Suspected cluster 4c9bea4b22fbACTIVE
BetaShared-infrastructure grouping of public detections. Not an attribution claim.
Domains
1011 hostsActive
6Brands
1First seen
Nov 06, 2026Most recent detection
Nov 08, 2026 What these pages look like
Domains
| Domain | Hosts | Active |
|---|---|---|
| 58273.sbs | 1 | 1 |
| 73265428375733.sbs | 1 | 1 |
| 85723.sbs | 1 | 1 |
| oferta72163549902.cfd | 1 | 1 |
| oferta98340.sbs | 2 | 0 |
| ogloszenie832.cfd | 1 | 0 |
| pl-numerbiletu32138491.sbs | 1 | 1 |
| pl-zakupy23875.sbs | 1 | 0 |
| pll453fds32433sd30d2340392.shop | 1 | 1 |
| smart-ofert23887239.sbs | 1 | 0 |
Indicators
allegrolokalnie.58273.sbs
allegrolokalnie.oferta72163549902.cfd Why this confidence
59%
suspected cluster
Link strength
29%
Evidence diversity
100%
Time compactness
98%
Strong-link share
17%
Size discount
100%
confidence = clamp(0.45×D + 0.25×V + 0.20×T + 0.10×B, 0, 1) × S. Thresholds: 70%+ possible campaign, 40%+ suspected cluster.
Evidence summary
10/10
same favicon
93b2394c6c365b1b
9/10
similar name
allegrolokalnie~allegrolokalnie d=0
9/10
similar text
jaccard=1.00
9/10
registered together
0d/0d
Brands targeted
Timeline (first seen)
Spread over 2 days
Nov 06
1
Nov 07
2
Nov 08
3
History
2026-11-09
created
first tracked with 10 members
Rebuilt daily; history is kept for 180 days. A campaign keeps its identifier as members join or leave.
How the members connect
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | 58 | 44 | 65 | 45 | 45 | 60 | 50 | 44 | 37 | 56 | |
| 2 | 58 | 65 | 46 | 29 | 29 | 44 | 57 | 47 | 58 | 35 | |
| 3 | 44 | 65 | 46 | 29 | 29 | 44 | 57 | 47 | 58 | 35 | |
| 4 | 65 | 46 | 46 | 45 | 45 | 60 | 50 | 44 | 39 | 56 | |
| 5 | 45 | 29 | 29 | 45 | 61 | 50 | 85 | 42 | 22 | 36 | |
| 6 | 45 | 29 | 29 | 45 | 61 | 50 | 48 | 42 | 22 | 36 | |
| 7 | 60 | 44 | 44 | 60 | 50 | 50 | 52 | 46 | 37 | 51 | |
| 8 | 50 | 57 | 57 | 50 | 85 | 48 | 52 | 60 | 50 | 41 | |
| 9 | 44 | 47 | 47 | 44 | 42 | 42 | 46 | 60 | 40 | 35 | |
| 10 | 37 | 58 | 58 | 39 | 22 | 22 | 37 | 50 | 40 | 32 | |
| 11 | 56 | 35 | 35 | 56 | 36 | 36 | 51 | 41 | 35 | 32 |
Each cell is the relationship score between two members, numbered as in the Indicators table above. Hover a cell for the domains and the signals behind it.
26 of 55 possible pairs are directly linked. A blank cell only means those two are not linked directly, they can still belong to the cluster through a third member. A greyed-out cell is linked below the clustering threshold or by same-kit similarity - it did not form this cluster.
