Suspected cluster 6f4caa6262c8ACTIVE
BetaShared-infrastructure grouping of public detections. Not an attribution claim.
Domains
1111 hostsActive
11Brands
1First seen
Oct 24, 2026Most recent detection
Oct 26, 2026 What these pages look like
allegrolokalnie.oferta2284984024.cfd
allegrolokalnie.oferta3763479202.cfd
allegrolokalnie.ij37f649jg376fhf93g63.rest
allegrolokalnie.jesienne-oferty-87361.cfd
allegrolokalnie.kup-ofeta672934.lol
allegrolokalnie.pl-zakupy90021.top
allegrolokalnie.nr-8j2-sm3-d8b.sbs
allegrolokalnie.pl-lokalna-ofeta9xv17yj75v0.shop
allegrolokalnie.nr-28s2m3.sbs
allegrolokalnie.pl-zakupy22012.top
allegrolokalnie.jesienne-oferty-78937.cfd
Indicators
allegrolokalnie.oferta2284984024.cfd
allegrolokalnie.nr-8j2-sm3-d8b.sbs Why this confidence
58%
suspected cluster
Link strength
23%
Evidence diversity
100%
Time compactness
100%
Strong-link share
29%
Size discount
100%
confidence = clamp(0.45×D + 0.25×V + 0.20×T + 0.10×B, 0, 1) × S. Thresholds: 70%+ possible campaign, 40%+ suspected cluster.
Evidence summary
11/11
similar name
allegrolokalnie~allegrolokalnie d=0
10/11
similar name
allegrolokalnie
8/11
same favicon
93b2394c6c365b1b
7/11
appeared together (24h)
2.0h
Brands targeted
Timeline (first seen)
Spread over 2 days
Oct 24
2
Oct 25
7
Oct 26
2
History
2026-10-26
created
first tracked with 11 members
Rebuilt daily; history is kept for 180 days. A campaign keeps its identifier as members join or leave.
How the members connect
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | 73 | 46 | 46 | 46 | 46 | 56 | 52 | 27 | 29 | 27 | |
| 2 | 73 | 46 | 46 | 46 | 46 | 56 | 52 | 27 | 29 | 27 | |
| 3 | 46 | 46 | 60 | 60 | 60 | 41 | 39 | 27 | 29 | 27 | |
| 4 | 46 | 46 | 60 | 60 | 60 | 47 | 39 | 31 | 29 | 45 | |
| 5 | 46 | 46 | 60 | 60 | 60 | 41 | 39 | 27 | 29 | 27 | |
| 6 | 46 | 46 | 60 | 60 | 60 | 43 | 39 | 27 | 47 | 27 | |
| 7 | 56 | 56 | 41 | 47 | 41 | 43 | 57 | 53 | 26 | 29 | |
| 8 | 52 | 52 | 39 | 39 | 39 | 39 | 57 | 25 | 22 | 25 | |
| 9 | 27 | 27 | 27 | 31 | 27 | 27 | 53 | 25 | 21 | 31 | |
| 10 | 29 | 29 | 29 | 29 | 29 | 47 | 26 | 22 | 21 | 21 | |
| 11 | 27 | 27 | 27 | 45 | 27 | 27 | 29 | 25 | 31 | 21 |
Each cell is the relationship score between two members, numbered as in the Indicators table above. Hover a cell for the domains and the signals behind it.
24 of 55 possible pairs are directly linked. A blank cell only means those two are not linked directly, they can still belong to the cluster through a third member. A greyed-out cell is linked below the clustering threshold or by same-kit similarity - it did not form this cluster.
