Connection & TLS
Reachability, HTTPS enforcement, certificate validity, hostname match, lifetime and response quality.
DarkOra checks live technical evidence, domain maturity, page behaviour and independent reputation signals, then explains every point in a transparent 100-point risk score with a current site preview.
Every report explains why the score moved. A single signal never decides whether a website is trustworthy or fraudulent.
Reachability, HTTPS enforcement, certificate validity, hostname match, lifetime and response quality.
Registration age, expiry, public resolution, nameservers, DNSSEC context and email anti-spoofing controls.
Origin security headers, cookie attributes, mixed active content and independent Observatory evidence.
Contact routes, company information, privacy and terms links, page metadata and public security files.
Redirects, credential forms, external submission targets, hidden frames, suspicious wording and anti-bot states.
Optional official threat-list checks and sufficiently established independent review history.
Each check becomes a structured report that can be refreshed, compared and enriched without making visitors wait for network-heavy work.
DNS, TLS, registration and homepage checks run through a controlled worker instead of holding the public request open.
A separate capture job uses local Chromium when available and automatically falls back to a managed screenshot provider.
Member ratings add context without overpowering the evidence score. Every submission stays private until an administrator approves it.
The score starts at a neutral baseline. Verifiable safeguards add confidence; concrete technical concerns reduce it. Missing evidence is treated cautiously, but it is not automatically classified as fraud.
Only reports that meet the publication threshold are listed here.
Clear answers about scoring, confidence and the limits of automated website checks.
DarkOra scores six capped areas: connection and TLS, domain maturity and DNS, browser security, identity and transparency, page behaviour, and external reputation. Every factor is shown in the report.
No automated checker can guarantee legitimacy. DarkOra highlights observable evidence and risk indicators so visitors can make a better-informed decision.
Confidence is reduced when a site blocks automated access, returns an anti-bot challenge, or when registration and independent provider data are unavailable.
Important: A technical score cannot prove that a business is legitimate or fraudulent. Confirm the company identity, payment destination, refund terms and independent reputation before sharing money or sensitive information.