,
      "ip": "188.114.97.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "nazwa.pl sp. z o.o.",
      "cert": "WE1",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "b241ce5f-5f37-4fdd-8801-f446eb8448c2",
      "domain": "allegrolokalnie.ploferta23189192.rest",
      "url": "http://allegrolokalnie.ploferta23189192.rest",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-08-24 16:02:03.836850+00:00",
      "relationship_score": 86,
      "relationship_tier": "high",
      "detail_url": "https://phishunt.io/suspicious/allegro/b241ce5f-5f37-4fdd-8801-f446eb8448c2/",
      "image": "screenshots/allegro/dddd5504-c4cd-40c1-a19e-98aadc40ad35.png",
      "phishunt_score": 36,
      "ip": "104.21.62.147",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Global Domain Group LLC",
      "cert": "WE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "ad7add8e-b37a-44f2-82c2-a5477c3aa4d0",
      "domain": "allegrolokalnie.ploferta3217832819.sbs",
      "url": "http://allegrolokalnie.ploferta3217832819.sbs",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-08-24 11:01:59.699746+00:00",
      "relationship_score": 100,
      "relationship_tier": "high",
      "detail_url": "https://phishunt.io/suspicious/allegro/ad7add8e-b37a-44f2-82c2-a5477c3aa4d0/",
      "image": "screenshots/allegro/ad7add8e-b37a-44f2-82c2-a5477c3aa4d0.png",
      "phishunt_score": 46,
      "ip": "104.21.52.133",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Global Domain Group LLC",
      "cert": "WE1",
      "gsb_category": "SOCIAL_ENGINEERING",
      "malicious_google": "1",
      "malicious_openphish": "0",
      "malicious_phishtank": "1",
      "malicious_tweetfeed": "1",
      "malicious_urlscan": "0"
    }
  ],
  "relationships": [
    {
      "domain_a": "allegro.ploferta3217832819.sbs",
      "domain_b": "allegrolokalnie.ploferta3217832819.sbs",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/0bcaeb97-4488-4ee6-bded-b0441717269e/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/ad7add8e-b37a-44f2-82c2-a5477c3aa4d0/",
      "score": 100,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same TLS cert",
          "signal": "cert_fingerprint_exact",
          "category": "tls",
          "contributed": 16.3,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 10.7,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same nameservers",
          "signal": "same_ns_set",
          "category": "infra",
          "contributed": 10.4,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 9.4,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "same apex",
          "signal": "apex_subdomain_overlap",
          "category": "infra",
          "contributed": 9.2,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 5.7,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 5.7,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 4.8,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 3.8,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 2.8,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "shared TLS SAN",
          "signal": "san_overlap",
          "category": "tls",
          "contributed": 0.0,
          "idf_factor": 1.0,
          "dampened_by": "cert_fingerprint_exact"
        },
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegro.ploferta23189192.rest",
      "domain_b": "allegrolokalnie.ploferta23189192.rest",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/4e64eebe-22ee-4c20-82be-3ef6746dcae8/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/b241ce5f-5f37-4fdd-8801-f446eb8448c2/",
      "score": 86,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same TLS cert",
          "signal": "cert_fingerprint_exact",
          "category": "tls",
          "contributed": 17.1,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same nameservers",
          "signal": "same_ns_set",
          "category": "infra",
          "contributed": 10.9,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 10.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "same apex",
          "signal": "apex_subdomain_overlap",
          "category": "infra",
          "contributed": 9.7,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.4,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 2.9,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "shared TLS SAN",
          "signal": "san_overlap",
          "category": "tls",
          "contributed": 0.0,
          "idf_factor": 1.0,
          "dampened_by": "cert_fingerprint_exact"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.lokalna-ofeta92112.cfd",
      "domain_b": "allegrolokalnie.ploferta23189192.rest",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/6c53762c-2eb8-4995-be9c-46d8f0d350bf/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/b241ce5f-5f37-4fdd-8801-f446eb8448c2/",
      "score": 74,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 14.7,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 10.3,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.lokalna-948271.sbs",
      "domain_b": "allegrolokalnie.oferta-lokalana694502304235.lol",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/dc85e7e3-8172-46f4-97e8-3895de67f3b0/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/a03e2fb8-b42b-4dc9-bcd0-883f46d24819/",
      "score": 73,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.lokalna-948271.sbs",
      "domain_b": "allegrolokalnie.ploferta3217832819.sbs",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/dc85e7e3-8172-46f4-97e8-3895de67f3b0/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/ad7add8e-b37a-44f2-82c2-a5477c3aa4d0/",
      "score": 70,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.oferta-lokalana694502304235.lol",
      "domain_b": "allegrolokalnie.ploferta3217832819.sbs",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/a03e2fb8-b42b-4dc9-bcd0-883f46d24819/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/ad7add8e-b37a-44f2-82c2-a5477c3aa4d0/",
      "score": 70,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.pl-dpd24.pl",
