{ "id": 1150, "key": "4c9bea4b22fb", "size": 10, "host_count": 11, "active_count": 6, "brands": [ "allegro" ], "confidence": "suspected cluster", "confidence_score": 0.593, "confidence_metrics": { "B": 0.167, "D": 0.29, "S": 1.0, "T": 0.98, "V": 1.0 }, "first_seen": "2026-11-06 11:01:54.487296+00:00", "last_activity": "2026-11-08 23:02:10.964281+00:00", "top_evidence": { "type": "favicon_phash_exact", "coverage": "10/10 members" }, "url": "https://phishunt.io/campaigns/4c9bea4b22fb/", "algorithm_version": "corr-1.4.0", "generated_at": "2026-11-09T05:00:37.190288+00:00", "evidence_summary": [ { "type": "favicon_phash_exact", "value": "93b2394c6c365b1b", "members_matching": 10 }, { "type": "shared_final_host", "value": "allegrolokalnie.pl", "members_matching": 10 }, { "type": "levenshtein_le2", "value": "allegrolokalnie~allegrolokalnie d=0", "members_matching": 9 }, { "type": "ocr_similarity_full", "value": "jaccard=1.00", "members_matching": 9 }, { "type": "domain_age_window", "value": "0d/0d", "members_matching": 9 }, { "type": "shared_distinctive_token", "value": "allegrolokalnie", "members_matching": 9 }, { "type": "cert_age_window", "value": "0d/0d", "members_matching": 9 }, { "type": "same_registrar", "value": "Hosting Concepts B.V. d/b/a Registrar.eu", "members_matching": 8 }, { "type": "temporal_24h", "value": "0.0h", "members_matching": 7 }, { "type": "screenshot_phash_full", "value": "f3324e4d116b0c7b~f3324e4d116b0c7b d=0", "members_matching": 6 }, { "type": "temporal_24h", "value": "5.0h", "members_matching": 5 }, { "type": "screenshot_phash_full", "value": "e3325b59306b1e69~e3325b59306b1e69 d=0", "members_matching": 4 }, { "type": "temporal_72h", "value": "59.0h", "members_matching": 4 }, { "type": "dominant_colors_match", "value": "dist=0.3", "members_matching": 4 }, { "type": "ocr_similarity_partial", "value": "jaccard=0.85", "members_matching": 4 }, { "type": "same_ns_set", "value": "dee.ns.cloudflare.com,derek.ns.cloudflare.com", "members_matching": 3 }, { "type": "ocr_similarity_partial", "value": "jaccard=0.71", "members_matching": 3 }, { "type": "ocr_similarity_partial", "value": "jaccard=0.81", "members_matching": 3 }, { "type": "temporal_24h", "value": "1.0h", "members_matching": 3 }, { "type": "temporal_24h", "value": "22.0h", "members_matching": 3 }, { "type": "temporal_72h", "value": "55.0h", "members_matching": 3 }, { "type": "same_ns_set", "value": "priscilla.ns.cloudflare.com,sid.ns.cloudflare.com", "members_matching": 2 }, { "type": "temporal_24h", "value": "4.0h", "members_matching": 2 }, { "type": "temporal_72h", "value": "33.1h", "members_matching": 2 }, { "type": "temporal_72h", "value": "38.0h", "members_matching": 2 }, { "type": "temporal_72h", "value": "26.9h", "members_matching": 2 }, { "type": "temporal_72h", "value": "33.0h", "members_matching": 2 }, { "type": "temporal_72h", "value": "32.0h", "members_matching": 2 }, { "type": "temporal_72h", "value": "37.0h", "members_matching": 2 } ], "first_tracked": "2026-11-09T05:00:37.190288+00:00", "history": [ { "at": "2026-11-09T05:00:37.190288+00:00", "event": "created", "size": 10, "joined": [ "allegro.oferta98340.sbs", "allegro.ogloszenie832.cfd", "allegrolokalnie.58273.sbs", "allegrolokalnie.73265428375733.sbs", "allegrolokalnie.85723.sbs", "allegrolokalnie.oferta72163549902.cfd", "allegrolokalnie.oferta98340.sbs", "allegrolokalnie.pl-numerbiletu32138491.sbs", "allegrolokalnie.pl-zakupy23875.sbs", "allegrolokalnie.pll453fds32433sd30d2340392.shop", "allegrolokalnie.smart-ofert23887239.sbs" ], "left": [] } ], "members": [ { "uuid": "4851e60b-8dd6-48c6-83aa-0b2af3c504fe", "domain": "allegro.oferta98340.sbs", "registrable_domain": "oferta98340.sbs", "url": null, "company": "allegro", "status": "offline", "first_seen": null, "relationship_score": 61, "relationship_tier": "high", "detail_url": "https://phishunt.io/suspicious/allegro/4851e60b-8dd6-48c6-83aa-0b2af3c504fe/", "image": null, "phishunt_score": null, "ip": null, "asn": null, "org": null, "country": null, "registrar": null, "cert": null, "gsb_category": null, "malicious_google": null, "malicious_openphish": null, "malicious_phishtank": null, "malicious_tweetfeed": null, "malicious_urlscan": null }, { "uuid": "c7da772a-218a-45c7-ad04-0f675a75b612", "domain": "allegro.ogloszenie832.cfd", "registrable_domain": "ogloszenie832.cfd", "url": null, "company": "allegro", "status": "offline", "first_seen": null, "relationship_score": 61, "relationship_tier": "high", "detail_url": "https://phishunt.io/suspicious/allegro/c7da772a-218a-45c7-ad04-0f675a75b612/", "image": null, "phishunt_score": null, "ip": null, "asn": null, "org": null, "country": null, "registrar": null, "cert": null, "gsb_category": null, "malicious_google": null, "malicious_openphish": null, "malicious_phishtank": null, "malicious_tweetfeed": null, "malicious_urlscan": null }, { "uuid": "ceedf5fb-1292-43d1-8622-68d12ee23788", "domain": "allegrolokalnie.58273.sbs", "registrable_domain": "58273.sbs", "url": "http://allegrolokalnie.58273.sbs", "company": "allegro", "status": "active", "first_seen": "2026-11-07 20:05:05.126270+00:00", "relationship_score": 65, "relationship_tier": "high", "detail_url": "https://phishunt.io/suspicious/allegro/ceedf5fb-1292-43d1-8622-68d12ee23788/", "image": "screenshots/allegro/163b3614-4129-402a-b1b3-8e422f2aff28.png", "phishunt_score": 42, "ip": "172.67.151.116", "asn": "13335", "org": "Cloudflare, Inc.", "country": "United States", "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "cert": "YE2", "gsb_category": "SOCIAL_ENGINEERING", "malicious_google": "1", "malicious_openphish": "0", "malicious_phishtank": "1", "malicious_tweetfeed": "0", "malicious_urlscan": "0" }, { "uuid": "d8cbe0be-a6ca-4c22-b169-1176c7ce7232", "domain": "allegrolokalnie.73265428375733.sbs", "registrable_domain": "73265428375733.sbs", "url": "http://allegrolokalnie.73265428375733.sbs", "company": "allegro", "status": "active", "first_seen": "2026-11-06 11:01:54.487296+00:00", "relationship_score": 60, "relationship_tier": "medium", "detail_url": "https://phishunt.io/suspicious/allegro/d8cbe0be-a6ca-4c22-b169-1176c7ce7232/", "image": "screenshots/allegro/d8cbe0be-a6ca-4c22-b169-1176c7ce7232.png", "phishunt_score": 45, "ip": "188.114.96.3", "asn": "13335", "org": "Cloudflare, Inc.", "country": "United States", "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "cert": "YE1", "gsb_category": "SOCIAL_ENGINEERING", "malicious_google": "1", "malicious_openphish": "0", "malicious_phishtank": "1", "malicious_tweetfeed": "0", "malicious_urlscan": "0" }, { "uuid": "789b2344-02de-4c56-8846-6cbd96ccd830", "domain": "allegrolokalnie.85723.sbs", "registrable_domain": "85723.sbs", "url": "https://allegrolokalnie.85723.sbs", "company": "allegro", "status": "active", "first_seen": "2026-11-08 23:01:52.736509+00:00", "relationship_score": 65, "relationship_tier": "high", "detail_url": "https://phishunt.io/suspicious/allegro/789b2344-02de-4c56-8846-6cbd96ccd830/", "image": "screenshots/allegro/9d386f44-e5d8-41fa-8ca0-dc9db1e84df3.png", "phishunt_score": 42, "ip": "104.21.13.38", "asn": "13335", "org": "Cloudflare, Inc.", "country": "United States", "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "cert": "YE2", "gsb_category": "SOCIAL_ENGINEERING", "malicious_google": "1", "malicious_openphish": "0", "malicious_phishtank": "1", "malicious_tweetfeed": "0", "malicious_urlscan": "0" }, { "uuid": "8078e902-18b0-484c-8d45-faf2b13d924e", "domain": "allegrolokalnie.oferta72163549902.cfd", "registrable_domain": "oferta72163549902.cfd", "url": "http://allegrolokalnie.oferta72163549902.cfd", "company": "allegro", "status": "active", "first_seen": "2026-11-08 23:01:34.354781+00:00", "relationship_score": 58, "relationship_tier": "medium", "detail_url": "https://phishunt.io/suspicious/allegro/8078e902-18b0-484c-8d45-faf2b13d924e/", "image": "screenshots/allegro/c30438fd-6b6a-4d96-b79a-d381b16f0755.png", "phishunt_score": 28, "ip": "94.103.188.109", "asn": "200019", "org": "ALEXHOST S.R.L.", "country": "Moldova", "registrar": "NameSilo, LLC", "cert": "-", "gsb_category": "", "malicious_google": "0", "malicious_openphish": "0", "malicious_phishtank": "1", "malicious_tweetfeed": "0", "malicious_urlscan": "0" }, { "uuid": "26d105f1-31fa-4825-baf3-ad01813c3d0a", "domain": "allegrolokalnie.oferta98340.sbs", "registrable_domain": "oferta98340.sbs", "url": null, "company": "allegro", "status": "offline", "first_seen": null, "relationship_score": 