{
  "uuid": "7749cd5f-abc5-40f9-a7eb-03ecbb298267",
  "domain": "vodafone-business-berlin.com",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-10-18T05:00:34.355735+00:00",
  "cluster": {
    "key": "023610f30c62",
    "size": 3,
    "host_count": 3,
    "url": "https://phishunt.io/campaigns/023610f30c62/"
  },
  "count": 2,
  "limit": 10,
  "results": [
    {
      "uuid": "6de27c5a-85f9-478d-89e0-857b1d5f963c",
      "domain": "vodafone-business-berlin.de",
      "url": "https://vodafone-business-berlin.de",
      "company": "vodafone",
      "status": "active",
      "first_seen": "2026-10-16 13:16:01.688215+00:00",
      "relationship_score": 85,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "8560",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "217.160.0.16",
          "contributed": 19.4
        },
        {
          "type": "same_org",
          "value": "IONOS SE",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "vodafone-business-berlin.store",
          "contributed": 10.6
        },
        {
          "type": "levenshtein_le2",
          "value": "vodafone-business-berlin~vodafone-business-berlin d=0",
          "contributed": 6.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaaa-aaaaaaaa-aaaaaa",
          "contributed": 4.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "berlin",
          "contributed": 5.0
        },
        {
          "type": "temporal_24h",
          "value": "23.8h",
          "contributed": 6
        },
        {
          "type": "rare_issuer_match",
          "value": "Sectigo Public Server Authentication CA DV R36",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "cfcc309893339b66",
          "contributed": 11.7
        },
        {
          "type": "screenshot_phash_full",
          "value": "ec1a1b64c6b19bb2~ec1a1b64c6b19bb2 d=0",
          "contributed": 13.3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/vodafone/6de27c5a-85f9-478d-89e0-857b1d5f963c/",
      "service_range": null
    },
    {
      "uuid": "da28119a-bc6d-42f9-8af4-19120c3f40e5",
      "domain": "vodafone-business-berlin.store",
      "url": "https://vodafone-business-berlin.store",
      "company": "vodafone",
      "status": "active",
      "first_seen": "2026-10-16 13:12:35.185348+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "8560",
          "contributed": 5
        },
        {
          "type": "same_org",
          "value": "IONOS SE",
          "contributed": 0.0
        },
        {
          "type": "levenshtein_le2",
          "value": "vodafone-business-berlin~vodafone-business-berlin d=0",
          "contributed": 6.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaaa-aaaaaaaa-aaaaaa",
          "contributed": 4.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "berlin",
          "contributed": 5.0
        },
        {
          "type": "temporal_24h",
          "value": "23.8h",
          "contributed": 6
        },
        {
          "type": "rare_issuer_match",
          "value": "Sectigo Public Server Authentication CA DV R36",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "cfcc309893339b66",
          "contributed": 11.7
        },
        {
          "type": "screenshot_phash_full",
          "value": "ec1a1b64c6b19bb2~ec1a1b64c6b19bb2 d=0",
          "contributed": 13.3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/vodafone/da28119a-bc6d-42f9-8af4-19120c3f40e5/",
      "service_range": null
    }
  ]
}