      "domain_b": "allegrolokalnie.ploferta3217832819.sbs",
      "detail_url_a": "https://phishunt.io/suspicious/dpd/3361e037-630d-449a-935f-c049afe51a19/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/ad7add8e-b37a-44f2-82c2-a5477c3aa4d0/",
      "score": 69,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegro.ploferta23189192.rest",
      "domain_b": "allegro.ploferta3217832819.sbs",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/4e64eebe-22ee-4c20-82be-3ef6746dcae8/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/0bcaeb97-4488-4ee6-bded-b0441717269e/",
      "score": 66,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same nameservers",
          "signal": "same_ns_set",
          "category": "infra",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegro.ploferta23189192.rest",
      "domain_b": "allegrolokalnie.ploferta3217832819.sbs",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/4e64eebe-22ee-4c20-82be-3ef6746dcae8/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/ad7add8e-b37a-44f2-82c2-a5477c3aa4d0/",
      "score": 66,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same nameservers",
          "signal": "same_ns_set",
          "category": "infra",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.ploferta23189192.rest",
      "domain_b": "allegrolokalnie.ploferta3217832819.sbs",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/b241ce5f-5f37-4fdd-8801-f446eb8448c2/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/ad7add8e-b37a-44f2-82c2-a5477c3aa4d0/",
      "score": 62,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same nameservers",
          "signal": "same_ns_set",
          "category": "infra",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": []
    },
    {
      "domain_a": "allegrolokalnie.lokalna-948271.sbs",
      "domain_b": "allegrolokalnie.pl-dpd24.pl",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/dc85e7e3-8172-46f4-97e8-3895de67f3b0/",
      "detail_url_b": "https://phishunt.io/suspicious/dpd/3361e037-630d-449a-935f-c049afe51a19/",
      "score": 61,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.oferta-lokalana694502304235.lol",
      "domain_b": "allegrolokalnie.pl-dpd24.pl",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/a03e2fb8-b42b-4dc9-bcd0-883f46d24819/",
      "detail_url_b": "https://phishunt.io/suspicious/dpd/3361e037-630d-449a-935f-c049afe51a19/",
      "score": 61,
      "tier": "high",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.lokalna-ofeta92112.cfd",
      "domain_b": "allegrolokalnie.oferta-lokalna8654968923445.shop",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/6c53762c-2eb8-4995-be9c-46d8f0d350bf/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/fef20679-d9c1-4f7d-8745-a529e187911c/",
      "score": 60,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 14.7,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 10.3,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (72h)",
          "signal": "temporal_72h",
          "category": "temporal",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.oferta-lokalna8654968923445.shop",
      "domain_b": "allegrolokalnie.ploferta23189192.rest",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/fef20679-d9c1-4f7d-8745-a529e187911c/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/b241ce5f-5f37-4fdd-8801-f446eb8448c2/",
      "score": 60,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 14.7,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 10.3,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (72h)",
          "signal": "temporal_72h",
          "category": "temporal",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegro.ploferta23189192.rest",
      "domain_b": "allegrolokalnie.lokalna-948271.sbs",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/4e64eebe-22ee-4c20-82be-3ef6746dcae8/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/dc85e7e3-8172-46f4-97e8-3895de67f3b0/",
      "score": 58,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegro.ploferta23189192.rest",
      "domain_b": "allegrolokalnie.oferta-lokalana694502304235.lol",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/4e64eebe-22ee-4c20-82be-3ef6746dcae8/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/a03e2fb8-b42b-4dc9-bcd0-883f46d24819/",
      "score": 58,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegro.ploferta3217832819.sbs",
      "domain_b": "allegrolokalnie.lokalna-948271.sbs",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/0bcaeb97-4488-4ee6-bded-b0441717269e/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/dc85e7e3-8172-46f4-97e8-3895de67f3b0/",
      "score": 55,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegro.ploferta3217832819.sbs",
      "domain_b": "allegrolokalnie.oferta-lokalana694502304235.lol",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/0bcaeb97-4488-4ee6-bded-b0441717269e/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/a03e2fb8-b42b-4dc9-bcd0-883f46d24819/",
      "score": 55,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.lokalna-948271.sbs",
      "domain_b": "allegrolokalnie.lokalna-ofeta92112.cfd",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/dc85e7e3-8172-46f4-97e8-3895de67f3b0/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/6c53762c-2eb8-4995-be9c-46d8f0d350bf/",
      "score": 54,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 8.2,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.8,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": []
    },
    {
      "domain_a": "allegrolokalnie.lokalna-948271.sbs",
      "domain_b": "allegrolokalnie.ploferta23189192.rest",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/dc85e7e3-8172-46f4-97e8-3895de67f3b0/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/b241ce5f-5f37-4fdd-8801-f446eb8448c2/",
      "score": 54,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": []
    },
    {
      "domain_a": "allegrolokalnie.lokalna-ofeta92112.cfd",
