{
  "uuid": "dd55aabf-101d-46f0-a2b0-82fcce622cab",
  "domain": "trustwallet-recovery.duckdns.org",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-11-14T05:00:29.986361+00:00",
  "cluster": null,
  "count": 2,
  "limit": 10,
  "results": [
    {
      "uuid": "4e4ae6d2-5c74-44e1-a3b7-a8561ac7f266",
      "domain": "google-shopee-brasil.duckdns.org",
      "url": "https://google-shopee-brasil.duckdns.org",
      "company": "google",
      "status": "active",
      "first_seen": "2026-11-13 04:16:08.744872+00:00",
      "relationship_score": 37,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "duckdns.org",
          "contributed": 8.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.duckdns.org,ns2.duckdns.org,ns3.duckdns.org,ns4.duckdns.org,ns5.duckdns.org,ns6.duckdns.org,ns7.duckdns.org,ns8.duc\u2026",
          "contributed": 11.2
        },
        {
          "type": "shared_distinctive_token",
          "value": "duckdns",
          "contributed": 8.0
        },
        {
          "type": "same_registrar",
          "value": "Gandi SAS",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "20.8h",
          "contributed": 6
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/google/4e4ae6d2-5c74-44e1-a3b7-a8561ac7f266/",
      "service_range": null,
      "url_only": false
    },
    {
      "uuid": "af71ac51-9089-4a90-8d0b-4b680422c095",
      "domain": "santander-comprovante-fr8kq2lm7xv9pqa4nx.duckdns.org",
      "url": "https://santander-comprovante-fr8kq2lm7xv9pqa4nx.duckdns.org",
      "company": "santander",
      "status": "active",
      "first_seen": "2026-11-11 20:18:47.963513+00:00",
      "relationship_score": 35,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "duckdns.org",
          "contributed": 8.0
        },
        {
          "type": "same_ns_set",
          "value": "ns1.duckdns.org,ns2.duckdns.org,ns3.duckdns.org,ns4.duckdns.org,ns5.duckdns.org,ns6.duckdns.org,ns7.duckdns.org,ns8.duc\u2026",
          "contributed": 11.2
        },
        {
          "type": "shared_distinctive_token",
          "value": "duckdns",
          "contributed": 8.0
        },
        {
          "type": "same_registrar",
          "value": "Gandi SAS",
          "contributed": 4
        },
        {
          "type": "temporal_72h",
          "value": "52.7h",
          "contributed": 4
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/santander/af71ac51-9089-4a90-8d0b-4b680422c095/",
      "service_range": {
        "best": {
          "direction": "ingress",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "185.199.108.153/32",
          "provider": "GitHub",
          "region": "",
          "service": "pages",
          "source": "github_meta"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    }
  ]
}