phishing/scam

Polish

Domain 'allegrolokalnie.pl-oferta482723.cfd' uses the .cfd top-level domain and includes subdomain 'allegrolokalnie'. Its registrable label 'pl-oferta482723' stretches across 15 characters containing three vowels alongside 5 consonants; bonus characters include six digits and one hyphen. It segments into 5 words: pl, of, ert, a, 482723. Average segment length settles at 2 characters. Most frequently, 'of' shows up in Hungarian. You will also see it in Portuguese and Galician contexts. Net impression: Hungarian phrase with character flair.

html/e9/41/e9411a45-dd1e-4dc5-9ae2-e95fed333070_fallback.html.gz

Privacy error

html/e9/41/e9411a45-dd1e-4dc5-9ae2-e95fed333070.html.gz

default-src 'self';object-src 'none';base-uri 'none';child-src 'self' blob: allegrolokalnie.pl www.googletagmanager.com optimize.google.com www.recaptcha.net www.gstatic.com www.facebook.com;connect-src 'self' maps.tilehosting.com api.maptiler.com allegro.pl ngastatic.com *.allegrogroup.com storage.googleapis.com rs.fullstory.com wss://*.allegrosandbox.pl:* wss://*.allegrogroup.com:* wss://allegrolokalnie.pl wss://*.allegrolokalnie.pl:* sentry.io *.easypack24.net www.google-analytics.com analytics.google.com *.analytics.google.com stats.g.doubleclick.net ngacm.com osm.inpost.pl connect.facebook.net www.google.com www.facebook.com googleads.g.doubleclick.net maps.googleapis.com region1.google-analytics.com edge.allegro.pl;font-src 'self' data: geowidget.easypack24.net fonts.googleapis.com *.analytics.google.com fonts.gstatic.com maxcdn.bootstrapcdn.com lokalnie-prod-assets.storage.googleapis.com;img-src 'self' data: blob: storage.googleapis.com *.allegroimg.allegrosandbox.pl *.allegroimg-test.qxlint *.allegroimg.pl *.allegroimg.com *.allegrogroup.com www.google.com geowidget.easypack24.net maps.gstatic.com maps.googleapis.com www.google.pl www.google-analytics.com analytics.google.com *.analytics.google.com www.facebook.com *.openstreetmap.org osm.inpost.pl api.mapbox.com *.googleapis.com optimize.google.com rs.fullstory.com assets.allegrostatic.com lokalnie-prod-assets.storage.googleapis.com;style-src 'self' 'unsafe-inline' api.tiles.mapbox.com cdn.klokantech.com geowidget.easypack24.net fonts.googleapis.com *.analytics.google.com unpkg.com api.mapbox.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com optimize.google.com assets.allegrostatic.com lokalnie-prod-assets.storage.googleapis.com;script-src 'self' 'nonce-PYMVxio9YwClcQPfhi5cEw' 'strict-dynamic' https://ngastatic.com https://www.googletagmanager.com https://*.googletagmanager.com https://assets.allegrostatic.com https://connect.facebook.net https://www.gstatic.com/recaptcha/ https://www.recaptcha.net https://www.google-analytics.com https://maps.googleapis.com edge.fullstory.com *.allegrogroup.com geowidget.easypack24.net unpkg.com api.mapbox.com cdn.jsdelivr.net osm.inpost.com optimize.google.com *.googleoptimize.com rs.fullstory.com lokalnie-prod-assets.storage.googleapis.com;frame-ancestors 'self' https://*.allegrogroup.com ;upgrade-insecure-requests;block-all-mixed-content

block-all-mixed-content; report-uri https://edge.allegro.pl/seclog/csp;

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Requests	IP Address	Location	AS Autonomous System
2	142.250.186.59	United States	AS15169GOOGLE
2	142.250.74.219	United States	AS15169GOOGLE
2	216.58.206.40	United States	AS15169GOOGLE
2	142.250.185.187	United States	AS15169GOOGLE
2	216.58.206.91	United States	AS15169GOOGLE
2	91.208.206.141	Moldova	AS200019Alexhost Srl
2	142.250.185.91	United States	AS15169GOOGLE
2	142.250.185.251	United States	AS15169GOOGLE
2	142.250.184.251	United States	AS15169GOOGLE
2	172.217.18.27	United States	AS15169GOOGLE
30	15	-	-

Security Scan Report: allegrolokalnie.pl-oferta482723.cfd

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History