Relationships
allegrolokalnie.58273.sbs ↔ allegrolokalnie.pl-zakupy23875.sbs 65 first reproduced 2026-11-08
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| similar text | content | 6.0 | - | screenshot_phash |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.85723.sbs ↔ allegrolokalnie.pl-numerbiletu32138491.sbs 65 first reproduced 2026-11-09
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| similar text | content | 6.0 | - | screenshot_phash |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegro.oferta98340.sbs ↔ allegro.ogloszenie832.cfd 61 first reproduced 2026-11-07
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same nameservers | infra | 11.2 | ×0.80 | |
| same favicon | visual | 7.0 | ×0.50 | |
| similar text | content | 6.0 | - | screenshot_phash |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.oferta98340.sbs ↔ allegrolokalnie.smart-ofert23887239.sbs 60 first reproduced 2026-11-07
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same nameservers | infra | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - | |
| similar colors | visual | 3 | - |
allegrolokalnie.58273.sbs ↔ allegrolokalnie.73265428375733.sbs 60 first reproduced 2026-11-08
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| appeared together (72h) | temporal | 4 | - | |
| similar text | content | 3.0 | - | screenshot_phash |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.73265428375733.sbs ↔ allegrolokalnie.pl-zakupy23875.sbs 60 first reproduced 2026-11-08
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| appeared together (72h) | temporal | 4 | - | |
| similar text | content | 3.0 | - | screenshot_phash |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.58273.sbs ↔ allegrolokalnie.85723.sbs 58 first reproduced 2026-11-09
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same nameservers | infra | 14.0 | - | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| appeared together (72h) | temporal | 4 | - | |
| certs issued together | tls | 3 | - |
allegrolokalnie.85723.sbs ↔ allegrolokalnie.oferta72163549902.cfd 58 first reproduced 2026-11-09
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| similar text | content | 6.0 | - | screenshot_phash |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.oferta72163549902.cfd ↔ allegrolokalnie.pl-numerbiletu32138491.sbs 58 first reproduced 2026-11-09
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| similar text | content | 6.0 | - | screenshot_phash |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.85723.sbs ↔ allegrolokalnie.oferta98340.sbs 57 first reproduced 2026-11-09
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| appeared together (72h) | temporal | 4 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.oferta98340.sbs ↔ allegrolokalnie.pl-numerbiletu32138491.sbs 57 first reproduced 2026-11-09
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| appeared together (72h) | temporal | 4 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.58273.sbs ↔ allegrolokalnie.pll453fds32433sd30d2340392.shop 56 first reproduced 2026-11-08
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| similar text | content | 6.0 | - | screenshot_phash |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.pl-zakupy23875.sbs ↔ allegrolokalnie.pll453fds32433sd30d2340392.shop 56 first reproduced 2026-11-08
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| similar text | content | 6.0 | - | screenshot_phash |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.73265428375733.sbs ↔ allegrolokalnie.oferta98340.sbs 52 first reproduced 2026-11-07
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| similar text | content | 6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - |
allegrolokalnie.73265428375733.sbs ↔ allegrolokalnie.pll453fds32433sd30d2340392.shop 51 first reproduced 2026-11-08
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| similar name | naming | 4.4 | ×0.50 | |
| appeared together (72h) | temporal | 4 | - | |
| similar text | content | 3.0 | - | screenshot_phash |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.58273.sbs ↔ allegrolokalnie.oferta98340.sbs 50 first reproduced 2026-11-08
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| similar text | content | 6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| appeared together (72h) | temporal | 4 | - | |
| certs issued together | tls | 3 | - |
allegrolokalnie.oferta98340.sbs ↔ allegrolokalnie.pl-zakupy23875.sbs 50 first reproduced 2026-11-08
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| similar text | content | 6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| appeared together (72h) | temporal | 4 | - | |
| certs issued together | tls | 3 | - |
allegro.oferta98340.sbs ↔ allegrolokalnie.73265428375733.sbs 50 first reproduced 2026-11-07
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 7.0 | ×0.50 | |
| similar text | content | 6.0 | - | screenshot_phash |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegro.ogloszenie832.cfd ↔ allegrolokalnie.73265428375733.sbs 50 first reproduced 2026-11-07
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 7.0 | ×0.50 | |
| similar text | content | 6.0 | - | screenshot_phash |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.oferta72163549902.cfd ↔ allegrolokalnie.oferta98340.sbs 50 first reproduced 2026-11-09
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| appeared together (72h) | temporal | 4 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegro.ogloszenie832.cfd ↔ allegrolokalnie.oferta98340.sbs 48 first reproduced 2026-11-07
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same nameservers | infra | 11.2 | ×0.80 | |
| same favicon | visual | 7.0 | ×0.50 | |
| similar text | content | 6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - |
allegrolokalnie.85723.sbs ↔ allegrolokalnie.smart-ofert23887239.sbs 47 first reproduced 2026-11-09
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| appeared together (72h) | temporal | 4 | - | |
| certs issued together | tls | 3 | - | |
| similar colors | visual | 3 | - |
allegrolokalnie.pl-numerbiletu32138491.sbs ↔ allegrolokalnie.smart-ofert23887239.sbs 47 first reproduced 2026-11-09
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| appeared together (72h) | temporal | 4 | - | |
| certs issued together | tls | 3 | - | |
| similar colors | visual | 3 | - |
allegrolokalnie.73265428375733.sbs ↔ allegrolokalnie.smart-ofert23887239.sbs 46 first reproduced 2026-11-07
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - |
allegrolokalnie.85723.sbs ↔ allegrolokalnie.pl-zakupy23875.sbs 46 first reproduced 2026-11-09
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - |
allegrolokalnie.pl-numerbiletu32138491.sbs ↔ allegrolokalnie.pl-zakupy23875.sbs 46 first reproduced 2026-11-09
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| similar name | naming | 10.6 | - | |
| same favicon | visual | 7.0 | ×0.50 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - |
Infrastructure footprint
IP addresses
172.67.151.116
1/11
188.114.96.3
1/11
104.21.13.38
1/11
94.103.188.109
1/11
104.21.1.129
1/11