Possible campaign d02f332ee23aACTIVE
BetaShared-infrastructure grouping of public detections. Not an attribution claim.
Domains
55 hostsActive
4Brands
1First seen
Oct 30, 2026Most recent detection
Oct 31, 2026 What these pages look like
Indicators
allegrolokalnie.lkupteraz.rest
Why this confidence
77%
possible campaign
Link strength
59%
Evidence diversity
100%
Time compactness
98%
Strong-link share
60%
Size discount
100%
confidence = clamp(0.45×D + 0.25×V + 0.20×T + 0.10×B, 0, 1) × S. Thresholds: 70%+ possible campaign, 40%+ suspected cluster.
Evidence summary
5/5
same favicon
93b2394c6c365b1b
5/5
similar name
allegrolokalnie~allegrolokalnie d=0
5/5
similar name
allegrolokalnie
5/5
registered together
3d/0d
Brands targeted
Timeline (first seen)
Oct 30
2
Oct 31
2
History
2026-11-01
created
first tracked with 5 members
Rebuilt daily; history is kept for 180 days. A campaign keeps its identifier as members join or leave.
How the members connect
| 1 | 2 | 3 | 4 | 5 | |
|---|---|---|---|---|---|
| 1 | 69 | 66 | 64 | 50 | |
| 2 | 69 | 64 | 64 | 50 | |
| 3 | 66 | 64 | 69 | 52 | |
| 4 | 64 | 64 | 69 | 48 | |
| 5 | 50 | 50 | 52 | 48 |
Each cell is the relationship score between two members, numbered as in the Indicators table above. Hover a cell for the domains and the signals behind it.
10 of 10 possible pairs are directly linked. A blank cell only means those two are not linked directly, they can still belong to the cluster through a third member.
Relationships
allegrolokalnie.lkupteraz.rest ↔ allegrolokalnie.pl-jpk12m.sbs 69 first reproduced 2026-11-01
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar text | content | 6.0 | - | screenshot_phash |
| similar name | naming | 6.0 | ×0.80 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.pl-zakupy9999812141.top ↔ allegrolokalnie.rezerwacja42589.click 69 first reproduced 2026-10-30
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar text | content | 6.0 | - | screenshot_phash |
| similar name | naming | 6.0 | ×0.80 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.lkupteraz.rest ↔ allegrolokalnie.pl-zakupy9999812141.top 66 first reproduced 2026-10-31
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| similar text | content | 3.0 | - | screenshot_phash |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.lkupteraz.rest ↔ allegrolokalnie.rezerwacja42589.click 64 first reproduced 2026-10-31
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| appeared together (72h) | temporal | 4 | - | |
| similar text | content | 3.0 | - | screenshot_phash |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.pl-jpk12m.sbs ↔ allegrolokalnie.pl-zakupy9999812141.top 64 first reproduced 2026-11-01
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| appeared together (72h) | temporal | 4 | - | |
| similar text | content | 3.0 | - | screenshot_phash |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.pl-jpk12m.sbs ↔ allegrolokalnie.rezerwacja42589.click 64 first reproduced 2026-11-01
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| appeared together (72h) | temporal | 4 | - | |
| similar text | content | 3.0 | - | screenshot_phash |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.pl-64744f099200oferta843784347888.top ↔ allegrolokalnie.pl-zakupy9999812141.top 52 first reproduced 2026-11-01
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| same registrar | registration | 4 | - | |
| appeared together (72h) | temporal | 4 | - | |
| certs issued together | tls | 3 | - |
allegrolokalnie.lkupteraz.rest ↔ allegrolokalnie.pl-64744f099200oferta843784347888.top 50 first reproduced 2026-11-01
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| certs issued together | tls | 3 | - |
allegrolokalnie.pl-64744f099200oferta843784347888.top ↔ allegrolokalnie.pl-jpk12m.sbs 50 first reproduced 2026-11-01
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| certs issued together | tls | 3 | - |
allegrolokalnie.pl-64744f099200oferta843784347888.top ↔ allegrolokalnie.rezerwacja42589.click 48 first reproduced 2026-11-01
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| appeared together (72h) | temporal | 4 | - | |
| certs issued together | tls | 3 | - |
Infrastructure footprint
ASNs
13335
4/5
Hosting orgs
Cloudflare, Inc.
4/5