Security Scan Report: allegrolokalnie.pl-ofer721429ta.cfd

Redirected to:
https://usterka.pl/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 3 countries across 9 domains to perform 203 HTTP transactions. The main domain is pl-ofer721429ta.cfd and was registered 2 weeks ago.

Submitted URL: https://allegrolokalnie.pl-ofer721429ta.cfd

Effective URL:
https://usterka.pl/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

Served page looks like a genuine Polish repair-booking service with no credential or payment capture, but it is reached only through a fake Allegro Lokalnie lookalike domain and a second lookalike redirect — treat links to it as deceptive.

Risk Factors (2)
Traffic is delivered through a typosquatting lookalike of Allegro Lokalnie (allegrolokalnie.pl-ofer721429ta.cfd) and a second lookalike (allegr.pl), a deceptive funnel that does not match the destination site's brand or purpose
Final destination's own ownership/reputation is unverified — the age and ranking data in the report describe the entry hostname, not usterka.pl
Safety Factors (4)
Served page self-brands as usterka.pl, matching its own domain (title, Open Graph site name), with no claim to another organisation's brand
No credential or payment fields; the single form is a booking/price-check form submitted to the site's own subdomain
No Indicators of Compromise, no hunting rule malware matches, no known phishing kit in the kit roster, no cross-origin credential exfiltration
Consistent, detailed business content (28 cities, named technicians, pricing ranges, refund/cancellation policy, blog and FAQ sections) typical of a real service business
Domain age information unavailable

Details

Page Title

usterka.pl – fachowiec do domu: elektryk, hydraulik, AGD

Scan Type

public

Domain Name Analysis

Within the .cfd top-level domain, 'allegrolokalnie.pl-ofer721429ta.cfd' is registered, featuring subdomain 'allegrolokalnie'. The second-level label 'pl-ofer721429ta' is 15 characters long holding 3 vowels versus 5 consonants, notching 6 digits and 1 hyphen. Breaking it apart gives five words: pl, of, er, 721429, ta. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

usterka sccm fachowcy od ręki ©. Umów fachowca online Mamy terminy Dla firm — Pomoc Opinie Realizacje Praca Onas & 732001001 A Moje konto fachowca © Wroctaw Nowe zgtoszenie na najblizsze dni....

Page Load Overview

1.89s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇵🇱Polish
Code: pl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pl
Text Length:11,755 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical50% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
50%
corporate
35%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15172.67.200.124Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1551.75.60.79France
AS16276OVH SAS
15142.251.14.97Google · CDNUnited States
AS15169Google LLC
15150.171.27.10Azure · CLOUDUnited States
AS8075Microsoft Corporation
1520.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
15150.171.28.10Azure · CLOUDUnited States
AS8075Microsoft Corporation
15142.251.20.156Google · CDNUnited States
AS15169Google LLC
15216.239.34.36Google · CDNUnited States
AS15169Google LLC
15104.21.58.51Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
20313--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11EB3943351E2443B123232C939225765A4C7F38FD8269A27B2BE03D56FEBD822D17579

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:z2DPNjjQggwjibl1+CuJRkwXr65y1mPsWWXtKcHztqYmM883g:z2DPYg883g

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:109096:hVdBUEEJKEgcmGJAKKI0CAIYopYQcOBpIDFoEwYQBxwgCuIhguhCEiAMANmbJcEkKo1HmYfSgQoLRKCKUEAwEDDFgFAEcARG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:b9fb898be3a3f9fc
Perceptual Hash:f90dca635a183b4b
Difference Hash:2b0333370e0a2581
Wavelet Hash:b9f381818383f1fc
Color Hash:N/A

Other Hashes

Crop Resistant:2b0333370e0a2581

Scan History

Scan history not available

Unable to load historical scan data