60, "relationship_tier": "high", "detail_url": "https://phishunt.io/suspicious/allegro/26d105f1-31fa-4825-baf3-ad01813c3d0a/", "image": null, "phishunt_score": null, "ip": null, "asn": null, "org": null, "country": null, "registrar": null, "cert": null, "gsb_category": null, "malicious_google": null, "malicious_openphish": null, "malicious_phishtank": null, "malicious_tweetfeed": null, "malicious_urlscan": null }, { "uuid": "2c0dc9db-f086-4a0d-8efd-1d16fc9cf27a", "domain": "allegrolokalnie.pl-numerbiletu32138491.sbs", "registrable_domain": "pl-numerbiletu32138491.sbs", "url": "http://allegrolokalnie.pl-numerbiletu32138491.sbs", "company": "allegro", "status": "active", "first_seen": "2026-11-08 23:02:10.964281+00:00", "relationship_score": 65, "relationship_tier": "high", "detail_url": "https://phishunt.io/suspicious/allegro/2c0dc9db-f086-4a0d-8efd-1d16fc9cf27a/", "image": "screenshots/allegro/c7759591-385d-45b2-9ca0-383e72606292.png", "phishunt_score": 42, "ip": "104.21.1.129", "asn": "13335", "org": "Cloudflare, Inc.", "country": "United States", "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "cert": "YE2", "gsb_category": "SOCIAL_ENGINEERING", "malicious_google": "1", "malicious_openphish": "0", "malicious_phishtank": "1", "malicious_tweetfeed": "0", "malicious_urlscan": "0" }, { "uuid": "a9363b86-2cce-494f-95f1-daf55671e780", "domain": "allegrolokalnie.pl-zakupy23875.sbs", "registrable_domain": "pl-zakupy23875.sbs", "url": null, "company": "allegro", "status": "offline", "first_seen": null, "relationship_score": 65, "relationship_tier": "high", "detail_url": "https://phishunt.io/suspicious/allegro/a9363b86-2cce-494f-95f1-daf55671e780/", "image": null, "phishunt_score": null, "ip": null, "asn": null, "org": null, "country": null, "registrar": null, "cert": null, "gsb_category": null, "malicious_google": null, "malicious_openphish": null, "malicious_phishtank": null, "malicious_tweetfeed": null, "malicious_urlscan": null }, { "uuid": "67137586-9aa4-409e-bed5-5e9adde9cd1d", "domain": "allegrolokalnie.pll453fds32433sd30d2340392.shop", "registrable_domain": "pll453fds32433sd30d2340392.shop", "url": "https://allegrolokalnie.pll453fds32433sd30d2340392.shop", "company": "allegro", "status": "active", "first_seen": "2026-11-07 20:02:21.630493+00:00", "relationship_score": 56, "relationship_tier": "medium", "detail_url": "https://phishunt.io/suspicious/allegro/67137586-9aa4-409e-bed5-5e9adde9cd1d/", "image": "screenshots/allegro/07f64fa5-da8e-41c9-8713-8786b5bcf311.png", "phishunt_score": 36, "ip": "104.21.64.254", "asn": "13335", "org": "Cloudflare, Inc.", "country": "United States", "registrar": "-", "cert": "YE2", "gsb_category": "SOCIAL_ENGINEERING", "malicious_google": "1", "malicious_openphish": "0", "malicious_phishtank": "1", "malicious_tweetfeed": "0", "malicious_urlscan": "0" }, { "uuid": "a65ab315-1e62-46ea-93e9-e334b195cc18", "domain": "allegrolokalnie.smart-ofert23887239.sbs", "registrable_domain": "smart-ofert23887239.sbs", "url": null, "company": "allegro", "status": "offline", "first_seen": null, "relationship_score": 60, "relationship_tier": "high", "detail_url": "https://phishunt.io/suspicious/allegro/a65ab315-1e62-46ea-93e9-e334b195cc18/", "image": null, "phishunt_score": null, "ip": null, "asn": null, "org": null, "country": null, "registrar": null, "cert": null, "gsb_category": null, "malicious_google": null, "malicious_openphish": null, "malicious_phishtank": null, "malicious_tweetfeed": null, "malicious_urlscan": null } ], "domains": [ { "domain": "58273.sbs", "host_count": 1, "active_count": 1, "hosts": [ "allegrolokalnie.58273.sbs" ], "uuids": [ "ceedf5fb-1292-43d1-8622-68d12ee23788" ] }, { "domain": "73265428375733.sbs", "host_count": 1, "active_count": 1, "hosts": [ "allegrolokalnie.73265428375733.sbs" ], "uuids": [ "d8cbe0be-a6ca-4c22-b169-1176c7ce7232" ] }, { "domain": "85723.sbs", "host_count": 1, "active_count": 