{
  "uuid": "4f2b7b4f-02ad-460b-b68e-1bcaa019c312",
  "domain": "hmwscusw.bradesco.support.zaka25.duckdns.org",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-10-24T05:00:53.726147+00:00",
  "cluster": null,
  "count": 10,
  "limit": 10,
  "results": [
    {
      "uuid": "66346fad-a6f5-440e-bc07-68900626036f",
      "domain": "hoylldhd.bradesco.support.zaka25.duckdns.org",
      "url": "https://hoylldhd.bradesco.support.zaka25.duckdns.org",
      "company": "bradesco",
      "status": "active",
      "first_seen": "2026-10-20 17:23:57.719769+00:00",
      "relationship_score": 63,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 12
        },
        {
          "type": "same_asn",
          "value": "31898",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "147.224.137.194",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.duckdns.org,ns2.duckdns.org,ns3.duckdns.org,ns4.duckdns.org,ns5.duckdns.org,ns6.duckdns.org,ns7.duckdns.org,ns8.duc\u2026",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Oracle Corporation",
          "contributed": 0.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaaa.aaaaaaaa.aaaaaaa.aaaa99",
          "contributed": 8
        },
        {
          "type": "shared_distinctive_token",
          "value": "duckdns",
          "contributed": 5.0
        },
        {
          "type": "same_registrar",
          "value": "Gandi SAS",
          "contributed": 4
        },
        {
          "type": "temporal_72h",
          "value": "36.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "0d/1d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "duckdns.org",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/bradesco/66346fad-a6f5-440e-bc07-68900626036f/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "147.224.128.0/18",
          "provider": "Oracle Cloud",
          "region": "us-chicago-1",
          "service": "OCI",
          "source": "oracle"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    },
    {
      "uuid": "dc275c28-9d53-46e1-b019-584bc521400f",
      "domain": "jffoyjdh.bradesco.support.zaka25.duckdns.org",
      "url": "https://jffoyjdh.bradesco.support.zaka25.duckdns.org",
      "company": "bradesco",
      "status": "active",
      "first_seen": "2026-10-20 17:23:32.849462+00:00",
      "relationship_score": 63,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 12
        },
        {
          "type": "same_asn",
          "value": "31898",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "147.224.137.194",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.duckdns.org,ns2.duckdns.org,ns3.duckdns.org,ns4.duckdns.org,ns5.duckdns.org,ns6.duckdns.org,ns7.duckdns.org,ns8.duc\u2026",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Oracle Corporation",
          "contributed": 0.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaaa.aaaaaaaa.aaaaaaa.aaaa99",
          "contributed": 8
        },
        {
          "type": "shared_distinctive_token",
          "value": "duckdns",
          "contributed": 5.0
        },
        {
          "type": "same_registrar",
          "value": "Gandi SAS",
          "contributed": 4
        },
        {
          "type": "temporal_72h",
          "value": "36.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "0d/1d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "duckdns.org",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/bradesco/dc275c28-9d53-46e1-b019-584bc521400f/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "147.224.128.0/18",
          "provider": "Oracle Cloud",
          "region": "us-chicago-1",
          "service": "OCI",
          "source": "oracle"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    },
    {
      "uuid": "f6a0e636-01a8-4a7a-a53d-23e72e3c4bea",
      "domain": "zxexxnym.bradesco.support.zaka25.duckdns.org",
      "url": "https://zxexxnym.bradesco.support.zaka25.duckdns.org",
      "company": "bradesco",
      "status": "active",
      "first_seen": "2026-10-19 23:22:58.732864+00:00",
      "relationship_score": 63,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 12
        },
        {
          "type": "same_asn",
          "value": "31898",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "147.224.137.194",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.duckdns.org,ns2.duckdns.org,ns3.duckdns.org,ns4.duckdns.org,ns5.duckdns.org,ns6.duckdns.org,ns7.duckdns.org,ns8.duc\u2026",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Oracle Corporation",
          "contributed": 0.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaaa.aaaaaaaa.aaaaaaa.aaaa99",
          "contributed": 8
        },
        {
          "type": "shared_distinctive_token",
          "value": "duckdns",
          "contributed": 5.0
        },
        {
          "type": "same_registrar",
          "value": "Gandi SAS",
          "contributed": 4
        },
        {
          "type": "temporal_72h",
          "value": "54.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "0d/1d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "duckdns.org",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/bradesco/f6a0e636-01a8-4a7a-a53d-23e72e3c4bea/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "147.224.128.0/18",
          "provider": "Oracle Cloud",
          "region": "us-chicago-1",
          "service": "OCI",
          "source": "oracle"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    },
    {
      "uuid": "1e276735-ed9a-41ab-a386-8e59b5cf543e",
      "domain": "mail.hmwscusw.bradesco.support.zaka25.duckdns.org",
