Campaigns

Suspected cluster 9b68825998e2ACTIVE

BetaShared-infrastructure grouping of public detections. Not an attribution claim.

Indicators
12
Active
12
Brands
1
First seen
Aug 21, 2026
Most recent detection
Aug 23, 2026
What these pages look like
Indicators
Screenshot Domain Brand Score Sources Match Status First seen
Screenshot of allegro.pl-473935.sbs 1United Statesallegro.pl-473935.sbs Allegro 03737 PhishTank 08585 ACTIVE 2026-08-22
Screenshot of allegrolokalnie.pl-473935.sbs 2United Statesallegrolokalnie.pl-473935.sbs Allegro 03535 PhishTank 08585 ACTIVE 2026-08-22
Screenshot of allegro.lokalna-048261.sbs 3United Statesallegro.lokalna-048261.sbs Allegro 03434 PhishTank 06666 ACTIVE 2026-08-22
Screenshot of allegrolokalnie.lokalna-849641.sbs 4United Statesallegrolokalnie.lokalna-849641.sbs Allegro 03939 PhishTank 06666 ACTIVE 2026-08-21
Screenshot of allegrolokalnie.sthml.sbs 5United Statesallegrolokalnie.sthml.sbs Allegro 03636 PhishTank 06565 ACTIVE 2026-08-21
Screenshot of allegrolokalnie.oferta389212.click 6United Statesallegrolokalnie.oferta389212.click Allegro 03535 PhishTank 05757 ACTIVE 2026-08-22
Screenshot of allegrolokalnie.pl-oferta37377382.sbs 7United Statesallegrolokalnie.pl-oferta37377382.sbs Allegro 03535 PhishTank 05757 ACTIVE 2026-08-22
Screenshot of allegrolokalnie.pl-oferta981912111.sbs 8United Statesallegrolokalnie.pl-oferta981912111.sbs Allegro 03636 PhishTank 05757 ACTIVE 2026-08-21
Screenshot of allegrolokalnie.oferta-lokalana37198264.sbs 9United Statesallegrolokalnie.oferta-lokalana37198264.sbs Allegro 03838 PhishTank 05555 ACTIVE 2026-08-22
Screenshot of allegrolokalnie.lokaina-oferta3029.sbs 10United Statesallegrolokalnie.lokaina-oferta3029.sbs Allegro 03737 GSBPhishTank 05454 ACTIVE 2026-08-23
Screenshot of allegro.oferta825791.click 11United Statesallegro.oferta825791.click Allegro 04343 GSBPhishTank 04848 ACTIVE 2026-08-23
Screenshot of allegrolokalnie.oferta-lokalna8654968923445.shop 12United Statesallegrolokalnie.oferta-lokalna8654968923445.shop Allegro 02525 PhishTank 04848 ACTIVE 2026-08-22
Why this confidence
54% suspected cluster
Link strength 18%
Evidence diversity 100%
Time compactness 98%
Strong-link share 13%
Size discount 100%

confidence = clamp(0.45×D + 0.25×V + 0.20×T + 0.10×B, 0, 1) × S. Thresholds: 70%+ possible campaign, 40%+ suspected cluster.

Evidence summary
12/12 same favicon 93b2394c6c365b1b
12/12 same redirect target allegrolokalnie.pl
11/12 same registrar Global Domain Group LLC
9/12 similar name allegrolokalnie~allegrolokalnie d=0
9/12 similar name allegrolokalnie
Brands targeted
Allegro (12)
Timeline (first seen)

Spread over 2 days

Aug 21 3
Aug 22 7
Aug 23 2
History
2026-08-24 created first tracked with 12 indicators

Rebuilt daily; history is kept for 180 days. A campaign keeps its identifier as members join or leave.

How the members connect
123456789101112
1 85 23 21 21 36 23 34 31 29 39 32
2 85 23 36 36 51 38 49 46 44 39 47
3 23 23 66 42 31 44 29 36 34 21 ·
4 21 36 66 65 44 57 46 55 49 21 32
5 21 36 42 65 44 57 46 55 49 21 32
6 36 51 31 44 44 46 57 38 36 48 47
7 23 38 44 57 57 46 44 51 49 21 34
8 34 49 29 46 46 57 44 36 36 34 45
9 31 46 36 55 55 38 51 36 54 26 48
10 29 44 34 49 49 36 49 36 54 28 32
11 39 39 21 21 21 48 21 34 26 28 30
12 32 47 · 32 32 47 34 45 48 32 30

Each cell is the relationship score between two members, numbered as in the Indicators table above. Hover a cell for the domains and the signals behind it.
23 of 66 possible pairs are directly linked. A blank cell only means those two are not linked directly, they can still belong to the cluster through a third member. A greyed-out cell is linked below the clustering threshold or by same-kit similarity - it did not form this cluster.

