Phishing detection: allegrolokalnie.oferta5927.cfd

Allegro
http://allegrolokalnie.oferta5927.cfd/oferta/johnathannscloudflarecom-katenscloudflarecom/yret8grru7jzj2ukj5?fbclid=iwcgrvzgnlehrua2flbqixmqbzcnrjbmfwcf9pza80mzc2mjyzmty5nzm3odgaar4l2bi3_s4qcpzm9cp5kplch3caxdcdzwj7nzet3f2qekj5ikre0h5-hpb-kw_aem_rd2hmcpozasdl4rirk4e6w Access site
Screenshot
Screenshot of allegrolokalnie.oferta5927.cfd
Investigate
Domain allegrolokalnie.oferta5927.cfd1 CT host on apex
urlscan page.domain VirusTotal Whois
IP 104.21.54.91
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://allegrolokalnie.oferta5927.cfd/oferta/johnathannsclo…
urlscan Wayback archive.today
Cert YE2
crt.sh Censys Google CT
Phishunt analysis Beta
35 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +4.0 Young domain
  • +3.0 PhishTank
  • +2.2 Country mismatch
  • +1.8 ASN reputation
  • +0.9 Young certificate
  • +0.9 No registrar lock
  • +0.6 Brand impersonation in path
  • +0.6 Long domain
  • +0.6 Final host mismatch
  • +0.6 Registrar reputation
  • +0.6 Suspicious TLD
  • +0.3 Free CA
  • +0.1 External scripts
  • +0.1 Deep subdomain
22 signals fired · detector v3.0.0
Domain & Network
Whois
Registrar NameSilo, LLC
Network
IP 104.21.54.91
Country United StatesUnited States
Hosting Cloudflare, Inc.
ASN AS13335
TLS Cert YE2
External detection PhishTank
CleanGoogle Safe Browsing · OpenPhish · TweetFeed · urlscan.io
Campaign
This detection belongs to possible campaign 12de20e79952 (3 domains · 3 hosts)
Related infrastructure Betasuspected links from shared infrastructure, not attribution
allegrolokalnie.dk-produkt392584.sbs 70 similar text same redirect target similar name registered together appeared together (72h) certs issued together same favicon same screenshot
active 2026-09-12
allegrolokalnie.pl-92783.click 49 same redirect target similar name registered together appeared together (24h) same favicon
active 2026-09-12
allegrolokalnie.8643275.pl 40 similar name registered together appeared together (24h) certs issued together same favicon
active 2026-09-12
allegrolokalnie.pl-ogloszenie-adriankoleda-61.click 29 similar name registered together appeared together (24h) certs issued together
active 2026-09-12
allegrolokalnie.pl-019692205.cfd 27 similar name registered together appeared together (72h) certs issued together
active 2026-09-11
Top 5 of 5 related · rebuilt daily · corr-1.3.0 · related infrastructure API
Report this phishing
Network / ASN Cloudflare, Inc.
Web form
Registrar NameSilo, LLC
abuse@namesilo.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-09-13 02:01 UTC  ·  Last refreshed 2026-09-13 03:30 UTC