DARKORA WEBSITE INTELLIGENCE

digikala.com

https://www.digikala.com/

Last scan: July 26, 2026 20 evidence signals High confidence
DARKORA TECHNICAL SCORE
85/100
Caution advised

This report meets the evidence and publication threshold.

ASSESSMENT SUMMARY

What the collected evidence means

digikala.com received a trust score of 85/100, with high confidence and an overall assessment of strong trust signals. The strongest positive evidence is valid tls certificate; established domain registration. The main concern is missing content-security-policy. A secondary concern is contact information was not evident. The checked destination was https://www.digikala.com/, returning HTTP 200. Public registration data indicates an approximate domain age of 7201 days. This report is an evidence-based screening result, not a guarantee that a website is safe or fraudulent.

13positive factors7caution factors20signals collected
LIVE SITE PREVIEW

Homepage screenshot

https://www.digikala.com/
Screenshot queued

The browser capture runs separately after the technical scan.

POSITIVE FACTORS

Signals that support trust

13

Valid TLS certificate

The certificate matches the domain and is valid for about 51 more days.

TLS · evidence · +10 points

Established domain registration

Registration records indicate the domain has existed for about 19 years.

RDAP · evidence · +10 points

HTTPS is enabled

The final website destination uses an encrypted HTTPS connection.

Transport · evidence · +8 points

Website responded successfully

The primary website returned HTTP 200 during the scan.

HTTP · evidence · +5 points

Public DNS resolution

The domain resolves to 1 validated public network address.

DNS · evidence · +4 points

HSTS protects repeat visits

HTTP Strict Transport Security is enabled.

Security headers · evidence · +3 points

Multiple authoritative nameservers

At least two nameservers were found, which improves DNS resilience.

DNS · evidence · +2 points

Certificate is not near expiry

The current certificate has more than 30 days remaining.

TLS · evidence · +2 points

Mail routing is configured

Mail exchange records are published for the domain.

DNS · evidence · +1 points

Canonical redirect is consistent

The website redirects within the same domain family before loading.

HTTP · evidence · +1 points

Descriptive page title found

The homepage provides the title “فروشگاه اینترنتی دیجی‌کالا”.

Content · evidence · +1 points

Page description is provided

The homepage includes a descriptive meta summary.

Content · evidence · +1 points

robots.txt is available

The website publishes crawler instructions.

Site files · evidence · +1 points
CAUTION FACTORS

Signals worth reviewing

7

Missing content-security-policy

The response did not include the content-security-policy security header.

Security headers · evidence · -3 points

Contact information was not evident

No clear email address, telephone number, or contact link was found on the scanned page.

Content · evidence · -3 points

Legal policy links were not found

Privacy, terms, refund, or company policy links were not evident on the scanned page.

Content · evidence · -3 points

Framing protection was not found

No X-Frame-Options or CSP frame-ancestors rule was detected.

Security headers · evidence · -2 points

Missing x-content-type-options

The response did not include the x-content-type-options security header.

Security headers · evidence · -1 points

Missing referrer-policy

The response did not include the referrer-policy security header.

Security headers · evidence · -1 points

Missing permissions-policy

The response did not include the permissions-policy security header.

Security headers · evidence · -1 points
TECHNICAL EVIDENCE

A deeper view of the latest scan

These values were observed at scan time and may change when the website, DNS or certificate configuration changes.

NETWORK & DNS

Infrastructure footprint

Resolved IP addresses
185.188.104.10
Authoritative nameservers
2
Mail / MX records
1
CAA policy
Not found
SPF policy
Not found
DMARC policy
Not found
HTTPS & TLS

Connection security

HTTP status
200
Final protocol
HTTPS
Certificate validation
Trusted and valid
Certificate issuer
TLS protocol / cipher
Unavailable
Certificate expires
September 15, 2026
DOMAIN RECORD

Registration context

Approximate age
7,201 days
Registered
November 7, 2006
Expires
November 7, 2029
Registrar
CSL Computer Service Langenbach GmbH d/b/a joker.com
RDAP status entries
1
RDAP available
Yes
PAGE & IDENTITY

