Phishing detection: allegrolokalnie.lokalna-2328222239.lol

Allegro
http://allegrolokalnie.lokalna-2328222239.lol Access site
Screenshot
Screenshot of allegrolokalnie.lokalna-2328222239.lol
Investigate
Domain allegrolokalnie.lokalna-2328222239.lol0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 172.67.209.161
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://allegrolokalnie.lokalna-2328222239.lol
urlscan Wayback archive.today
Cert WE1
crt.sh Censys Google CT
Phishunt analysis Beta
35 medium suspicion suspiciousheuristic risk score · not a probability
Keyword matchLong domainPhishTank
19 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Allegro Lokalnie, a major Polish online classifieds marketplace, and appears designed to harvest user login credentials. The domain was registered the same day of detection on a .lol TLD, confirmed malicious by PhishTank, and proxied behind Cloudflare.

PhishTankYoung domainKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-21 · confidence 87%
Domain & Network
Whois
Registrar PDR Ltd. d/b/a PublicDomainRegistry.com
Network
IP 172.67.209.161
Country United StatesUnited States
Hosting Cloudflare, Inc.
ASN AS13335
TLS Cert WE1
External detection PhishTank
CleanGoogle Safe Browsing · OpenPhish · TweetFeed · urlscan.io
Related infrastructure Betasuspected links from shared infrastructure, not attribution
Suspected cluster #431 · 6 indicators · confidence High · targets: Allegro
allegrolokalnie.pl-oferta981912111.sbs 70 similar text same redirect target similar name registered together same favicon same screenshot
active 2026-08-21
allegrolokalnie.lokalna-849641.sbs 50 same redirect target similar name registered together same favicon
active 2026-08-21
allegrolokalnie.lokalna-oferta839122.lol 50 same redirect target similar name registered together same favicon
active 2026-08-20
allegrolokalnie.pl-oferta812281.lol 50 same redirect target similar name registered together same favicon
active 2026-08-21
allegrolokalnie.sthml.sbs 50 same redirect target similar name registered together same favicon
active 2026-08-21
Top 5 of 6 related · rebuilt daily · corr-1.2.0 · related infrastructure API
Campaign
This detection belongs to possible campaign 473373b8b673 (6 members total)
Report this phishing
Network / ASN Cloudflare, Inc.
Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-08-21 06:01 UTC  ·  Last refreshed 2026-08-22 07:30 UTC