production.receiver.melcloud.com is a subdomain of the MELCloud platform, which is a legitimate cloud service for Mitsubishi Electric HVAC systems. But this particular endpoint isn't meant to be visited by people — it's a backend server, likely an API or data receiver. The problem is that it's completely broken from a security perspective. There's no SSL certificate, the connection fails with a TLS handshake error, and the server returns a 403 Forbidden error to any attempt to reach it. For a production server that might be handling data, this is a serious red flag. Even if you're a developer trying to integrate with this service, you should not send any data to this endpoint until it's properly secured. The lack of encryption means anything transmitted would be in plain text, and the connection failure suggests the server isn't configured correctly. There's no indication this is a scam — it's just a poorly configured server that isn't safe to use right now.
No — production.receiver.melcloud.com doesn't look safe
In plain English
This site is dangerous to use in its current state. It's completely unreachable via a secure connection, and the TLS handshake failure means any data you tried to send would be unprotected or simply not delivered. While it's a subdomain of the legitimate MELCloud service, this particular server is misconfigured and should not be trusted for any purpose.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The site fails to establish a secure connection — no HTTPS, a TLS handshake failure, and it's completely unreachable from a browser. For any server that handles data, this is a critical failure.
This is a subdomain of melcloud.com, a known cloud service from Mitsubishi Electric. The lack of direct WHOIS data for the subdomain is expected and not a concern.
No blacklist hits and no history in the Wayback Machine, which is normal for a backend endpoint that isn't meant to be crawled. There's no evidence of abuse, but also no track record.
Backend servers don't need about pages or contact info, so the absence of these is perfectly normal. The site is not designed for public interaction.
Legal pages like privacy policies are not relevant for a non-consumer-facing endpoint. No compliance gap here.
Hosted on AWS, which is fine, but the missing SSL, email setup, and security headers are serious for a production server. The site is effectively broken from a security standpoint.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.