Possible campaigns

Beta8 live campaigns grouping 24 domains (25 indicators) across 8 brands, rebuilt daily. Shared-infrastructure grouping of public detections, not an attribution claim.

Data built 2026-09-19 05:00 UTC · rebuilt daily

Recent Confidence Size

3 new in the last 7 days

AllegroNew

51cc7c372f35

same screenshot · 3/3 members Sep 18, 2026 → Sep 19, 2026

88% possible campaign

3 domains · 4 hosts · 4 active

Spotify

77c704d800ce

same IP · 3/3 members Sep 5, 2026

68% suspected cluster

3 domains · 3 hosts · 3 active

LedgerNew

9f4dcc091246

same TLS cert · 3/3 members Aug 28, 2026 → Aug 29, 2026

59% suspected cluster

3 domains · 3 hosts · 3 active

Roblox

77b3651e5e31

same IP · 3/3 members Aug 24, 2026

59% suspected cluster

3 domains · 3 hosts · 3 active

Google

ac8520eb2371

56% suspected cluster

3 domains · 3 hosts · 3 active

Binance

1285296f1ed2

same IP · 3/3 members May 20, 2026

87% possible campaign

3 domains · 3 hosts · 3 active

Roblox

0c08ddef2f4e

same IP · 3/3 members

82% possible campaign

3 domains · 3 hosts · 0 active

Coinbase, KrakenNew

1119ae1615f7

same IP · 3/3 members

72% possible campaign

3 domains · 3 hosts · 0 active

Recently dissolved

ledger 2026-09-18 kraken 2026-09-16 roblox 2026-09-15 allegro 2026-09-15 whatsapp 2026-09-09 coinbase 2026-09-08 whatsapp 2026-09-08 ingspain 2026-09-07 instagram 2026-09-06 microsoft 2026-09-06

A campaign dissolves when none of its indicators are in the active feed any more. Its key is derived from the exact member set, so only an essentially identical set of members revives the same identifier; a merged or split campaign instead continues under its successor's key.

Browse all archived campaigns →

Methodology & provenance

Generated: 2026-09-19 05:00 UTC
Algorithm: corr-1.3.0
Input rows: 912
Candidate pairs: 39636
Edges written: 349
Clusters written: 9
Runtime: 35.9s

Shared infrastructure excluded from clustering: 11 apex domains, 1 favicon hashes, 10 IPs, 3 nameserver sets, 78 TLS SAN entries.