{
  "uuid": "3657080d-6eae-4597-97ed-679d54ec37dc",
  "domain": "cpanel.binance-mail.click",
  "algorithm_version": "corr-1.3.0",
  "generated_at": "2026-09-17T05:00:52.339094+00:00",
  "cluster": null,
  "count": 6,
  "limit": 10,
  "results": [
    {
      "uuid": "25ba9055-687e-4452-bba1-df30dd13caa4",
      "domain": "binance-mail.click",
      "url": "https://binance-mail.click",
      "company": "binance",
      "status": "active",
      "first_seen": "2026-09-16 17:25:08.570130+00:00",
      "relationship_score": 58,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "binance-mail.click",
          "contributed": 6.5
        },
        {
          "type": "same_asn",
          "value": "53667",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "198.251.84.200",
          "contributed": 14.3
        },
        {
          "type": "same_ns_set",
          "value": "ns5.my-control-panel.com,ns6.my-control-panel.com",
          "contributed": 9.2
        },
        {
          "type": "same_org",
          "value": "FranTech Solutions",
          "contributed": 0.0
        },
        {
          "type": "same_registrar",
          "value": "Dynadot, LLC",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "6.0h",
          "contributed": 6
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "8f34b168a46748b2b8713f46959100d4db80fbd0469e2be04bc0efed472dcbde",
          "contributed": 18.0
        },
        {
          "type": "san_overlap",
          "value": "binance-mail.click",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/binance/25ba9055-687e-4452-bba1-df30dd13caa4/"
    },
    {
      "uuid": "69e34f96-5ece-4e29-8134-a0cc34309ac8",
      "domain": "mail.binance-mail.click",
      "url": "https://mail.binance-mail.click",
      "company": "binance",
      "status": "active",
      "first_seen": "2026-09-16 23:25:10.977018+00:00",
      "relationship_score": 58,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "binance-mail.click",
          "contributed": 6.5
        },
        {
          "type": "same_asn",
          "value": "53667",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "198.251.84.200",
          "contributed": 14.3
        },
        {
          "type": "same_ns_set",
          "value": "ns5.my-control-panel.com,ns6.my-control-panel.com",
          "contributed": 9.2
        },
        {
          "type": "same_org",
          "value": "FranTech Solutions",
          "contributed": 0.0
        },
        {
          "type": "same_registrar",
          "value": "Dynadot, LLC",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "8f34b168a46748b2b8713f46959100d4db80fbd0469e2be04bc0efed472dcbde",
          "contributed": 18.0
        },
        {
          "type": "san_overlap",
          "value": "binance-mail.click",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/binance/69e34f96-5ece-4e29-8134-a0cc34309ac8/"
    },
    {
      "uuid": "0873d3bf-1806-4e8f-a5d6-bc0b6575fd21",
      "domain": "cpanel.uspsecuredlogs.com",
      "url": "https://cpanel.uspsecuredlogs.com",
      "company": "usps",
      "status": "active",
      "first_seen": "2026-09-13 23:25:58.058226+00:00",
      "relationship_score": 36,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.96",
          "contributed": 6.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "cpanel",
          "contributed": 10.0
        },
        {
          "type": "temporal_72h",
          "value": "72.0h",
          "contributed": 4
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "b333cc6632999933~b333cc6632999933 d=0",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/usps/0873d3bf-1806-4e8f-a5d6-bc0b6575fd21/"
    },
    {
      "uuid": "bc5b1142-16f9-42bd-94b0-38c9f53f213d",
      "domain": "cpanel.hsbccpersonalonlinebanking.com",
      "url": "https://cpanel.hsbccpersonalonlinebanking.com",
      "company": "hsbc",
      "status": "active",
      "first_seen": "2026-09-16 05:25:49.051505+00:00",
      "relationship_score": 35,
      "evidence": [
        {
          "type": "ocr_similarity_partial",
          "value": "jaccard=0.85",
          "contributed": 3.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "cpanel",
          "contributed": 10.0
        },
        {
          "type": "temporal_24h",
          "value": "18.0h",
          "contributed": 6
        },
        {
          "type": "screenshot_phash_full",
          "value": "b333cc6666999932~b333cc6632999933 d=4",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/hsbc/bc5b1142-16f9-42bd-94b0-38c9f53f213d/"
    },
    {
      "uuid": "7ecf1b8a-5271-4239-9689-6590a23b1040",
      "domain": "webmail.hsbccpersonalonlinebanking.com",
      "url": "https://webmail.hsbccpersonalonlinebanking.com",
      "company": "hsbc",
      "status": "active",
      "first_seen": "2026-09-16 05:25:49.759478+00:00",
      "relationship_score": 22,
      "evidence": [
        {
          "type": "temporal_24h",
          "value": "18.0h",
          "contributed": 6
        },
        {
          "type": "screenshot_phash_full",
          "value": "b333cc6c62999933~b333cc6632999933 d=4",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/hsbc/7ecf1b8a-5271-4239-9689-6590a23b1040/"
    },
    {
      "uuid": "5ba03aba-d7a9-4aa3-b094-6c40180eaa2b",
      "domain": "webmail.uspsecuredlogs.com",
      "url": "https://webmail.uspsecuredlogs.com",
      "company": "usps",
      "status": "active",
      "first_seen": "2026-09-13 23:25:58.410425+00:00",
      "relationship_score": 20,
      "evidence": [
        {
          "type": "temporal_72h",
          "value": "72.0h",
          "contributed": 4
        },
        {
          "type": "screenshot_phash_full",
          "value": "b333cc6c32999933~b333cc6632999933 d=2",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/usps/5ba03aba-d7a9-4aa3-b094-6c40180eaa2b/"
    }
  ]
}