{
  "id": 276,
  "key": "ec30a265c536",
  "size": 3,
  "active_count": 3,
  "brands": [
    "trezor"
  ],
  "confidence": "suspected cluster",
  "confidence_score": 0.677,
  "confidence_metrics": {
    "B": 0.0,
    "D": 0.519,
    "S": 1.0,
    "T": 0.967,
    "V": 1.0
  },
  "first_seen": "2026-08-07 01:01:18.631009+00:00",
  "last_activity": "2026-08-09 01:03:46.175550+00:00",
  "top_evidence": {
    "type": "apex_subdomain_overlap",
    "coverage": "3/3 members"
  },
  "url": "https://phishunt.io/campaigns/ec30a265c536/",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-08-10T05:00:30.009829+00:00",
  "evidence_summary": [
    {
      "type": "apex_subdomain_overlap",
      "value": "typedream.app",
      "members_matching": 3
    },
    {
      "type": "same_ns_set",
      "value": "annalise.ns.cloudflare.com,darwin.ns.cloudflare.com",
      "members_matching": 3
    },
    {
      "type": "same_registrar",
      "value": "Squarespace Domains II LLC.",
      "members_matching": 3
    },
    {
      "type": "screenshot_phash_full",
      "value": "aa55aa55aa55aa55~aa55aa55aa55aa55 d=0",
      "members_matching": 3
    },
    {
      "type": "shared_distinctive_token",
      "value": "typedream",
      "members_matching": 3
    },
    {
      "type": "temporal_24h",
      "value": "12.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "36.0h",
      "members_matching": 2
    },
    {
      "type": "temporal_72h",
      "value": "48.0h",
      "members_matching": 2
    }
  ],
  "first_tracked": "2026-08-09T05:00:26.687585+00:00",
  "history": [
    {
      "at": "2026-08-09T05:00:26.687585+00:00",
      "event": "created",
      "size": 3,
      "joined": [
        "trezor-app-bridge.typedream.app",
        "trezor-login-us-auth-start.typedream.app",
        "trezor-suite-auth-web.typedream.app"
      ],
      "left": []
    }
  ],
  "members": [
    {
      "uuid": "e5b005d7-022b-41a5-a996-1b1ba5536500",
      "domain": "trezor-app-bridge.typedream.app",
      "url": "http://trezor-app-bridge.typedream.app",
      "company": "trezor",
      "status": "active",
      "first_seen": "2026-08-07 13:01:31.447020+00:00",
      "relationship_score": 53,
      "detail_url": "https://phishunt.io/suspicious/trezor/e5b005d7-022b-41a5-a996-1b1ba5536500/",
      "image": "screenshots/trezor/b19abb97-b003-43d8-90ba-5bdf89ab7be8.png",
      "phishunt_score": 36,
      "ip": "188.114.96.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Squarespace Domains II LLC.",
      "cert": "-",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "1",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "73ac3f6d-0b65-47ff-9eb9-12215eef4cac",
      "domain": "trezor-login-us-auth-start.typedream.app",
      "url": "http://trezor-login-us-auth-start.typedream.app",
      "company": "trezor",
      "status": "active",
      "first_seen": "2026-08-07 01:01:18.631009+00:00",
      "relationship_score": 53,
      "detail_url": "https://phishunt.io/suspicious/trezor/73ac3f6d-0b65-47ff-9eb9-12215eef4cac/",
      "image": "screenshots/trezor/4b7d9202-af28-46dc-ad02-6a04c1fda9a9.png",
      "phishunt_score": 37,
      "ip": "188.114.96.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Squarespace Domains II LLC.",
      "cert": "-",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "1",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    },
    {
      "uuid": "c1fbeb41-957c-4253-ad79-e726f02da301",
      "domain": "trezor-suite-auth-web.typedream.app",
      "url": "http://trezor-suite-auth-web.typedream.app",
      "company": "trezor",
      "status": "active",
      "first_seen": "2026-08-09 01:03:46.175550+00:00",
      "relationship_score": 51,
      "detail_url": "https://phishunt.io/suspicious/trezor/c1fbeb41-957c-4253-ad79-e726f02da301/",
      "image": "screenshots/trezor/e4e11177-d375-432c-810c-bc5c56e175be.png",
      "phishunt_score": 37,
      "ip": "188.114.97.3",
      "asn": "13335",
      "org": "Cloudflare, Inc.",
      "country": "United States",
      "registrar": "Squarespace Domains II LLC.",
      "cert": "-",
      "gsb_category": "",
      "malicious_google": "0",
      "malicious_openphish": "1",
      "malicious_phishtank": "0",
      "malicious_tweetfeed": "0",
      "malicious_urlscan": "0"
    }
  ]
}