This subdomain lives under rabo.cloud, a domain that traces back to a major European bank and has been active for almost a decade. But that's where the reassurance ends. The specific URL frandr.bi-dev.azure.rabo.cloud is unreachable due to a broken SSL certificate, which means any data you try to send would not be encrypted. Legitimate banking and development services always secure their connections properly. There are no reviews for this site because it's not a public service, but accessing it could expose your browser to security warnings. Is frandr.bi-dev.azure.rabo.cloud a scam? It's more likely a misconfigured internal server than a deliberate scam, but in either case it's not a site you should use. If someone directed you here expecting a working service, that's a red flag. For any online interaction, a valid SSL certificate is the absolute baseline of trust. This site fails that test.
No — frandr.bi-dev.azure.rabo.cloud doesn't look safe
In plain English
This site is not safe to use. The SSL certificate is invalid, and the site cannot be reached normally. While the domain itself appears linked to Rabobank, the subdomain seems to be an internal development environment that is not properly configured for public access. It's best to avoid interacting with it.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The SSL certificate is invalid and the site cannot be reached over HTTPS. Any legitimate online service needs a correctly issued certificate to protect visitors.
The parent domain rabo.cloud has been registered for nearly a decade and belongs to a known financial institution. The specific subdomain, however, lacks any public ownership details.
No blacklist issues, and the domain has age on its side, but there are no archived snapshots of this subdomain, giving it no public track record.
For what appears to be an internal development environment, the absence of an about page and contact info is normal and not a concern.
Legal pages like terms and privacy policies are not expected for a non-commercial, internal or dev subdomain.
Hosted on Microsoft Azure with a fast load time, but missing some basic security protections like strict browser security headers and DNSSEC. These are common oversights for development servers.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.