Archived campaign f2b89aafdfffNot live

Shared-infrastructure grouping of public detections. Not an attribution claim.

This campaign is no longer live. What follows is its last recorded state, from 2026-09-06. Its members dropped out of the active feed. Its identifier is derived from the exact member set, so only an essentially identical set of members would revive it.

Members

Confidence

83%

First tracked

2026-08-08

Last seen

2026-09-06

Since corr-1.3.0, hostnames under one registrable domain count as one member; earlier snapshots counted hostnames.

Last recorded indicators

erutjhpk.login.dwmnhsqa.wccheck-6b3c4826-a.santandertelephony-yfcowbeta.bimp-bot.duckdns.org

ewlpnkrg.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org

ewlpnkrg.www.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org

lkgrazsl.login.5b55bakaizeipheexooz.bckwsbem.santander.bimp-bot.duckdns.org

History

2026-09-06 dissolved no members left in the active feed

2026-08-28 shrank -1 host, now 6 members

2026-08-25 grew +1 host, now 7 members

2026-08-24 grew +2 hosts, now 6 members

2026-08-16 shrank -2 hosts, now 4 members

2026-08-09 grew +2 hosts, now 6 members

2026-08-08 created first tracked with 4 members

History is kept for 180 days after the last rebuild that saw this campaign.