1, "hosts": [ "allegrolokalnie.85723.sbs" ], "uuids": [ "789b2344-02de-4c56-8846-6cbd96ccd830" ] }, { "domain": "oferta72163549902.cfd", "host_count": 1, "active_count": 1, "hosts": [ "allegrolokalnie.oferta72163549902.cfd" ], "uuids": [ "8078e902-18b0-484c-8d45-faf2b13d924e" ] }, { "domain": "oferta98340.sbs", "host_count": 2, "active_count": 0, "hosts": [ "allegro.oferta98340.sbs", "allegrolokalnie.oferta98340.sbs" ], "uuids": [ "4851e60b-8dd6-48c6-83aa-0b2af3c504fe", "26d105f1-31fa-4825-baf3-ad01813c3d0a" ] }, { "domain": "ogloszenie832.cfd", "host_count": 1, "active_count": 0, "hosts": [ "allegro.ogloszenie832.cfd" ], "uuids": [ "c7da772a-218a-45c7-ad04-0f675a75b612" ] }, { "domain": "pl-numerbiletu32138491.sbs", "host_count": 1, "active_count": 1, "hosts": [ "allegrolokalnie.pl-numerbiletu32138491.sbs" ], "uuids": [ "2c0dc9db-f086-4a0d-8efd-1d16fc9cf27a" ] }, { "domain": "pl-zakupy23875.sbs", "host_count": 1, "active_count": 0, "hosts": [ "allegrolokalnie.pl-zakupy23875.sbs" ], "uuids": [ "a9363b86-2cce-494f-95f1-daf55671e780" ] }, { "domain": "pll453fds32433sd30d2340392.shop", "host_count": 1, "active_count": 1, "hosts": [ "allegrolokalnie.pll453fds32433sd30d2340392.shop" ], "uuids": [ "67137586-9aa4-409e-bed5-5e9adde9cd1d" ] }, { "domain": "smart-ofert23887239.sbs", "host_count": 1, "active_count": 0, "hosts": [ "allegrolokalnie.smart-ofert23887239.sbs" ], "uuids": [ "a65ab315-1e62-46ea-93e9-e334b195cc18" ] } ], "relationships": [ { "domain_a": "allegrolokalnie.58273.sbs", "domain_b": "allegrolokalnie.pl-zakupy23875.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/ceedf5fb-1292-43d1-8622-68d12ee23788/", "detail_url_b": null, "score": 65, "tier": "high", "demotion_reason": null, "first_reproduced": "2026-11-08", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_full", "category": "content", "contributed": 6.0, "idf_factor": null, "dampened_by": "screenshot_phash" }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegrolokalnie.85723.sbs", "domain_b": "allegrolokalnie.pl-numerbiletu32138491.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/789b2344-02de-4c56-8846-6cbd96ccd830/", "detail_url_b": "https://phishunt.io/suspicious/allegro/2c0dc9db-f086-4a0d-8efd-1d16fc9cf27a/", "score": 65, "tier": "high", "demotion_reason": null, "first_reproduced": "2026-11-09", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_full", "category": "content", "contributed": 6.0, "idf_factor": null, "dampened_by": "screenshot_phash" }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegro.oferta98340.sbs", "domain_b": "allegro.ogloszenie832.cfd", "detail_url_a": null, "detail_url_b": null, "score": 61, "tier": "high", "demotion_reason": null, "first_reproduced": "2026-11-07", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "same nameservers", "signal": "same_ns_set", "category": "infra", "contributed": 11.2, "idf_factor": 0.8, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_full", "category": "content", "contributed": 6.0, "idf_factor": null, "dampened_by": "screenshot_phash" }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegrolokalnie.oferta98340.sbs", "domain_b": "allegrolokalnie.smart-ofert23887239.sbs", "detail_url_a": null, "detail_url_b": null, "score": 60, "tier": "high", "demotion_reason": null, "first_reproduced": "2026-11-07", "evidence": [ { "label": "same nameservers", "signal": "same_ns_set", "category": "infra", "contributed": 11.2, "idf_factor": 0.8, "dampened_by": null }, { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null }, { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [] }, { "domain_a": "allegrolokalnie.58273.sbs", "domain_b": "allegrolokalnie.73265428375733.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/ceedf5fb-1292-43d1-8622-68d12ee23788/", "detail_url_b": "https://phishunt.io/suspicious/allegro/d8cbe0be-a6ca-4c22-b169-1176c7ce7232/", "score": 60, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-08", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "appeared together (72h)", "signal": "temporal_72h", "category": "temporal", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_partial", "category": "content", "contributed": 3.0, "idf_factor": null, "dampened_by": "screenshot_phash" }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegrolokalnie.73265428375733.sbs", "domain_b": "allegrolokalnie.pl-zakupy23875.