Campaigns

Suspected cluster 3d86872725e4ACTIVE

BetaShared-infrastructure grouping of public detections. Not an attribution claim.

Domains
79 hosts
Active
9
Brands
1
First seen
Sep 19, 2026
Most recent detection
Sep 22, 2026
What these pages look like
Domains
DomainHostsActive
dk-produkt352951.sbs11
lokalna-ofeta07534529123.sbs22
lokalna-ofeta562356886.sbs22
oferta94759302.cfd11
ofertaa948290358520643.cfd11
pl-oferta58296379.shop11
pl-zamow-oferta-4059212.sbs11
Indicators
Screenshot Domain Brand Score Sources Match Status First seen
Screenshot of allegrolokalnie.lokalna-ofeta562356886.sbs 1United Statesallegrolokalnie.lokalna-ofeta562356886.sbs Allegro 03636 PhishTank 07070 ACTIVE 2026-09-20
Screenshot of allegrolokalnie.oferta94759302.cfd 2United Statesallegrolokalnie.oferta94759302.cfd Allegro 03838 PhishTank 07070 ACTIVE 2026-09-21
Screenshot of allegrolokalnie.lokalna-ofeta07534529123.sbs 3United Statesallegrolokalnie.lokalna-ofeta07534529123.sbs Allegro 04040 PhishTank 06565 ACTIVE 2026-09-20
Screenshot of allegrolokalnie.ofertaa948290358520643.cfd 4United Statesallegrolokalnie.ofertaa948290358520643.cfd Allegro 03434 PhishTank 06464 ACTIVE 2026-09-21
Screenshot of allegrolokalnie.dk-produkt352951.sbs 5United Statesallegrolokalnie.dk-produkt352951.sbs Allegro 03636 PhishTank 06262 ACTIVE 2026-09-21
Screenshot of allegrolokalnie.pl-oferta58296379.shop 6United Statesallegrolokalnie.pl-oferta58296379.shop Allegro 03535 GSBPhishTank 06262 ACTIVE 2026-09-19
Screenshot of allegrolokalnie.pl-zamow-oferta-4059212.sbs 7United Statesallegrolokalnie.pl-zamow-oferta-4059212.sbs Allegro 03535 PhishTank 06161 ACTIVE 2026-09-22
Screenshot of allegro.lokalna-ofeta07534529123.sbs 8United Statesallegro.lokalna-ofeta07534529123.sbs Allegro 04242 PhishTank 05858 ACTIVE 2026-09-20
Screenshot of allegro.lokalna-ofeta562356886.sbs 9United Statesallegro.lokalna-ofeta562356886.sbs Allegro 03939 PhishTank 05858 ACTIVE 2026-09-20
Why this confidence
69% suspected cluster
Link strength 44%
Evidence diversity 100%
Time compactness 98%
Strong-link share 50%
Size discount 100%

confidence = clamp(0.45×D + 0.25×V + 0.20×T + 0.10×B, 0, 1) × S. Thresholds: 70%+ possible campaign, 40%+ suspected cluster.

Evidence summary
7/7 same favicon 93b2394c6c365b1b
7/7 same redirect target allegrolokalnie.pl
7/7 similar name allegrolokalnie~allegrolokalnie d=0
7/7 similar text jaccard=1.00
7/7 similar name allegrolokalnie
Brands targeted
Allegro (9)
Timeline (first seen)

Spread over 3 days

Sep 19 1
Sep 20 4
Sep 21 3
Sep 22 1
History
2026-09-22 created first tracked with 7 members

Rebuilt daily; history is kept for 180 days. A campaign keeps its identifier as members join or leave.

How the members connect
123456789
1 70 65 50 46 43 40 58 100
2 70 48 50 42 43 42 33 55
3 65 48 64 62 62 56 100 58
4 50 50 64 61 59 61 49 35
5 46 42 62 61 56 61 47 31
6 43 43 62 59 56 54 47 28
7 40 42 56 61 61 54 41 25
8 58 33 100 49 47 47 41 58
9 100 55 58 35 31 28 25 58

Each cell is the relationship score between two members, numbered as in the Indicators table above. Hover a cell for the domains and the signals behind it.
23 of 36 possible pairs are directly linked. A blank cell only means those two are not linked directly, they can still belong to the cluster through a third member. A greyed-out cell is linked below the clustering threshold or by same-kit similarity - it did not form this cluster.

