Campaigns

Suspected cluster bc95aa697412ACTIVE

BetaShared-infrastructure grouping of public detections. Not an attribution claim.

Domains
1212 hosts
Active
10
Brands
1
First seen
Oct 23, 2026
Most recent detection
Oct 23, 2026
What these pages look like
Indicators
Screenshot Domain Brand Score Sources Match Status First seen
Screenshot of allegrolokalnie.id93782346383253.rest 1United Statesallegrolokalnie.id93782346383253.rest Allegro 04040 GSBPhishTank 06161 ACTIVE 2026-10-23
Screenshot of allegrolokalnie.pl-oferta872183.cfd 2United Statesallegrolokalnie.pl-oferta872183.cfd Allegro 04040 GSBPhishTank 06161 ACTIVE 2026-10-23
Screenshot of allegrolokalnie.4-b0-b0s2.lat 3United Statesallegrolokalnie.4-b0-b0s2.lat Allegro 04040 GSBPhishTank 05757 ACTIVE 2026-10-23
Screenshot of allegrolokalnie.kz-491.lat 4United Statesallegrolokalnie.kz-491.lat Allegro 04040 GSBPhishTank 05757 ACTIVE 2026-10-23
Screenshot of allegrolokalnie.24h-9393x1.top 5allegrolokalnie.24h-9393x1.top Allegro - - 05656 OFFLINE -
Screenshot of allegrolokalnie.pl-mkl1.sbs 6United Statesallegrolokalnie.pl-mkl1.sbs Allegro 04141 GSBPhishTank 05656 ACTIVE 2026-10-23
Screenshot of allegrolokalnie.pl-ogloszenie122012.shop 7United Statesallegrolokalnie.pl-ogloszenie122012.shop Allegro 03939 GSBPhishTank 05656 ACTIVE 2026-10-23
Screenshot of allegrolokalnie.pl2831923731vjz3134zx321134jk21.rest 8United Statesallegrolokalnie.pl2831923731vjz3134zx321134jk21.rest Allegro 04040 GSBPhishTank 05656 ACTIVE 2026-10-23
Screenshot of allegrolokalnie.pl47351.top 9allegrolokalnie.pl47351.top Allegro - - 05656 OFFLINE -
Screenshot of allegrolokalnie.prywatna-472827724849.shop 10United Statesallegrolokalnie.prywatna-472827724849.shop Allegro 03535 GSBPhishTank 05656 ACTIVE 2026-10-23
Screenshot of allegrolokalnie.27834618374426.rest 11United Statesallegrolokalnie.27834618374426.rest Allegro 04040 GSBPhishTank 05252 ACTIVE 2026-10-23
Screenshot of allegrolokalnie.pl452123125fsda2314.top 12United Statesallegrolokalnie.pl452123125fsda2314.top Allegro 04141 GSBPhishTank 05252 ACTIVE 2026-10-23
Why this confidence
57% suspected cluster
Link strength 26%
Evidence diversity 100%
Time compactness 98%
Strong-link share 3%
Size discount 100%

confidence = clamp(0.45×D + 0.25×V + 0.20×T + 0.10×B, 0, 1) × S. Thresholds: 70%+ possible campaign, 40%+ suspected cluster.

Evidence summary
12/12 similar name allegrolokalnie~allegrolokalnie d=0
12/12 same favicon 93b2394c6c365b1b
12/12 same redirect target allegrolokalnie.pl
12/12 similar name allegrolokalnie
9/12 appeared together (24h) 0.0h
Brands targeted
Allegro (12)
Timeline (first seen)
Oct 23 10
History
2026-10-24 created first tracked with 12 members

Rebuilt daily; history is kept for 180 days. A campaign keeps its identifier as members join or leave.

How the members connect
123456789101112
1 61 39 52 52 42 41 56 56 56 43 52
2 61 39 52 52 46 37 52 56 56 39 52
3 39 39 57 37 52 47 39 34 34 52 39
4 52 52 57 37 39 34 52 47 47 39 52
5 52 52 37 37 40 35 37 56 47 37 41
6 42 46 52 39 40 56 39 37 37 52 39
7 41 37 47 34 35 56 38 37 37 51 34
8 56 52 39 52 37 39 38 47 47 43 52
9 56 56 34 47 56 37 37 47 56 34 51
10 56 56 34 47 47 37 37 47 56 34 47
11 43 39 52 39 37 52 51 43 34 34 39
12 52 52 39 52 41 39 34 52 51 47 39

Each cell is the relationship score between two members, numbered as in the Indicators table above. Hover a cell for the domains and the signals behind it.
33 of 66 possible pairs are directly linked. A blank cell only means those two are not linked directly, they can still belong to the cluster through a third member. A greyed-out cell is linked below the clustering threshold or by same-kit similarity - it did not form this cluster.

