{
  "uuid": "7ecf1b8a-5271-4239-9689-6590a23b1040",
  "domain": "webmail.hsbccpersonalonlinebanking.com",
  "algorithm_version": "corr-1.3.0",
  "generated_at": "2026-09-17T05:00:52.339094+00:00",
  "cluster": null,
  "count": 5,
  "limit": 10,
  "results": [
    {
      "uuid": "bc5b1142-16f9-42bd-94b0-38c9f53f213d",
      "domain": "cpanel.hsbccpersonalonlinebanking.com",
      "url": "https://cpanel.hsbccpersonalonlinebanking.com",
      "company": "hsbc",
      "status": "active",
      "first_seen": "2026-09-16 05:25:49.051505+00:00",
      "relationship_score": 84,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "hsbccpersonalonlinebanking.com",
          "contributed": 6.5
        },
        {
          "type": "same_asn",
          "value": "51713",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "198.38.92.102",
          "contributed": 14.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.mysecurecloudhost.com,ns2.mysecurecloudhost.com,ns3.mysecurecloudhost.com,ns4.mysecurecloudhost.com",
          "contributed": 9.2
        },
        {
          "type": "same_org",
          "value": "WHG Hosting Services Ltd",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "hsbccpersonalonlinebanking",
          "contributed": 10.0
        },
        {
          "type": "same_registrar",
          "value": "Upperlink Limited",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "78c3bbe7e4a787be3332967d31e9131de3d3287a5433ea97df75b6048208d6b0",
          "contributed": 18.0
        },
        {
          "type": "san_overlap",
          "value": "hsbccpersonalonlinebanking.com",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "b333cc6666999932~b333cc6c62999933 d=4",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/hsbc/bc5b1142-16f9-42bd-94b0-38c9f53f213d/"
    },
    {
      "uuid": "8cb9ed77-048e-42bd-b0c4-39bea64f2659",
      "domain": "autoconfig.hsbccpersonalonlinebanking.com",
      "url": "https://autoconfig.hsbccpersonalonlinebanking.com",
      "company": "hsbc",
      "status": "active",
      "first_seen": "2026-09-16 05:25:48.772455+00:00",
      "relationship_score": 68,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "hsbccpersonalonlinebanking.com",
          "contributed": 6.5
        },
        {
          "type": "same_asn",
          "value": "51713",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "198.38.92.102",
          "contributed": 14.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.mysecurecloudhost.com,ns2.mysecurecloudhost.com,ns3.mysecurecloudhost.com,ns4.mysecurecloudhost.com",
          "contributed": 9.2
        },
        {
          "type": "same_org",
          "value": "WHG Hosting Services Ltd",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "hsbccpersonalonlinebanking",
          "contributed": 10.0
        },
        {
          "type": "same_registrar",
          "value": "Upperlink Limited",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "78c3bbe7e4a787be3332967d31e9131de3d3287a5433ea97df75b6048208d6b0",
          "contributed": 18.0
        },
        {
          "type": "san_overlap",
          "value": "hsbccpersonalonlinebanking.com",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/hsbc/8cb9ed77-048e-42bd-b0c4-39bea64f2659/"
    },
    {
      "uuid": "5ba03aba-d7a9-4aa3-b094-6c40180eaa2b",
      "domain": "webmail.uspsecuredlogs.com",
      "url": "https://webmail.uspsecuredlogs.com",
      "company": "usps",
      "status": "active",
      "first_seen": "2026-09-13 23:25:58.410425+00:00",
      "relationship_score": 30,
      "evidence": [
        {
          "type": "shared_distinctive_token",
          "value": "webmail",
          "contributed": 10.0
        },
        {
          "type": "temporal_72h",
          "value": "54.0h",
          "contributed": 4
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "b333cc6c32999933~b333cc6c62999933 d=2",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/usps/5ba03aba-d7a9-4aa3-b094-6c40180eaa2b/"
    },
    {
      "uuid": "3657080d-6eae-4597-97ed-679d54ec37dc",
      "domain": "cpanel.binance-mail.click",
      "url": "https://cpanel.binance-mail.click",
      "company": "binance",
      "status": "active",
      "first_seen": "2026-09-16 23:25:10.576161+00:00",
      "relationship_score": 22,
      "evidence": [
        {
          "type": "temporal_24h",
          "value": "18.0h",
          "contributed": 6
        },
        {
          "type": "screenshot_phash_full",
          "value": "b333cc6c62999933~b333cc6632999933 d=4",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/binance/3657080d-6eae-4597-97ed-679d54ec37dc/"
    },
    {
      "uuid": "0873d3bf-1806-4e8f-a5d6-bc0b6575fd21",
      "domain": "cpanel.uspsecuredlogs.com",
      "url": "https://cpanel.uspsecuredlogs.com",
      "company": "usps",
      "status": "active",
      "first_seen": "2026-09-13 23:25:58.058226+00:00",
      "relationship_score": 20,
      "evidence": [
        {
          "type": "temporal_72h",
          "value": "54.0h",
          "contributed": 4
        },
        {
          "type": "screenshot_phash_full",
          "value": "b333cc6632999933~b333cc6c62999933 d=4",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/usps/0873d3bf-1806-4e8f-a5d6-bc0b6575fd21/"
    }
  ]
}