{
  "uuid": "5e5e5c8a-8ab5-46e7-a5ee-114616ded93a",
  "domain": "mcstaging.americanexpresspop.com",
  "algorithm_version": "corr-1.3.0",
  "generated_at": "2026-09-10T05:00:41.091776+00:00",
  "cluster": null,
  "count": 1,
  "limit": 10,
  "results": [
    {
      "uuid": "dcbdc8c9-6287-4bd3-8c84-bc25233b1dde",
      "domain": "mcstagingarg.americanexpresspop.com",
      "url": "https://mcstagingarg.americanexpresspop.com",
      "company": "americanexpress",
      "status": "active",
      "first_seen": "2026-09-07 02:10:17.593221+00:00",
      "relationship_score": 80,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "americanexpresspop.com",
          "contributed": 10.0
        },
        {
          "type": "same_ns_set",
          "value": "a1-196.akam.net,a13-65.akam.net,a22-66.akam.net,a24-67.akam.net,a8-64.akam.net,a9-65.akam.net",
          "contributed": 14.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "americanexpresspop",
          "contributed": 10.0
        },
        {
          "type": "same_registrar",
          "value": "CSC Corporate Domains, Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "18.3h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "6d/6d",
          "contributed": 2.9
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "66a564fbdddd97b6817af22660aefb868ca3dc65b245cb5ddd713ba5265329bd",
          "contributed": 17.1
        },
        {
          "type": "san_overlap",
          "value": "americanexpresspop.com",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "800affda4a7a7a92~820affdaca7a5a82 d=4",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/americanexpress/dcbdc8c9-6287-4bd3-8c84-bc25233b1dde/"
    }
  ]
}