{
  "uuid": "578d09ef-0b0a-4a07-abe3-0407b2875c6e",
  "domain": "paypal.cardpaysecurity.org",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-07-22T05:00:21.924304+00:00",
  "cluster": null,
  "count": 5,
  "limit": 10,
  "results": [
    {
      "uuid": "ddad91ca-ca75-4e97-9ca2-355d984b3014",
      "domain": "microsoftquarantine.authorised-support.com",
      "url": "http://microsoftquarantine.authorised-support.com/login/review/wjy99urjpywk6fvppin_vx51xfx1jt7x1ueq=7bg==/qvl0fnmnyahdj2smoxwxeggfe1toi_hb",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-05-12 01:01:16.302445+00:00",
      "relationship_score": 44,
      "evidence": [
        {
          "type": "shared_final_host",
          "value": "training.phriendlyphishing.com",
          "contributed": 9.6
        },
        {
          "type": "temporal_72h",
          "value": "60.1h",
          "contributed": 4
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "897eb86112360ee4445589437fd72b5f635fbcb414d0edab26a155544271df47",
          "contributed": 14.4
        },
        {
          "type": "rare_issuer_match",
          "value": "Amazon RSA 2048 M02",
          "contributed": 0.0
        },
        {
          "type": "san_overlap",
          "value": "authorised-support.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "956a6b85d8858e3e~946a6a95d8859e3e d=4",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/ddad91ca-ca75-4e97-9ca2-355d984b3014/"
    },
    {
      "uuid": "a5a0c3ac-c4e6-4daa-bc40-9748aa2e5c76",
      "domain": "spotify.servernotification.events",
      "url": "http://spotify.servernotification.events/premium/campaign/rejoin6m/login/yblo0xasyb5cuaw1xcpzsavkzvb0-bdr0uuu=0aq==3qencr1pvsmxfxfraxq==/f_0_udchkeyuav5elolbcapfxggxcytb",
      "company": "spotify",
      "status": "active",
      "first_seen": "2026-06-20 01:01:33.879392+00:00",
      "relationship_score": 40,
      "evidence": [
        {
          "type": "shared_final_host",
          "value": "training.phriendlyphishing.com",
          "contributed": 9.6
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "897eb86112360ee4445589437fd72b5f635fbcb414d0edab26a155544271df47",
          "contributed": 14.4
        },
        {
          "type": "rare_issuer_match",
          "value": "Amazon RSA 2048 M02",
          "contributed": 0.0
        },
        {
          "type": "san_overlap",
          "value": "authorised-support.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "946a6a95d8859e3e~956a6a95d8858e3e d=2",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/spotify/a5a0c3ac-c4e6-4daa-bc40-9748aa2e5c76/"
    },
    {
      "uuid": "35cf8842-624d-4ec3-9c77-8fc11370fa98",
      "domain": "microsoft.authorised-support.com",
      "url": "https://microsoft.authorised-support.com/new-account/eozafbyj1bjlmgufsilkjjr9kpvsy5kc3uky=3ag==8vvfbsldlv15mz1rxx1fwz09rtfbnsflls09xslw=/6xx5kg1mkrnjeu3rsnc8diftm7r4v1de",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-05-15 13:01:41.348921+00:00",
      "relationship_score": 30,
      "evidence": [
        {
          "type": "shared_final_host",
          "value": "training.phriendlyphishing.com",
          "contributed": 9.6
        },
        {
          "type": "temporal_24h",
          "value": "23.9h",
          "contributed": 6
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "897eb86112360ee4445589437fd72b5f635fbcb414d0edab26a155544271df47",
          "contributed": 14.4
        },
        {
          "type": "rare_issuer_match",
          "value": "Amazon RSA 2048 M02",
          "contributed": 0.0
        },
        {
          "type": "san_overlap",
          "value": "authorised-support.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/35cf8842-624d-4ec3-9c77-8fc11370fa98/"
    },
    {
      "uuid": "73b4c145-55d6-4fa2-a656-04693699e177",
      "domain": "microsoft.account.trustedentity.com",
      "url": "https://microsoft.account.trustedentity.com/http/microsoft.authorised-support.com/new-account/eozafbyj1bjlmgufsilkjjr9kpvsy5kc3uky=3ag==5wfxwr1pgwlnballaulxbakjcqv1qrvrgrkjar1e=/6xx5kg1mkrnjeu3rsnc8diftm7r4v1de",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-05-13 13:05:07.052999+00:00",
      "relationship_score": 30,
      "evidence": [
        {
          "type": "shared_final_host",
          "value": "training.phriendlyphishing.com",
          "contributed": 9.6
        },
        {
          "type": "temporal_72h",
          "value": "24.0h",
          "contributed": 4
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "956a6a95d8858e3e~946a6a95d8859e3e d=2",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/73b4c145-55d6-4fa2-a656-04693699e177/"
    },
    {
      "uuid": "50a4b4c5-c674-49fb-89c3-a703e5d4fe02",
      "domain": "amazonwebservices.security-unauthorised-request.com",
      "url": "https://amazonwebservices.security-unauthorised-request.com/login/l93nak77hm0_r6ppbx8g9zxxu0vwupf24vue=9ca==2u19tsf1cbv5dvvtc/z2ghhgjw_iva-nxbi24f-et2uuioi1hs",
      "company": "amazon",
      "status": "active",
      "first_seen": "2026-05-06 01:01:57.525955+00:00",
      "relationship_score": 24,
      "evidence": [
        {
          "type": "shared_final_host",
          "value": "training.phriendlyphishing.com",
          "contributed": 9.6
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "897eb86112360ee4445589437fd72b5f635fbcb414d0edab26a155544271df47",
          "contributed": 14.4
        },
        {
          "type": "rare_issuer_match",
          "value": "Amazon RSA 2048 M02",
          "contributed": 0.0
        },
        {
          "type": "san_overlap",
          "value": "authorised-support.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/amazon/50a4b4c5-c674-49fb-89c3-a703e5d4fe02/"
    }
  ]
}