      "domain_b": "allegrolokalnie.oferta-lokalana694502304235.lol",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/6c53762c-2eb8-4995-be9c-46d8f0d350bf/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/a03e2fb8-b42b-4dc9-bcd0-883f46d24819/",
      "score": 54,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": []
    },
    {
      "domain_a": "allegrolokalnie.oferta-lokalana694502304235.lol",
      "domain_b": "allegrolokalnie.oferta-lokalna8654968923445.shop",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/a03e2fb8-b42b-4dc9-bcd0-883f46d24819/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/fef20679-d9c1-4f7d-8745-a529e187911c/",
      "score": 54,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same nameservers",
          "signal": "same_ns_set",
          "category": "infra",
          "contributed": 14.0,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 8.2,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.8,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "appeared together (72h)",
          "signal": "temporal_72h",
          "category": "temporal",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": []
    },
    {
      "domain_a": "allegrolokalnie.oferta-lokalana694502304235.lol",
      "domain_b": "allegrolokalnie.ploferta23189192.rest",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/a03e2fb8-b42b-4dc9-bcd0-883f46d24819/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/b241ce5f-5f37-4fdd-8801-f446eb8448c2/",
      "score": 54,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": []
    },
    {
      "domain_a": "allegro.ploferta3217832819.sbs",
      "domain_b": "allegrolokalnie.pl-dpd24.pl",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/0bcaeb97-4488-4ee6-bded-b0441717269e/",
      "detail_url_b": "https://phishunt.io/suspicious/dpd/3361e037-630d-449a-935f-c049afe51a19/",
      "score": 54,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "certs issued together",
          "signal": "cert_age_window",
          "category": "tls",
          "contributed": 3,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegrolokalnie.lokalna-ofeta92112.cfd",
      "domain_b": "allegrolokalnie.ploferta3217832819.sbs",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/6c53762c-2eb8-4995-be9c-46d8f0d350bf/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/ad7add8e-b37a-44f2-82c2-a5477c3aa4d0/",
      "score": 51,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "levenshtein_le2",
          "category": "naming",
          "contributed": 9.0,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "similar name",
          "signal": "shared_distinctive_token",
          "category": "naming",
          "contributed": 6.0,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": []
    },
    {
      "domain_a": "allegro.ploferta3217832819.sbs",
      "domain_b": "allegrolokalnie.ploferta23189192.rest",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/0bcaeb97-4488-4ee6-bded-b0441717269e/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/b241ce5f-5f37-4fdd-8801-f446eb8448c2/",
      "score": 47,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same nameservers",
          "signal": "same_ns_set",
          "category": "infra",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "registered together",
          "signal": "domain_age_window",
          "category": "registration",
          "contributed": 5,
          "idf_factor": null,
          "dampened_by": null
        },
        {
          "label": "same registrar",
          "signal": "same_registrar",
          "category": "registration",
          "contributed": 4,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": []
    },
    {
      "domain_a": "allegro.pi-ofeta089139.shop",
      "domain_b": "allegrolokalnie.oferta-lokalna8654968923445.shop",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/16abd1b5-175c-4c1d-8eb5-0226790b38d0/",
      "detail_url_b": "https://phishunt.io/suspicious/allegro/fef20679-d9c1-4f7d-8745-a529e187911c/",
      "score": 47,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-24",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 14.7,
          "idf_factor": 1.0,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 10.3,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    },
    {
      "domain_a": "allegro.ploferta23189192.rest",
      "domain_b": "allegrolokalnie.pl-dpd24.pl",
      "detail_url_a": "https://phishunt.io/suspicious/allegro/4e64eebe-22ee-4c20-82be-3ef6746dcae8/",
      "detail_url_b": "https://phishunt.io/suspicious/dpd/3361e037-630d-449a-935f-c049afe51a19/",
      "score": 46,
      "tier": "medium",
      "demotion_reason": null,
      "first_reproduced": "2026-08-25",
      "evidence": [
        {
          "label": "same screenshot",
          "signal": "screenshot_phash_full",
          "category": "visual",
          "contributed": 12.8,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same favicon",
          "signal": "favicon_phash_exact",
          "category": "visual",
          "contributed": 11.2,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "same redirect target",
          "signal": "shared_final_host",
          "category": "infra",
          "contributed": 9.6,
          "idf_factor": 0.8,
          "dampened_by": null
        },
        {
          "label": "similar text",
          "signal": "ocr_similarity_full",
          "category": "content",
          "contributed": 6.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        },
        {
          "label": "appeared together (24h)",
          "signal": "temporal_24h",
          "category": "temporal",
          "contributed": 6,
          "idf_factor": null,
          "dampened_by": null
        }
      ],
      "discounted": [
        {
          "label": "similar colors",
          "signal": "dominant_colors_match",
          "category": "visual",
          "contributed": 0.0,
          "idf_factor": null,
          "dampened_by": "screenshot_phash"
        }
      ]
    }
  ],
  "relationships_truncated": false,
  "state": "live"
}