{
  "uuid": "67b17432-c6fa-4a53-8cd3-9c4d7142d6b0",
  "domain": "neokitjyg.servebeer.com",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-11-06T05:00:39.605577+00:00",
  "cluster": null,
  "count": 2,
  "limit": 10,
  "results": [
    {
      "uuid": "eaf8dc3e-e503-4c80-9bf6-d4deb7aa8b6d",
      "domain": "accounts-google.rsgremote.com",
      "url": "https://accounts-google.rsgremote.com",
      "company": "google",
      "status": "active",
      "first_seen": "2026-11-05 05:20:24.437390+00:00",
      "relationship_score": 38,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.94",
          "contributed": 6.0
        },
        {
          "type": "temporal_72h",
          "value": "40.3h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "9d/7d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=33.6",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "c4b4114b4fb59e96",
          "contributed": 10.3
        },
        {
          "type": "screenshot_phash_full",
          "value": "ce9631696634c9c7~ce963169643cc9c7 d=2",
          "contributed": 14.7
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/google/eaf8dc3e-e503-4c80-9bf6-d4deb7aa8b6d/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "35.176.0.0/14",
          "provider": "AWS",
          "region": "eu-west-2",
          "service": "EC2",
          "source": "aws"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "4b0ea55f-c600-4c05-9c48-14ef5d9f47d0",
      "domain": "accounts.login.adsbillinghub.com",
      "url": "https://accounts.login.adsbillinghub.com/v3/signin/identifier?continue=https://ads.google.com/aw/overview&gl=US&hl=en&prompt=select_account&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1328418016:1793843836504802",
      "company": "google",
      "status": "active",
      "first_seen": "2026-11-05 13:04:20.071766+00:00",
      "relationship_score": 35,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=0.94",
          "contributed": 6.0
        },
        {
          "type": "temporal_72h",
          "value": "48.0h",
          "contributed": 4
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=33.6",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "c4b4114b4fb59e96",
          "contributed": 10.3
        },
        {
          "type": "screenshot_phash_full",
          "value": "ce9631696634c9c7~ce963169643cc9c7 d=2",
          "contributed": 14.7
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/google/4b0ea55f-c600-4c05-9c48-14ef5d9f47d0/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "209.38.32.0/20",
          "provider": "DigitalOcean",
          "region": "NL",
          "service": "",
          "source": "digitalocean"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    }
  ]
}