      "url": "https://mail.hmwscusw.bradesco.support.zaka25.duckdns.org",
      "company": "bradesco",
      "status": "active",
      "first_seen": "2026-10-23 05:23:08.357527+00:00",
      "relationship_score": 60,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 12
        },
        {
          "type": "same_asn",
          "value": "31898",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "147.224.137.194",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.duckdns.org,ns2.duckdns.org,ns3.duckdns.org,ns4.duckdns.org,ns5.duckdns.org,ns6.duckdns.org,ns7.duckdns.org,ns8.duc\u2026",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Oracle Corporation",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "hmwscusw",
          "contributed": 10.0
        },
        {
          "type": "same_registrar",
          "value": "Gandi SAS",
          "contributed": 4
        },
        {
          "type": "temporal_72h",
          "value": "24.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "duckdns.org",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/bradesco/1e276735-ed9a-41ab-a386-8e59b5cf543e/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "147.224.128.0/18",
          "provider": "Oracle Cloud",
          "region": "us-chicago-1",
          "service": "OCI",
          "source": "oracle"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    },
    {
      "uuid": "e3b97b16-7b5c-43be-aa2c-233177db4c4c",
      "domain": "bqdbgybl.bradesco.www.support.zaka25.duckdns.org",
      "url": "https://bqdbgybl.bradesco.www.support.zaka25.duckdns.org",
      "company": "bradesco",
      "status": "active",
      "first_seen": "2026-10-21 17:23:07.497065+00:00",
      "relationship_score": 57,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 12
        },
        {
          "type": "same_asn",
          "value": "31898",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "147.224.137.194",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.duckdns.org,ns2.duckdns.org,ns3.duckdns.org,ns4.duckdns.org,ns5.duckdns.org,ns6.duckdns.org,ns7.duckdns.org,ns8.duc\u2026",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Oracle Corporation",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "duckdns",
          "contributed": 5.0
        },
        {
          "type": "same_registrar",
          "value": "Gandi SAS",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "12.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "2d/1d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "duckdns.org",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/bradesco/e3b97b16-7b5c-43be-aa2c-233177db4c4c/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "147.224.128.0/18",
          "provider": "Oracle Cloud",
          "region": "us-chicago-1",
          "service": "OCI",
          "source": "oracle"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    },
    {
      "uuid": "1ac1a0c1-d8e5-4dba-bdac-583fa2d0a328",
      "domain": "mcp.zxexxnym.bradesco.support.zaka25.duckdns.org",
      "url": "https://mcp.zxexxnym.bradesco.support.zaka25.duckdns.org",
      "company": "bradesco",
      "status": "active",
      "first_seen": "2026-10-21 23:23:15.519167+00:00",
      "relationship_score": 57,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 12
        },
        {
          "type": "same_asn",
          "value": "31898",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "147.224.137.194",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.duckdns.org,ns2.duckdns.org,ns3.duckdns.org,ns4.duckdns.org,ns5.duckdns.org,ns6.duckdns.org,ns7.duckdns.org,ns8.duc\u2026",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Oracle Corporation",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "duckdns",
          "contributed": 5.0
        },
        {
          "type": "same_registrar",
          "value": "Gandi SAS",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "6.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "duckdns.org",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/bradesco/1ac1a0c1-d8e5-4dba-bdac-583fa2d0a328/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "147.224.128.0/18",
          "provider": "Oracle Cloud",
          "region": "us-chicago-1",
          "service": "OCI",
          "source": "oracle"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    },
    {
      "uuid": "11b8d9ed-6111-4a45-970e-8bd363819df7",
      "domain": "stage.hoylldhd.bradesco.support.zaka25.duckdns.org",
      "url": "https://stage.hoylldhd.bradesco.support.zaka25.duckdns.org",
      "company": "bradesco",
      "status": "active",
      "first_seen": "2026-10-21 23:23:10.079463+00:00",
      "relationship_score": 57,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 12
        },
        {
          "type": "same_asn",
          "value": "31898",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "147.224.137.194",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.duckdns.org,ns2.duckdns.org,ns3.duckdns.org,ns4.duckdns.org,ns5.duckdns.org,ns6.duckdns.org,ns7.duckdns.org,ns8.duc\u2026",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Oracle Corporation",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "duckdns",
          "contributed": 5.0
        },
        {
          "type": "same_registrar",
          "value": "Gandi SAS",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "6.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "duckdns.org",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 3
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/bradesco/11b8d9ed-6111-4a45-970e-8bd363819df7/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "147.224.128.0/18",
