ilah.city
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of ilah.city
ilah.city appears to be a very new domain using a .city extension, but the available scan data does not provide clear evidence of an established business, organization, or public service operating on it. Based on the domain name alone, it could be intended for a city-themed portal, local project, branded service, or a short-form brand name, but the current data does not confirm a specific purpose.
The infrastructure suggests the site is routed through a major content delivery and protection provider, which may indicate the operator is using basic web performance or shielding services. However, because the domain is only about 20 days old and no clear site category or operator identity is visible in the provided data, its real function remains uncertain at the time of this scan.
Safety Assessment for ilah.city
This domain shows a mixed risk picture at the time of this scan. It was flagged by 4 out of 92 security engines, including one phishing-related classification, while other checks did not identify confirmed malware payloads. The malware scan itself reported no flagged files, but it did include a generic heuristic label on the domain and on a couple of referenced stylesheet URLs. Generic heuristic findings can sometimes be low-confidence, but the presence of multiple engine detections and a phishing-related label increases caution.
At the same time, major threat-database checks were clean, including phishing and malware-focused blacklist sources, and no threats were detected in the small set of scanned files. There were also no DNS-based mail-reputation blocklist hits reported. Even so, the domain is extremely new, has no established traffic ranking in the provided data, and its purpose is not clearly identifiable from the scan context, which may raise uncertainty.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain uses a valid Let's Encrypt SSL certificate and is served through Cloudflare infrastructure, with Cloudflare nameservers and an anycast-style server IP. This setup may provide CDN and protective proxy functions, but it can also obscure the origin hosting environment. The certificate appears current at the time of this scan.
DNSSEC is unsigned, which is not uncommon but means DNS responses do not appear to have DNSSEC validation protection. The scan also references Cloudflare challenge and error-related resources, suggesting the site may be behind access controls or protective filtering. No direct server-side malware indicators were reported in the provided technical data.
Share your experience with this website. Was it safe? Did you encounter any issues?