Campaigns

Suspected cluster 769c561db2f8ACTIVE

BetaShared-infrastructure grouping of public detections. Not an attribution claim.

Indicators
14
Active
13
Brands
1
First seen
Aug 22, 2026
Most recent detection
Aug 29, 2026
What these pages look like
Indicators
Screenshot Domain Brand Score Sources Match Status First seen
Screenshot of allegro.lokalna-9938201.sbs 1United Statesallegro.lokalna-9938201.sbs Allegro 04343 PhishTank 09999 ACTIVE 2026-08-28
Screenshot of allegrolokalnie.lokalna-9938201.sbs 2United Statesallegrolokalnie.lokalna-9938201.sbs Allegro 04040 PhishTank 09999 ACTIVE 2026-08-28
Screenshot of allegro.oferta-lokalna8943961432.cfd 3United Statesallegro.oferta-lokalna8943961432.cfd Allegro 04242 PhishTank 07777 ACTIVE 2026-08-29
Screenshot of allegrolokalnie.oferta-lokalna8943961432.cfd 4United Statesallegrolokalnie.oferta-lokalna8943961432.cfd Allegro 03939 PhishTank 07777 ACTIVE 2026-08-27
Screenshot of allegrolokalnie.oferta823161.click 5United Statesallegrolokalnie.oferta823161.click Allegro 03939 PhishTank 06565 ACTIVE 2026-08-28
Screenshot of allegrolokalnie.lokalna-ofera81112191.sbs 6United Statesallegrolokalnie.lokalna-ofera81112191.sbs Allegro 03939 PhishTank 06262 ACTIVE 2026-08-29
Screenshot of allegrolokalnie.lokalna-ofeta7891987121.sbs 7United Statesallegrolokalnie.lokalna-ofeta7891987121.sbs Allegro 03838 PhishTank 06262 ACTIVE 2026-08-29
Screenshot of allegro.pl-oferta6893457623479.sbs 8United Statesallegro.pl-oferta6893457623479.sbs Allegro 03838 PhishTank 06161 ACTIVE 2026-08-27
Screenshot of allegro.lokalna-059272.sbs 9United Statesallegro.lokalna-059272.sbs Allegro 03838 PhishTank 05858 ACTIVE 2026-08-28
Screenshot of allegro.lokalna-ofeta287689142.sbs 10United Statesallegro.lokalna-ofeta287689142.sbs Allegro 03838 PhishTank 05858 ACTIVE 2026-08-28
Screenshot of allegrolokalnie.lokalna-ofeta16x3v0yj934b75v0.shop 11allegrolokalnie.lokalna-ofeta16x3v0yj934b75v0.shop Allegro - - 05151 OFFLINE -
Screenshot of allegro.pl-ogloszenie8913.icu 12United Statesallegro.pl-ogloszenie8913.icu Allegro 04141 PhishTank 05050 ACTIVE 2026-08-28
Screenshot of allegro.plkupteraz83219321698.sbs 13United Statesallegro.plkupteraz83219321698.sbs Allegro 03838 PhishTank 05050 ACTIVE 2026-08-28
Screenshot of allegrolokalnie.oferta-lokalna8654968923445.shop 14United Statesallegrolokalnie.oferta-lokalna8654968923445.shop Allegro 02929 PhishTank 04949 ACTIVE 2026-08-22
Why this confidence
54% suspected cluster
Link strength 17%
Evidence diversity 100%
Time compactness 99%
Strong-link share 17%
Size discount 100%

confidence = clamp(0.45×D + 0.25×V + 0.20×T + 0.10×B, 0, 1) × S. Thresholds: 70%+ possible campaign, 40%+ suspected cluster.

Evidence summary
14/14 same favicon 93b2394c6c365b1b
14/14 same redirect target allegrolokalnie.pl
12/14 same registrar Global Domain Group LLC
9/14 similar text jaccard=1.00
8/14 certs issued together 0d/1d
Brands targeted
Allegro (14)
Timeline (first seen)

Spread over 7 days

Aug 22 1
Aug 27 2
Aug 28 7
Aug 29 3
History
2026-08-30 grew +3, -1 members, now 14
2026-08-29 created first tracked with 12 indicators

Rebuilt daily; history is kept for 180 days. A campaign keeps its identifier as members join or leave.