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/d8cbe0be-a6ca-4c22-b169-1176c7ce7232/", "detail_url_b": null, "score": 60, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-08", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "appeared together (72h)", "signal": "temporal_72h", "category": "temporal", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_partial", "category": "content", "contributed": 3.0, "idf_factor": null, "dampened_by": "screenshot_phash" }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegrolokalnie.58273.sbs", "domain_b": "allegrolokalnie.85723.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/ceedf5fb-1292-43d1-8622-68d12ee23788/", "detail_url_b": "https://phishunt.io/suspicious/allegro/789b2344-02de-4c56-8846-6cbd96ccd830/", "score": 58, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-09", "evidence": [ { "label": "same nameservers", "signal": "same_ns_set", "category": "infra", "contributed": 14.0, "idf_factor": 1.0, "dampened_by": null }, { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "appeared together (72h)", "signal": "temporal_72h", "category": "temporal", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [] }, { "domain_a": "allegrolokalnie.85723.sbs", "domain_b": "allegrolokalnie.oferta72163549902.cfd", "detail_url_a": "https://phishunt.io/suspicious/allegro/789b2344-02de-4c56-8846-6cbd96ccd830/", "detail_url_b": "https://phishunt.io/suspicious/allegro/8078e902-18b0-484c-8d45-faf2b13d924e/", "score": 58, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-09", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_full", "category": "content", "contributed": 6.0, "idf_factor": null, "dampened_by": "screenshot_phash" }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegrolokalnie.oferta72163549902.cfd", "domain_b": "allegrolokalnie.pl-numerbiletu32138491.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/8078e902-18b0-484c-8d45-faf2b13d924e/", "detail_url_b": "https://phishunt.io/suspicious/allegro/2c0dc9db-f086-4a0d-8efd-1d16fc9cf27a/", "score": 58, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-09", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_full", "category": "content", "contributed": 6.0, "idf_factor": null, "dampened_by": "screenshot_phash" }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegrolokalnie.85723.sbs", "domain_b": "allegrolokalnie.oferta98340.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/789b2344-02de-4c56-8846-6cbd96ccd830/", "detail_url_b": null, "score": 57, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-09", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "appeared together (72h)", "signal": "temporal_72h", "category": "temporal", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegrolokalnie.oferta98340.sbs", "domain_b": "allegrolokalnie.pl-numerbiletu32138491.sbs", "detail_url_a": null, "detail_url_b": "https://phishunt.io/suspicious/allegro/2c0dc9db-f086-4a0d-8efd-1d16fc9cf27a/", "score": 57, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-09", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "appeared together (72h)", "signal": "temporal_72h", "category": "temporal", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegrolokalnie.58273.sbs", "domain_b": "allegrolokalnie.pll453fds32433sd30d2340392.shop", "detail_url_a": "https://phishunt.io/suspicious/allegro/ceedf5fb-1292-43d1-8622-68d12ee23788/", "detail_url_b": "https://phishunt.io/suspicious/allegro/67137586-9aa4-409e-bed5-5e9adde9cd1d/", "score": 56, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-08", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_full", "category": "content", "contributed": 6.0, "idf_factor": null, "dampened_by": "screenshot_phash" }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegrolokalnie.pl-zakupy23875.sbs", "domain_b": "allegrolokalnie.pll453fds32433sd30d2340392.shop", "detail_url_a": null, "detail_url_b": "https://phishunt.io/suspicious/allegro/67137586-9aa4-409e-bed5-5e9adde9cd1d/", "score": 56, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-08", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_full", "category": "content", "contributed": 6.0, "idf_factor": null, "dampened_by": "screenshot_phash" }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegrolokalnie.73265428375733.sbs", "domain_b": "allegrolokalnie.oferta98340.