If you’ve come across raffaueq.fyi and are wondering whether it’s safe to log in, here’s what you need to know. The site presents a Nextcloud login page, which is software used for file storage and sharing. That alone isn’t suspicious — many people run their own Nextcloud servers. But the lack of transparency around who operates this particular instance is a red flag. There’s no about page, no company name, and no privacy policy or terms of service. For a site that will handle your password and potentially your files, that’s a real gap. The technical security is decent — modern TLS, good headers, and a clean reputation — so the server itself isn’t obviously compromised. But the bigger question is trust. Most legitimate Nextcloud providers, even personal ones, at least include a brief notice about who runs the service or how your data is handled. Without that, you’re essentially handing your credentials to an anonymous operator. The site also has no history on the Wayback Machine, so it’s likely very new or rarely used. If you absolutely need to use this instance, consider using a unique password and avoid storing anything sensitive until you can verify the operator’s identity. For now, the safest verdict is caution. Raffaueq.fyi reviews are nonexistent, and the is raffaueq.fyi a scam question comes down to the missing compliance and ownership details rather than any technical failure. It’s not obviously fake, but it’s not obviously trustworthy either.
In plain English
This looks like a personal Nextcloud instance, but there’s very little information about who runs it. The site has no privacy policy or terms of service, which is a concern for a login page. I’d treat it as a private server and be careful about what data you put on it until you know more about the operator.
Where the score comes from
Solid security setup: modern TLS, a valid certificate, and protections against clickjacking and script injection. The only blemish is that the server still accepts outdated TLS 1.0 and 1.1 connections, which is a minor risk for a login page.
Who runs this Nextcloud instance is unclear. The domain’s WHOIS is hidden by the .fyi TLD, there’s no about page, no team, and no social media links. For a site that asks for your password, that’s a meaningful gap.
No blacklists or threat warnings, which is good. But the site has no history in the Wayback Machine and no external reviews, so it’s hard to know if it’s been around or trusted by others.
Contact information is present, and the site publishes a security.txt policy, which is a positive sign. But there’s no about page, no social media presence, and no explanation of who operates the service.
A site that stores login credentials and files should have a privacy policy and terms of service. Neither is present. That’s a real compliance gap, even if this is a personal project.
The site uses Cloudflare for performance and has solid DNS configuration. It’s missing DNSSEC and doesn’t handle email, but those are not unusual for a self-hosted file platform.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →