{
  "uuid": "9e8bc1c5-9c81-450a-a552-64d204326e63",
  "domain": "mail.icloud-ubication.com",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-10-10T05:00:42.153370+00:00",
  "cluster": null,
  "count": 1,
  "limit": 10,
  "results": [
    {
      "uuid": "d839252f-d246-4c24-a652-8e62379d5c3b",
      "domain": "icloud-ubication.com",
      "url": "https://icloud-ubication.com",
      "company": "apple",
      "status": "active",
      "first_seen": "2026-10-04 05:24:55.965012+00:00",
      "relationship_score": 42,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "icloud-ubication.com",
          "contributed": 10.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1-expired.sav.com,ns2-expired.sav.com",
          "contributed": 14.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "ubication",
          "contributed": 10.0
        },
        {
          "type": "same_registrar",
          "value": "Sav.com, LLC",
          "contributed": 4
        },
        {
          "type": "temporal_72h",
          "value": "48.0h",
          "contributed": 4
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/apple/d839252f-d246-4c24-a652-8e62379d5c3b/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "172.234.16.0/20",
          "provider": "Akamai Linode",
          "region": "US",
          "service": "",
          "source": "linode"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    }
  ]
}