Security Scan Report: allegrolokalnie.pl396931.top

Submitted: Completed: publiccompleted
This website contacted 21 IPs in 2 countries across 19 domains to perform 22 HTTP transactions. The main domain is pl396931.top and was registered 1 day ago.

Submitted URL: https://allegrolokalnie.pl396931.top

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Typosquat of allegrolokalnie.pl on a ≤1-day-old .top domain, flagged by Google Safe Browsing for social engineering and by IDS as hostile .top traffic; currently only a Cloudflare Tunnel error page, but infrastructure is phishing-grade.

Risk Factors (5)
Brand impersonation of Allegro Lokalnie on a non-official domain
Typosquatted hostname embedding a legitimate brand domain
Freshly registered domain (≤1 day old) on a .top TLD
Google Safe Browsing social-engineering (phishing) detection
HIGH-severity IDS alerts for *.top traffic indicative of hostile infrastructure
Domain age information unavailable

Details

Page Title

Cloudflare Tunnel error | allegrolokalnie.pl396931.top | Cloudflare

Scan Type

public

Domain Name Analysis

The domain name 'allegrolokalnie.pl396931.top' uses the .top top-level domain, featuring subdomain 'allegrolokalnie'. The core label 'pl396931' covers 8 characters split between 0 vowels and 2 consonants; it also includes 6 digits. Tokenizing the label suggests two words: pl, 396931. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

E rro r 1 0 3 3 Ray ID: a597eb9ccedod20a + 2026-11-12 19:25:02 UTC Cloudflare Tunnel error What happened? You've requested a page on a website (allegrolokalnie.pl396931.top) that is on the Cloudfla...

Page Load Overview

0.46s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:840 chars
Detector Agreement:94%

Website Classification

Primary Category

documentation technical39% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
39%
technology software
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.30.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1185.111.111.154Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
164.185.181.238United States
AS40009BitGravity, Inc.
192.223.124.62Frankfurt am Main, Hesse, Germany
AS199524G-Core Labs S.A.
123.216.77.157Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
132.197.158.54Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1172.64.148.194Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.66.0.102Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2221--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AB1285B3F0F955290043C36676B9BB2D7926A01B5BB109D57E5E42725F8EF82B812388

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:lbvOa/Paawl24ztzZVP+qCPZG9tnM3CeNwAU1HMsmsBsRsMyNgXrh9Cm:hGa/il2YVP+l8tnM3Ce0m

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9397:IQKNsRRkQCIIiTCI5gJgEEUKIhBRgQXolW8CEU0BgoZDgAC4kQMAE6GQqghFQGIE4EkgeUEiWFIEEgEoUIRIEAPDAs4VwKBI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7cfcfcfcfe7efff
Perceptual Hash:b838c7671838e739
Difference Hash:1c341838180c1400
Wavelet Hash:838f03038fc3032f
Color Hash:07003000180

Other Hashes

Crop Resistant:1c341838180c1400

Scan History

Scan history not available

Unable to load historical scan data