Tracking a K8-Branded Web Cluster Across 10,156 Domains

**Executive Summary:** Webamon identified a large K8-branded cluster of Chinese-language pages (across thousands of domains) that share a page title, script fingerprint, and DOM fingerprint indicative of a coordinated credential-harvesting campaign; the dataset includes overlapping samples (100-result exports) and thousands of successful scans, and the report supplies hunting queries and pivots for defenders to find related domains and artifacts.