public company · US

Allegro

ALLEGRO.EU SA/ADR

Polish online marketplace; the most frequent explicit PhishTank target in October 2026 snapshots.

Primary official domain
allegro.pl
Reviewed official domains
3 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
428
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
414
domains first source-reported within 30 days
First observed, 30 days
2,194
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC quarantine
SPF -all · 4/10 lookups · checked 2026-10-18 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
allegroallegrolokalnie
Label aliases
Allegro · Allegro Lokalnie
Official domains
allegro.pl · allegro.eu · allegrolokalnie.pl (all)
Generated spellings
364 tracked · 0 observed somewhere · 364 not observed (all)

Official domains and email policies

Domains reviewed as belonging to Allegro. DMARC helps receivers check the From domain; lookalike domains remain possible. Published policies cannot confirm actual mail configuration or receiver behavior.

DomainRelationshipEvidenceDMARC policyPolicy sourceSPFReportingLast check
allegro.pl
primaryReviewed 2026-10-18
DomainSpoof directory (seed)quarantineDirect-all · 4/10 lookupsNo rua2026-10-18 22:03 UTC
Records and check details

Published records

DMARC (_dmarc.allegro.pl)
v=DMARC1; p=quarantine; adkim=r; aspf=r; rf=afrf;
SPF (allegro.pl)
v=spf1 include:_spf.google.com include:spf.tmes.trendmicro.eu include:_spf.salesforce.com ip4:193.23.48.0/24 ip4:193.203.222.0/23 ip4:194.0.251.0/24 ip4:91.194.188.0/23 ip4:91.207.14.0/23 ip4:178.21.152.0/21 ip4:5.134.208.0/21 ip4:185.31.24.0/22 -all
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing.

Interpretation

  • p=quarantine: receivers are asked to treat failing mail as suspicious.
  • Relaxed DKIM alignment (default).
  • Relaxed SPF alignment (default).
  • rf is a legacy tag removed by RFC 9989.
  • No aggregate report address (rua): a visibility gap for the domain owner, not an enforcement setting.
  • -all: unlisted hosts fail SPF.
  • 4 DNS-querying terms (include, a, mx, ptr, exists, redirect), counted recursively; the limit is 10.
  • Checked with an earlier assessment that did not validate IP mechanism syntax or resolve a/mx/exists targets; it is re-assessed on the next check.

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.allegro.pl: ok, 1 DMARC record

Recent checks

  • 2026-10-18 22:03 UTC: DMARC quarantine; SPF -all

Assessment posture-v1. DNS lookup failures leave the policy unknown.

allegro.eu
subsidiaryReviewed 2026-10-18
DomainSpoof directory (seed)quarantineDirect-all · 3/10 lookupsNo rua2026-10-18 22:03 UTC
Records and check details

Published records

DMARC (_dmarc.allegro.eu)
v=DMARC1; p=quarantine; adkim=r; aspf=r; rf=afrf;
SPF (allegro.eu)
v=spf1 include:_spf.google.com include:psm.knowbe4.com include:allegrospf.com -all
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing.

Interpretation

  • p=quarantine: receivers are asked to treat failing mail as suspicious.
  • Relaxed DKIM alignment (default).
  • Relaxed SPF alignment (default).
  • rf is a legacy tag removed by RFC 9989.
  • No aggregate report address (rua): a visibility gap for the domain owner, not an enforcement setting.
  • -all: unlisted hosts fail SPF.
  • 3 DNS-querying terms (include, a, mx, ptr, exists, redirect), counted recursively; the limit is 10.
  • Checked with an earlier assessment that did not validate IP mechanism syntax or resolve a/mx/exists targets; it is re-assessed on the next check.

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.allegro.eu: ok, 1 DMARC record

Recent checks

  • 2026-10-18 22:03 UTC: DMARC quarantine; SPF -all

Assessment posture-v1. DNS lookup failures leave the policy unknown.

allegrolokalnie.pl
subsidiaryReviewed 2026-10-18
DomainSpoof directory (seed)quarantineDirect-all · 5/10 lookupsNo rua2026-10-18 22:03 UTC
Records and check details

Published records

DMARC (_dmarc.allegrolokalnie.pl)
v=DMARC1; p=quarantine; adkim=r; aspf=r; rf=afrf;
SPF (allegrolokalnie.pl)
v=spf1 include:_spf.google.com include:spf_c.oracle.com include:spf.tmes.trendmicro.com ip4:193.23.48.0/24 ip4:193.203.222.0/23 ip4:194.0.251.0/24 ip4:178.21.152.0/21 ip4:5.134.208.0/21 ip4:91.194.188.0/23 ip4:91.207.14.0/23 -all
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing.

Interpretation

  • p=quarantine: receivers are asked to treat failing mail as suspicious.
  • Relaxed DKIM alignment (default).
  • Relaxed SPF alignment (default).
  • rf is a legacy tag removed by RFC 9989.
  • No aggregate report address (rua): a visibility gap for the domain owner, not an enforcement setting.
  • -all: unlisted hosts fail SPF.
  • 5 DNS-querying terms (include, a, mx, ptr, exists, redirect), counted recursively; the limit is 10.
  • Checked with an earlier assessment that did not validate IP mechanism syntax or resolve a/mx/exists targets; it is re-assessed on the next check.

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.allegrolokalnie.pl: ok, 1 DMARC record

Recent checks

  • 2026-10-18 22:03 UTC: DMARC quarantine; SPF -all

Assessment posture-v1. DNS lookup failures leave the policy unknown.

“Not checked”: no check yet. “Lookup failed”: DNS result unknown. Report mailbox names are redacted.

Reports on official domains appear under “Official assets with reports” on the Reported matches tab.