{
  "uuid": "2e39477a-98f6-4634-a899-81903d87c1a1",
  "domain": "validar-micuenta-outlook.yzz.me",
  "algorithm_version": "corr-1.3.0",
  "generated_at": "2026-09-28T05:00:42.114448+00:00",
  "cluster": null,
  "count": 3,
  "limit": 10,
  "results": [
    {
      "uuid": "b4953974-1cea-435c-9da6-67031bd9f83c",
      "domain": "login-outlook365.yzz.me",
      "url": "http://login-outlook365.yzz.me",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-09-09 13:12:22.405196+00:00",
      "relationship_score": 59,
      "evidence": [
        {
          "type": "dom_signals_exact",
          "value": "(True, False, False, False)",
          "contributed": 6
        },
        {
          "type": "same_asn",
          "value": "34119",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.byet.org,ns1.yzz.me,ns2.byet.org,ns2.yzz.me,ns3.byet.org,ns4.byet.org,ns5.byet.org",
          "contributed": 14.0
        },
        {
          "type": "same_org",
          "value": "Wildcard UK Limited",
          "contributed": 0.0
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "19fb83e20f4838b97e1e0f848817a6fec53a9c88de05d2d6d5776b0a93ec521a",
          "contributed": 18.0
        },
        {
          "type": "rare_issuer_match",
          "value": "ZeroSSL ECC DV SSL CA 2",
          "contributed": 0.0
        },
        {
          "type": "san_overlap",
          "value": "yzz.me",
          "contributed": 0.0
        },
        {
          "type": "screenshot_phash_full",
          "value": "c8dc6266278ccd73~c8dc6266278ccd73 d=0",
          "contributed": 16.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/b4953974-1cea-435c-9da6-67031bd9f83c/"
    },
    {
      "uuid": "9aa8361d-6511-451c-8701-4957b816fd95",
      "domain": "metamask-portal.yzz.me",
      "url": "https://metamask-portal.yzz.me",
      "company": "metamask",
      "status": "active",
      "first_seen": "2026-09-04 01:04:27.262191+00:00",
      "relationship_score": 37,
      "evidence": [
        {
          "type": "same_asn",
          "value": "34119",
          "contributed": 5
        },
        {
          "type": "same_ns_set",
          "value": "ns1.byet.org,ns1.yzz.me,ns2.byet.org,ns2.yzz.me,ns3.byet.org,ns4.byet.org,ns5.byet.org",
          "contributed": 14.0
        },
        {
          "type": "same_org",
          "value": "Wildcard UK Limited",
          "contributed": 0.0
        },
        {
          "type": "cert_fingerprint_exact",
          "value": "19fb83e20f4838b97e1e0f848817a6fec53a9c88de05d2d6d5776b0a93ec521a",
          "contributed": 18.0
        },
        {
          "type": "rare_issuer_match",
          "value": "ZeroSSL ECC DV SSL CA 2",
          "contributed": 0.0
        },
        {
          "type": "san_overlap",
          "value": "yzz.me",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/metamask/9aa8361d-6511-451c-8701-4957b816fd95/"
    },
    {
      "uuid": "4199e85a-fbb7-4337-b0d6-572cfe3d8af4",
      "domain": "outlook-email-2026.hstn.me",
      "url": "https://outlook-email-2026.hstn.me/?i=1",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-09-17 01:03:39.296696+00:00",
      "relationship_score": 22,
      "evidence": [
        {
          "type": "dom_signals_exact",
          "value": "(True, False, False, False)",
          "contributed": 6
        },
        {
          "type": "same_asn",
          "value": "34119",
          "contributed": 5
        },
        {
          "type": "same_org",
          "value": "Wildcard UK Limited",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "outlook",
          "contributed": 8.0
        },
        {
          "type": "rare_issuer_match",
          "value": "ZeroSSL ECC DV SSL CA 2",
          "contributed": 3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/4199e85a-fbb7-4337-b0d6-572cfe3d8af4/"
    }
  ]
}