Public services available
Security / Privacy / Forensics Authorized use only
DarkOra.netSECURITY / PRIVACY / FORENSICS
EnglishEN
Language6 · EN
Explore products
Featured software
DeGuardv1.0.0 / Windows / Linux Black Matrixv3.1.0 / Windows / Linux TeleBoosterv1.0.0 / Windows / Linux
Sign in Explore products
Website security intelligenceHigh confidence

Is zap-hosting.com safe?

Independent website safety report covering the connection, domain history, browser protections, page behavior and reputation signals observed by DarkOra.

https://zap-hosting.com/en/ HTTP 200
Last analyzedJuly 31, 2026
Evidence collected28 signals
Scan duration6,280 ms
REPORT OVERVIEW

What the latest scan says about zap-hosting.com

DarkOra separates technical evidence from community opinion and explains the factors behind the score.

Assessment summary

The available evidence contains more reassuring signals than material concerns. Its TLS certificate was valid at scan time. Registration records show the domain has existed for more than two years. The accessible homepage exposed a contact route and no obvious policy links. Confidence is high based on 7 distinct evidence groups collected during the latest scan. The result is a risk assessment, not proof that zap-hosting.com is legitimate or fraudulent.

19Positive factors
9Caution factors
28Total signals
ConnectionHTTPS

Valid TLS certificate observed

Domain history17.6 years

Vautron Rechenzentrum AG

Browser hardening17%

1 of 6 monitored headers

Independent gradeF

MDN HTTP Observatory result

CAPTURED HOMEPAGE

Visual snapshot from the scan

https://zap-hosting.com/en/
Screenshot of zap-hosting.com captured during the latest DarkOra website safety scan
KEY FINDINGS

Evidence that influenced the score

Review both columns. A high total score does not cancel a material caution signal.

POSITIVE FACTORS

Signals that support trust

19

Valid TLS certificate

The certificate is trusted, matches the hostname and is currently valid.

TLS · transport · +7 points

HTTPS is active

The final page is delivered through an encrypted HTTPS connection.

Transport · transport · +4 points

Long-established domain registration

Registration records indicate an age of about 17 years.

RDAP · domain · +4 points

Website responded successfully

The scanned destination returned HTTP 200.

HTTP · transport · +3 points

Domain email controls are published

The domain exposes multiple mail-routing or anti-spoofing controls.

DNS · domain · +2 points

Contact route found

The page exposes a visible email address.

Content · transparency · +2 points

Normal homepage content was accessible

The scanner received a usable HTML homepage rather than an interstitial or access-control page.

Content · behavior · +2 points

No monitored high-risk wording detected

The accessible homepage did not contain the monitored high-pressure or credential-request phrases.

Content · behavior · +2 points

Responsive origin server

The initial request completed in about 1127 ms.

Performance · transport · +1 points

Public DNS resolution

The domain resolves to 4 validated public network addresses.

DNS · domain · +1 points

Nameserver redundancy

At least two authoritative nameservers were found.

DNS · domain · +1 points

Clickjacking protection

Framing is restricted through X-Frame-Options or CSP.

Security headers · security · +1 points

Descriptive page title

The homepage provides a usable browser title.

Content · transparency · +1 points

Page description is provided

The homepage includes a descriptive meta summary.

Content · transparency · +1 points

robots.txt is available

The website publishes a non-empty robots.txt file.

Public files · transparency · +1 points

Substantive homepage content

The scanned page contains enough readable text to explain its purpose.

Content · transparency · +1 points

Consistent canonical redirect

Redirects remain within the same domain family.

HTTP · behavior · +1 points

Public routing identity found

RIPEstat mapped the address to AS13335 and prefix 104.20.32.0/20.

RIPEstat · domain

Password form uses HTTPS

Detected password forms are delivered through HTTPS.

Forms · behavior
CAUTION FACTORS

Signals worth reviewing

9

Hidden embedded frames detected

2 hidden or zero-sized iframes were found.

Content · behavior · -6 points

Weak MDN Observatory grade

MDN HTTP Observatory assigned grade F, indicating weak browser hardening.

MDN HTTP Observatory · security · -2 points

Policy links not found

Privacy, terms, refund or company-information links were not detected.

Content · transparency · -2 points

Missing strict-transport-security

The response did not include this browser security header. Missing headers affect hardening, but do not by themselves prove fraud.

Security headers · security · -1 points

Missing content-security-policy

The response did not include this browser security header. Missing headers affect hardening, but do not by themselves prove fraud.

Security headers · security · -1 points

Some cookies lack protection

1 response cookie lacked Secure or HttpOnly attributes.

HTTP cookies · security · -1 points

Missing x-content-type-options

The response did not include this browser security header. Missing headers affect hardening, but do not by themselves prove fraud.

Security headers · security

Missing referrer-policy

The response did not include this browser security header. Missing headers affect hardening, but do not by themselves prove fraud.