Relationships
allegrolokalnie.id93782346383253.rest ↔ allegrolokalnie.pl-oferta872183.cfd 61 first reproduced 2026-10-23
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.4-b0-b0s2.lat ↔ allegrolokalnie.kz-491.lat 57 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same nameservers infra 14.0 -
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50
same registrar registration 4 -
allegrolokalnie.24h-9393x1.top ↔ allegrolokalnie.pl47351.top 56 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
similar text content 12 -
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
registered together registration 5 -
similar name naming 4.4 ×0.50
same registrar registration 4 -
appeared together (72h) temporal 4 -
certs issued together tls 3 -
allegrolokalnie.id93782346383253.rest ↔ allegrolokalnie.pl2831923731vjz3134zx321134jk21.rest 56 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50
same registrar registration 4 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.id93782346383253.rest ↔ allegrolokalnie.pl47351.top 56 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
similar name naming 4.4 ×0.50
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.id93782346383253.rest ↔ allegrolokalnie.prywatna-472827724849.shop 56 first reproduced 2026-10-23
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
similar name naming 4.4 ×0.50
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl-mkl1.sbs ↔ allegrolokalnie.pl-ogloszenie122012.shop 56 first reproduced 2026-10-23
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
similar name naming 4.4 ×0.50
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl-oferta872183.cfd ↔ allegrolokalnie.pl47351.top 56 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
similar name naming 4.4 ×0.50
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl-oferta872183.cfd ↔ allegrolokalnie.prywatna-472827724849.shop 56 first reproduced 2026-10-23
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
similar name naming 4.4 ×0.50
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl47351.top ↔ allegrolokalnie.prywatna-472827724849.shop 56 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
similar text content 6.0 - screenshot_phash
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
similar name naming 4.4 ×0.50
certs issued together tls 3 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.24h-9393x1.top ↔ allegrolokalnie.id93782346383253.rest 52 first reproduced 2026-10-23
SignalCategoryContributedIDFNotes
similar text content 12 -
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
registered together registration 5 -
similar name naming 4.4 ×0.50
appeared together (72h) temporal 4 -
certs issued together tls 3 -
allegrolokalnie.24h-9393x1.top ↔ allegrolokalnie.pl-oferta872183.cfd 52 first reproduced 2026-10-23
SignalCategoryContributedIDFNotes
similar text content 12 -
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
registered together registration 5 -
similar name naming 4.4 ×0.50
appeared together (72h) temporal 4 -
certs issued together tls 3 -
allegrolokalnie.27834618374426.rest ↔ allegrolokalnie.4-b0-b0s2.lat 52 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.27834618374426.rest ↔ allegrolokalnie.pl-mkl1.sbs 52 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.4-b0-b0s2.lat ↔ allegrolokalnie.pl-mkl1.sbs 52 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.id93782346383253.rest ↔ allegrolokalnie.kz-491.lat 52 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.id93782346383253.rest ↔ allegrolokalnie.pl452123125fsda2314.top 52 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.kz-491.lat ↔ allegrolokalnie.pl-oferta872183.cfd 52 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.kz-491.lat ↔ allegrolokalnie.pl2831923731vjz3134zx321134jk21.rest 52 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.kz-491.lat ↔ allegrolokalnie.pl452123125fsda2314.top 52 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl-oferta872183.cfd ↔ allegrolokalnie.pl2831923731vjz3134zx321134jk21.rest 52 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl-oferta872183.cfd ↔ allegrolokalnie.pl452123125fsda2314.top 52 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl2831923731vjz3134zx321134jk21.rest ↔ allegrolokalnie.pl452123125fsda2314.top 52 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.27834618374426.rest ↔ allegrolokalnie.pl-ogloszenie122012.shop 51 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
similar name naming 4.4 ×0.50
same registrar registration 4 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl452123125fsda2314.top ↔ allegrolokalnie.pl47351.top 51 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
similar name naming 4.4 ×0.50
same registrar registration 4 -

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.24h-9393x1.top ↔ allegrolokalnie.prywatna-472827724849.shop 47 first reproduced 2026-10-23
SignalCategoryContributedIDFNotes
similar text content 12 -
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
similar name naming 4.4 ×0.50
appeared together (72h) temporal 4 -
certs issued together tls 3 -
allegrolokalnie.4-b0-b0s2.lat ↔ allegrolokalnie.pl-ogloszenie122012.shop 47 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.kz-491.lat ↔ allegrolokalnie.pl47351.top 47 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.kz-491.lat ↔ allegrolokalnie.prywatna-472827724849.shop 47 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl2831923731vjz3134zx321134jk21.rest ↔ allegrolokalnie.pl47351.top 47 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl2831923731vjz3134zx321134jk21.rest ↔ allegrolokalnie.prywatna-472827724849.shop 47 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl452123125fsda2314.top ↔ allegrolokalnie.prywatna-472827724849.shop 47 first reproduced 2026-10-24
SignalCategoryContributedIDFNotes
same screenshot visual 12.8 ×0.80
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
similar name naming 4.4 ×0.50

Discounted observations

similar colors visual 0.0 - screenshot_phash
allegrolokalnie.pl-mkl1.sbs ↔ allegrolokalnie.pl-oferta872183.cfd 46 first reproduced 2026-10-23
SignalCategoryContributedIDFNotes
similar name naming 10.6 -
same favicon visual 7.0 ×0.50
same redirect target infra 6.0 ×0.50
appeared together (24h) temporal 6 -
registered together registration 5 -
similar name naming 4.4 ×0.50
same registrar registration 4 -
certs issued together tls 3 -
Infrastructure footprint
IP addresses
ASNs
13335 10/12
Hosting orgs
Registrars
TLS certs
YE2 7/12
YE1 3/12
Export JSON CSV TXT
corr-1.4.0 · built 2026-10-24 05:00 UTC - rebuilt daily