Belfius.be.ssl.sc.omtrdc.net is a subdomain that appears to be part of Adobe's analytics infrastructure, likely used for tracking by Belfius bank. But before you assume it's harmless, the invalid SSL certificate is a dealbreaker — it means the certificate was issued for a different domain, so any data sent here could be intercepted or tampered with. Legitimate tracking services properly configure their certificates. This domain also lacks basic contact information and legal pages, which while common for backend endpoints, still leaves you in the dark about who operates it and how data is handled. If you encounter this URL in a browser or a tool, treat it with extreme caution. There are no consumer reviews or Wayback Machine history to fall back on either. For a service that might collect analytics data, the security failure alone makes it untrustworthy. Always verify that the URL in your address bar matches the certificate — this one doesn't.
No — belfius.be.ssl.sc.omtrdc.net doesn't look safe
In plain English
This site has serious security issues — its SSL certificate doesn't match the domain, making it unsafe to connect to. It's likely a tracking subdomain, but the invalid certificate means you shouldn't trust it with any data. Avoid visiting this URL directly.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The SSL certificate is invalid — it doesn't match the domain name, which means any connection could be intercepted. This is a critical flaw for any online service, especially one that might handle data.
This is a subdomain with no direct WHOIS record, which is normal for subdomains. There's no clear ownership information, but this is not unusual for a backend tracking service.
The domain is not on any blacklists and is clean according to Google Web Risk. However, it has no history in the Wayback Machine, which is expected for a subdomain used for tracking.
No contact information, about page, or social media presence — but this is typical for a non-user-facing subdomain. It's not a site where you'd expect transparency.
Missing privacy policy and terms of service, but that's expected for a backend tracking endpoint. Legal obligations for data handling fall on the parent company.
DNS resolves to multiple IPs hosted on Amazon's cloud. The site sets some security headers, but DNSSEC is not enabled and email records are absent, which is fine for a tracking domain.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.