When you see a subdomain like 6236764.collect.igodigital.com, you are looking at a data collection service, not a typical public website. The name itself points to it gathering information in the background. Legitimate data collection platforms usually tell you who operates them and have clear privacy policies — this one has neither. There is no contact information, no about page, and the WHOIS record is completely hidden. That makes it impossible to know who is receiving your data or how it will be used. The site also blocks all search engine crawlers via robots.txt, which is unusual for any legitimate service and serves to keep it out of public view. While the connection is encrypted and the site loads fast, those positives are outweighed by the fundamental lack of accountability. If you have encountered this subdomain on another site or in an email, treat it with extreme caution. Do not submit any personal information to 6236764.collect.igodigital.com unless you can independently verify the company behind it and see a proper privacy policy.
No — 6236764.collect.igodigital.com doesn't look safe
In plain English
This site is not something I would trust. The domain hides who owns it, offers no way to contact anyone, and has no privacy policy on what looks like a data collection subdomain. The complete lack of transparency combined with blocking all web crawlers are serious warning signs that this is not a legitimate business you should interact with.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The site has a valid SSL certificate from a well-known issuer, which is good. But it's missing all six common security headers, including those that protect against clickjacking and enforce HTTPS. That's a real gap, especially for a site that might handle data.
This domain exists as a subdomain under igodigital.com and the WHOIS returns 'no match', meaning there is no public ownership information at all. For any site that collects information or represents a business, that is a critical transparency failure.
The site isn't on any blacklists and loads quickly, which is fine. But the Wayback Machine has zero snapshots, suggesting this subdomain is brand new or temporary. Combined with a lack of any external trust signals like reviews or social proof, there's not enough history to build confidence.
There is no contact information, no about page, no social media presence, and not even a company name displayed on the homepage. Legitimate businesses, especially those collecting data, openly tell you who they are and how to reach them. This site does the opposite.
No privacy policy or terms of service were found. For a subdomain that is likely used to collect customer data (given the 'collect' in its name), this is a significant red flag. Privacy regulations require disclosure if any personal information is being gathered.
The site is hosted on Amazon's reliable infrastructure and resolves to multiple IPs, which is typical for cloud services. However, it blocks all search engine crawlers via robots.txt and has no DNSSEC or email handling setup. The crawler block is the main concern here, as it hides the site from legitimate discovery.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.