{
  "uuid": "2cadd4ba-0246-48af-ba27-77c1dbd06725",
  "domain": "wahat-ipp.sa-onedrive.com",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-10-31T05:00:47.037768+00:00",
  "cluster": null,
  "count": 1,
  "limit": 10,
  "results": [
    {
      "uuid": "7fadf081-9fc2-414d-8f62-2b6fd04e2377",
      "domain": "biesse.en-onedrive.com",
      "url": "https://biesse.en-onedrive.com",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-10-30 08:06:37.973492+00:00",
      "relationship_score": 37,
      "evidence": [
        {
          "type": "same_ns_set",
          "value": "bowen.ns.cloudflare.com,dawn.ns.cloudflare.com",
          "contributed": 14.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "onedrive",
          "contributed": 8.0
        },
        {
          "type": "domain_age_window",
          "value": "0d/2d",
          "contributed": 5
        },
        {
          "type": "temporal_72h",
          "value": "71.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "0d/0d",
          "contributed": 3
        },
        {
          "type": "rare_issuer_match",
          "value": "Google Trust Services",
          "contributed": 3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/7fadf081-9fc2-414d-8f62-2b6fd04e2377/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "172.64.0.0/13",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    }
  ]
}