Homepage transparency

Page title
فروشگاه اینترنتی دیجی‌کالا
Canonical URL
Unavailable
Readable words
0
Contact signals
0
Policy / company links
0
Social profiles
None detected
BROWSER SECURITY

1/6 monitored headers present

17%
HSTSmax-age=31536000; includeSubDomains
Content Security PolicyNot detected
X-Frame-OptionsNot detected
X-Content-Type-OptionsNot detected
Referrer-PolicyNot detected
Permissions-PolicyNot detected
INDEPENDENT SIGNALS

External security and reputation context

These results are requested from named public providers by the background enrichment worker. Provider failures remain separate from the DarkOra base scan and never create a fabricated result.

Independent checks will run on the next refresh

This report predates the external-provider module. Queue a fresh scan or allow the scheduled refresh to enrich it.

GOOGLE PUBLIC DNSUnavailable

DNSSEC authenticated data

The provider could not be reached during this enrichment run.

Response code — · 0 answers
MDN HTTP OBSERVATORY—

Independent header grade

No completed Observatory result was available during this run.

No score · 0/0 tests passed
CHROMIUM HSTS PRELOADUnknown

Preload-list status

The preload service was unavailable.

Independent transport-hardening context
RIPESTAT NETWORK—

Routing and origin identity

No public routing identity was returned for the scanned address.

BGP unconfirmed · registry unconfirmed
TRUSTPILOT—

Official profile lookup

Trustpilot requires an official API key. DarkOra does not scrape profile pages; administrators can enable the supported integration from the dashboard.

Open Trustpilot profile
HTTP DELIVERY

Response and redirect details

Origin address used
185.188.104.10
Server header
Not disclosed
Content type
text/html; charset=UTF-8
Downloaded response
15,790 bytes
Redirect hops
1
Initial response time
2,874 ms
CONTENT FOOTPRINT

What the homepage exposes

Internal links
0
External links
0
External-link ratio
0%
Forms detected
0
Suspicious phrase groups
0
Scanner methodology
Version 1.0.0
REPORT GUIDANCE

Questions readers commonly ask

The answers below describe this report’s scope and limitations in plain language.

Is digikala.com safe to use?+

digikala.com received a trust score of 85/100, with high confidence and an overall assessment of strong trust signals. The strongest positive evidence is valid tls certificate; established domain registration. The main concern is missing content-security-policy. A secondary concern is contact information was not evident. The checked destination was https://www.digikala.com/, returning HTTP 200. Public registration data indicates an approximate domain age of 7201 days. This report is an evidence-based screening result, not a guarantee that a website is safe or fraudulent.

How is the DarkOra score calculated?+

The score combines capped evidence from connection security, domain and DNS history, browser protections, identity transparency and risky page behaviour. External provider results are shown with their source and timestamp.

Does a high score guarantee legitimacy?+

No. Automated evidence can reduce uncertainty, but it cannot prove ownership, product quality or honest intent. Verify payment details, company identity and independent reputation before sharing sensitive information.

MORE WEBSITE REPORTS

Recently completed checks

Explore other evidence-rich reports. Links are added only for completed pages that passed DarkOra’s publication threshold.

Low technical risk

google.com

69/10030 signals
Low technical risk

doniaweb.com

72/10024 signals
Low technical risk

decodez.net

75/10028 signals
Low technical risk

unzend.net

69/10026 signals
COMMUNITY EXPERIENCE

Reviews from DarkOra members

Every review is tied to an account, checked for spam and published only after manual moderation. Reviews do not replace technical evidence.

No approved community review yet

Be the first member to describe a direct experience with this website.

SHARE A DIRECT EXPERIENCE

Write a review

Use this report as one part of your decision. Automated checks can miss newly created threats and may flag legitimate configurations. Verify the organization, payment recipient, refund terms and independent reputation before sharing money, credentials or sensitive data.