Campaigns

Possible campaign 473373b8b673ACTIVE

BetaShared-infrastructure grouping of public detections. Not an attribution claim.

Indicators
6
Active
6
Brands
1
First seen
Aug 20
Last activity
Aug 21
What these pages look like
Indicators
Screenshot Domain Brand Score Sources Match Status First seen
Screenshot of allegrolokalnie.lokalna-849641.sbs 1United Statesallegrolokalnie.lokalna-849641.sbs Allegro 04040 PhishTank 07474 ACTIVE 2026-08-21
Screenshot of allegrolokalnie.pl-oferta812281.lol 2United Statesallegrolokalnie.pl-oferta812281.lol Allegro 03939 PhishTank 07474 ACTIVE 2026-08-21
Screenshot of allegrolokalnie.sthml.sbs 3United Statesallegrolokalnie.sthml.sbs Allegro 03636 PhishTank 07474 ACTIVE 2026-08-21
Screenshot of allegrolokalnie.lokalna-2328222239.lol 4United Statesallegrolokalnie.lokalna-2328222239.lol Allegro 03535 PhishTank 07070 ACTIVE 2026-08-21
Screenshot of allegrolokalnie.pl-oferta981912111.sbs 5United Statesallegrolokalnie.pl-oferta981912111.sbs Allegro 03636 PhishTank 07070 ACTIVE 2026-08-21
Screenshot of allegrolokalnie.lokalna-oferta839122.lol 6United Statesallegrolokalnie.lokalna-oferta839122.lol Allegro 03434 PhishTank 05454 ACTIVE 2026-08-20
Why this confidence
74% possible campaign
Link strength 58%
Evidence diversity 100%
Time compactness 99%
Strong-link share 33%
Size discount 100%

confidence = clamp(0.45×D + 0.25×V + 0.20×T + 0.10×B, 0, 1) × S. Thresholds: 70%+ possible campaign, 40%+ suspected cluster.

Evidence summary
6/6 cert age window 1d/0d
6/6 registered together 1d/0d
6/6 same favicon 93b2394c6c365b1b
6/6 similar name allegrolokalnie~allegrolokalnie d=0
6/6 similar name allegrolokalnie
Brands targeted
Allegro (6)
Timeline (first seen)
Aug 20 1
Aug 21 5
History
2026-08-22 created first tracked with 6 indicators

Rebuilt daily; history is kept for 180 days. A campaign keeps its identifier as members join or leave.

How the members connect
123456
1 74 74 50 54 54
2 74 74 50 68 52
3 74 74 50 54 54
4 50 50 50 70 50
5 54 68 54 70 54
6 54 52 54 50 54

Each cell is the relationship score between two members, numbered as in the Indicators table above. Hover a cell for the domains and the signals behind it.
15 of 15 possible pairs are directly linked. A blank cell only means those two are not linked directly, they can still belong to the cluster through a third member.

Infrastructure footprint
IP addresses
ASNs
13335 6/6
Hosting orgs
Registrars
TLS certs
WE1 5/6
Export JSON CSV TXT
corr-1.2.0 - rebuilt daily