Suspicious

Phishings targeting Allegro

Suspicious and active websites

Phishings targeting Allegro

Suspicious and active websites

Active
9
New (7d)
9
Trend (7d)
—
Website
allegro.pl
About
AIPoland's largest online marketplace. Phishing mimics its Allegro Lokalnie (C2C) buyer/seller chat flow — a fake 'payment confirmation' link harvests card data outside the platform's real escrow.
Hosts
Cloudflare, Inc. (9)
Countries
United StatesUnited States (9)
TLS certs
YE1 (5) · YE2 (4)

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) ▾ URL Screenshot Flags Details
2026-10-04 03:30 2026-10-04 03:01
https://allegro.siran21877h9.beer
Screenshot of allegro.siran21877h9.beer PhishTank Details
2026-10-04 03:30 2026-10-03 23:01
http://allegro.po77bu3.skin
Screenshot of allegro.po77bu3.skin PhishTank Details
2026-10-04 03:30 2026-10-03 23:01
http://allegro.0132919hpho5i.skin
Screenshot of allegro.0132919hpho5i.skin PhishTank Details
2026-10-04 03:30 2026-10-03 21:01
http://allegro.ofe90392.pics
Screenshot of allegro.ofe90392.pics PhishTank TweetFeed Details
2026-10-04 03:30 2026-10-03 20:01
https://allegrolokalnie.pi-ofeta201737.shop/xbox-series-x-1tb-sprawny…
Screenshot of allegrolokalnie.pi-ofeta201737.shop PhishTank Details
2026-10-04 03:30 2026-10-03 20:00
http://allegro.ro328h89.skin
Screenshot of allegro.ro328h89.skin PhishTank Details
2026-10-04 03:30 2026-10-03 17:01
https://allegrolokalnie.e-kup24.sbs/jbl-partybox-710-stan-bardzo-d/35…
Screenshot of allegrolokalnie.e-kup24.sbs PhishTank Details
2026-10-04 03:30 2026-10-03 17:01
http://allegro.291934128h9.beer
Screenshot of allegro.291934128h9.beer PhishTank Details
2026-10-04 03:30 2026-10-02 23:01
http://allegrolokalnie.oferty24.sbs
Screenshot of allegrolokalnie.oferty24.sbs PhishTank Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://allegro.siran21877h9.…
PhishTank 		Screenshot of allegro.siran21877h9.beer Details
http://allegro.po77bu3.skin
PhishTank 		Screenshot of allegro.po77bu3.skin Details
http://allegro.0132919hpho5i.…
PhishTank 		Screenshot of allegro.0132919hpho5i.skin Details
http://allegro.ofe90392.pics
PhishTank TweetFeed 		Screenshot of allegro.ofe90392.pics Details
https://allegrolokalnie.pi-of…
PhishTank 		Screenshot of allegrolokalnie.pi-ofeta201737.shop Details
http://allegro.ro328h89.skin
PhishTank 		Screenshot of allegro.ro328h89.skin Details
https://allegrolokalnie.e-kup…
PhishTank 		Screenshot of allegrolokalnie.e-kup24.sbs Details
http://allegro.291934128h9.be…
PhishTank 		Screenshot of allegro.291934128h9.beer Details
http://allegrolokalnie.oferty…
PhishTank 		Screenshot of allegrolokalnie.oferty24.sbs Details

AIHow to verify a real Allegro URL

  • Legitimate Allegro URLs always end in allegro.pl (e.g. www.allegro.pl, account.allegro.pl). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Allegro.
  • The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
  • If you got the link from email, SMS, or social media, do not click it. Open allegro.pl from your browser bookmark or type the domain manually.
  • Real Allegro pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.