Phishing detection: allegrolokalnie.kup-ofeta672934.lol

Allegro
https://allegrolokalnie.kup-ofeta672934.lol Access site
Screenshot
Screenshot of allegrolokalnie.kup-ofeta672934.lol
Investigate
Domain allegrolokalnie.kup-ofeta672934.lol0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 188.114.96.3
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://allegrolokalnie.kup-ofeta672934.lol
urlscan Wayback archive.today
Cert YE2
crt.sh Censys Google CT
Phishunt analysis Beta
40 high suspicion likely_phishingheuristic risk score · not a probability
Why?
  • +6.1 Google Safe Browsing
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.5 Brand in title
  • +4.0 Young domain
  • +3.4 Shared IP cluster
  • +3.0 PhishTank
  • +2.2 Country mismatch
  • +2.0 ASN reputation
  • +0.9 Young certificate
  • +0.9 No registrar lock
  • +0.6 Long domain
  • +0.6 Final host mismatch
  • +0.6 Suspicious TLD
  • +0.3 Free CA
  • +0.1 Hyphens
  • +0.1 External scripts
  • +0.1 Deep subdomain
22 signals fired · detector v3.0.0
AI analysis AIBeta
Fake shop

Allegro Lokalnie impersonation on a same-day .lol domain behind Cloudflare, with the brand in the title and a final-host mismatch. Flagged by PhishTank and Google Safe Browsing as a fake marketplace scam.

PhishTankGoogle Safe BrowsingYoung domain
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-26 · confidence 82%
Domain & Network
Whois
Registrar Dynadot Inc
Network
IP 188.114.96.3 Cloudflare CDN
Country United StatesUnited States
Hosting Cloudflare, Inc.
ASN AS13335
TLS Cert YE2
External detection Google Safe Browsing PhishTank
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · TweetFeed · urlscan.io
Campaign
This detection belongs to suspected cluster 6f4caa6262c8 (11 domains · 11 hosts)
Related infrastructure Betasuspected links from shared infrastructure, not attribution
allegrolokalnie.ij37f649jg376fhf93g63.rest 60 same redirect target similar name registered together appeared together (24h) certs issued together same favicon same screenshot
active 2026-10-25
allegrolokalnie.jesienne-oferty-87361.cfd 60 same redirect target similar name registered together appeared together (24h) certs issued together same favicon same screenshot
active 2026-10-25
allegrolokalnie.pl-zakupy90021.top 60 same redirect target similar name registered together appeared together (24h) certs issued together same favicon same screenshot
active 2026-10-25
allegrolokalnie.oferta2284984024.cfd 46 same redirect target similar name registered together appeared together (24h) certs issued together same favicon
active 2026-10-25
allegrolokalnie.oferta3763479202.cfd 46 same redirect target similar name registered together appeared together (24h) certs issued together same favicon
active 2026-10-25
Top 5 of 8 related · rebuilt daily · corr-1.4.0 · related infrastructure API
Report this phishing
Network / ASN Cloudflare, Inc.
Web form
Registrar Dynadot Inc
abuse@dynadot.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-10-25 23:01 UTC  ·  Last refreshed 2026-10-25 23:30 UTC