{
  "uuid": "31ad5210-865f-441b-8126-8e38d4ac2610",
  "domain": "us06-web-zoom.us",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-10-16T05:00:39.660527+00:00",
  "cluster": {
    "key": "0c82f63ef07c",
    "size": 4,
    "host_count": 4,
    "url": "https://phishunt.io/campaigns/0c82f63ef07c/"
  },
  "count": 3,
  "limit": 10,
  "results": [
    {
      "uuid": "c220f3b7-fe0d-401b-8186-eb3de40b0758",
      "domain": "us02-web-zoom.us",
      "url": "http://us02-web-zoom.us",
      "company": "zoom",
      "status": "active",
      "first_seen": "2026-10-15 01:02:02.175895+00:00",
      "relationship_score": 65,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "dean.ns.cloudflare.com,sureena.ns.cloudflare.com",
          "contributed": 11.2
        },
        {
          "type": "levenshtein_le2",
          "value": "us02-web-zoom~us06-web-zoom d=1",
          "contributed": 9.0
        },
        {
          "type": "same_template",
          "value": "aa99-aaa-aaaa",
          "contributed": 6.0
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "2d/2d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "ab95fe40e19fc068",
          "contributed": 11.2
        },
        {
          "type": "screenshot_phash_full",
          "value": "b7278d8d0d0f3307~b7278d8d0d0f3307 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/zoom/c220f3b7-fe0d-401b-8186-eb3de40b0758/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "188.114.96.0/20",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    },
    {
      "uuid": "446158ea-be0e-43ca-81d3-91ad5dc0b769",
      "domain": "us03-web-zoom.us",
      "url": "http://us03-web-zoom.us",
      "company": "zoom",
      "status": "active",
      "first_seen": "2026-10-15 01:02:29.693684+00:00",
      "relationship_score": 65,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "dean.ns.cloudflare.com,sureena.ns.cloudflare.com",
          "contributed": 11.2
        },
        {
          "type": "levenshtein_le2",
          "value": "us06-web-zoom~us03-web-zoom d=1",
          "contributed": 9.0
        },
        {
          "type": "same_template",
          "value": "aa99-aaa-aaaa",
          "contributed": 6.0
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "2d/2d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "ab95fe40e19fc068",
          "contributed": 11.2
        },
        {
          "type": "screenshot_phash_full",
          "value": "b7278d8d0d0f3307~b7278d8d0d0f3307 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/zoom/446158ea-be0e-43ca-81d3-91ad5dc0b769/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "104.16.0.0/13",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    },
    {
      "uuid": "9b0022a5-8faf-43d3-92f9-4be8a966e58f",
      "domain": "us07-web-zoom.us",
      "url": "http://us07-web-zoom.us",
      "company": "zoom",
      "status": "active",
      "first_seen": "2026-10-15 01:02:09.079985+00:00",
      "relationship_score": 65,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "dean.ns.cloudflare.com,sureena.ns.cloudflare.com",
          "contributed": 11.2
        },
        {
          "type": "levenshtein_le2",
          "value": "us07-web-zoom~us06-web-zoom d=1",
          "contributed": 9.0
        },
        {
          "type": "same_template",
          "value": "aa99-aaa-aaaa",
          "contributed": 6.0
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "2d/2d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "ab95fe40e19fc068",
          "contributed": 11.2
        },
        {
          "type": "screenshot_phash_full",
          "value": "b7278d8d0d0f3307~b7278d8d0d0f3307 d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/zoom/9b0022a5-8faf-43d3-92f9-4be8a966e58f/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "104.16.0.0/13",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    }
  ]
}