https://allegrolokalnie.pl-584724239.sbs
172.67.151.127 · Cloudflare, Inc.
Toronto, Canada
1 day ⚠
200 · 84.1s
Valid· E7, Let's Encrypt, US
COMPLETED

Title: "Allegro Lokalnie - Wystaw ogłoszenia za darmo i kupuj od osób z Twojej okolicy"
Registered-domain escalation
Submit pl-584724239.sbs as the primary IOC, enriched with evidence from hostile subdomains like allegrolokalnie.pl-584724239.sbs.
No KB/IOK detections were recorded for this scan.
ecommerce | technology · 4/5/2026
This page at allegrolokalnie.pl-584724239.sbs presents Allegro Lokalnie branding (logo assets, Polish UI) but the domain is a newly registered, suspicious .sbs TLD and is under Cloudflare with a 1-day age. The final URL resolves to allegrolokalnie.pl, yet the initial domain differs, indicating potential typosquatting or impersonation. The page loads Allegro assets and a privacy modal, but the suspicious domain and WAF-block signals suggest an attempted impersonation to harvest credentials or drive traffic to a malicious host.
Scanner observed a newly created domain hosting allegro-like content, which is highly suspicious. The page title and visible UI mimic Allegro Lokalnie, while the hostname allegrolokalnie.pl-584724239.sbs is obviously not the official Allegro Lokalnie domain. The SSL cert is freshly issued, and the domain age is only 1 day, elevating risk. The page loads multiple external scripts and iframes, and final URL appears legitimate but the initial domain is rogue, indicating possible credential or data harvesting via impersonation. This domain should be treated as malicious and blocked to prevent victims from being redirected to a phishing surface that imitates Allegro Lokalnie.
Suspend Domain