ScanMalware.com

Security Scan Report: allegrolokalnie.pl-oferta4097786.icu

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/22545c35-5c3d-44cb-aede-4f78ef86b3dfDomain and IP registration (RDAP)/api/v1/rdap/22545c35-5c3d-44cb-aede-4f78ef86b3dfHow often this domain was scanned/api/v1/domain/stats/allegrolokalnie.pl-oferta4097786.icuScan history for this domain/api/v1/domain/history/allegrolokalnie.pl-oferta4097786.icu?limit=15
This website contacted 8 IPs in 1 country across 2 domains to perform 5 HTTP transactions. The main domain is pl-oferta4097786.icu and was registered 1 year ago.

Submitted URL: https://allegrolokalnie.pl-oferta4097786.icu/

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Confirmed phishing scam; do not trust or provide any information.

Risk Factors (5)
Brand impersonation on a brand‑new, unranked domain
Google Safe Browsing phishing detection
Critical domain age (<7 days) with high‑risk multiplier
Use of a low‑reputation .icu TLD
Absence of legitimate content; only a phishing warning page
Domain age information unavailable

Details

Page Title

Suspected phishing site | Cloudflare

Scan Type

public

Domain Name Analysis

The domain name 'allegrolokalnie.pl-oferta4097786.icu' uses the .icu top-level domain with subdomain 'allegrolokalnie'. The registrable portion 'pl-oferta4097786' spans 16 characters split between 3 vowels and five consonants, along with 7 digits and 1 hyphen. Word splitting yields 5 words: pl, of, ert, a, 4097786. Average segment length settles at 2 characters. Most frequently, 'of' shows up in Hungarian. Usage also turns up in Portuguese and Galician contexts. Overall, 'allegrolokalnie.pl-oferta4097786.icu' reads as Hungarian with character flair.

Screenshot

Security scan screenshot of https://allegrolokalnie.pl-oferta4097786.icu/

Page Load Overview

43.35s
Total Load Time
9 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:395 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam87% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
87%
technology software
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5172.67.143.225United States
AS13335CLOUDFLARENET
0104.21.71.70United States
AS13335CLOUDFLARENET
0104.18.94.41United States
AS13335CLOUDFLARENET
02606:4700::6812:5f29United States
AS13335CLOUDFLARENET
02606:4700::6812:5e29United States
AS13335CLOUDFLARENET
02606:4700:3034::6815:4746United States
AS13335CLOUDFLARENET
0104.18.95.41United States
AS13335CLOUDFLARENET
02606:4700:3033::ac43:8fe1United States
AS13335CLOUDFLARENET
58--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E9A16273BABD147F109391B266BDB70A39A5C007C7A6099036BCC2751F4BF92AD132C5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:liADa/D+DMFozLeiO/t8AvLlgZieBuHPnRC3vaQxvb0:liEa/SoYnOVjgZ5uvnM3Cej0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4675:YCGCQAASIAAFAgEEMAAQAIMAIAhGyAABQMIZABEGCFigDhgwBABBQAIIAREhgNCAaEhAgiAIBMFABIEAJEAACAQCCCAIJAAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff8787ffc7ffffff
Perceptual Hash:b83898c3c3c7ce3c
Difference Hash:203c3c001c000000
Wavelet Hash:988080f0c0fcfcfc
Color Hash:#bfd279

Other Hashes

Crop Resistant:203c3c001c000000

Scan History

Scan history not available

Unable to load historical scan data