Relationships
allegrolokalnie.lokalna-ofeta562356886.sbs ↔ allegrolokalnie.oferta94759302.cfd 70 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same screenshot visual 14.7 -
same favicon visual 10.3 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar text content 6.0 - screenshot_phash
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokalna-ofeta07534529123.sbs ↔ allegrolokalnie.lokalna-ofeta562356886.sbs 65 first reproduced 2026-09-21
SignalCategoryContributedIDFNotes
same nameservers infra 11.2 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -
allegrolokalnie.lokalna-ofeta07534529123.sbs ↔ allegrolokalnie.ofertaa948290358520643.cfd 64 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar name naming 6.0 ×0.80
registered together registration 5 -
appeared together (72h) temporal 4 -
similar text content 3.0 - screenshot_phash
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.dk-produkt352951.sbs ↔ allegrolokalnie.lokalna-ofeta07534529123.sbs 62 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
same registrar registration 4 -
similar text content 3.0 - screenshot_phash

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokalna-ofeta07534529123.sbs ↔ allegrolokalnie.pl-oferta58296379.shop 62 first reproduced 2026-09-21
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar text content 6.0 - screenshot_phash
similar name naming 6.0 ×0.80
appeared together (72h) temporal 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.dk-produkt352951.sbs ↔ allegrolokalnie.ofertaa948290358520643.cfd 61 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar text content 6.0 - screenshot_phash
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.dk-produkt352951.sbs ↔ allegrolokalnie.pl-zamow-oferta-4059212.sbs 61 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar text content 6.0 - screenshot_phash
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.ofertaa948290358520643.cfd ↔ allegrolokalnie.pl-zamow-oferta-4059212.sbs 61 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar text content 6.0 - screenshot_phash
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.ofertaa948290358520643.cfd ↔ allegrolokalnie.pl-oferta58296379.shop 59 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar name naming 6.0 ×0.80
appeared together (72h) temporal 4 -
similar text content 3.0 - screenshot_phash
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.lokalna-ofeta07534529123.sbs ↔ allegro.lokalna-ofeta562356886.sbs 58 first reproduced 2026-09-21
SignalCategoryContributedIDFNotes
same nameservers infra 11.2 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 8.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -
allegro.lokalna-ofeta07534529123.sbs ↔ allegrolokalnie.lokalna-ofeta562356886.sbs 58 first reproduced 2026-09-21
SignalCategoryContributedIDFNotes
same nameservers infra 11.2 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 8.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -
allegro.lokalna-ofeta562356886.sbs ↔ allegrolokalnie.lokalna-ofeta07534529123.sbs 58 first reproduced 2026-09-21
SignalCategoryContributedIDFNotes
same nameservers infra 11.2 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 8.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -
allegrolokalnie.dk-produkt352951.sbs ↔ allegrolokalnie.pl-oferta58296379.shop 56 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar name naming 6.0 ×0.80
appeared together (72h) temporal 4 -
similar text content 3.0 - screenshot_phash

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokalna-ofeta07534529123.sbs ↔ allegrolokalnie.pl-zamow-oferta-4059212.sbs 56 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar name naming 6.0 ×0.80
appeared together (72h) temporal 4 -
similar text content 3.0 - screenshot_phash

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.lokalna-ofeta562356886.sbs ↔ allegrolokalnie.oferta94759302.cfd 55 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same screenshot visual 14.7 -
same favicon visual 10.3 ×0.80
same redirect target infra 9.6 ×0.80
similar text content 6.0 - screenshot_phash
appeared together (24h) temporal 6 -
registered together registration 5 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl-oferta58296379.shop ↔ allegrolokalnie.pl-zamow-oferta-4059212.sbs 54 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar name naming 6.0 ×0.80
similar text content 3.0 - screenshot_phash
appeared together (7d) temporal 2 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokalna-ofeta562356886.sbs ↔ allegrolokalnie.ofertaa948290358520643.cfd 50 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
certs issued together tls 3 -
allegrolokalnie.oferta94759302.cfd ↔ allegrolokalnie.ofertaa948290358520643.cfd 50 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
certs issued together tls 3 -
allegro.lokalna-ofeta07534529123.sbs ↔ allegrolokalnie.ofertaa948290358520643.cfd 49 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
registered together registration 5 -
appeared together (72h) temporal 4 -
similar text content 3.0 - screenshot_phash
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokalna-ofeta07534529123.sbs ↔ allegrolokalnie.oferta94759302.cfd 48 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar name naming 6.0 ×0.80
registered together registration 5 -
appeared together (72h) temporal 4 -
certs issued together tls 3 -
allegro.lokalna-ofeta07534529123.sbs ↔ allegrolokalnie.dk-produkt352951.sbs 47 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
appeared together (24h) temporal 6 -
same registrar registration 4 -
similar text content 3.0 - screenshot_phash

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.lokalna-ofeta07534529123.sbs ↔ allegrolokalnie.pl-oferta58296379.shop 47 first reproduced 2026-09-21
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar text content 6.0 - screenshot_phash
appeared together (72h) temporal 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.dk-produkt352951.sbs ↔ allegrolokalnie.lokalna-ofeta562356886.sbs 46 first reproduced 2026-09-22
SignalCategoryContributedIDFNotes
same favicon visual 11.2 ×0.80
same redirect target infra 9.6 ×0.80
similar name naming 9.0 -
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
same registrar registration 4 -
Infrastructure footprint
Export JSON CSV TXT
corr-1.3.0 · built 2026-09-22 05:00 UTC - rebuilt daily