{
  "uuid": "f5c7b10b-57ec-4ad9-a354-1cdb9a6bf1aa",
  "domain": "dpd-cenviro.com",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-11-13T05:00:35.639586+00:00",
  "cluster": {
    "key": "52f8809ec852",
    "size": 6,
    "host_count": 6,
    "url": "https://phishunt.io/campaigns/52f8809ec852/"
  },
  "count": 5,
  "limit": 10,
  "results": [
    {
      "uuid": "15a9ee79-4e4f-40a0-a017-18d0c63ffc07",
      "domain": "dpd-calviro.click",
      "url": "https://dpd-calviro.click",
      "company": "dpd",
      "status": "active",
      "first_seen": "2026-10-18 17:24:24.076963+00:00",
      "relationship_score": 45,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "aliza.ns.cloudflare.com,darwin.ns.cloudflare.com",
          "contributed": 11.2
        },
        {
          "type": "levenshtein_le2",
          "value": "dpd-calviro~dpd-cenviro d=2",
          "contributed": 9.0
        },
        {
          "type": "same_template",
          "value": "aaa-aaaaaaa",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "83ff03021f5e00ff~83ff03021f5e00ff d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/dpd/15a9ee79-4e4f-40a0-a017-18d0c63ffc07/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "172.64.0.0/13",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "765bc0ac-3bbf-4bbc-bf61-2f1ff4f5ee50",
      "domain": "dpd-xelvora.com",
      "url": "https://dpd-xelvora.com",
      "company": "dpd",
      "status": "active",
      "first_seen": "2026-11-09 17:22:36.788116+00:00",
      "relationship_score": 42,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "aliza.ns.cloudflare.com,darwin.ns.cloudflare.com",
          "contributed": 11.2
        },
        {
          "type": "same_template",
          "value": "aaa-aaaaaaa",
          "contributed": 8
        },
        {
          "type": "temporal_72h",
          "value": "24.0h",
          "contributed": 4
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "83ff03021f5e00ff~83ff03021f5e00ff d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/dpd/765bc0ac-3bbf-4bbc-bf61-2f1ff4f5ee50/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "104.16.0.0/13",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "ea3d87cb-e4ae-4fff-8183-1d254102c90b",
      "domain": "dpd-bexnaro.com",
      "url": "https://dpd-bexnaro.com",
      "company": "dpd",
      "status": "active",
      "first_seen": "2026-10-19 05:24:15.541185+00:00",
      "relationship_score": 38,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "aliza.ns.cloudflare.com,darwin.ns.cloudflare.com",
          "contributed": 11.2
        },
        {
          "type": "same_template",
          "value": "aaa-aaaaaaa",
          "contributed": 8
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "83ff03021f5e00ff~83ff03021f5e00ff d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/dpd/ea3d87cb-e4ae-4fff-8183-1d254102c90b/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "188.114.96.0/20",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "a08ee667-eb7c-40cd-bafb-f9e43a821b00",
      "domain": "dpd-ravlimo.com",
      "url": "https://dpd-ravlimo.com",
      "company": "dpd",
      "status": "active",
      "first_seen": "2026-10-18 23:23:16.887850+00:00",
      "relationship_score": 38,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "aliza.ns.cloudflare.com,darwin.ns.cloudflare.com",
          "contributed": 11.2
        },
        {
          "type": "same_template",
          "value": "aaa-aaaaaaa",
          "contributed": 8
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "83ff03021f5e00ff~83ff03021f5e00ff d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/dpd/a08ee667-eb7c-40cd-bafb-f9e43a821b00/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "188.114.96.0/20",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "7faadf25-0596-4aea-ad40-7cf2f1bf704f",
      "domain": "dpd-telvora.com",
      "url": "https://dpd-telvora.com",
      "company": "dpd",
      "status": "active",
      "first_seen": "2026-10-18 23:23:16.227924+00:00",
      "relationship_score": 38,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "aliza.ns.cloudflare.com,darwin.ns.cloudflare.com",
          "contributed": 11.2
        },
        {
          "type": "same_template",
          "value": "aaa-aaaaaaa",
          "contributed": 8
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "83ff03021f5e00ff~83ff03021f5e00ff d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/dpd/7faadf25-0596-4aea-ad40-7cf2f1bf704f/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "104.16.0.0/13",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    }
  ]
}