{
  "uuid": "abbf7b52-bcbe-4264-b941-9003e1111604",
  "domain": "apple-icloud.azurewebsites.net",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-10-10T05:00:42.153370+00:00",
  "cluster": null,
  "count": 1,
  "limit": 10,
  "results": [
    {
      "uuid": "c49578ee-d068-434d-858e-8fc40a0863d6",
      "domain": "bbva-app-1-c6c6bqhhg7dqh0a9.mexicocentral-01.azurewebsites.net",
      "url": "https://bbva-app-1-c6c6bqhhg7dqh0a9.mexicocentral-01.azurewebsites.net",
      "company": "bbva",
      "status": "active",
      "first_seen": "2026-09-07 01:02:23.672360+00:00",
      "relationship_score": 46,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "azurewebsites.net",
          "contributed": 10.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1-224.azure-dns.com,ns2-224.azure-dns.net,ns3-224.azure-dns.org,ns4-224.azure-dns.info",
          "contributed": 14.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "azurewebsites",
          "contributed": 10.0
        },
        {
          "type": "san_overlap",
          "value": "azure-mobile.net",
          "contributed": 12.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/bbva/c49578ee-d068-434d-858e-8fc40a0863d6/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "158.23.105.0/24",
          "provider": "Microsoft Azure",
          "region": "mexicocentral",
          "service": "AppService.MexicoCentral",
          "source": "azure"
        },
        "also": [
          {
            "direction": "egress",
            "kind": "hosting",
            "kind_label": "rentable cloud hosting",
            "prefix": "158.23.0.0/16",
            "provider": "GitHub",
            "region": "",
            "service": "actions",
            "source": "github_meta"
          }
        ],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    }
  ]
}