{
  "uuid": "4484f1cb-d3da-4757-83a3-5596fb6c36a2",
  "domain": "support.m365-microsoft.com",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-08-04T05:00:24.599305+00:00",
  "cluster": {
    "id": 199,
    "key": "40bef666f218",
    "size": 3,
    "url": "https://phishunt.io/campaigns/40bef666f218/"
  },
  "count": 5,
  "limit": 10,
  "results": [
    {
      "uuid": "d5cb6a39-23cf-49f4-a25e-0ffd83801c0f",
      "domain": "security.m365-microsoft.com",
      "url": "http://security.m365-microsoft.com/i/d51ee024a6cb3468996ec7c9307051d1d",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-06-06 01:02:06.184550+00:00",
      "relationship_score": 70,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "m365-microsoft.com",
          "contributed": 8.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1-36.azure-dns.com,ns2-36.azure-dns.net,ns3-36.azure-dns.org,ns4-36.azure-dns.info",
          "contributed": 11.2
        },
        {
          "type": "shared_distinctive_token",
          "value": "m365",
          "contributed": 8.0
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "747cef48fe4c39e1512b3afa2438066e0785066cbe7d04f869a240d3a7cd42c9",
          "contributed": 18.0
        },
        {
          "type": "rare_issuer_match",
          "value": "R13",
          "contributed": 0.0
        },
        {
          "type": "san_overlap",
          "value": "m365-microsoft.com",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "97da6c23cbcc9492",
          "contributed": 10.3
        },
        {
          "type": "screenshot_phash_full",
          "value": "e6999964339b4ccc~e699d964339364cc d=4",
          "contributed": 14.7
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/d5cb6a39-23cf-49f4-a25e-0ffd83801c0f/"
    },
    {
      "uuid": "872fb8e2-403a-45ce-b2dc-518ebacf7fab",
      "domain": "programme-hup.m365-microsoft.com",
      "url": "https://programme-hup.m365-microsoft.com/i/d721e212eb3094bfd99c9d047a94edaeb",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-06-08 13:01:32.485411+00:00",
      "relationship_score": 56,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "m365-microsoft.com",
          "contributed": 8.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1-36.azure-dns.com,ns2-36.azure-dns.net,ns3-36.azure-dns.org,ns4-36.azure-dns.info",
          "contributed": 11.2
        },
        {
          "type": "shared_distinctive_token",
          "value": "m365",
          "contributed": 8.0
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "747cef48fe4c39e1512b3afa2438066e0785066cbe7d04f869a240d3a7cd42c9",
          "contributed": 18.0
        },
        {
          "type": "rare_issuer_match",
          "value": "R13",
          "contributed": 0.0
        },
        {
          "type": "san_overlap",
          "value": "m365-microsoft.com",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "97da6c23cbcc9492",
          "contributed": 11.2
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/872fb8e2-403a-45ce-b2dc-518ebacf7fab/"
    },
    {
      "uuid": "cd267dfc-abf2-428a-8266-fdeb1382bc4f",
      "domain": "emailnotifications.m365-microsoft.com",
      "url": "http://emailnotifications.m365-microsoft.com/i/a3ce2879ab8b04bd4a96eaabe3f1dae68",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-07-23 01:01:41.845806+00:00",
      "relationship_score": 38,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "m365-microsoft.com",
          "contributed": 8.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1-36.azure-dns.com,ns2-36.azure-dns.net,ns3-36.azure-dns.org,ns4-36.azure-dns.info",
          "contributed": 11.2
        },
        {
          "type": "shared_distinctive_token",
          "value": "m365",
          "contributed": 8.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "97da6c23cbcc9492",
          "contributed": 11.2
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/cd267dfc-abf2-428a-8266-fdeb1382bc4f/"
    },
    {
      "uuid": "7e1b0fba-bc4d-475b-ba61-b7876519c68f",
      "domain": "office365.internal-alerts.com",
      "url": "https://office365.internal-alerts.com/i/d5b9af0d256f14c03ab8396a78d3687bf",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-03-28 01:01:37.247034+00:00",
      "relationship_score": 37,
      "evidence": [
        {
          "type": "temporal_24h",
          "value": "12.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "3d/2d",
          "contributed": 3
        },
        {
          "type": "rare_issuer_match",
          "value": "R13",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=6.1",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "97da6c23cbcc9492",
          "contributed": 10.3
        },
        {
          "type": "screenshot_phash_full",
          "value": "e6999866339b64cc~e6999964339b4ccc d=4",
          "contributed": 14.7
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/7e1b0fba-bc4d-475b-ba61-b7876519c68f/"
    },
    {
      "uuid": "935697ea-6413-4c0c-b711-21baf1e8d028",
      "domain": "office365.rricrosoft-offices.org",
      "url": "https://office365.rricrosoft-offices.org/i/df3667320560f4a8a9918ef9f3f4c4383",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-06-17 01:06:27.491729+00:00",
      "relationship_score": 25,
      "evidence": [
        {
          "type": "dominant_colors_match",
          "value": "dist=10.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "97da6c23cbcc9492",
          "contributed": 10.3
        },
        {
          "type": "screenshot_phash_full",
          "value": "e6999964339b4ccc~e6999966339964cc d=4",
          "contributed": 14.7
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/935697ea-6413-4c0c-b711-21baf1e8d028/"
    }
  ]
}