Phishing detection: allegrolokalnie.oferta324452.cfd
Allegro Screenshot
Investigate
Domain
allegrolokalnie.oferta324452.cfd0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
172.67.201.126
ipinfo
Greynoise
URL
https://allegrolokalnie.oferta324452.cfd
Phishunt analysis Beta
41
high suspicion likely_phishingheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +4.0 Young domain
- +3.0 PhishTank
- +2.2 Country mismatch
- +1.8 ASN reputation
- +0.9 Young certificate
- +0.9 No registrar lock
- +0.6 Long domain
- +0.6 Final host mismatch
- +0.6 Registrar reputation
- +0.6 Suspicious TLD
- +0.3 Free CA
- +0.1 External scripts
- +0.1 Deep subdomain
22 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Site impersonates Allegro Lokalnie, the Polish classifieds marketplace, and is designed to harvest user credentials or payment details. Confirmed malicious by both PhishTank and Google Safe Browsing. Hosted behind Cloudflare on a long random .cfd domain registered via Registrar.eu.
PhishTankGoogle Safe BrowsingKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-19 · confidence 87%
Domain & Network
Whois
Registrar
Hosting Concepts B.V. d/b/a Registrar.eu
Network
Country
United States
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
YE2
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · TweetFeed · urlscan.io · SANS ISC
Campaign
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists