Possible campaign 8d599081a5d0ACTIVE
BetaShared-infrastructure grouping of public detections. Not an attribution claim.
Domains
33 hostsActive
3Brands
1First seen
Oct 30, 2026Most recent detection
Nov 03, 2026 What these pages look like
Indicators
allegrolokalnie.lkupteraz.rest Why this confidence
72%
possible campaign
Link strength
57%
Evidence diversity
100%
Time compactness
92%
Strong-link share
33%
Size discount
100%
confidence = clamp(0.45×D + 0.25×V + 0.20×T + 0.10×B, 0, 1) × S. Thresholds: 70%+ possible campaign, 40%+ suspected cluster.
Evidence summary
3/3
same screenshot
f3324e4d116b0c7b~f3324e4d116b0c7b d=0
3/3
same favicon
93b2394c6c365b1b
3/3
similar name
allegrolokalnie~allegrolokalnie d=0
3/3
similar name
allegrolokalnie
3/3
certs issued together
0d/1d
Brands targeted
Timeline (first seen)
Spread over 4 days
Oct 30
1
Oct 31
1
Nov 03
1
History
2026-11-04
created
first tracked with 3 members
Rebuilt daily; history is kept for 180 days. A campaign keeps its identifier as members join or leave.
How the members connect
| 1 | 2 | 3 | |
|---|---|---|---|
| 1 | 68 | 52 | |
| 2 | 68 | 50 | |
| 3 | 52 | 50 |
Each cell is the relationship score between two members, numbered as in the Indicators table above. Hover a cell for the domains and the signals behind it.
3 of 3 possible pairs are directly linked. A blank cell only means those two are not linked directly, they can still belong to the cluster through a third member.
Relationships
allegrolokalnie.lkupteraz.rest ↔ allegrolokalnie.lokalna548669.sbs 68 first reproduced 2026-11-04
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 13.3 | - | |
| same redirect target | infra | 12.0 | - | |
| same favicon | visual | 11.7 | - | |
| similar name | naming | 9.0 | - | |
| similar text | content | 6.0 | - | screenshot_phash |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| certs issued together | tls | 3 | - | |
| appeared together (7d) | temporal | 2 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.lkupteraz.rest ↔ allegrolokalnie.rezerwacja42589.click 52 first reproduced 2026-10-31
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 13.3 | - | |
| same favicon | visual | 11.7 | - | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| appeared together (72h) | temporal | 4 | - | |
| certs issued together | tls | 3 | - |
allegrolokalnie.lokalna548669.sbs ↔ allegrolokalnie.rezerwacja42589.click 50 first reproduced 2026-11-04
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 13.3 | - | |
| same favicon | visual | 11.7 | - | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| certs issued together | tls | 3 | - | |
| appeared together (7d) | temporal | 2 | - |
Infrastructure footprint
ASNs
13335
3/3
Hosting orgs
Cloudflare, Inc.
3/3