Security headers · security

Missing permissions-policy

The response did not include this browser security header. Missing headers affect hardening, but do not by themselves prove fraud.

Security headers · security
TECHNICAL EVIDENCE

Network, certificate and page-level observations

These values were captured at scan time and may change after a server, DNS or certificate update.

NETWORK & DNS

Infrastructure footprint

Resolved IP addresses
104.20.47.220, 172.66.151.174, 2606:4700:10::6814:2fdc, 2606:4700:10::ac42:97ae
Authoritative nameservers
2
Mail / MX records
1
CAA policy
Not found
SPF policy
Published
DMARC policy
Published
HTTPS & TLS

Connection security

HTTP status
200
Final protocol
HTTPS
Certificate validation
Trusted and valid
Certificate issuer
TLS protocol / cipher
TLSv1.3 TLS_AES_256_GCM_SHA384
Certificate expires
October 14, 2026
DOMAIN RECORD

Registration context

Approximate age
17.6 years
Registered
December 25, 2008
Expires
December 25, 2026
Registrar
Vautron Rechenzentrum AG
RDAP status entries
1
RDAP available
Yes
BROWSER SECURITY HEADERS

1/6 monitored protections detected

17%
HSTSNot detected
Content Security PolicyNot detected
X-Frame-Optionssameorigin
X-Content-Type-OptionsNot detected
Referrer-PolicyNot detected
Permissions-PolicyNot detected
INDEPENDENT SIGNALS

External security and reputation context

Provider failures stay separate from the base scan. DarkOra never fabricates a provider result.

GOOGLE PUBLIC DNSNot validated

DNSSEC authenticated data

The provider answered, but authenticated DNSSEC data was not confirmed.

Response code 0 · 2 answers
MDN HTTP OBSERVATORYF

Independent header grade

MDN evaluated the live HTTP security configuration independently from DarkOra.

20 points · 4/10 tests passed
CHROMIUM HSTS PRELOADUnknown

Preload-list status

The hostname is not currently confirmed as preloaded. This alone is not a scam indicator.

Independent transport-hardening context
RIPESTAT NETWORKAS13335

Routing and origin identity

The scanned address maps to prefix 104.20.32.0/20.

BGP unconfirmed · registry present
GOOGLE WEB RISK—

Official threat-list context

The optional official Web Risk integration is not configured.

Checked Aug 1, 2026
TRUSTPILOT—

Official profile lookup

Trustpilot requires an official API key. DarkOra does not scrape profile pages.

Open Trustpilot profile
HTTP DELIVERY

Response and redirect details

Origin address used
104.20.47.220
Server header
cloudflare
Content type
text/html; charset=UTF-8
Downloaded response
426,433 bytes
Redirect hops
1
Initial response time
1,127 ms
CONTENT FOOTPRINT

What the homepage exposes

Internal links
4
External links
1
External-link ratio
20%
Forms detected
7
Suspicious phrase groups
0
Scanner methodology
Version 4.0.0
REPORT GUIDANCE

Questions about this website safety report

Plain-language answers explain what the score can and cannot tell you.

Is zap-hosting.com safe to visit?+

The available evidence contains more reassuring signals than material concerns. Its TLS certificate was valid at scan time. Registration records show the domain has existed for more than two years. The accessible homepage exposed a contact route and no obvious policy links. Confidence is high based on 7 distinct evidence groups collected during the latest scan. The result is a risk assessment, not proof that zap-hosting.com is legitimate or fraudulent.

What is the DarkOra score for zap-hosting.com?+

The latest DarkOra website safety score is 68 out of 100, classified as Low observed risk. The score reflects observable technical and reputation evidence collected during the latest scan.

How is this website safety score calculated?+

DarkOra uses six independently capped areas: connection and TLS, domain maturity and DNS, browser security, identity and transparency, page behavior, and external reputation. No single signal determines the entire score.

When was zap-hosting.com last checked?+

The report was last updated on July 31, 2026. Website, DNS and certificate settings can change after this time.

Does a high score prove that zap-hosting.com is legitimate?+

No. Automated evidence can reduce uncertainty, but it cannot prove ownership, product quality or honest intent. Verify the organization, payment destination, refund terms and independent reputation before sharing sensitive information.

MORE WEBSITE REPORTS

Recently completed safety checks

Only completed reports that passed DarkOra’s publication threshold are linked here.

Low observed risk

mirai.com

76/10028 signals
Low observed risk

www.ing.com.au

78/10026 signals
Low observed risk

scicluna.de

66/10024 signals
Low observed risk

nowpayments.io

70/10025 signals
COMMUNITY EXPERIENCE

Reviews from DarkOra members

Account-linked reviews are screened for spam and published only after manual moderation.

No approved community review yet

Be the first member to describe a direct experience with this website.

SHARE A DIRECT EXPERIENCE

Write a review

Use this report as one part of your decision. Automated checks can miss newly created threats and may flag legitimate configurations. Verify the organization, payment recipient, refund terms and independent reputation before sharing money, credentials or sensitive data.