Relationships
allegro.pl-473935.sbs ↔ allegrolokalnie.pl-473935.sbs 85 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
same TLS cert tls 17.1 -
same nameservers infra 14.0 -
same screenshot visual 12.8 ×0.80
same apex infra 10.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 2.9 -

Discounted observations

shared TLS SAN tls 0.0 - cert_fingerprint_exact
similar colors visual 0.0 - screenshot_phash
allegro.lokalna-048261.sbs ↔ allegrolokalnie.lokalna-849641.sbs 66 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
same nameservers infra 14.0 -
same screenshot visual 12.8 ×0.80
similar name naming 10.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
registered together registration 5 -
same registrar registration 4 -
appeared together (72h) temporal 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokalna-849641.sbs ↔ allegrolokalnie.sthml.sbs 65 first reproduced 2026-08-22
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokalna-849641.sbs ↔ allegrolokalnie.pl-oferta37377382.sbs 57 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
registered together registration 5 -
same registrar registration 4 -
appeared together (72h) temporal 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.oferta389212.click ↔ allegrolokalnie.pl-oferta981912111.sbs 57 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
registered together registration 5 -
same registrar registration 4 -
appeared together (72h) temporal 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl-oferta37377382.sbs ↔ allegrolokalnie.sthml.sbs 57 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
registered together registration 5 -
same registrar registration 4 -
appeared together (72h) temporal 4 -
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokalna-849641.sbs ↔ allegrolokalnie.oferta-lokalana37198264.sbs 55 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
same registrar registration 4 -
appeared together (72h) temporal 4 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.oferta-lokalana37198264.sbs ↔ allegrolokalnie.sthml.sbs 55 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
same registrar registration 4 -
appeared together (72h) temporal 4 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokaina-oferta3029.sbs ↔ allegrolokalnie.oferta-lokalana37198264.sbs 54 first reproduced 2026-08-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
registered together registration 5 -
same registrar registration 4 -
appeared together (72h) temporal 4 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.oferta-lokalana37198264.sbs ↔ allegrolokalnie.pl-oferta37377382.sbs 51 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
same registrar registration 4 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.oferta389212.click ↔ allegrolokalnie.pl-473935.sbs 51 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
same registrar registration 4 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokaina-oferta3029.sbs ↔ allegrolokalnie.lokalna-849641.sbs 49 first reproduced 2026-08-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
same registrar registration 4 -
appeared together (72h) temporal 4 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokaina-oferta3029.sbs ↔ allegrolokalnie.pl-oferta37377382.sbs 49 first reproduced 2026-08-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
same registrar registration 4 -
appeared together (72h) temporal 4 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokaina-oferta3029.sbs ↔ allegrolokalnie.sthml.sbs 49 first reproduced 2026-08-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
same registrar registration 4 -
appeared together (72h) temporal 4 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl-473935.sbs ↔ allegrolokalnie.pl-oferta981912111.sbs 49 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
same registrar registration 4 -
appeared together (72h) temporal 4 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.oferta-lokalana37198264.sbs ↔ allegrolokalnie.oferta-lokalna8654968923445.shop 48 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
same nameservers infra 14.0 -
similar name naming 8.2 -
same favicon visual 7.0 ×0.50
similar name naming 6.8 -
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
allegro.oferta825791.click ↔ allegrolokalnie.oferta389212.click 48 first reproduced 2026-08-24
SignalCategoryContributedIDFNotes
same nameservers infra 14.0 -
same screenshot visual 12.8 ×0.80
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
same registrar registration 4 -
appeared together (72h) temporal 4 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.oferta-lokalna8654968923445.shop ↔ allegrolokalnie.oferta389212.click 47 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.oferta-lokalna8654968923445.shop ↔ allegrolokalnie.pl-473935.sbs 47 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.lokalna-849641.sbs ↔ allegrolokalnie.pl-oferta981912111.sbs 46 first reproduced 2026-08-22
SignalCategoryContributedIDFNotes
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -
allegrolokalnie.oferta-lokalana37198264.sbs ↔ allegrolokalnie.pl-473935.sbs 46 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -
allegrolokalnie.oferta389212.click ↔ allegrolokalnie.pl-oferta37377382.sbs 46 first reproduced 2026-08-23
SignalCategoryContributedIDFNotes
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -
allegrolokalnie.pl-oferta981912111.sbs ↔ allegrolokalnie.sthml.sbs 46 first reproduced 2026-08-22
SignalCategoryContributedIDFNotes
similar name naming 9.0 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 6.0 ×0.80
appeared together (24h) temporal 6 -
registered together registration 5 -
same registrar registration 4 -
certs issued together tls 3 -
Infrastructure footprint
IP addresses
ASNs
13335 12/12
Hosting orgs
Registrars
TLS certs
WE1 12/12
Export JSON CSV TXT
corr-1.2.0 · built 2026-08-24 05:00 UTC - rebuilt daily