{
  "id": 433,
  "key": "c405bff3c882",
  "size": 4,
  "active_count": 4,
  "brands": [
    "facebook"
  ],
  "confidence": "possible campaign",
  "confidence_score": 0.7,
  "confidence_metrics": {
    "B": 0.0,
    "D": 0.556,
    "S": 1.0,
    "T": 1.0,
    "V": 1.0
  },
  "first_seen": "2026-08-22 01:07:05.290961+00:00",
  "last_activity": "2026-08-22 01:11:00.132710+00:00",
  "top_evidence": {
    "type": "apex_subdomain_overlap",
    "coverage": "4/4 members"
  },
  "url": "https://phishunt.io/campaigns/c405bff3c882/",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-08-22T05:00:38.288692+00:00",
  "evidence_summary": [
    {
      "type": "apex_subdomain_overlap",
      "value": "metacreatormonetizationsupportsystem.click",
      "members_matching": 4
    },
    {
      "type": "cert_age_window",
      "value": "4d/4d",
      "members_matching": 4
    },
    {
      "type": "cert_fingerprint_exact",
      "value": "dde4dc90cd95046b9342df8396aa45f45603354b8c61764e8d18e4344a9058d7",
      "members_matching": 4
    },
    {
      "type": "domain_age_window",
      "value": "4d/4d",
      "members_matching": 4
    },
    {
      "type": "same_ns_set",
      "value": "arya.ns.cloudflare.com,kyle.ns.cloudflare.com",
      "members_matching": 4
    },
    {
      "type": "shared_distinctive_token",
      "value": "metacreatormonetizationsupportsystem",
      "members_matching": 4
    },
    {
      "type": "temporal_24h",
      "value": "0.0h",
      "members_matching": 4
    },
    {
      "type": "temporal_24h",
      "value": "0.1h",
      "members_matching": 2
    }
  ],
  "first_tracked": "2026-08-22T05:00:38.288692+00:00",
  "history": [
    {
      "at": "2026-08-22T05:00:38.288692+00:00",
      "event": "created",
      "size": 4,
      "joined": [
        "app.metacreatormonetizationsupportsystem.click",
        "auth.metacreatormonetizationsupportsystem.click",
        "center.metacreatormonetizationsupportsystem.click",
        "fb.metacreatormonetizationsupportsystem.click"
      ],
      "left": []
    }
  ],
  "members": [
    {
      "uuid": "40f175c8-6945-4c46-b380-72e6f47af728",
      "domain": "app.metacreatormonetizationsupportsystem.click",
      "url": "https://app.metacreatormonetizationsupportsystem.click/facebook-10007712495",
      "company": "facebook",
      "status": "active",
      "first_seen": "2026-08-22 01:11:00.132710+00:00",
      "relationship_score": 56,
      "detail_url": "https://phishunt.io/suspicious/facebook/40f175c8-6945-4c46-b380-72e6f47af728/",
      "image": "",
      "phishunt_score": 38,
      "ip": "188.114.96.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Name.com, Inc.",
      "cert": "WE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "1",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "66fb4b7a-e90d-4b78-ab9e-60320b29b252",
      "domain": "auth.metacreatormonetizationsupportsystem.click",
      "url": "https://auth.metacreatormonetizationsupportsystem.click/facebook-10007712493",
      "company": "facebook",
      "status": "active",
      "first_seen": "2026-08-22 01:09:26.420791+00:00",
      "relationship_score": 56,
      "detail_url": "https://phishunt.io/suspicious/facebook/66fb4b7a-e90d-4b78-ab9e-60320b29b252/",
      "image": "",
      "phishunt_score": 38,
      "ip": "188.114.96.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Name.com, Inc.",
      "cert": "WE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "1",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "b1265f48-0df4-4d32-ac1d-f1b0b5e916c5",
      "domain": "center.metacreatormonetizationsupportsystem.click",
      "url": "https://center.metacreatormonetizationsupportsystem.click/facebook-10007712501",
      "company": "facebook",
      "status": "active",
      "first_seen": "2026-08-22 01:07:05.290961+00:00",
      "relationship_score": 56,
      "detail_url": "https://phishunt.io/suspicious/facebook/b1265f48-0df4-4d32-ac1d-f1b0b5e916c5/",
      "image": "",
      "phishunt_score": 38,
      "ip": "188.114.96.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Name.com, Inc.",
      "cert": "WE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "1",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "eb687416-4975-4c4c-845e-a68c01a1d6ef",
      "domain": "fb.metacreatormonetizationsupportsystem.click",
      "url": "https://fb.metacreatormonetizationsupportsystem.click/facebook-10007712498",
      "company": "facebook",
      "status": "active",
      "first_seen": "2026-08-22 01:08:18.572946+00:00",
      "relationship_score": 56,
      "detail_url": "https://phishunt.io/suspicious/facebook/eb687416-4975-4c4c-845e-a68c01a1d6ef/",
      "image": "",
      "phishunt_score": 38,
      "ip": "188.114.97.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Name.com, Inc.",
      "cert": "WE1",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "1",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    }
  ]
}