Phishing detection: allegro-lokalnie.12gg92701dddd.cfd
Allegro Screenshot
Investigate
Domain
allegro-lokalnie.12gg92701dddd.cfd9 CT hosts on apex
urlscan
VirusTotal
Whois
IP
3.0.248.194
ipinfo
Greynoise
URL
https://allegro-lokalnie.12gg92701dddd.cfd
Phishunt analysis Beta
37
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +4.1 Brand in screenshot
- +4.0 Young domain
- +3.4 Shared IP cluster
- +3.0 PhishTank
- +2.6 Brand in subdomain
- +2.2 Country mismatch
- +1.5 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.9 Young certificate
- +0.9 No registrar lock
- +0.6 Long domain
- +0.6 Suspicious TLD
- +0.3 Free CA
- +0.1 Hyphens
- +0.1 External scripts
- +0.1 Deep subdomain
21 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Impersonates the Allegro Lokalnie marketplace using a brand-named subdomain on a throwaway .cfd domain hosted on AWS in Singapore. Listed in PhishTank and likely used to harvest marketplace credentials or payment details. Shares its IP with sibling lookalike domains.
PhishTankBrand in subdomainKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-29 · confidence 75%
Domain & Network
Whois
Registrar
Dynadot Inc
Network
IP
3.0.248.194
Country
Singapore
Singapore
Hosting
Amazon.com, Inc.
ASN
AS16509
TLS Cert
YE2
External detection
PhishTank
CleanGoogle Safe Browsing · OpenPhish · TweetFeed · urlscan.io · SANS ISC
Requests
Resources
Observables
Related websites
Report this phishing
Network / ASN
Amazon.com, Inc.
Submit to blocklists