{
  "uuid": "10dabc8f-2755-4ea4-8a2e-389d5ffcebfd",
  "domain": "test.jsqnjzyg.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-11-12T05:00:35.519255+00:00",
  "cluster": null,
  "count": 7,
  "limit": 10,
  "results": [
    {
      "uuid": "b3cf493e-98c7-4dc5-981e-b839a76c4747",
      "domain": "jsqnjzyg.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site",
      "url": "https://jsqnjzyg.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-10-21 17:23:18.526317+00:00",
      "relationship_score": 85,
      "evidence": [
        {
          "type": "same_asn",
          "value": "14061",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "161.35.102.243",
          "contributed": 19.9
        },
        {
          "type": "same_ns_set",
          "value": "ns1.pdns.tech,ns2.pdns.tech,ns3.pdns.tech",
          "contributed": 10.1
        },
        {
          "type": "same_org",
          "value": "DigitalOcean, LLC",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "jsqnjzyg",
          "contributed": 10.0
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "6.0h",
          "contributed": 6
        },
        {
          "type": "san_overlap",
          "value": "cpanel.site",
          "contributed": 9.6
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.1",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "fdbdc097856a92a0",
          "contributed": 11.7
        },
        {
          "type": "screenshot_phash_full",
          "value": "9966669999666633~9966669999666633 d=0",
          "contributed": 13.3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/b3cf493e-98c7-4dc5-981e-b839a76c4747/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "161.35.96.0/19",
          "provider": "DigitalOcean",
          "region": "US",
          "service": "",
          "source": "digitalocean"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "2907cde8-31c6-48e1-a818-a92cb8b01aab",
      "domain": "ttgyahvw.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site",
      "url": "https://ttgyahvw.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-10-21 23:23:01.639961+00:00",
      "relationship_score": 75,
      "evidence": [
        {
          "type": "same_asn",
          "value": "14061",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "161.35.102.243",
          "contributed": 19.9
        },
        {
          "type": "same_ns_set",
          "value": "ns1.pdns.tech,ns2.pdns.tech,ns3.pdns.tech",
          "contributed": 10.1
        },
        {
          "type": "same_org",
          "value": "DigitalOcean, LLC",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "billing",
          "contributed": 8.0
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "san_overlap",
          "value": "cpanel.site",
          "contributed": 9.6
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 3
        },
        {
          "type": "favicon_phash_exact",
          "value": "fdbdc097856a92a0",
          "contributed": 14.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/2907cde8-31c6-48e1-a818-a92cb8b01aab/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "161.35.96.0/19",
          "provider": "DigitalOcean",
          "region": "US",
          "service": "",
          "source": "digitalocean"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "ab4bf517-77e8-4bc2-8220-95968b78d0d1",
      "domain": "www.mxjkckus.login.microsoftonline-billing-verification-secured-help.104-248-114-136.cpanel.site",
      "url": "https://www.mxjkckus.login.microsoftonline-billing-verification-secured-help.104-248-114-136.cpanel.site",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-10-21 23:23:02.217725+00:00",
      "relationship_score": 44,
      "evidence": [
        {
          "type": "same_asn",
          "value": "14061",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.pdns.tech,ns2.pdns.tech,ns3.pdns.tech",
          "contributed": 11.2
        },
        {
          "type": "same_org",
          "value": "DigitalOcean, LLC",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "billing",
          "contributed": 8.0
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "san_overlap",
          "value": "cpanel.site",
          "contributed": 9.6
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/ab4bf517-77e8-4bc2-8220-95968b78d0d1/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "104.248.112.0/20",
          "provider": "DigitalOcean",
          "region": "US",
          "service": "",
          "source": "digitalocean"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "cf09b513-961d-48c6-9a9a-57105bc074cd",
      "domain": "admin.bill-netflix-dashboard-account.104-248-114-136.cpanel.site",
