{
  "uuid": "8cb9ed77-048e-42bd-b0c4-39bea64f2659",
  "domain": "autoconfig.hsbccpersonalonlinebanking.com",
  "algorithm_version": "corr-1.3.0",
  "generated_at": "2026-09-17T05:00:52.339094+00:00",
  "cluster": null,
  "count": 3,
  "limit": 10,
  "results": [
    {
      "uuid": "bc5b1142-16f9-42bd-94b0-38c9f53f213d",
      "domain": "cpanel.hsbccpersonalonlinebanking.com",
      "url": "https://cpanel.hsbccpersonalonlinebanking.com",
      "company": "hsbc",
      "status": "active",
      "first_seen": "2026-09-16 05:25:49.051505+00:00",
      "relationship_score": 68,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "hsbccpersonalonlinebanking.com",
          "contributed": 6.5
        },
        {
          "type": "same_asn",
          "value": "51713",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "198.38.92.102",
          "contributed": 14.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.mysecurecloudhost.com,ns2.mysecurecloudhost.com,ns3.mysecurecloudhost.com,ns4.mysecurecloudhost.com",
          "contributed": 9.2
        },
        {
          "type": "same_org",
          "value": "WHG Hosting Services Ltd",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "hsbccpersonalonlinebanking",
          "contributed": 10.0
        },
        {
          "type": "same_registrar",
          "value": "Upperlink Limited",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "78c3bbe7e4a787be3332967d31e9131de3d3287a5433ea97df75b6048208d6b0",
          "contributed": 18.0
        },
        {
          "type": "san_overlap",
          "value": "hsbccpersonalonlinebanking.com",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/hsbc/bc5b1142-16f9-42bd-94b0-38c9f53f213d/"
    },
    {
      "uuid": "7ecf1b8a-5271-4239-9689-6590a23b1040",
      "domain": "webmail.hsbccpersonalonlinebanking.com",
      "url": "https://webmail.hsbccpersonalonlinebanking.com",
      "company": "hsbc",
      "status": "active",
      "first_seen": "2026-09-16 05:25:49.759478+00:00",
      "relationship_score": 68,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "hsbccpersonalonlinebanking.com",
          "contributed": 6.5
        },
        {
          "type": "same_asn",
          "value": "51713",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "198.38.92.102",
          "contributed": 14.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.mysecurecloudhost.com,ns2.mysecurecloudhost.com,ns3.mysecurecloudhost.com,ns4.mysecurecloudhost.com",
          "contributed": 9.2
        },
        {
          "type": "same_org",
          "value": "WHG Hosting Services Ltd",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "hsbccpersonalonlinebanking",
          "contributed": 10.0
        },
        {
          "type": "same_registrar",
          "value": "Upperlink Limited",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "78c3bbe7e4a787be3332967d31e9131de3d3287a5433ea97df75b6048208d6b0",
          "contributed": 18.0
        },
        {
          "type": "san_overlap",
          "value": "hsbccpersonalonlinebanking.com",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/hsbc/7ecf1b8a-5271-4239-9689-6590a23b1040/"
    },
    {
      "uuid": "717782f8-a81d-48ba-9dda-668fec632115",
      "domain": "autoconfig.190842-coinbase.com",
      "url": "https://autoconfig.190842-coinbase.com",
      "company": "coinbase",
      "status": "active",
      "first_seen": "2026-09-13 17:25:17.658847+00:00",
      "relationship_score": 35,
      "evidence": [
        {
          "type": "levenshtein_le2",
          "value": "autoconfig~autoconfig d=0",
          "contributed": 8.2
        },
        {
          "type": "shared_distinctive_token",
          "value": "autoconfig",
          "contributed": 6.8
        },
        {
          "type": "temporal_72h",
          "value": "60.0h",
          "contributed": 4
        },
        {
          "type": "screenshot_phash_full",
          "value": "83071f7878383b79~87071f7c78313179 d=6",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/coinbase/717782f8-a81d-48ba-9dda-668fec632115/"
    }
  ]
}