It's a natural question to ask 'is eu-custom-gateway.idoocloud.com safe?' because the site doesn't present itself as anything usable. The homepage returns a JSON error about a missing app key, indicating this is likely an API gateway that isn't configured for public access. Without an about page, contact information, or privacy policy, there's no way to know who operates this service or what they do with data. Most legitimate cloud infrastructure services provide clear documentation and support channels. Here, the lack of transparency outweighs the positive technical signals like a valid SSL certificate and clean blacklist status. Our advice: treat this site with suspicion. Don't share any personal or business data with it. If you've been directed to this URL by a service you use, contact that service's support directly to verify.
No — eu-custom-gateway.idoocloud.com doesn't look safe
In plain English
This site is suspicious. It's a broken API gateway that returns an error instead of usable content, and there's no way to find out who runs it or how to contact them. The lack of transparency and legal protections makes it impossible to trust, even though the server itself isn't compromised.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The site uses a valid SSL certificate and blocks clickjacking, but it still accepts outdated TLS 1.0 and 1.1 connections. That's a known vulnerability, and for a backend service that might handle sensitive data, it's a real gap.
There's no information about who runs this site. No about page, no business disclosure, and no identifiable company name. For a service asking for an app key, that's a serious lack of accountability.
The domain isn't on any blacklists and hasn't been flagged by Google. But it also has no visible web history or external reviews, so there's not enough data to say it's reputable either.
This site gives you nothing. No contact info, no social media presence, no about page. It's essentially a black box.
There's no privacy policy or terms of service. Even for an API service, you'd expect at least a privacy notice if any data passes through it.
The technical setup is decent: fast load times, hosted on AWS with a modern web server. But no email handling and no DNSSEC, which are standard for a serious service.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.