{
  "uuid": "50a4b4c5-c674-49fb-89c3-a703e5d4fe02",
  "domain": "amazonwebservices.security-unauthorised-request.com",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-07-29T05:00:29.781810+00:00",
  "cluster": null,
  "count": 4,
  "limit": 10,
  "results": [
    {
      "uuid": "35cf8842-624d-4ec3-9c77-8fc11370fa98",
      "domain": "microsoft.authorised-support.com",
      "url": "https://microsoft.authorised-support.com/new-account/eozafbyj1bjlmgufsilkjjr9kpvsy5kc3uky=3ag==8vvfbsldlv15mz1rxx1fwz09rtfbnsflls09xslw=/6xx5kg1mkrnjeu3rsnc8diftm7r4v1de",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-05-15 13:01:41.348921+00:00",
      "relationship_score": 40,
      "evidence": [
        {
          "type": "shared_final_host",
          "value": "training.phriendlyphishing.com",
          "contributed": 9.6
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "897eb86112360ee4445589437fd72b5f635fbcb414d0edab26a155544271df47",
          "contributed": 14.4
        },
        {
          "type": "rare_issuer_match",
          "value": "Amazon RSA 2048 M02",
          "contributed": 0.0
        },
        {
          "type": "san_overlap",
          "value": "authorised-support.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "80002a002a002a00~80002a002a002a00 d=0",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/35cf8842-624d-4ec3-9c77-8fc11370fa98/"
    },
    {
      "uuid": "ddad91ca-ca75-4e97-9ca2-355d984b3014",
      "domain": "microsoftquarantine.authorised-support.com",
      "url": "http://microsoftquarantine.authorised-support.com/login/review/wjy99urjpywk6fvppin_vx51xfx1jt7x1ueq=7bg==/qvl0fnmnyahdj2smoxwxeggfe1toi_hb",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-05-12 01:01:16.302445+00:00",
      "relationship_score": 26,
      "evidence": [
        {
          "type": "shared_final_host",
          "value": "training.phriendlyphishing.com",
          "contributed": 9.6
        },
        {
          "type": "temporal_7d",
          "value": "144.0h",
          "contributed": 2
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "897eb86112360ee4445589437fd72b5f635fbcb414d0edab26a155544271df47",
          "contributed": 14.4
        },
        {
          "type": "rare_issuer_match",
          "value": "Amazon RSA 2048 M02",
          "contributed": 0.0
        },
        {
          "type": "san_overlap",
          "value": "authorised-support.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/ddad91ca-ca75-4e97-9ca2-355d984b3014/"
    },
    {
      "uuid": "578d09ef-0b0a-4a07-abe3-0407b2875c6e",
      "domain": "paypal.cardpaysecurity.org",
      "url": "http://paypal.cardpaysecurity.org/login/tfkxscsmt_48_qyabrl9ii9hgjwliow24vue=0aq==/kjken0okg_psackvuioa_hbsebtjbuf6",
      "company": "paypal",
      "status": "active",
      "first_seen": "2026-05-14 13:07:27.264947+00:00",
      "relationship_score": 24,
      "evidence": [
        {
          "type": "shared_final_host",
          "value": "training.phriendlyphishing.com",
          "contributed": 9.6
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "897eb86112360ee4445589437fd72b5f635fbcb414d0edab26a155544271df47",
          "contributed": 14.4
        },
        {
          "type": "rare_issuer_match",
          "value": "Amazon RSA 2048 M02",
          "contributed": 0.0
        },
        {
          "type": "san_overlap",
          "value": "authorised-support.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/paypal/578d09ef-0b0a-4a07-abe3-0407b2875c6e/"
    },
    {
      "uuid": "a5a0c3ac-c4e6-4daa-bc40-9748aa2e5c76",
      "domain": "spotify.servernotification.events",
      "url": "http://spotify.servernotification.events/premium/campaign/rejoin6m/login/yblo0xasyb5cuaw1xcpzsavkzvb0-bdr0uuu=0aq==3qencr1pvsmxfxfraxq==/f_0_udchkeyuav5elolbcapfxggxcytb",
      "company": "spotify",
      "status": "active",
      "first_seen": "2026-06-20 01:01:33.879392+00:00",
      "relationship_score": 24,
      "evidence": [
        {
          "type": "shared_final_host",
          "value": "training.phriendlyphishing.com",
          "contributed": 9.6
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "897eb86112360ee4445589437fd72b5f635fbcb414d0edab26a155544271df47",
          "contributed": 14.4
        },
        {
          "type": "rare_issuer_match",
          "value": "Amazon RSA 2048 M02",
          "contributed": 0.0
        },
        {
          "type": "san_overlap",
          "value": "authorised-support.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/spotify/a5a0c3ac-c4e6-4daa-bc40-9748aa2e5c76/"
    }
  ]
}