Strongest links
Relationships
allegro.lokalna-9938201.sbs ↔ allegrolokalnie.lokalna-9938201.sbs 99 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same TLS cert tls 17.1 -
same nameservers infra 14.0 -
same screenshot visual 12.8 ×0.80
same apex infra 10.0 -
similar name naming 8.0 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 2.9 -

Discounted observations

shared TLS SAN tls 0.0 - cert_fingerprint_exact
similar colors visual 0.0 - screenshot_phash
allegro.oferta-lokalna8943961432.cfd ↔ allegrolokalnie.oferta-lokalna8943961432.cfd 77 first reproduced 2026-08-30
SignalCategoryContributedIDFNotes
same TLS cert tls 17.1 -
same nameservers infra 11.2 ×0.80
same apex infra 10.0 -
similar name naming 10.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
registered together registration 5 -
same registrar registration 4 -
appeared together (72h) temporal 4 -
certs issued together tls 2.9 -

Discounted observations

shared TLS SAN tls 0.0 - cert_fingerprint_exact
allegrolokalnie.oferta-lokalna8943961432.cfd ↔ allegrolokalnie.oferta823161.click 65 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokalna-ofera81112191.sbs ↔ allegrolokalnie.lokalna-ofeta7891987121.sbs 62 first reproduced 2026-08-30
SignalCategoryContributedIDFNotes
same screenshot visual 16.0 -
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.pl-oferta6893457623479.sbs ↔ allegrolokalnie.oferta-lokalna8943961432.cfd 61 first reproduced 2026-08-28
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same nameservers infra 11.2 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.lokalna-059272.sbs ↔ allegro.lokalna-ofeta287689142.sbs 58 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 8.0 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.lokalna-059272.sbs ↔ allegro.lokalna-9938201.sbs 53 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same nameservers infra 14.0 -
similar name naming 8.0 ×0.80
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -
allegro.lokalna-059272.sbs ↔ allegrolokalnie.lokalna-9938201.sbs 53 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same nameservers infra 14.0 -
similar name naming 8.0 ×0.80
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -
allegrolokalnie.lokalna-9938201.sbs ↔ allegrolokalnie.lokalna-ofeta16x3v0yj934b75v0.shop 51 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (72h) temporal 4 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokalna-ofeta7891987121.sbs ↔ allegrolokalnie.oferta-lokalna8943961432.cfd 50 first reproduced 2026-08-30
SignalCategoryContributedIDFNotes
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
similar text content 6 -
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
registered together registration 5 -
same registrar registration 4 -
appeared together (72h) temporal 4 -
certs issued together tls 3 -
allegrolokalnie.lokalna-ofeta7891987121.sbs ↔ allegrolokalnie.oferta823161.click 50 first reproduced 2026-08-30
SignalCategoryContributedIDFNotes
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
similar text content 6 -
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
registered together registration 5 -
same registrar registration 4 -
appeared together (72h) temporal 4 -
certs issued together tls 3 -
allegro.lokalna-059272.sbs ↔ allegro.pl-oferta6893457623479.sbs 50 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.lokalna-059272.sbs ↔ allegro.pl-ogloszenie8913.icu 50 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.lokalna-059272.sbs ↔ allegrolokalnie.oferta-lokalna8943961432.cfd 50 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.lokalna-059272.sbs ↔ allegrolokalnie.oferta823161.click 50 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.lokalna-9938201.sbs ↔ allegro.plkupteraz83219321698.sbs 50 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.lokalna-ofeta287689142.sbs ↔ allegro.pl-oferta6893457623479.sbs 50 first reproduced 2026-08-28
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.lokalna-ofeta287689142.sbs ↔ allegro.pl-ogloszenie8913.icu 50 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.lokalna-ofeta287689142.sbs ↔ allegrolokalnie.oferta-lokalna8943961432.cfd 50 first reproduced 2026-08-28
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.lokalna-ofeta287689142.sbs ↔ allegrolokalnie.oferta823161.click 50 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.pl-oferta6893457623479.sbs ↔ allegro.pl-ogloszenie8913.icu 50 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.pl-oferta6893457623479.sbs ↔ allegrolokalnie.oferta823161.click 50 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.pl-ogloszenie8913.icu ↔ allegrolokalnie.oferta-lokalna8943961432.cfd 50 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.pl-ogloszenie8913.icu ↔ allegrolokalnie.oferta823161.click 50 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegro.plkupteraz83219321698.sbs ↔ allegrolokalnie.lokalna-9938201.sbs 50 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokalna-9938201.sbs ↔ allegrolokalnie.oferta-lokalna8654968923445.shop 49 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (7d) temporal 2 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokalna-ofeta16x3v0yj934b75v0.shop ↔ allegrolokalnie.oferta-lokalna8654968923445.shop 49 first reproduced 2026-08-27
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (7d) temporal 2 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokalna-9938201.sbs ↔ allegrolokalnie.oferta-lokalna8943961432.cfd 46 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -
allegrolokalnie.lokalna-9938201.sbs ↔ allegrolokalnie.oferta823161.click 46 first reproduced 2026-08-29
SignalCategoryContributedIDFNotes
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -
Infrastructure footprint
IP addresses
ASNs
13335 13/14
Hosting orgs
Registrars
TLS certs
WE1 13/14
Export JSON CSV TXT
corr-1.2.0 · built 2026-08-30 05:00 UTC - rebuilt daily