{
  "uuid": "7e1b0fba-bc4d-475b-ba61-b7876519c68f",
  "domain": "office365.internal-alerts.com",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-10-03T05:00:38.689244+00:00",
  "cluster": null,
  "count": 2,
  "limit": 10,
  "results": [
    {
      "uuid": "935697ea-6413-4c0c-b711-21baf1e8d028",
      "domain": "office365.rricrosoft-offices.org",
      "url": "https://office365.rricrosoft-offices.org/i/df3667320560f4a8a9918ef9f3f4c4383",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-06-17 01:06:27.491729+00:00",
      "relationship_score": 44,
      "evidence": [
        {
          "type": "levenshtein_le2",
          "value": "office365~office365 d=0",
          "contributed": 6.0
        },
        {
          "type": "same_template",
          "value": "aaaaaa999",
          "contributed": 4.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "office365",
          "contributed": 5.0
        },
        {
          "type": "same_registrar",
          "value": "Dynadot Inc",
          "contributed": 4
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=5.9",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "97da6c23cbcc9492",
          "contributed": 10.3
        },
        {
          "type": "screenshot_phash_full",
          "value": "e6999866339b64cc~e6999966339964cc d=2",
          "contributed": 14.7
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/935697ea-6413-4c0c-b711-21baf1e8d028/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "20.50.64.0/25",
          "provider": "Microsoft Azure",
          "region": "northeurope",
          "service": "AppService.NorthEurope",
          "source": "azure"
        },
        "also": [
          {
            "direction": "egress",
            "kind": "hosting",
            "kind_label": "rentable cloud hosting",
            "prefix": "20.50.64.0/19",
            "provider": "GitHub",
            "region": "",
            "service": "actions",
            "source": "github_meta"
          }
        ],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    },
    {
      "uuid": "4484f1cb-d3da-4757-83a3-5596fb6c36a2",
      "domain": "support.m365-microsoft.com",
      "url": "http://support.m365-microsoft.com/i/ab041e84e499243eca3e98fb328201632",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-03-28 13:01:22.118172+00:00",
      "relationship_score": 41,
      "evidence": [
        {
          "type": "same_registrar",
          "value": "Dynadot Inc",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "12.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "3d/2d",
          "contributed": 3
        },
        {
          "type": "rare_issuer_match",
          "value": "R13",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=6.1",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "97da6c23cbcc9492",
          "contributed": 10.3
        },
        {
          "type": "screenshot_phash_full",
          "value": "e6999866339b64cc~e6999964339b4ccc d=4",
          "contributed": 14.7
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/4484f1cb-d3da-4757-83a3-5596fb6c36a2/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "20.50.64.0/25",
          "provider": "Microsoft Azure",
          "region": "northeurope",
          "service": "AppService.NorthEurope",
          "source": "azure"
        },
        "also": [
          {
            "direction": "egress",
            "kind": "hosting",
            "kind_label": "rentable cloud hosting",
            "prefix": "20.50.64.0/19",
            "provider": "GitHub",
            "region": "",
            "service": "actions",
            "source": "github_meta"
          }
        ],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    }
  ]
}