So what is a.nel.dcbosf.com? The site presents itself as a business with a legal disclosure, an about page, and standard privacy terms. That's more than a lot of fly-by-night operations bother with. But there's a problem you can't ignore: the site doesn't support HTTPS at all. When you try to connect securely, the server just refuses the handshake. That means any information you type into forms or even just browse is sent in plain text, vulnerable to anyone on the same network. For a site that asks you to agree to a privacy policy, that's a contradiction. There's also no contact information, no social media, and no history in the Wayback Machine — the domain might be brand new. If you're considering using this site for anything that involves personal data, hold off. Look for a working HTTPS connection and a way to reach someone before you proceed. Without those, the risk isn't worth it.
In plain English
I'd be careful with this site. It has a legal business disclosure and privacy terms, which is more than many unknowns offer, but the complete lack of HTTPS is a serious red flag — any data you enter could be exposed. Without a way to contact the operator or any history to check, there's just not enough here to trust yet.
Where the score comes from
The site has no working HTTPS connection at all — the server rejected the TLS handshake. That means any data you send (even just browsing) is unprotected and could be intercepted. For a site that publishes a privacy policy and terms of service, this is a serious security failure.
The site does publish a legal-entity disclosure page with a registered business name and address, which is a strong anchor for who runs it. But the domain itself has no WHOIS history, no archive snapshots, and no social media presence — so it's hard to verify how long this business has been around or get a sense of its reputation.
No blacklists, no malware flags, and no Trustpilot profile — but also no Wayback Machine history or any online footprint. The site is essentially invisible outside its own pages, which is neutral for a brand-new business but leaves you with little to go on.
There's an about page and a legal disclosure, which is good. But there's no contact information anywhere on the homepage, no social media links, and no favicon — small details that make it harder to reach the operator or confirm they're a real outfit.
Privacy policy and terms of service are present, along with a business disclosure that meets EU legal requirements. That's a solid baseline. The main missing piece is a cookie consent mechanism, but that's not unusual for smaller sites.
Cloudflare is a good sign of operational investment, and the page loads fast. But the lack of HTTPS is a dealbreaker, and the site doesn't set any browser security protections. No email server, no robots.txt — it feels like an incomplete setup.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →