Security Scan Report: allegrolokalnie.jesienne-oferty-87361.cfd

Submitted: Completed: publiccompleted
This website contacted 12 IPs in 2 countries across 2 domains to perform 4 HTTP transactions. The main domain is jesienne-oferty-87361.cfd and was registered 3 days ago.

Submitted URL: http://allegrolokalnie.jesienne-oferty-87361.cfd

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

One-day-old .cfd host impersonating Allegro Lokalnie, flagged by Google Safe Browsing for social engineering; only a Cloudflare tunnel error is served. Treat as a phishing domain — do not visit or interact.

Risk Factors (5)
Google Safe Browsing social-engineering (phishing) detection
Deceptive hostname impersonating Allegro Lokalnie on an unrelated domain
Domain age 1 day (CRITICAL risk category)
.cfd TLD with phishing-lure subdomain naming
No verifiable legitimate content behind the page (tunnel error only)
Domain age information unavailable

Details

Page Title

Cloudflare Tunnel error | allegrolokalnie.jesienne-oferty-87361.cfd | Cloudflare

Scan Type

public

Domain Name Analysis

The domain 'allegrolokalnie.jesienne-oferty-87361.cfd' uses the .cfd top-level domain and includes subdomain 'allegrolokalnie'. Count 21 characters in 'jesienne-oferty-87361' containing 6 vowels alongside eight consonants, along with 5 digits and two hyphens. Segmentation suggests 6 words: je, sienne, of, er, ty, 87361. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://allegrolokalnie.jesienne-oferty-87361.cfd

Page Load Overview

0.43s
Total Load Time
22 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:879 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software39% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
39%
documentation technical
39%
phishing/scam
20%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.31.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
064.185.181.238United States
AS40009BitGravity, Inc.
092.223.124.62Frankfurt am Main, Hesse, Germany
AS199524G-Core Labs S.A.
0162.159.140.104Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.64.148.194Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0193.108.153.155Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
0104.18.29.178Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
035.190.26.57Google · CDNKansas City, Missouri, United States
AS396982Google LLC
412--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F4D1B7A3F1F8253A1153C2A23199B72939E8D013DAA604F1769DC5720F9FF81FD13285

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:lmRDa/DJlaa+t0OlQJKHzwoowoBDd34RSz31qvPUg3b3nkEvZv2tA0ULnRC3vaQL:lga/Paawl24zozNVxCPZG9ULnM3CeNv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6764:AgSDAMqCASLdSBGgpaJnKQAIADSAEwCCkBAQAZRSUAEIAMAMD8gGimRCBgggDzAFAiYTCADgUIQIBAEEBANUOoRyYH1Fy1Ih

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7cfcfcfcfe7efff
Perceptual Hash:b838c767183ce339
Difference Hash:1c341838180c1400
Wavelet Hash:838f878f8fc3030f
Color Hash:#d279cc

Other Hashes

Crop Resistant:1c341838180c1400

Scan History

Scan history not available

Unable to load historical scan data