{
  "uuid": "b502902a-e5e4-4cbf-b958-ca816cb59d87",
  "domain": "microsoft.vpn-update.org",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-08-31T05:00:31.486626+00:00",
  "cluster": null,
  "count": 1,
  "limit": 10,
  "results": [
    {
      "uuid": "03db0f18-004b-481c-bd30-496fe517a54d",
      "domain": "authentication.citrix-sharing.com",
      "url": "https://authentication.citrix-sharing.com",
      "company": "citrix",
      "status": "active",
      "first_seen": "2026-08-23 17:24:00.168715+00:00",
      "relationship_score": 65,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_asn",
          "value": "30491",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "159.246.29.210",
          "contributed": 19.4
        },
        {
          "type": "same_org",
          "value": "Crowe LLP",
          "contributed": 0.0
        },
        {
          "type": "shared_final_host",
          "value": "www.google.com",
          "contributed": 10.6
        },
        {
          "type": "same_registrar",
          "value": "Tucows Domains Inc.",
          "contributed": 4
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "ec94b14bceb49916",
          "contributed": 11.7
        },
        {
          "type": "screenshot_phash_full",
          "value": "8bdd66cc62cc668c~8bdd66cc62cc668c d=0",
          "contributed": 13.3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/citrix/03db0f18-004b-481c-bd30-496fe517a54d/"
    }
  ]
}