ScanMalware.com

Security Scan Report: allegrolokalnie.pl-oferta218219.click

Redirected to:
https://allegrolokalnie.pl/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d9b6cfbd-6a87-4556-a13c-b3fe25cbc8b4Domain and IP registration (RDAP)/api/v1/rdap/d9b6cfbd-6a87-4556-a13c-b3fe25cbc8b4How often this domain was scanned/api/v1/domain/stats/allegrolokalnie.pl-oferta218219.clickScan history for this domain/api/v1/domain/history/allegrolokalnie.pl-oferta218219.click?limit=15
This website contacted 14 IPs in 2 countries across 10 domains to perform 51 HTTP transactions. The main domain is pl-oferta218219.click and was registered 0 days ago.

Submitted URL: https://allegrolokalnie.pl-oferta218219.click

Effective URL:
https://allegrolokalnie.pl/
Redirected

AI Security Verdict

Low Risk

Confidence: 62%

3
Risk Score

Lookalike entry host (pl-oferta218219.click) mimics allegrolokalnie.pl but redirects to the real Allegro Lokalnie error page. No credential or payment forms and no threat-intel hits; suspicious link shape, benign served content.

Risk Factors (2)
Deceptive hostname on the entry URL imitating allegrolokalnie.pl while belonging to an unrelated .click registrable domain
Cross-domain redirect from a lookalike domain to a brand domain, a common pattern in SMS/email lure links that can be repointed at a phishing kit at any time
Safety Factors (5)
Final destination is the brand's own official domain allegrolokalnie.pl, serving a genuine error page
No password, payment or disguised credential fields on the page
No Indicators of Compromise, hunting rule, IDS or Safe Browsing signals
No JavaScript behavioral anomalies or cross-origin credential submissions
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

Nieoczekiwany błąd | Allegro Lokalnie

Scan Type

public

Domain Name Analysis

The domain name 'allegrolokalnie.pl-oferta218219.click' uses the .click top-level domain with subdomain 'allegrolokalnie'. The second-level label 'pl-oferta218219' is 15 characters long containing three vowels alongside five consonants, notching six digits and 1 hyphen. Tokenizing the label suggests 5 words: pl, of, ert, a, 218219. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

[OJfTy ko ze Smart! masz darmowe ogłoszenie motoryzacyjne, SPRAWDŹ allegro LOKALNIE czego szukasz? © cata Polska Ql Op 8% Przeglądaj ogłoszenia: OE) Elektronika fs Moda Dom I Ogród sey polski...

Page Load Overview

2.09s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇵🇱Polish
Code: pl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pl
Text Length:21,032 chars
Detector Agreement:100%

All Detected Languages

🇵🇱pl(97%)🇺🇸en(1%)🇮🇹it(1%)🇸🇪sv(1%)

Website Classification

Primary Category

technology software100% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
100%
blog personal website
100%
government public service
99%
social media network
98%
e-commerce shopping
98%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
175.134.215.216Warsaw, Mazovia, Poland
AS42656Allegro sp. z o.o.
12185.31.27.181Poland
AS42656Allegro sp. z o.o.
3188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.207Google · CDNUnited States
AS15169Google LLC
3142.251.20.97Google · CDNUnited States
AS15169Google LLC
35.134.213.33Warsaw, Mazovia, Poland
AS42656Allegro sp. z o.o.
334.8.226.60Google · CDNKansas City, Missouri, United States
AS396982Google LLC
35.134.215.226Warsaw, Mazovia, Poland
AS42656Allegro sp. z o.o.
35.134.213.42Warsaw, Mazovia, Poland
AS42656Allegro sp. z o.o.
3188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5114--

Detected Technologies3

HTTP/3
40%
Cloudflare
40%
Google Tag Manager
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11005023AAC5D5A09707A74CDD2D80D8FEC95E353E22218E276CDDF34879A818742B97C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:mrENm+TSoWwUg6RQQ1lEDv/FiT7GTgE5EoU01UpJodnyaZdkjwVgPwDCqSnOK1PA:bNPejGX/FgDOymo/FgVOyjpMkuY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:863406:IeAEaQQChAEDQkIAKowCg/iSIBXASWrTAgepho1cgEDARYKjMSGA4gEYYmoGNPEKzIJj6IAJEELYCUIAIohBAoQFAEQgBQbx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffff818181ff
Perceptual Hash:bbc4123bc239731b
Difference Hash:39014ccc3b1b1b49
Wavelet Hash:00ffe7e7818181e7
Color Hash:06200408010

Other Hashes

Crop Resistant:39014ccc3b1b1b49,0519197939191925,a4a0d99bc66ccc1d,929eb4654f1696d0,8b9716a1b1a21150

Scan History

Scan history not available

Unable to load historical scan data