{
  "uuid": "ddad91ca-ca75-4e97-9ca2-355d984b3014",
  "domain": "microsoftquarantine.authorised-support.com",
  "algorithm_version": "corr-1.2.0",
  "generated_at": "2026-08-03T05:00:27.058159+00:00",
  "cluster": {
    "id": 188,
    "key": "df3aee70a9d3",
    "size": 3,
    "url": "https://phishunt.io/campaigns/df3aee70a9d3/"
  },
  "count": 3,
  "limit": 10,
  "results": [
    {
      "uuid": "35cf8842-624d-4ec3-9c77-8fc11370fa98",
      "domain": "microsoft.authorised-support.com",
      "url": "https://microsoft.authorised-support.com/new-account/eozafbyj1bjlmgufsilkjjr9kpvsy5kc3uky=3ag==8vvfbsldlv15mz1rxx1fwz09rtfbnsflls09xslw=/6xx5kg1mkrnjeu3rsnc8diftm7r4v1de",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-05-15 13:01:41.348921+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "authorised-support.com",
          "contributed": 8.9
        },
        {
          "type": "same_ns_set",
          "value": "ns-1082.awsdns-07.org,ns-1801.awsdns-33.co.uk,ns-327.awsdns-40.com,ns-945.awsdns-54.net",
          "contributed": 12.5
        },
        {
          "type": "shared_final_host",
          "value": "training.phriendlyphishing.com",
          "contributed": 8.6
        },
        {
          "type": "shared_distinctive_token",
          "value": "authorised",
          "contributed": 10.0
        },
        {
          "type": "temporal_7d",
          "value": "84.0h",
          "contributed": 2
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "897eb86112360ee4445589437fd72b5f635fbcb414d0edab26a155544271df47",
          "contributed": 18.0
        },
        {
          "type": "rare_issuer_match",
          "value": "Amazon RSA 2048 M02",
          "contributed": 0.0
        },
        {
          "type": "san_overlap",
          "value": "authorised-support.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/35cf8842-624d-4ec3-9c77-8fc11370fa98/"
    },
    {
      "uuid": "578d09ef-0b0a-4a07-abe3-0407b2875c6e",
      "domain": "paypal.cardpaysecurity.org",
      "url": "http://paypal.cardpaysecurity.org/login/tfkxscsmt_48_qyabrl9ii9hgjwliow24vue=0aq==/kjken0okg_psackvuioa_hbsebtjbuf6",
      "company": "paypal",
      "status": "active",
      "first_seen": "2026-05-14 13:07:27.264947+00:00",
      "relationship_score": 48,
      "evidence": [
        {
          "type": "shared_final_host",
          "value": "training.phriendlyphishing.com",
          "contributed": 9.6
        },
        {
          "type": "temporal_72h",
          "value": "60.1h",
          "contributed": 4
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "897eb86112360ee4445589437fd72b5f635fbcb414d0edab26a155544271df47",
          "contributed": 18.0
        },
        {
          "type": "rare_issuer_match",
          "value": "Amazon RSA 2048 M02",
          "contributed": 0.0
        },
        {
          "type": "san_overlap",
          "value": "authorised-support.com",
          "contributed": 0.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "956a6b85d8858e3e~946a6a95d8859e3e d=4",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/paypal/578d09ef-0b0a-4a07-abe3-0407b2875c6e/"
    },
    {
      "uuid": "73b4c145-55d6-4fa2-a656-04693699e177",
      "domain": "microsoft.account.trustedentity.com",
      "url": "https://microsoft.account.trustedentity.com/http/microsoft.authorised-support.com/new-account/eozafbyj1bjlmgufsilkjjr9kpvsy5kc3uky=3ag==5wfxwr1pgwlnballaulxbakjcqv1qrvrgrkjar1e=/6xx5kg1mkrnjeu3rsnc8diftm7r4v1de",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-05-13 13:05:07.052999+00:00",
      "relationship_score": 36,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "training.phriendlyphishing.com",
          "contributed": 9.6
        },
        {
          "type": "temporal_72h",
          "value": "36.1h",
          "contributed": 4
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "956a6b85d8858e3e~956a6a95d8858e3e d=2",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/73b4c145-55d6-4fa2-a656-04693699e177/"
    }
  ]
}