Campaigns
Suspected cluster 239866029b03ACTIVE
BetaShared-infrastructure grouping of public detections. Not an attribution claim.
Most recent detection
Oct 20, 2026
What these pages look like
Why this confidence
66%
suspected cluster
Link strength
46%
Evidence diversity
100%
Time compactness
100%
Strong-link share
0%
Size discount
100%
confidence = clamp(0.45×D + 0.25×V + 0.20×T + 0.10×B, 0, 1) × S. Thresholds: 70%+ possible campaign, 40%+ suspected cluster.
Evidence summary
4/4
similar name
aaa-aaaaaaaa
4/4
appeared together (24h)
0.1h
4/4
registered together
7d/7d
4/4
certs issued together
3d/3d
3/4
same screenshot
a6d96636cc993662~a6d92636ccc93e62 d=4
History
2026-10-24
shrank
-2 hosts, now 4 members
2026-10-23
grew
+2 hosts, now 6 members
2026-10-22
created
first tracked with 4 members
Rebuilt daily; history is kept for 180 days. A campaign keeps its identifier as members join or leave.
How the members connect
|
1 | 2 | 3 | 4 |
| 1 |
|
51 |
45 |
45 |
| 2 |
51 |
|
45 |
45 |
| 3 |
45 |
45 |
|
45 |
| 4 |
45 |
45 |
45 |
|
Each cell is the relationship score between two members, numbered as in the Indicators table above. Hover a cell for the domains and the signals behind it.
6 of 6 possible pairs are directly linked. A blank cell only means those two are not linked directly, they can still belong to the cluster through a third member.
Relationships
bnd-whatsapp.com ↔ bni-whatsapp.com
51
first reproduced 2026-10-23
| Signal | Category | Contributed | IDF | Notes |
|---|
| same screenshot |
visual |
16.0 |
- |
|
| similar name |
naming |
9.0 |
- |
|
| similar text |
content |
6.0 |
- |
screenshot_phash |
| similar name |
naming |
6.0 |
- |
|
| appeared together (24h) |
temporal |
6 |
- |
|
| registered together |
registration |
5 |
- |
|
| certs issued together |
tls |
3 |
- |
|
Discounted observations
| similar colors |
visual |
0.0 |
- |
screenshot_phash |
bnd-whatsapp.com ↔ bnq-whatsapp.com
45
first reproduced 2026-10-23
| Signal | Category | Contributed | IDF | Notes |
|---|
| same screenshot |
visual |
16.0 |
- |
|
| similar name |
naming |
9.0 |
- |
|
| similar name |
naming |
6.0 |
- |
|
| appeared together (24h) |
temporal |
6 |
- |
|
| registered together |
registration |
5 |
- |
|
| certs issued together |
tls |
3 |
- |
|
Discounted observations
| similar colors |
visual |
0.0 |
- |
screenshot_phash |
bnd-whatsapp.com ↔ bny-whatsapp.com
45
first reproduced 2026-10-23
| Signal | Category | Contributed | IDF | Notes |
|---|
| same screenshot |
visual |
16.0 |
- |
|
| similar name |
naming |
9.0 |
- |
|
| similar name |
naming |
6.0 |
- |
|
| appeared together (24h) |
temporal |
6 |
- |
|
| registered together |
registration |
5 |
- |
|
| certs issued together |
tls |
3 |
- |
|
Discounted observations
| similar colors |
visual |
0.0 |
- |
screenshot_phash |
bni-whatsapp.com ↔ bnq-whatsapp.com
45
first reproduced 2026-10-22
| Signal | Category | Contributed | IDF | Notes |
|---|
| same screenshot |
visual |
16.0 |
- |
|
| similar name |
naming |
9.0 |
- |
|
| similar name |
naming |
6.0 |
- |
|
| appeared together (24h) |
temporal |
6 |
- |
|
| registered together |
registration |
5 |
- |
|
| certs issued together |
tls |
3 |
- |
|
Discounted observations
| similar colors |
visual |
0.0 |
- |
screenshot_phash |
bni-whatsapp.com ↔ bny-whatsapp.com
45
first reproduced 2026-10-23
| Signal | Category | Contributed | IDF | Notes |
|---|
| same screenshot |
visual |
16.0 |
- |
|
| similar name |
naming |
9.0 |
- |
|
| similar name |
naming |
6.0 |
- |
|
| appeared together (24h) |
temporal |
6 |
- |
|
| registered together |
registration |
5 |
- |
|
| certs issued together |
tls |
3 |
- |
|
Discounted observations
| similar colors |
visual |
0.0 |
- |
screenshot_phash |
bnq-whatsapp.com ↔ bny-whatsapp.com
45
first reproduced 2026-10-23
| Signal | Category | Contributed | IDF | Notes |
|---|
| same screenshot |
visual |
16.0 |
- |
|
| similar name |
naming |
9.0 |
- |
|
| similar name |
naming |
6.0 |
- |
|
| appeared together (24h) |
temporal |
6 |
- |
|
| registered together |
registration |
5 |
- |
|
| certs issued together |
tls |
3 |
- |
|
Discounted observations
| similar colors |
visual |
0.0 |
- |
screenshot_phash |
corr-1.4.0 · built 2026-10-24 05:00 UTC - rebuilt daily
bnd-whatsapp.com