Allegro Lokalnie fake listing and checkout phishing kit (Poland)

Fake Allegro Lokalnie listings used in marketplace buyer/seller scams in Poland. The victim gets a link to a cloned listing on a look-alike host (allegrolokalnie.pl-oferta<digits>[.]click / [.]icu / [.]cfd, allegro.pl-smart<digits>[.]sbs, allegro.<digits>[.]pl and similar); 'Kup teraz' leads to a fake delivery and payment step (/oferta/<slug>/<id>/dostawa) and the header login link to /logowanie/<id>. The kit serves its own /static/allegrolokalnie_main.js and a photo carousel with Polish developer comments; an older build re-hosted the listing photos under Telegram file ids (/data/AQAD...). The bare host usually answers 404, a one-line API banner, a parking page or a redirect to the real marketplace, so only the listing URL shows the lure.