phishing/scam

Polish

Within the .cfd top-level domain, 'allegrolokalnie.pl-oferta859153.cfd' is registered; it also runs on subdomain 'allegrolokalnie'. The core label 'pl-oferta859153' covers 15 characters split between 3 vowels and 5 consonants; bonus characters include 6 digits and 1 hyphen. Breaking it apart gives five words: pl, of, ert, a, 859153. Expect 2 characters per word on average. The linguistic tilt is Hungarian for 'of'. Usage also turns up in Portuguese and Galician contexts.

html/1a/56/1a563b12-b57a-46b9-b8fb-06e5e358a806_fallback.html.gz

Allegro Lokalnie - Wystaw ogłoszenia za darmo i kupuj od osób z Twojej okolicy

html/1a/56/1a563b12-b57a-46b9-b8fb-06e5e358a806.html.gz

default-src 'self';object-src 'none';base-uri 'none';child-src 'self' blob: allegrolokalnie.pl www.googletagmanager.com optimize.google.com www.recaptcha.net www.gstatic.com www.facebook.com;connect-src 'self' maps.tilehosting.com api.maptiler.com allegro.pl ngastatic.com *.allegrogroup.com storage.googleapis.com rs.fullstory.com wss://*.allegrosandbox.pl:* wss://*.allegrogroup.com:* wss://allegrolokalnie.pl wss://*.allegrolokalnie.pl:* sentry.io *.easypack24.net www.google-analytics.com analytics.google.com *.analytics.google.com stats.g.doubleclick.net ngacm.com osm.inpost.pl connect.facebook.net www.google.com www.facebook.com googleads.g.doubleclick.net maps.googleapis.com region1.google-analytics.com edge.allegro.pl;font-src 'self' data: geowidget.easypack24.net fonts.googleapis.com *.analytics.google.com fonts.gstatic.com maxcdn.bootstrapcdn.com lokalnie-prod-assets.storage.googleapis.com;img-src 'self' data: blob: storage.googleapis.com *.allegroimg.allegrosandbox.pl *.allegroimg-test.qxlint *.allegroimg.pl *.allegroimg.com *.allegrogroup.com www.google.com geowidget.easypack24.net maps.gstatic.com maps.googleapis.com www.google.pl www.google-analytics.com analytics.google.com *.analytics.google.com www.facebook.com *.openstreetmap.org osm.inpost.pl api.mapbox.com *.googleapis.com optimize.google.com rs.fullstory.com assets.allegrostatic.com lokalnie-prod-assets.storage.googleapis.com;style-src 'self' 'unsafe-inline' api.tiles.mapbox.com cdn.klokantech.com geowidget.easypack24.net fonts.googleapis.com *.analytics.google.com unpkg.com api.mapbox.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com optimize.google.com assets.allegrostatic.com lokalnie-prod-assets.storage.googleapis.com;script-src 'self' 'nonce-c7Tq3U4tLkgeVFwjwYf1ew' 'strict-dynamic' https://ngastatic.com https://www.googletagmanager.com https://*.googletagmanager.com https://assets.allegrostatic.com https://connect.facebook.net https://www.gstatic.com/recaptcha/ https://www.recaptcha.net https://www.google-analytics.com https://maps.googleapis.com edge.fullstory.com *.allegrogroup.com geowidget.easypack24.net unpkg.com api.mapbox.com cdn.jsdelivr.net osm.inpost.com optimize.google.com *.googleoptimize.com rs.fullstory.com lokalnie-prod-assets.storage.googleapis.com;frame-ancestors 'self' https://*.allegrogroup.com ;upgrade-insecure-requests;block-all-mixed-content

block-all-mixed-content; report-uri https://edge.allegro.pl/seclog/csp;

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Requests	IP Address	Location	AS Autonomous System
14	142.250.184.219	United States	AS15169GOOGLE
1	172.217.23.123	United States	AS15169GOOGLE
1	142.250.185.123	United States	AS15169GOOGLE
1	142.250.185.155	United States	AS15169GOOGLE
1	216.58.206.91	United States	AS15169GOOGLE
1	185.31.25.89	Poland	AS31621Allegro sp. z o.o.
1	91.208.206.141	Moldova	AS200019Alexhost Srl
1	142.250.184.251	United States	AS15169GOOGLE
1	142.250.185.219	United States	AS15169GOOGLE
1	142.250.186.91	United States	AS15169GOOGLE
33	20	-	-

Security Scan Report: allegrolokalnie.pl-oferta859153.cfd

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History