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/d8cbe0be-a6ca-4c22-b169-1176c7ce7232/", "detail_url_b": null, "score": 52, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-07", "evidence": [ { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_partial", "category": "content", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [] }, { "domain_a": "allegrolokalnie.73265428375733.sbs", "domain_b": "allegrolokalnie.pll453fds32433sd30d2340392.shop", "detail_url_a": "https://phishunt.io/suspicious/allegro/d8cbe0be-a6ca-4c22-b169-1176c7ce7232/", "detail_url_b": "https://phishunt.io/suspicious/allegro/67137586-9aa4-409e-bed5-5e9adde9cd1d/", "score": 51, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-08", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (72h)", "signal": "temporal_72h", "category": "temporal", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_partial", "category": "content", "contributed": 3.0, "idf_factor": null, "dampened_by": "screenshot_phash" }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegrolokalnie.58273.sbs", "domain_b": "allegrolokalnie.oferta98340.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/ceedf5fb-1292-43d1-8622-68d12ee23788/", "detail_url_b": null, "score": 50, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-08", "evidence": [ { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_partial", "category": "content", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "appeared together (72h)", "signal": "temporal_72h", "category": "temporal", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [] }, { "domain_a": "allegrolokalnie.oferta98340.sbs", "domain_b": "allegrolokalnie.pl-zakupy23875.sbs", "detail_url_a": null, "detail_url_b": null, "score": 50, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-08", "evidence": [ { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_partial", "category": "content", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "appeared together (72h)", "signal": "temporal_72h", "category": "temporal", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [] }, { "domain_a": "allegro.oferta98340.sbs", "domain_b": "allegrolokalnie.73265428375733.sbs", "detail_url_a": null, "detail_url_b": "https://phishunt.io/suspicious/allegro/d8cbe0be-a6ca-4c22-b169-1176c7ce7232/", "score": 50, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-07", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_full", "category": "content", "contributed": 6.0, "idf_factor": null, "dampened_by": "screenshot_phash" }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegro.ogloszenie832.cfd", "domain_b": "allegrolokalnie.73265428375733.sbs", "detail_url_a": null, "detail_url_b": "https://phishunt.io/suspicious/allegro/d8cbe0be-a6ca-4c22-b169-1176c7ce7232/", "score": 50, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-07", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_full", "category": "content", "contributed": 6.0, "idf_factor": null, "dampened_by": "screenshot_phash" }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegrolokalnie.oferta72163549902.cfd", "domain_b": "allegrolokalnie.oferta98340.