Possible campaigns
Beta9 live campaigns grouping 57 domains (57 indicators) across 6 brands, rebuilt daily. Shared-infrastructure grouping of public detections, not an attribution claim.
Data built 2026-10-24 05:00 UTC · rebuilt daily
AllegroNew
bc95aa697412
57%
suspected cluster
12 domains · 12 hosts · 10 active
WhatsAppNew
3c02fa538e20
56%
suspected cluster
17 domains · 17 hosts · 17 active
WhatsAppNew
239866029b03
66%
suspected cluster
4 domains · 4 hosts · 4 active
WhatsAppNew
a6026b86a904
61%
suspected cluster
8 domains · 8 hosts · 8 active
DPDNew
52f8809ec852
68%
suspected cluster
4 domains · 4 hosts · 4 active
GoogleNew
3e2155b37bae
80%
possible campaign
3 domains · 3 hosts · 3 active
Recently dissolved
allegro
2026-10-24
allegro
2026-10-23
allegro
2026-10-22
vodafone
2026-10-20
zoom
2026-10-17
binance
2026-10-17
apple
2026-10-06
ledger
2026-10-02
ledger
2026-10-02
allegro
2026-10-02
A campaign dissolves when none of its indicators are in the active feed any more. Its key is derived from the exact member set, so only an essentially identical set of members revives the same identifier; a merged or split campaign instead continues under its successor's key.
Methodology & provenance
- Generated
- 2026-10-24 05:00 UTC
- Algorithm
- corr-1.4.0
- Input rows
- 1464
- Candidate pairs
- 58131
- Edges written
- 16443
- Clusters written
- 10
- Runtime
- 47.7s
Shared infrastructure excluded from clustering: 16 apex domains, 2 TLS cert fingerprints, 2 favicon hashes, 2 redirect targets, 15 IPs, 1 name tokens, 3 nameserver sets, 16 TLS SAN entries, 1 screenshot hashes.