Is agregatpolska.com a scam? TrustSniffer's high-risk assessment: 0/100

Overview

Agregat Polska is a Polish-language commercial website, titled "Agregat Polska – Agregaty Prądotwórcze", that presents itself as a seller of power generators (diesel and standby generating sets). Its homepage is a text-based catalogue-style storefront with several password-entry forms. Its apparent business model is online product promotion and sales of industrial and domestic power equipment to Polish-speaking customers.

Scam/Impersonation Risk

The site carries a confirmed adverse reputation record. Several independent threat-intelligence sources currently flag the domain: two detection engines classify it as malicious, a third as suspicious, and the domain also appears on an external blacklist. No impersonation of a named brand or conflicting legal identities were observed, and no on-page phishing artifact was captured. The blacklist and malicious-detection hits are nonetheless a hard contradiction and the dominant risk driver. A site that sells high-ticket physical equipment, collects credentials through several password forms, and is listed by multiple security sources fits the profile of a fake-merchant or credential-harvesting storefront. That is an inference from the signals, not a proven finding. Seven abuse reports exist against one of the shared edge addresses serving the site. Because that address is shared provider infrastructure and the reports carry no reputational weight, they have been discounted and are not attributed to this operator. The page itself loaded stably and made no external network calls. However, it logged repeated console errors and showed an unusually large burst of page-structure changes after interaction. This points to a heavily script-driven page whose content is assembled dynamically rather than served statically. Together, a very recently created domain, blacklist hits and credential forms make the site unsuitable for sensitive interaction. Evidence:

• Homepage: reputation checks returned two malicious and one suspicious detection, plus an external blacklist listing.
• Homepage behavioral capture: three password forms present; 8 console errors; 1,108 DOM mutations after interaction; zero external requests across 3 successful runs.
• Domain registered 2026-08-07 (~0.22 years, 81 days old), expiring 2027-08-07, via the registrar Tucows.
• Shared edge IP abuse reports: 7, attributed to shared Cloudflare infrastructure and discounted.

Regulatory Verification Notes

No third-party regulatory or licensing record could be linked to the site, and the homepage does not clearly present a legal entity name, company registration number or supervisory identifiers. On-page disclosure is therefore best described as unclear. The real-world operator has not been independently connected to any registered business, so the site's own identity claims cannot be treated as proof of legitimacy. A power-equipment retailer is not necessarily a licensed financial service, so the missing disclosures are verification gaps rather than evidence of wrongdoing. They carry weight here only because they sit alongside the adverse reputation record. No broker-reputation entry matched the domain, so there is no additional third-party reputational context. The transport encryption is valid, but it is entry-level domain validation, which confirms control of the domain and says nothing about the operator's identity. Evidence:

• Homepage and footer: no company name, registration number, tax identifier or registry reference identified.
• TLS certificate issued by WE1 (DV), valid to 2027-01-03.
• Served from AS13335 (Cloudflare, Inc., US).
• Domain registration details are privacy-redacted at the registrar.

What to Verify Next

The business should be checked through independent, offline channels before any engagement. This means finding the claimed seller in the Polish business registers (KRS or CEIDG) and confirming that the legal name, address and tax number match what the site shows. Any telephone number or postal address should be validated through an independent directory, not through the site's own pages. Official support channels should be confirmed with the manufacturers or brands the site claims to resell. Price quotes should be compared against established generator distributors, because implausibly low prices are a common lure on fake storefronts. Evidence:

• Homepage: product catalogue of generating sets with no verifiable seller identity.
• Domain created in August 2026, too recent to carry an operating track record.
• Reputation listings remain active as of this assessment.

Summary Verdict

The overall posture is high-risk. Active third-party threat detections and a blacklist listing, together with a newly created domain and credential-collection surfaces, outweigh the site's technically orderly presentation. The available evidence does not support treating this site as trustworthy, and the operator's real-world identity remains unestablished.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all four observed addresses are provider edge nodes. The origin server was not observable. This is a mitigating factor only. Edge-only visibility prevents independent verification of where the content is actually hosted, and it can mask rapid content swaps. The infrastructure shows some fragmentation for a young domain with few subdomains, but these are unconfirmed heuristics. Protective infrastructure cannot offset the reputation risk.

Closing Assessment

Interaction should be limited to passive viewing. No credentials should be entered, no account created, and no payment or deposit made until the operator's identity is independently confirmed and the active threat listings are cleared.

Signals weighed against the site

• AbuseIPDB: 7 reports on hosting IP 2a06:98c1:3120::1 (Cloudflare, Inc., Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.