When you visit icosa-service-sg-01.allawnos.com you get a blank JSON error saying the page wasn't found. That's it. There is no homepage, no product, no service, and no explanation of what this site is supposed to do. For anyone wondering whether this is a scam or a legitimate service, the lack of any functional content is the biggest red flag. A real business or even a personal project would at least show something. The domain has no history in the Wayback Machine, no social media presence, and no way to contact an operator. The WHOIS record is completely empty, so nobody knows who registered it. While the SSL certificate is technically valid and the site isn't on any blacklists, those are meaningless when the site itself doesn't work. If you came across this link expecting a service, do not enter any personal information or attempt to use it. There is nothing here to use. The safest assumption is that this domain is abandoned or was set up for a short-lived purpose that has already ended. Skip it.
No — icosa-service-sg-01.allawnos.com doesn't look safe
In plain English
This site is essentially a dead end. It returns a 404 error and has no visible content, no ownership information, and no way to contact anyone behind it. Even if the domain technically resolves and has a valid SSL certificate, there is nothing here to trust, and it looks abandoned or misconfigured.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The site uses a valid SSL certificate from a trusted issuer, but it still accepts old, insecure TLS versions that were phased out years ago. No browser protections like clickjacking or HSTS are in place, which is unusual for any site that expects visitors.
WHOIS returns no match for this domain, meaning the registrant information is completely hidden or the domain doesn't exist in the registry. A legitimate business or service would have clear ownership details.
There are no blacklist hits, but the site has zero history in the Wayback Machine and no traffic ranking. The 404 error suggests it either never worked or was taken down quickly, which is a major hit for any trust assessment.
There is no contact information, no about page, no social media links, and not even a favicon. The site offers no way to know who operates it or how to reach them, which is a critical failure for any public-facing website.
No privacy policy, terms of service, or any legal pages are present. While this might be expected for a hobby project, a site that returns a 404 error and has no content clearly isn't meeting even basic compliance standards for a commercial operation.
The domain resolves to four IP addresses on Amazon Web Services, and the server software is standard. But there's no email setup, no DNSSEC, and no robots.txt or sitemap, which is typical for a small or misconfigured site rather than a serious service.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.