Phishing detection: allegrolokalnie.id93782346383253.rest

Allegro
https://allegrolokalnie.id93782346383253.rest Access site
Screenshot
Screenshot of allegrolokalnie.id93782346383253.rest
Investigate
Domain allegrolokalnie.id93782346383253.rest1 CT host on apex
urlscan page.domain VirusTotal Whois
IP 172.67.199.169
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://allegrolokalnie.id93782346383253.rest
urlscan Wayback archive.today
Cert YE2
crt.sh Censys Google CT
Phishunt analysis Beta
40 high suspicion likely_phishingheuristic risk score · not a probability
Why?
  • +6.1 Google Safe Browsing
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +4.0 Young domain
  • +3.0 PhishTank
  • +2.2 Country mismatch
  • +1.4 ASN reputation
  • +0.9 Young certificate
  • +0.9 No registrar lock
  • +0.6 Long domain
  • +0.6 Final host mismatch
  • +0.6 Registrar reputation
  • +0.6 Suspicious TLD
  • +0.3 Free CA
  • +0.1 External scripts
  • +0.1 Deep subdomain
22 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Allegro Lokalnie on a long numeric subdomain of a .rest domain behind Cloudflare, with a redirect chain. The brand appears in the title and PhishTank and Google Safe Browsing flag it as social engineering.

PhishTankGoogle Safe BrowsingBrand in title
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-23 · confidence 78%
Domain & Network
Whois
Registrar Registrar.eu
Network
IP 172.67.199.169 Cloudflare CDN
Country United StatesUnited States
Hosting Cloudflare, Inc.
ASN AS13335
TLS Cert YE2
External detection Google Safe Browsing PhishTank
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · TweetFeed · urlscan.io
Campaign
This detection belongs to suspected cluster bc95aa697412 (12 domains · 12 hosts)
Related infrastructure Betasuspected links from shared infrastructure, not attribution
allegrolokalnie.pl-oferta872183.cfd 61 similar text same redirect target similar name registered together appeared together (24h) certs issued together same favicon same screenshot
active 2026-10-23
allegrolokalnie.prywatna-472827724849.shop 56 similar text same redirect target similar name appeared together (24h) certs issued together same favicon same screenshot
active 2026-10-23
allegrolokalnie.pl2831923731vjz3134zx321134jk21.rest 56 same redirect target similar name registered together same registrar appeared together (24h) same favicon same screenshot
active 2026-10-23
allegrolokalnie.pl47351.top 56 similar text same redirect target similar name appeared together (24h) certs issued together same favicon same screenshot
no longer tracked
allegrolokalnie.24h-9393x1.top 52 similar text same redirect target similar name registered together appeared together (72h) certs issued together same favicon
no longer tracked
Top 5 of 11 related · rebuilt daily · corr-1.4.0 · related infrastructure API
Report this phishing
Network / ASN Cloudflare, Inc.
Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-10-23 01:02 UTC  ·  Last refreshed 2026-10-24 05:30 UTC