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/8078e902-18b0-484c-8d45-faf2b13d924e/", "detail_url_b": null, "score": 50, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-09", "evidence": [ { "label": "same screenshot", "signal": "screenshot_phash_full", "category": "visual", "contributed": 12.8, "idf_factor": 0.8, "dampened_by": null }, { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (72h)", "signal": "temporal_72h", "category": "temporal", "contributed": 4, "idf_factor": null, "dampened_by": null } ], "discounted": [ { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 0.0, "idf_factor": null, "dampened_by": "screenshot_phash" } ] }, { "domain_a": "allegro.ogloszenie832.cfd", "domain_b": "allegrolokalnie.oferta98340.sbs", "detail_url_a": null, "detail_url_b": null, "score": 48, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-07", "evidence": [ { "label": "same nameservers", "signal": "same_ns_set", "category": "infra", "contributed": 11.2, "idf_factor": 0.8, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "similar text", "signal": "ocr_similarity_partial", "category": "content", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [] }, { "domain_a": "allegrolokalnie.85723.sbs", "domain_b": "allegrolokalnie.smart-ofert23887239.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/789b2344-02de-4c56-8846-6cbd96ccd830/", "detail_url_b": null, "score": 47, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-09", "evidence": [ { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "appeared together (72h)", "signal": "temporal_72h", "category": "temporal", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null }, { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [] }, { "domain_a": "allegrolokalnie.pl-numerbiletu32138491.sbs", "domain_b": "allegrolokalnie.smart-ofert23887239.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/2c0dc9db-f086-4a0d-8efd-1d16fc9cf27a/", "detail_url_b": null, "score": 47, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-09", "evidence": [ { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "appeared together (72h)", "signal": "temporal_72h", "category": "temporal", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null }, { "label": "similar colors", "signal": "dominant_colors_match", "category": "visual", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [] }, { "domain_a": "allegrolokalnie.73265428375733.sbs", "domain_b": "allegrolokalnie.smart-ofert23887239.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/d8cbe0be-a6ca-4c22-b169-1176c7ce7232/", "detail_url_b": null, "score": 46, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-07", "evidence": [ { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [] }, { "domain_a": "allegrolokalnie.85723.sbs", "domain_b": "allegrolokalnie.pl-zakupy23875.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/789b2344-02de-4c56-8846-6cbd96ccd830/", "detail_url_b": null, "score": 46, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-09", "evidence": [ { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [] }, { "domain_a": "allegrolokalnie.pl-numerbiletu32138491.sbs", "domain_b": "allegrolokalnie.pl-zakupy23875.sbs", "detail_url_a": "https://phishunt.io/suspicious/allegro/2c0dc9db-f086-4a0d-8efd-1d16fc9cf27a/", "detail_url_b": null, "score": 46, "tier": "medium", "demotion_reason": null, "first_reproduced": "2026-11-09", "evidence": [ { "label": "similar name", "signal": "levenshtein_le2", "category": "naming", "contributed": 10.6, "idf_factor": null, "dampened_by": null }, { "label": "same favicon", "signal": "favicon_phash_exact", "category": "visual", "contributed": 7.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "same redirect target", "signal": "shared_final_host", "category": "infra", "contributed": 6.0, "idf_factor": 0.5, "dampened_by": null }, { "label": "appeared together (24h)", "signal": "temporal_24h", "category": "temporal", "contributed": 6, "idf_factor": null, "dampened_by": null }, { "label": "registered together", "signal": "domain_age_window", "category": "registration", "contributed": 5, "idf_factor": null, "dampened_by": null }, { "label": "similar name", "signal": "shared_distinctive_token", "category": "naming", "contributed": 4.4, "idf_factor": 0.5, "dampened_by": null }, { "label": "same registrar", "signal": "same_registrar", "category": "registration", "contributed": 4, "idf_factor": null, "dampened_by": null }, { "label": "certs issued together", "signal": "cert_age_window", "category": "tls", "contributed": 3, "idf_factor": null, "dampened_by": null } ], "discounted": [] } ], "relationships_truncated": false, "state": "live" }