DARKORA WEBSITE INTELLIGENCE

decodez.net

https://decodez.net/

Last scan: July 26, 2026 12 evidence signals Low confidence 3,400 ms evidence time Independent sources checked
DARKORA RISK SCORE
49/100
Caution advised

The report is complete but does not yet meet every publication threshold.

ASSESSMENT SUMMARY

What the collected evidence means

The evidence is mixed or incomplete, so the website deserves a careful manual check. Normal homepage content was not fully accessible because the scan received a challenge response; CDN or challenge-page headers were not treated as proof about the underlying site. Its TLS certificate was valid at scan time. Registration records show the domain has existed for more than two years. Confidence is low based on 7 distinct evidence groups collected during the latest scan. The result is a risk assessment, not proof that decodez.net is legitimate or fraudulent.

9positive factors3caution factors12signals collected
CONTENT VERIFICATION LIMITED

Challenge response detected

A Cloudflare anti-bot challenge was returned instead of the website homepage.

Detected provider: Cloudflare
LIVE SITE PREVIEW

Homepage screenshot

https://decodez.net/
Screenshot of decodez.net captured during the latest DarkOra scan
POSITIVE FACTORS

Signals that support trust

9

Valid TLS certificate

The certificate is trusted, matches the hostname and is currently valid.

TLS · transport · +7 points

HTTPS is active

The final page is delivered through an encrypted HTTPS connection.

Transport · transport · +4 points

Website responded successfully

The scanned destination returned HTTP 200.

HTTP · transport · +3 points

Established domain registration

Registration records indicate an age of more than two years.

RDAP · domain · +3 points

Domain email controls are published

The domain exposes multiple mail-routing or anti-spoofing controls.

DNS · domain · +2 points

Responsive origin server

The initial request completed in about 98 ms.

Performance · transport · +1 points

Public DNS resolution

The domain resolves to 4 validated public network addresses.

DNS · domain · +1 points

Nameserver redundancy

At least two authoritative nameservers were found.

DNS · domain · +1 points

Public routing identity found

RIPEstat mapped the address to AS13335 and prefix 188.114.96.0/24.

RIPEstat · domain · +1 points
CAUTION FACTORS

Signals worth reviewing

3

Anti-bot challenge page detected

The scanner received a challenge page associated with Cloudflare. The underlying site content was not scored as verified evidence.

Content · behavior · -8 points

Website identity could not be verified

The scanner received a challenge page instead of the normal homepage, so contact and policy evidence could not be trusted.

Content · transparency · -5 points

Origin browser protections were not verified

The scanner received an access-control page, so its headers may belong to a CDN or anti-bot service rather than the website itself.

Security headers · security · 0 points
REPORT EVIDENCE

A deeper view of the latest scan

These values were observed at scan time and may change when the website, DNS or certificate configuration changes.

NETWORK & DNS

Infrastructure footprint

Resolved IP addresses
188.114.97.0, 188.114.96.0, 2a06:98c1:3121::, 2a06:98c1:3120::
Authoritative nameservers
2
Mail / MX records
3
CAA policy
Not found
SPF policy
Published
DMARC policy
Not found
HTTPS & TLS

Connection security

HTTP status
200
Final protocol
HTTPS
Certificate validation
Trusted and valid
Certificate issuer
TLS protocol / cipher
TLSv1.3 TLS_AES_256_GCM_SHA384
Certificate expires
October 18, 2026
DOMAIN RECORD

Registration context

Approximate age
1,569 days
Registered
April 8, 2022
Expires
April 8, 2027
Registrar
CSL Computer Service Langenbach GmbH d/b/a joker.com
RDAP status entries
1
RDAP available
Yes
PAGE & IDENTITY

Homepage transparency

Page title
Decodez | ionCube & SourceGuardian Decoder - PHP 5.6 ~ 8.5
Canonical URL
https://decodez.net/
Readable words
600
Contact signals
1
Policy / company links
3
Social profiles
Telegram, Instagram
BROWSER SECURITY

Origin headers not verified

HSTSNot verified on the origin page
Content Security PolicyNot verified on the origin page
X-Frame-OptionsNot verified on the origin page
X-Content-Type-OptionsNot verified on the origin page
Referrer-PolicyNot verified on the origin page
Permissions-PolicyNot verified on the origin page
INDEPENDENT SIGNALS

External security and reputation context

These results are requested from named public providers by the background enrichment worker. Provider failures remain separate from the DarkOra base scan and never create a fabricated result.

GOOGLE PUBLIC DNSNot validated

DNSSEC authenticated data

The provider answered, but authenticated DNSSEC data was not confirmed.

Response code 0 · 2 answers
MDN HTTP OBSERVATORYD-

Independent header grade

MDN evaluated the live HTTP security configuration independently from DarkOra.

25 points · 5/10 tests passed
CHROMIUM HSTS PRELOADUnknown

Preload-list status

The hostname is not currently confirmed as preloaded. This alone is not a scam indicator.

Independent transport-hardening context
RIPESTAT NETWORKAS13335

Routing and origin identity

The scanned address maps to prefix 188.114.96.0/24.

BGP present · registry present
GOOGLE WEB RISK

Official threat-list context

The optional official Web Risk integration is not configured.

Checked Jul 26, 2026
TRUSTPILOT

Official profile lookup

Trustpilot requires an official API key. DarkOra does not scrape profile pages; administrators can enable the supported integration from the dashboard.

Open Trustpilot profile
HTTP DELIVERY

Response and redirect details

Origin address used
188.114.96.0
Server header
cloudflare
Content type
text/html; charset=UTF-8
Downloaded response
67,752 bytes
Redirect hops
0
Initial response time
98 ms
CONTENT FOOTPRINT

What the homepage exposes

Internal links
35
External links
14
External-link ratio
29%
Forms detected
1
Suspicious phrase groups
0
Scanner methodology
Version 4.0.0
REPORT GUIDANCE

Questions readers commonly ask

The answers below describe this report’s scope and limitations in plain language.

Is decodez.net safe to use?+

The evidence is mixed or incomplete, so the website deserves a careful manual check. Normal homepage content was not fully accessible because the scan received a challenge response; CDN or challenge-page headers were not treated as proof about the underlying site. Its TLS certificate was valid at scan time. Registration records show the domain has existed for more than two years. Confidence is low based on 7 distinct evidence groups collected during the latest scan. The result is a risk assessment, not proof that decodez.net is legitimate or fraudulent.

How is the DarkOra score calculated?+

The score combines six independently capped areas: connection and TLS, domain maturity and DNS, browser security, identity and transparency, page behaviour, and external reputation. Anti-bot pages are not treated as the website’s real content.

Does a high score guarantee legitimacy?+

No. Automated evidence can reduce uncertainty, but it cannot prove ownership, product quality or honest intent. Verify payment details, company identity and independent reputation before sharing sensitive information.

COMMUNITY EXPERIENCE

Reviews from DarkOra members

Every review is tied to an account, checked for spam and published only after manual moderation. Reviews do not replace technical evidence.

No approved community review yet

Be the first member to describe a direct experience with this website.

SHARE A DIRECT EXPERIENCE

Write a review

Use this report as one part of your decision. Automated checks can miss newly created threats and may flag legitimate configurations. Verify the organization, payment recipient, refund terms and independent reputation before sharing money, credentials or sensitive data.