          "provider": "Oracle Cloud",
          "region": "us-chicago-1",
          "service": "OCI",
          "source": "oracle"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    },
    {
      "uuid": "1247ccd7-33bf-4a01-9f78-f574f3098213",
      "domain": "amgghvyv.bradesco.support.zaka25.duckdns.org",
      "url": "https://amgghvyv.bradesco.support.zaka25.duckdns.org",
      "company": "bradesco",
      "status": "active",
      "first_seen": "2026-10-20 17:23:27.641865+00:00",
      "relationship_score": 48,
      "evidence": [
        {
          "type": "same_asn",
          "value": "31898",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "147.224.137.194",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.duckdns.org,ns2.duckdns.org,ns3.duckdns.org,ns4.duckdns.org,ns5.duckdns.org,ns6.duckdns.org,ns7.duckdns.org,ns8.duc\u2026",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Oracle Corporation",
          "contributed": 0.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaaa.aaaaaaaa.aaaaaaa.aaaa99",
          "contributed": 8
        },
        {
          "type": "shared_distinctive_token",
          "value": "duckdns",
          "contributed": 5.0
        },
        {
          "type": "same_registrar",
          "value": "Gandi SAS",
          "contributed": 4
        },
        {
          "type": "temporal_72h",
          "value": "36.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "0d/1d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "duckdns.org",
          "contributed": 6.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/bradesco/1247ccd7-33bf-4a01-9f78-f574f3098213/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "147.224.128.0/18",
          "provider": "Oracle Cloud",
          "region": "us-chicago-1",
          "service": "OCI",
          "source": "oracle"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    },
    {
      "uuid": "04efd39e-3d13-433e-baca-06de76c7cefd",
      "domain": "zgnzpqap.bradesco.support.zaka25.duckdns.org",
      "url": "https://zgnzpqap.bradesco.support.zaka25.duckdns.org",
      "company": "bradesco",
      "status": "active",
      "first_seen": "2026-10-23 17:23:00.214070+00:00",
      "relationship_score": 48,
      "evidence": [
        {
          "type": "same_asn",
          "value": "31898",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "147.224.137.194",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.duckdns.org,ns2.duckdns.org,ns3.duckdns.org,ns4.duckdns.org,ns5.duckdns.org,ns6.duckdns.org,ns7.duckdns.org,ns8.duc\u2026",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Oracle Corporation",
          "contributed": 0.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaaa.aaaaaaaa.aaaaaaa.aaaa99",
          "contributed": 8
        },
        {
          "type": "shared_distinctive_token",
          "value": "duckdns",
          "contributed": 5.0
        },
        {
          "type": "same_registrar",
          "value": "Gandi SAS",
          "contributed": 4
        },
        {
          "type": "temporal_72h",
          "value": "36.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "1d/0d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "duckdns.org",
          "contributed": 6.0
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/bradesco/04efd39e-3d13-433e-baca-06de76c7cefd/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "147.224.128.0/18",
          "provider": "Oracle Cloud",
          "region": "us-chicago-1",
          "service": "OCI",
          "source": "oracle"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    },
    {
      "uuid": "e7fa27c5-6982-4d80-968f-8670fea4b71d",
      "domain": "zmslqaek.bradesco.support.zaka25.duckdns.org",
      "url": "https://zmslqaek.bradesco.support.zaka25.duckdns.org",
      "company": "bradesco",
      "status": "active",
      "first_seen": "2026-10-23 17:23:15.504426+00:00",
      "relationship_score": 48,
      "evidence": [
        {
          "type": "same_asn",
          "value": "31898",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "147.224.137.194",
          "contributed": 11.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.duckdns.org,ns2.duckdns.org,ns3.duckdns.org,ns4.duckdns.org,ns5.duckdns.org,ns6.duckdns.org,ns7.duckdns.org,ns8.duc\u2026",
          "contributed": 7.0
        },
        {
          "type": "same_org",
          "value": "Oracle Corporation",
          "contributed": 0.0
        },
        {
          "type": "same_template",
          "value": "aaaaaaaa.aaaaaaaa.aaaaaaa.aaaa99",
          "contributed": 8
        },
        {
          "type": "shared_distinctive_token",
          "value": "duckdns",
          "contributed": 5.0
        },
        {
          "type": "same_registrar",
          "value": "Gandi SAS",
          "contributed": 4
        },
        {
          "type": "temporal_72h",
          "value": "36.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "1d/0d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "duckdns.org",
          "contributed": 6.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/bradesco/e7fa27c5-6982-4d80-968f-8670fea4b71d/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "hosting",
          "kind_label": "rentable cloud hosting",
          "prefix": "147.224.128.0/18",
          "provider": "Oracle Cloud",
          "region": "us-chicago-1",
          "service": "OCI",
          "source": "oracle"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      }
    }
  ]
}