      "url": "https://admin.bill-netflix-dashboard-account.104-248-114-136.cpanel.site",
      "company": "netflix",
      "status": "active",
      "first_seen": "2026-10-21 23:23:16.878210+00:00",
      "relationship_score": 39,
      "evidence": [
        {
          "type": "same_asn",
          "value": "14061",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.pdns.tech,ns2.pdns.tech,ns3.pdns.tech",
          "contributed": 11.2
        },
        {
          "type": "same_org",
          "value": "DigitalOcean, LLC",
          "contributed": 0.0
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "cpanel.site",
          "contributed": 9.6
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=27.6",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/netflix/cf09b513-961d-48c6-9a9a-57105bc074cd/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "104.248.112.0/20",
          "provider": "DigitalOcean",
          "region": "US",
          "service": "",
          "source": "digitalocean"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "4ed9518c-a614-4afe-bba3-ad5a08447b0f",
      "domain": "backup.bill-netflix-dashboard-account.104-248-114-136.cpanel.site",
      "url": "https://backup.bill-netflix-dashboard-account.104-248-114-136.cpanel.site",
      "company": "netflix",
      "status": "active",
      "first_seen": "2026-10-21 23:23:17.144581+00:00",
      "relationship_score": 39,
      "evidence": [
        {
          "type": "same_asn",
          "value": "14061",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.pdns.tech,ns2.pdns.tech,ns3.pdns.tech",
          "contributed": 11.2
        },
        {
          "type": "same_org",
          "value": "DigitalOcean, LLC",
          "contributed": 0.0
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "cpanel.site",
          "contributed": 9.6
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=26.8",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/netflix/4ed9518c-a614-4afe-bba3-ad5a08447b0f/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "104.248.112.0/20",
          "provider": "DigitalOcean",
          "region": "US",
          "service": "",
          "source": "digitalocean"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "d07d1ccc-8ed6-4b7b-b443-5310f15a98f5",
      "domain": "www.www.znzfgdld.login.microsoftonline-billing-verification-secured-help.51-254-125-38.cpanel.site",
      "url": "https://www.www.znzfgdld.login.microsoftonline-billing-verification-secured-help.51-254-125-38.cpanel.site",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-10-16 23:24:44.661355+00:00",
      "relationship_score": 38,
      "evidence": [
        {
          "type": "same_ns_set",
          "value": "ns1.pdns.tech,ns2.pdns.tech,ns3.pdns.tech",
          "contributed": 11.2
        },
        {
          "type": "shared_distinctive_token",
          "value": "billing",
          "contributed": 8.0
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_7d",
          "value": "120.0h",
          "contributed": 2
        },
        {
          "type": "cert_age_window",
          "value": "2d/1d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "cpanel.site",
          "contributed": 9.6
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/d07d1ccc-8ed6-4b7b-b443-5310f15a98f5/",
      "service_range": null,
      "url_only": false
    },
    {
      "uuid": "4fda3466-dd2b-4d2d-bfdc-2038e30c7b7e",
      "domain": "bill-netflix-dashboard-account.104-248-114-136.cpanel.site",
      "url": "https://bill-netflix-dashboard-account.104-248-114-136.cpanel.site",
      "company": "netflix",
      "status": "active",
      "first_seen": "2026-10-21 17:23:21.003430+00:00",
      "relationship_score": 36,
      "evidence": [
        {
          "type": "same_asn",
          "value": "14061",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.pdns.tech,ns2.pdns.tech,ns3.pdns.tech",
          "contributed": 11.2
        },
        {
          "type": "same_org",
          "value": "DigitalOcean, LLC",
          "contributed": 0.0
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "6.0h",
          "contributed": 6
        },
        {
          "type": "san_overlap",
          "value": "cpanel.site",
          "contributed": 9.6
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=27.6",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/netflix/4fda3466-dd2b-4d2d-bfdc-2038e30c7b7e/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "104.248.112.0/20",
          "provider": "DigitalOcean",
          "region": "US",
          "service": "",
          "source": "digitalocean"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    }
  ]
}