Snell13 analysis layers
All campaigns

Same hosting

Confirmed

3 entities · first seen 3h ago · last less than an hour ago

At least one member was judged dangerous by its own analysis. The group carries that status, which does not condemn every one of its members.

Why these entities hold together

Same address, same name server, same registrant. The weakest pivot, and the most heavily discounted: shared hosting holds thousands of honest sites, so correlation lowers its weight accordingly.

  • Résout vers 43.165.196.142.
Cohesion67%

Share of member pairs actually linked. At 100% every member is linked to every other — a block. A low value describes a chain: the ends may have no direct relation.

Where this group comes from

Grouped by

Grouping is computed here, on our own database. No external source hands over a ready-made campaign.

  • Moteur de corrélationin-house3 edges

Members seen by

How these items entered the database: a public list, an analysis run here, the sandbox, a user report. An entry point, not authorship.

  • PhishTankreports threats2/3
  • Bac à sableproduces facts, does not judge2/3

Group composition

url2ip1

What links the members

Edges per pivot family. One pair of members can be linked several times: these shares count evidence, not entities.

Same hosting2

Most recent days

Observations per day, most recent first.

  • 16 Aug 20261

Members · 3

Each member keeps its own verdict: belonging to the group makes it worth examining, not guilty. The joining reason is shown only when it differs from the patterns above.