cmsapigateway.exlibris.ch is a subdomain of the Swiss company Ex Libris, a well-known provider of library management software. That parent company is legitimate, and the domain itself shows no signs of phishing or malware. However, the site itself is dead in the water: it returns a simple 404 error page with no content. For a technical endpoint like an API gateway, this is a red flag. It could be a misconfigured server, a deprecated service, or simply a URL that was never meant to be visited directly. If you're a developer or system administrator trying to integrate with Ex Libris products, you should go straight to the main exlibris.ch website to find the correct API documentation and endpoints. Do not attempt to use this broken URL for anything. There are no reviews, no Trustpilot profile, and no web archive history, so there's no track record to rely on. The site is not dangerous, but it's also not useful. Treat it as a placeholder that needs verification before you trust it with any data or requests.
Not sure — double-check cmsapigateway.exlibris.ch first
In plain English
This site isn't a scam, but it's not a working website either. It returns a 404 error, meaning there's nothing to use or trust. The domain is a subdomain of a known Swiss company, but the specific URL is broken. If you were expecting a service here, you won't find it. Proceed with caution and verify the correct endpoint through the main exlibris.ch site.
Where the score comes from
The site uses a valid SSL certificate from a reputable issuer and enforces HTTPS with strong security headers. No malware or blacklist flags. This is exactly what you'd expect from a legitimate technical service.
The domain is a subdomain of exlibris.ch, which belongs to a well-known Swiss library software company. While the WHOIS is hidden for this specific subdomain, the parent domain's reputation provides strong identity assurance.
The site returns a 404 error and has no history in the Wayback Machine. A working website should serve content, not a blank error page. This suggests the endpoint is either misconfigured, abandoned, or not intended for public access.
There is no contact information, about page, or social media presence on this subdomain. For a technical service that might be used by developers, the lack of any communication channels is a concern, though the parent company is transparent.
No privacy policy or terms of service are present on this subdomain. Given that it's a subdomain of a company that almost certainly has legal pages on its main site, this is a minor gap. The 404 status makes compliance moot anyway.
The site loads quickly, uses modern TLS 1.3, and is hosted on a reputable Swiss network. DNSSEC is not enabled, which is common for subdomains, and there are no email records. Nothing alarming, but not best-in-class.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →