{
  "uuid": "242b12c6-c117-4f10-bbbc-aa8bd187d9c1",
  "domain": "accounts-google-com-id29902wavx-ssl-k-emailrenew55.srpska-banka.com",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-09-01T05:00:34.512712+00:00",
  "cluster": {
    "key": "e9f59225042f",
    "size": 3,
    "url": "https://phishunt.io/campaigns/e9f59225042f/"
  },
  "count": 3,
  "limit": 10,
  "results": [
    {
      "uuid": "8e6f0cef-f412-4cd4-b7e9-ff2812f7d689",
      "domain": "accounts-google-com.srpska-banka.com",
      "url": "https://accounts-google-com.srpska-banka.com",
      "company": "google",
      "status": "active",
      "first_seen": "2026-08-31 17:24:18.315248+00:00",
      "relationship_score": 89,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "apex_subdomain_overlap",
          "value": "srpska-banka.com",
          "contributed": 6.5
        },
        {
          "type": "same_asn",
          "value": "33139",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "66.49.204.205",
          "contributed": 14.3
        },
        {
          "type": "same_ns_set",
          "value": "ns.canaca.net,ns2.canaca.net",
          "contributed": 9.2
        },
        {
          "type": "same_org",
          "value": "Canaca-com Inc.",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "banka",
          "contributed": 10.0
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 2.9
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "2eaa5ab2185e4e13f687a42d9e867c3f720e97e33058e888eb5ba18258453ee1",
          "contributed": 17.1
        },
        {
          "type": "san_overlap",
          "value": "antic.org",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "a4319bcc6c66b393~a4319bcc6c66b393 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/google/8e6f0cef-f412-4cd4-b7e9-ff2812f7d689/"
    },
    {
      "uuid": "f32035b5-08b8-4ccf-86cf-c6548abcf6ac",
      "domain": "online.accounts-google-com-id29902wavx-ssl-k-emailrenew55.codes566ghhhbvnnjui.srpska-banka.com",
      "url": "https://online.accounts-google-com-id29902wavx-ssl-k-emailrenew55.codes566ghhhbvnnjui.srpska-banka.com",
      "company": "google",
      "status": "active",
      "first_seen": "2026-08-31 17:24:18.168241+00:00",
      "relationship_score": 89,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "apex_subdomain_overlap",
          "value": "srpska-banka.com",
          "contributed": 6.5
        },
        {
          "type": "same_asn",
          "value": "33139",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "66.49.204.205",
          "contributed": 14.3
        },
        {
          "type": "same_ns_set",
          "value": "ns.canaca.net,ns2.canaca.net",
          "contributed": 9.2
        },
        {
          "type": "same_org",
          "value": "Canaca-com Inc.",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "banka",
          "contributed": 10.0
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 2.9
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "2eaa5ab2185e4e13f687a42d9e867c3f720e97e33058e888eb5ba18258453ee1",
          "contributed": 17.1
        },
        {
          "type": "san_overlap",
          "value": "antic.org",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "a4319bcc6c66b393~a4319bcc6c66b393 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/google/f32035b5-08b8-4ccf-86cf-c6548abcf6ac/"
    },
    {
      "uuid": "8faa9a7c-c6f0-44d7-9b7f-9d5df440a5d1",
      "domain": "bankofamerica-com-login-update-unauthorized.ph",
      "url": "https://bankofamerica-com-login-update-unauthorized.ph",
      "company": "bankofamerica",
      "status": "active",
      "first_seen": "2026-08-30 05:24:51.561232+00:00",
      "relationship_score": 23,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.87",
          "contributed": 6.0
        },
        {
          "type": "temporal_72h",
          "value": "36.0h",
          "contributed": 4
        },
        {
          "type": "screenshot_phash_full",
          "value": "e4319bcc6c669393~a4319bcc6c66b393 d=2",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/bankofamerica/8faa9a7c-c6f0-44d7-9b7f-9d5df440a5d1/"
    }
  ]
}