{
  "uuid": "6eb26847-8541-4809-965e-e702e7674125",
  "domain": "allegro.ofe83204.sbs",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-11-13T05:00:35.639586+00:00",
  "cluster": {
    "key": "72f66562793c",
    "size": 9,
    "host_count": 9,
    "url": "https://phishunt.io/campaigns/72f66562793c/"
  },
  "count": 7,
  "limit": 10,
  "results": [
    {
      "uuid": "dc44dd48-a1f7-401a-ae31-3c154dc692db",
      "domain": "allegrolokalnie.o102040.shop",
      "url": "https://allegrolokalnie.o102040.shop",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-11 14:03:05.861925+00:00",
      "relationship_score": 59,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "same_ns_set",
          "value": "leanna.ns.cloudflare.com,rocco.ns.cloudflare.com",
          "contributed": 14.0
        },
        {
          "type": "shared_final_host",
          "value": "allegrolokalnie.pl",
          "contributed": 6.0
        },
        {
          "type": "temporal_24h",
          "value": "13.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "0d/0d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "93b2394c6c365b1b",
          "contributed": 11.2
        },
        {
          "type": "screenshot_phash_full",
          "value": "f3324e4b136b0c6b~f3324e4b136b0c6b d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/allegro/dc44dd48-a1f7-401a-ae31-3c154dc692db/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "104.16.0.0/13",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "081e0107-b015-4f85-91ff-d6b7b2084254",
      "domain": "allegrolokalnie.nr-238sn34.sbs",
      "url": "https://allegrolokalnie.nr-238sn34.sbs/oferta/msi-gaming-trio-geforce-rtx-5060-ti-16gb-oc-gddr7/J9oHpeQL",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-11 22:01:34.500166+00:00",
      "relationship_score": 51,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "allegrolokalnie.pl",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "0d/0d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Hosting Concepts B.V. d/b/a Registrar.eu",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "21.0h",
          "contributed": 6
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "93b2394c6c365b1b",
          "contributed": 11.2
        },
        {
          "type": "screenshot_phash_full",
          "value": "f3324e4b136b0c6b~f3324e4b136b0c6b d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/allegro/081e0107-b015-4f85-91ff-d6b7b2084254/",
      "service_range": null,
      "url_only": false
    },
    {
      "uuid": "bc1967e4-a86a-4494-8e5b-76615e88da34",
      "domain": "allegrolokalnie.pl74892.pl",
      "url": "https://allegrolokalnie.pl74892.pl",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-09 23:01:22.748028+00:00",
      "relationship_score": 48,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "allegrolokalnie.pl",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "3d/0d",
          "contributed": 5
        },
        {
          "type": "temporal_72h",
          "value": "26.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "0d/0d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "93b2394c6c365b1b",
          "contributed": 11.2
        },
        {
          "type": "screenshot_phash_full",
          "value": "f3324e4b136b0c6b~f3324e4b136b0c6b d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/allegro/bc1967e4-a86a-4494-8e5b-76615e88da34/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "104.16.0.0/13",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "27c21580-9af2-4db1-a6cf-09da581a5d5e",
      "domain": "allegro.o5413443.top",
      "url": "https://allegro.o5413443.top",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-12 18:02:39.680081+00:00",
      "relationship_score": 48,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "allegrolokalnie.pl",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "0d/0d",
          "contributed": 5
        },
        {
          "type": "temporal_72h",
          "value": "41.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "0d/0d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "93b2394c6c365b1b",
          "contributed": 11.2
        },
        {
          "type": "screenshot_phash_full",
          "value": "f3324e4b136b0c6b~f3324e4b136b0c6b d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/allegro/27c21580-9af2-4db1-a6cf-09da581a5d5e/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "172.64.0.0/13",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "d02aee8e-4744-49ca-aa52-9a7dd2234768",
      "domain": "allegrolokalnie.o5433443.top",
      "url": "https://allegrolokalnie.o5433443.top",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-12 17:01:34.984499+00:00",
      "relationship_score": 48,
      "evidence": [
        {
          "type": "ocr_similarity_full",
          "value": "jaccard=1.00",
          "contributed": 6.0
        },
        {
          "type": "shared_final_host",
          "value": "allegrolokalnie.pl",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "0d/0d",
          "contributed": 5
        },
        {
          "type": "temporal_72h",
          "value": "40.0h",
          "contributed": 4
        },
        {
          "type": "cert_age_window",
          "value": "0d/0d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=0.0",
          "contributed": 0.0
        },
        {
          "type": "favicon_phash_exact",
          "value": "93b2394c6c365b1b",
          "contributed": 11.2
        },
        {
          "type": "screenshot_phash_full",
          "value": "f3324e4b136b0c6b~f3324e4b136b0c6b d=0",
          "contributed": 12.8
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/allegro/d02aee8e-4744-49ca-aa52-9a7dd2234768/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "188.114.96.0/20",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "b4d5407d-312c-4e7b-872c-25e38ed22199",
      "domain": "allegrolokalnie.o108940.shop",
      "url": "https://allegrolokalnie.o108940.shop",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-11 21:02:36.285153+00:00",
      "relationship_score": 43,
      "evidence": [
        {
          "type": "same_ns_set",
          "value": "leanna.ns.cloudflare.com,rocco.ns.cloudflare.com",
          "contributed": 14.0
        },
        {
          "type": "shared_final_host",
          "value": "allegrolokalnie.pl",
          "contributed": 6.0
        },
        {
          "type": "temporal_24h",
          "value": "20.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "0d/0d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=1.0",
          "contributed": 3
        },
        {
          "type": "favicon_phash_exact",
          "value": "93b2394c6c365b1b",
          "contributed": 11.2
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/allegro/b4d5407d-312c-4e7b-872c-25e38ed22199/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "104.16.0.0/13",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    },
    {
      "uuid": "7623f4f0-6a6e-4ebc-b933-9e27f504be6c",
      "domain": "allegrolokalnie.smart-92492.cfd",
      "url": "https://allegrolokalnie.smart-92492.cfd",
      "company": "allegro",
      "status": "active",
      "first_seen": "2026-11-12 00:02:10.487185+00:00",
      "relationship_score": 38,
      "evidence": [
        {
          "type": "shared_final_host",
          "value": "allegrolokalnie.pl",
          "contributed": 6.0
        },
        {
          "type": "domain_age_window",
          "value": "0d/0d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Hosting Concepts B.V. d/b/a Registrar.eu",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "23.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "0d/0d",
          "contributed": 3
        },
        {
          "type": "dominant_colors_match",
          "value": "dist=35.4",
          "contributed": 3
        },
        {
          "type": "favicon_phash_exact",
          "value": "93b2394c6c365b1b",
          "contributed": 11.2
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/allegro/7623f4f0-6a6e-4ebc-b933-9e27f504be6c/",
      "service_range": {
        "best": {
          "direction": "both",
          "kind": "platform",
          "kind_label": "shared platform that serves customer content",
          "prefix": "172.64.0.0/13",
          "provider": "Cloudflare",
          "region": "",
          "service": "CDN",
          "source": "cloudflare"
        },
        "also": [],
        "note": "Official provider IP range of this IP. Context only, not a verdict."
      },
      "url_only": false
    }
  ]
}