{
  "uuid": "1a005e31-ec2e-41c1-9dd9-837006c54057",
  "domain": "ingdirect-clienteweb-login.com",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-10-24T05:00:53.726147+00:00",
  "cluster": null,
  "count": 3,
  "limit": 10,
  "results": [
    {
      "uuid": "563f9fd6-a313-4c08-b242-a13458b65684",
      "domain": "ingdirect-accesoweb-login.com",
      "url": "https://ingdirect-accesoweb-login.com",
      "company": "ingspain",
      "status": "active",
      "first_seen": "2026-09-24 17:26:22.578090+00:00",
      "relationship_score": 42,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "credicentrocoop.com",
          "contributed": 9.6
        },
        {
          "type": "shared_distinctive_token",
          "value": "ingdirect",
          "contributed": 10.0
        },
        {
          "type": "same_registrar",
          "value": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
          "contributed": 4
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "aaadadadbc1c50d0~aaadadadbc1c50d0 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/ingspain/563f9fd6-a313-4c08-b242-a13458b65684/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "172.64.0.0/13",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    },
    {
      "uuid": "c3c30e9d-6725-4128-95a5-c0d512e8bf09",
      "domain": "santander-cliente.com",
      "url": null,
      "company": "santander",
      "status": "no longer tracked",
      "first_seen": null,
      "relationship_score": 38,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "credicentrocoop.com",
          "contributed": 9.6
        },
        {
          "type": "same_registrar",
          "value": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "24.0h",
          "contributed": 6
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "aaadadadbc1c50d0~aaadadadbc1c50d0 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": null,
      "service_range": null
    },
    {
      "uuid": "7fc41063-e451-4007-97a8-82006d9f7691",
      "domain": "ingdirect-servicios-clientes.com",
      "url": "https://ingdirect-servicios-clientes.com",
      "company": "ingspain",
      "status": "active",
      "first_seen": "2026-10-23 23:22:58.827203+00:00",
      "relationship_score": 38,
      "evidence": [
        {
          "type": "shared_final_host",
          "value": "credicentrocoop.com",
          "contributed": 9.6
        },
        {
          "type": "shared_distinctive_token",
          "value": "ingdirect",
          "contributed": 10.0
        },
        {
          "type": "same_registrar",
          "value": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
          "contributed": 4
        },
        {
          "type": "temporal_7d",
          "value": "78.0h",
          "contributed": 2
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "aaadadadbc1c50d0~aaadadadbc1c50d0 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/ingspain/7fc41063-e451-4007-97a8-82006d9f7691/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "188.114.96.0/20",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    }
  ]
}