Possible campaign e676cdc00dabACTIVE
BetaShared-infrastructure grouping of public detections. Not an attribution claim.
Domains
66 hostsActive
6Brands
1First seen
Oct 30, 2026Most recent detection
Nov 05, 2026 What these pages look like
Indicators
allegrolokalnie.lokalna548669.sbs Why this confidence
78%
possible campaign
Link strength
58%
Evidence diversity
100%
Time compactness
97%
Strong-link share
71%
Size discount
100%
confidence = clamp(0.45×D + 0.25×V + 0.20×T + 0.10×B, 0, 1) × S. Thresholds: 70%+ possible campaign, 40%+ suspected cluster.
Evidence summary
6/6
same screenshot
f3324e4d116b0c7b~f3324e4d116b0c7b d=0
6/6
same favicon
93b2394c6c365b1b
6/6
similar name
allegrolokalnie~allegrolokalnie d=0
6/6
similar name
allegrolokalnie
Brands targeted
Timeline (first seen)
Spread over 6 days
Oct 30
1
Nov 03
1
Nov 04
1
Nov 05
3
History
2026-11-06
created
first tracked with 6 members
Rebuilt daily; history is kept for 180 days. A campaign keeps its identifier as members join or leave.
How the members connect
| 1 | 2 | 3 | 4 | 5 | 6 | |
|---|---|---|---|---|---|---|
| 1 | 82 | 68 | 68 | 62 | 49 | |
| 2 | 82 | 73 | 73 | 61 | 49 | |
| 3 | 68 | 73 | 73 | 61 | 49 | |
| 4 | 68 | 73 | 73 | 61 | 49 | |
| 5 | 62 | 61 | 61 | 61 | 44 | |
| 6 | 49 | 49 | 49 | 49 | 44 |
Each cell is the relationship score between two members, numbered as in the Indicators table above. Hover a cell for the domains and the signals behind it.
14 of 15 possible pairs are directly linked. A blank cell only means those two are not linked directly, they can still belong to the cluster through a third member. A greyed-out cell is linked below the clustering threshold or by same-kit similarity - it did not form this cluster.
Relationships
allegrolokalnie.lokalna548669.sbs ↔ allegrolokalnie.oferta819.sbs 82 first reproduced 2026-11-06
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same nameservers | infra | 14.0 | - | |
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| same registrar | registration | 4 | - | |
| appeared together (72h) | temporal | 4 | - | |
| similar text | content | 3.0 | - | screenshot_phash |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.nr-28sn2983.sbs ↔ allegrolokalnie.oferta819.sbs 73 first reproduced 2026-11-06
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar text | content | 6.0 | - | screenshot_phash |
| similar name | naming | 6.0 | ×0.80 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.nr-28sn2983.sbs ↔ allegrolokalnie.smart-93952.cfd 73 first reproduced 2026-11-06
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar text | content | 6.0 | - | screenshot_phash |
| similar name | naming | 6.0 | ×0.80 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.oferta819.sbs ↔ allegrolokalnie.smart-93952.cfd 73 first reproduced 2026-11-06
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar text | content | 6.0 | - | screenshot_phash |
| similar name | naming | 6.0 | ×0.80 | |
| appeared together (24h) | temporal | 6 | - | |
| registered together | registration | 5 | - | |
| same registrar | registration | 4 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.lokalna548669.sbs ↔ allegrolokalnie.nr-28sn2983.sbs 68 first reproduced 2026-11-06
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| same registrar | registration | 4 | - | |
| appeared together (72h) | temporal | 4 | - | |
| similar text | content | 3.0 | - | screenshot_phash |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.lokalna548669.sbs ↔ allegrolokalnie.smart-93952.cfd 68 first reproduced 2026-11-06
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| same registrar | registration | 4 | - | |
| appeared together (72h) | temporal | 4 | - | |
| similar text | content | 3.0 | - | screenshot_phash |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.lokalna548669.sbs ↔ allegrolokalnie.pll453fds32433sd30d23408.shop 62 first reproduced 2026-11-05
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar text | content | 6.0 | - | screenshot_phash |
| similar name | naming | 6.0 | ×0.80 | |
| appeared together (72h) | temporal | 4 | - | |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.nr-28sn2983.sbs ↔ allegrolokalnie.pll453fds32433sd30d23408.shop 61 first reproduced 2026-11-06
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| appeared together (24h) | temporal | 6 | - | |
| similar text | content | 3.0 | - | screenshot_phash |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.oferta819.sbs ↔ allegrolokalnie.pll453fds32433sd30d23408.shop 61 first reproduced 2026-11-06
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| appeared together (24h) | temporal | 6 | - | |
| similar text | content | 3.0 | - | screenshot_phash |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.pll453fds32433sd30d23408.shop ↔ allegrolokalnie.smart-93952.cfd 61 first reproduced 2026-11-06
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| same redirect target | infra | 9.6 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| appeared together (24h) | temporal | 6 | - | |
| similar text | content | 3.0 | - | screenshot_phash |
| certs issued together | tls | 3 | - |
Discounted observations
| similar colors | visual | 0.0 | - | screenshot_phash |
allegrolokalnie.lokalna548669.sbs ↔ allegrolokalnie.rezerwacja42589.click 49 first reproduced 2026-11-04
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| certs issued together | tls | 3 | - | |
| appeared together (7d) | temporal | 2 | - |
allegrolokalnie.nr-28sn2983.sbs ↔ allegrolokalnie.rezerwacja42589.click 49 first reproduced 2026-11-06
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| certs issued together | tls | 3 | - | |
| appeared together (7d) | temporal | 2 | - |
allegrolokalnie.oferta819.sbs ↔ allegrolokalnie.rezerwacja42589.click 49 first reproduced 2026-11-06
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| certs issued together | tls | 3 | - | |
| appeared together (7d) | temporal | 2 | - |
allegrolokalnie.rezerwacja42589.click ↔ allegrolokalnie.smart-93952.cfd 49 first reproduced 2026-11-06
| Signal | Category | Contributed | IDF | Notes |
|---|---|---|---|---|
| same screenshot | visual | 12.8 | ×0.80 | |
| same favicon | visual | 11.2 | ×0.80 | |
| similar name | naming | 9.0 | - | |
| similar name | naming | 6.0 | ×0.80 | |
| registered together | registration | 5 | - | |
| certs issued together | tls | 3 | - | |
| appeared together (7d) | temporal | 2 | - |
Infrastructure footprint
ASNs
13335
6/6
Hosting orgs
Cloudflare, Inc.
6/6