Relationships
allegrolokalnie.oferta2284984024.cfd ↔ allegrolokalnie.oferta3763479202.cfd 73 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same nameservers | infra | 14.0 | - | |
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.ij37f649jg376fhf93g63.rest ↔ allegrolokalnie.jesienne-oferty-87361.cfd 60 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 14.7 | - | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 10.3 | ×0.80 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.ij37f649jg376fhf93g63.rest ↔ allegrolokalnie.kup-ofeta672934.lol 60 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 14.7 | - | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 10.3 | ×0.80 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.ij37f649jg376fhf93g63.rest ↔ allegrolokalnie.pl-zakupy90021.top 60 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 14.7 | - | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 10.3 | ×0.80 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.jesienne-oferty-87361.cfd ↔ allegrolokalnie.kup-ofeta672934.lol 60 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 14.7 | - | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 10.3 | ×0.80 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.jesienne-oferty-87361.cfd ↔ allegrolokalnie.pl-zakupy90021.top 60 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 14.7 | - | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 10.3 | ×0.80 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.kup-ofeta672934.lol ↔ allegrolokalnie.pl-zakupy90021.top 60 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 14.7 | - | |
| similar name | naming | 10.6 | - | |
| same favicon | visual | 10.3 | ×0.80 | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.nr-8j2-sm3-d8b.sbs ↔ allegrolokalnie.pl-lokalna-ofeta9xv17yj75v0.shop 57 first reproduced 2026-10-25
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| similar text | content | 6.0 | - | screenshot_phash |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| similar name | naming | 4.4 | ×0.50 |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.nr-8j2-sm3-d8b.sbs ↔ allegrolokalnie.oferta2284984024.cfd 56 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.nr-8j2-sm3-d8b.sbs ↔ allegrolokalnie.oferta3763479202.cfd 56 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.nr-28s2m3.sbs ↔ allegrolokalnie.nr-8j2-sm3-d8b.sbs 53 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same IP | infra | 15.7 | - | |
| similar name | naming | 10.6 | - | |
| same nameservers | infra | 10.0 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same redirect target | infra | 4.3 | ×0.50 | |
| same registrar | registration | 4 | - | |
| appeared together (72h) | temporal | 4 | - |
Discounted observations
| same ASN | infra | 0.0 | - | same_ip |
| same hosting org | infra | 0.0 | - | same_ip |
allegrolokalnie.oferta2284984024.cfd ↔ allegrolokalnie.pl-lokalna-ofeta9xv17yj75v0.shop 52 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| similar name | naming | 4.4 | ×0.50 | |
| appeared together (72h) | temporal | 4 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.oferta3763479202.cfd ↔ allegrolokalnie.pl-lokalna-ofeta9xv17yj75v0.shop 52 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| similar name | naming | 4.4 | ×0.50 | |
| appeared together (72h) | temporal | 4 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.jesienne-oferty-87361.cfd ↔ allegrolokalnie.nr-8j2-sm3-d8b.sbs 47 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - |
allegrolokalnie.pl-zakupy22012.top ↔ allegrolokalnie.pl-zakupy90021.top 47 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same nameservers | infra | 14.0 | - | |
| similar name | naming | 10.6 | - | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - |
allegrolokalnie.ij37f649jg376fhf93g63.rest ↔ allegrolokalnie.oferta2284984024.cfd 46 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
allegrolokalnie.ij37f649jg376fhf93g63.rest ↔ allegrolokalnie.oferta3763479202.cfd 46 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
allegrolokalnie.jesienne-oferty-87361.cfd ↔ allegrolokalnie.oferta2284984024.cfd 46 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
allegrolokalnie.jesienne-oferty-87361.cfd ↔ allegrolokalnie.oferta3763479202.cfd 46 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
allegrolokalnie.kup-ofeta672934.lol ↔ allegrolokalnie.oferta2284984024.cfd 46 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
allegrolokalnie.kup-ofeta672934.lol ↔ allegrolokalnie.oferta3763479202.cfd 46 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
allegrolokalnie.oferta2284984024.cfd ↔ allegrolokalnie.pl-zakupy90021.top 46 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
allegrolokalnie.oferta3763479202.cfd ↔ allegrolokalnie.pl-zakupy90021.top 46 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 10.6 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar name | naming | 4.4 | ×0.50 | |
| certs issued together | tls | 3 | - |
allegrolokalnie.jesienne-oferty-78937.cfd ↔ allegrolokalnie.jesienne-oferty-87361.cfd 45 first reproduced 2026-10-26
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same nameservers | infra | 14.0 | - | |
| similar name | naming | 8.2 | - | |
| similar name | naming | 6.8 | - | |
| same redirect target | infra | 6.0 | ×0.50 | |
| appeared together (24h) | temporal | 6 | - | |
| same registrar | registration | 4 | - |
Infrastructure footprint
IP addresses
188.114.96.3
4/11
2.59.219.224
2/11
104.21.88.90
1/11
172.67.181.20
1/11
104.21.42.91
1/11