{
  "uuid": "829d15e4-2bc9-47c4-a7be-f031e44c04ad",
  "domain": "coinbaseprolng.com",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-11-01T05:00:53.687561+00:00",
  "cluster": {
    "key": "553b4d5d6d60",
    "size": 3,
    "host_count": 3,
    "url": "https://phishunt.io/campaigns/553b4d5d6d60/"
  },
  "count": 2,
  "limit": 10,
  "results": [
    {
      "uuid": "d8acb1a4-55ae-4d1f-b879-9d098129616e",
      "domain": "coinbaseprolnb.com",
      "url": "https://coinbaseprolnb.com",
      "company": "coinbase",
      "status": "active",
      "first_seen": "2026-10-31 15:59:00.016989+00:00",
      "relationship_score": 69,
      "evidence": [
        {
          "type": "same_ns_set",
          "value": "carlane.ns.cloudflare.com,tim.ns.cloudflare.com",
          "contributed": 14.0
        },
        {
          "type": "levenshtein_le2",
          "value": "coinbaseprolnb~coinbaseprolng d=1",
          "contributed": 12
        },
        {
          "type": "domain_age_window",
          "value": "0d/0d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Gname.com Pte. Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "0d/0d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=2.3",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "c59b1a6d709265d6",
          "contributed": 11.7
        },
        {
          "type": "screenshot_phash_full",
          "value": "885d764cccc6d999~8859774cccc6d999 d=2",
          "contributed": 13.3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/coinbase/d8acb1a4-55ae-4d1f-b879-9d098129616e/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "188.114.96.0/20",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    },
    {
      "uuid": "41e2d58c-529d-472d-9599-23ce8110786b",
      "domain": "coinbaseprolns.com",
      "url": "https://coinbaseprolns.com",
      "company": "coinbase",
      "status": "active",
      "first_seen": "2026-10-31 15:49:12.279698+00:00",
      "relationship_score": 69,
      "evidence": [
        {
          "type": "same_ns_set",
          "value": "carlane.ns.cloudflare.com,tim.ns.cloudflare.com",
          "contributed": 14.0
        },
        {
          "type": "levenshtein_le2",
          "value": "coinbaseprolns~coinbaseprolng d=1",
          "contributed": 12
        },
        {
          "type": "domain_age_window",
          "value": "0d/0d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Gname.com Pte. Ltd.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.2h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "0d/0d",
          "contributed": 3
        },
        {
          "type": "favicon_phash_exact",
          "value": "c59b1a6d709265d6",
          "contributed": 11.7
        },
        {
          "type": "screenshot_phash_full",
          "value": "885d764cccc6d999~8859774cccc6d999 d=2",
          "contributed": 13.3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/coinbase/41e2d58c-529d-472d-9599-23ce8110786b/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "188.114.96.0/20",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    }
  ]
}