allegro.9392130120.casa
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of allegro.9392130120.casa
This domain appears to be a newly created subdomain-style address under the .casa top-level domain, using the label "allegro" followed by a long numeric string. Based on the visible page content, it does not appear to present a developed public website or a clearly identified service. The screenshot shows a mostly blank page with a short Chinese message, which suggests a minimal placeholder, test page, or temporary deployment rather than a fully established web presence.
No clear operator identity, business information, or site purpose is visible from the page itself. The domain structure and lack of branding or content make it difficult to associate it with a legitimate organization based on available data. In this context, the site appears to have limited transparency and little verifiable information about who runs it or what users are expected to do there.
Safety Assessment for allegro.9392130120.casa
This domain shows several risk indicators at the time of this scan. It was flagged by 14 out of 90 security engines, with multiple detections describing the site as phishing or otherwise malicious. In addition, one threat database listing is present, and the domain's IP address is listed on one mail-reputation blocklist. While the malware file scan did not identify malicious files in the single scanned resource, that result alone does not outweigh the broader reputation signals.
The domain is also extremely new, with a registration age of about 1 day, and it has no visible established content, traffic ranking, or operator details. Newly registered domains with minimal content can sometimes be used in short-lived phishing campaigns, especially when combined with a naming pattern that does not clearly match a legitimate brand owner or service. The blank page shown in the screenshot does not provide reassuring context or evidence of a normal business website.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, and traffic appears to be proxied through Cloudflare infrastructure. The resolved IP address is 104.21.13.66, with hosting attributed to Cloudflare and nameservers also set to Cloudflare. A valid certificate indicates encrypted transport, but it does not by itself confirm legitimacy.
DNSSEC appears to be unsigned, which means DNS responses do not benefit from DNSSEC validation. The domain is very recently registered, the server stack is fronted by a reverse-proxy service, and the page content is minimal. No malicious files, external links, or iframes were identified in the provided scan snapshot, but the reputation-based detections remain the more significant concern here.
Share your experience with this website. Was it safe? Did you encounter any issues?