{
  "uuid": "b3cf493e-98c7-4dc5-981e-b839a76c4747",
  "domain": "jsqnjzyg.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-11-12T05:00:35.519255+00:00",
  "cluster": null,
  "count": 6,
  "limit": 10,
  "results": [
    {
      "uuid": "10dabc8f-2755-4ea4-8a2e-389d5ffcebfd",
      "domain": "test.jsqnjzyg.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site",
      "url": "https://test.jsqnjzyg.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-10-21 23:23:17.015439+00:00",
      "relationship_score": 85,
      "evidence": [
        {
          "type": "same_asn",
          "value": "14061",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "161.35.102.243",
          "contributed": 19.9
        },
        {
          "type": "same_ns_set",
          "value": "ns1.pdns.tech,ns2.pdns.tech,ns3.pdns.tech",
          "contributed": 10.1
        },
        {
          "type": "same_org",
          "value": "DigitalOcean, LLC",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "jsqnjzyg",
          "contributed": 10.0
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "6.0h",
          "contributed": 6
        },
        {
          "type": "san_overlap",
          "value": "cpanel.site",
          "contributed": 9.6
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.1",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "fdbdc097856a92a0",
          "contributed": 11.7
        },
        {
          "type": "screenshot_phash_full",
          "value": "9966669999666633~9966669999666633 d=0",
          "contributed": 13.3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/10dabc8f-2755-4ea4-8a2e-389d5ffcebfd/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "161.35.96.0/19",
          "provider": "DigitalOcean",
          "region": "US",
          "service": "",
          "source": "digitalocean"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "2907cde8-31c6-48e1-a818-a92cb8b01aab",
      "domain": "ttgyahvw.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site",
      "url": "https://ttgyahvw.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-10-21 23:23:01.639961+00:00",
      "relationship_score": 85,
      "evidence": [
        {
          "type": "same_asn",
          "value": "14061",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "161.35.102.243",
          "contributed": 19.9
        },
        {
          "type": "same_ns_set",
          "value": "ns1.pdns.tech,ns2.pdns.tech,ns3.pdns.tech",
          "contributed": 10.1
        },
        {
          "type": "same_org",
          "value": "DigitalOcean, LLC",
          "contributed": 0.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaaa.aaaaa.aaaaaaaaaaaaaaa-aaaaaaa-aaaaaaaaaaaa-aaaaaaa-aaaa.999-99-999-999",
          "contributed": 7.5
        },
        {
          "type": "shared_distinctive_token",
          "value": "billing",
          "contributed": 7.5
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "6.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "10d/10d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "cpanel.site",
          "contributed": 9.6
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.1",
          "contributed": 3
        },
        {
          "type": "favicon_phash_exact",
          "value": "fdbdc097856a92a0",
          "contributed": 14.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/2907cde8-31c6-48e1-a818-a92cb8b01aab/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "161.35.96.0/19",
          "provider": "DigitalOcean",
          "region": "US",
          "service": "",
          "source": "digitalocean"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "ab4bf517-77e8-4bc2-8220-95968b78d0d1",
      "domain": "www.mxjkckus.login.microsoftonline-billing-verification-secured-help.104-248-114-136.cpanel.site",
      "url": "https://www.mxjkckus.login.microsoftonline-billing-verification-secured-help.104-248-114-136.cpanel.site",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-10-21 23:23:02.217725+00:00",
      "relationship_score": 44,
      "evidence": [
        {
          "type": "same_asn",
          "value": "14061",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.pdns.tech,ns2.pdns.tech,ns3.pdns.tech",
          "contributed": 11.2
        },
        {
          "type": "same_org",
          "value": "DigitalOcean, LLC",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "billing",
          "contributed": 8.0
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "6.0h",
          "contributed": 6
        },
        {
          "type": "san_overlap",
          "value": "cpanel.site",
          "contributed": 9.6
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/ab4bf517-77e8-4bc2-8220-95968b78d0d1/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "104.248.112.0/20",
          "provider": "DigitalOcean",
          "region": "US",
          "service": "",
          "source": "digitalocean"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "cf09b513-961d-48c6-9a9a-57105bc074cd",
      "domain": "admin.bill-netflix-dashboard-account.104-248-114-136.cpanel.site",
      "url": "https://admin.bill-netflix-dashboard-account.104-248-114-136.cpanel.site",
      "company": "netflix",
      "status": "active",
      "first_seen": "2026-10-21 23:23:16.878210+00:00",
      "relationship_score": 36,
      "evidence": [
        {
          "type": "same_asn",
          "value": "14061",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.pdns.tech,ns2.pdns.tech,ns3.pdns.tech",
          "contributed": 11.2
        },
        {
          "type": "same_org",
          "value": "DigitalOcean, LLC",
          "contributed": 0.0
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "6.0h",
          "contributed": 6
        },
        {
          "type": "san_overlap",
          "value": "cpanel.site",
          "contributed": 9.6
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=27.4",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/netflix/cf09b513-961d-48c6-9a9a-57105bc074cd/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "104.248.112.0/20",
          "provider": "DigitalOcean",
          "region": "US",
          "service": "",
          "source": "digitalocean"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "4ed9518c-a614-4afe-bba3-ad5a08447b0f",
      "domain": "backup.bill-netflix-dashboard-account.104-248-114-136.cpanel.site",
      "url": "https://backup.bill-netflix-dashboard-account.104-248-114-136.cpanel.site",
      "company": "netflix",
      "status": "active",
      "first_seen": "2026-10-21 23:23:17.144581+00:00",
      "relationship_score": 36,
      "evidence": [
        {
          "type": "same_asn",
          "value": "14061",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.pdns.tech,ns2.pdns.tech,ns3.pdns.tech",
          "contributed": 11.2
        },
        {
          "type": "same_org",
          "value": "DigitalOcean, LLC",
          "contributed": 0.0
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "6.0h",
          "contributed": 6
        },
        {
          "type": "san_overlap",
          "value": "cpanel.site",
          "contributed": 9.6
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=26.9",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/netflix/4ed9518c-a614-4afe-bba3-ad5a08447b0f/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "104.248.112.0/20",
          "provider": "DigitalOcean",
          "region": "US",
          "service": "",
          "source": "digitalocean"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "4fda3466-dd2b-4d2d-bfdc-2038e30c7b7e",
      "domain": "bill-netflix-dashboard-account.104-248-114-136.cpanel.site",
      "url": "https://bill-netflix-dashboard-account.104-248-114-136.cpanel.site",
      "company": "netflix",
      "status": "active",
      "first_seen": "2026-10-21 17:23:21.003430+00:00",
      "relationship_score": 36,
      "evidence": [
        {
          "type": "same_asn",
          "value": "14061",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.pdns.tech,ns2.pdns.tech,ns3.pdns.tech",
          "contributed": 11.2
        },
        {
          "type": "same_org",
          "value": "DigitalOcean, LLC",
          "contributed": 0.0
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "san_overlap",
          "value": "cpanel.site",
          "contributed": 9.6
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=27.4",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/netflix/4fda3466-dd2b-4d2d-bfdc-2038e30c7b7e/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "104.248.112.0/20",
          "provider": "DigitalOcean",
          "region": "US",
          "service": "",
          "source": "digitalocean"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    }
  ]
}