DARKORA WEBSITE INTELLIGENCE

doniaweb.com

https://doniaweb.com/

Last scan: July 26, 2026 11 evidence signals Low confidence 3,342 ms evidence time Independent sources checked

DARKORA RISK SCORE

49/100

Caution advised

The report is complete but does not yet meet every publication threshold.

ASSESSMENT SUMMARY

What the collected evidence means

The evidence is mixed or incomplete, so the website deserves a careful manual check. Normal homepage content was not fully accessible because the scan received a challenge response; CDN or challenge-page headers were not treated as proof about the underlying site. Its TLS certificate was valid at scan time. Registration records show the domain has existed for more than two years. Confidence is low based on 7 distinct evidence groups collected during the latest scan. The result is a risk assessment, not proof that doniaweb.com is legitimate or fraudulent.

7positive factors4caution factors11signals collected

CONTENT VERIFICATION LIMITED

Challenge response detected

A Cloudflare anti-bot challenge was returned instead of the website homepage.

Detected provider: Cloudflare

LIVE SITE PREVIEW

Homepage screenshot

July 26, 2026

https://doniaweb.com/

Screenshot of doniaweb.com captured during the latest DarkOra scan

POSITIVE FACTORS

Signals that support trust

Valid TLS certificate

The certificate is trusted, matches the hostname and is currently valid.

TLS · transport · +7 points

HTTPS is active

The final page is delivered through an encrypted HTTPS connection.

Transport · transport · +4 points

Long-established domain registration

Registration records indicate an age of about 7 years.

RDAP · domain · +4 points

Domain email controls are published

The domain exposes multiple mail-routing or anti-spoofing controls.

DNS · domain · +2 points

Public DNS resolution

The domain resolves to 4 validated public network addresses.

DNS · domain · +1 points

Nameserver redundancy

At least two authoritative nameservers were found.

DNS · domain · +1 points

Public routing identity found

RIPEstat mapped the address to AS13335 and prefix 172.67.160.0/20.

RIPEstat · domain · +1 points

CAUTION FACTORS

Signals worth reviewing

Anti-bot challenge page detected

The scanner received a challenge page associated with Cloudflare. The underlying site content was not scored as verified evidence.

Content · behavior · -8 points

Website identity could not be verified

The scanner received a challenge page instead of the normal homepage, so contact and policy evidence could not be trusted.

Content · transparency · -5 points

Automated access was limited

The destination returned HTTP 403 and exposed an access-control or anti-bot page instead of normal site content.

HTTP · transport · -4 points

Origin browser protections were not verified

The scanner received an access-control page, so its headers may belong to a CDN or anti-bot service rather than the website itself.

Security headers · security · 0 points

REPORT EVIDENCE

A deeper view of the latest scan

These values were observed at scan time and may change when the website, DNS or certificate configuration changes.

NETWORK & DNS

Infrastructure footprint

Resolved IP addresses: 104.21.28.166, 172.67.170.242, 2606:4700:3030::ac43:aaf2, 2606:4700:3033::6815:1ca6
Authoritative nameservers: 2
Mail / MX records: 1
CAA policy: Not found
SPF policy: Published
DMARC policy: Published

HTTPS & TLS

Connection security

HTTP status: 403
Final protocol: HTTPS
Certificate validation: Trusted and valid
Certificate issuer
TLS protocol / cipher: TLSv1.3 TLS_AES_256_GCM_SHA384
Certificate expires: August 30, 2026

DOMAIN RECORD

Registration context

Approximate age: 2,800 days
Registered: November 24, 2018
Expires: November 24, 2026
Registrar: NameCheap, Inc.
RDAP status entries: 1
RDAP available: Yes

PAGE & IDENTITY

Homepage transparency

Page title: Just a moment...
Canonical URL
Readable words: 3
Contact signals: 0
Policy / company links: 0
Social profiles: None detected

BROWSER SECURITY

Origin headers not verified

—

HSTSNot verified on the origin page

Content Security PolicyNot verified on the origin page

X-Frame-OptionsNot verified on the origin page

X-Content-Type-OptionsNot verified on the origin page

Referrer-PolicyNot verified on the origin page

Permissions-PolicyNot verified on the origin page

INDEPENDENT SIGNALS

External security and reputation context

These results are requested from named public providers by the background enrichment worker. Provider failures remain separate from the DarkOra base scan and never create a fabricated result.

GOOGLE PUBLIC DNSNot validated

DNSSEC authenticated data

The provider answered, but authenticated DNSSEC data was not confirmed.

Response code 0 · 2 answers

MDN HTTP OBSERVATORYB

Independent header grade

MDN evaluated the live HTTP security configuration independently from DarkOra.

70 points · 8/10 tests passed

CHROMIUM HSTS PRELOADUnknown

Preload-list status

The hostname is not currently confirmed as preloaded. This alone is not a scam indicator.

Independent transport-hardening context

RIPESTAT NETWORKAS13335

Routing and origin identity

The scanned address maps to prefix 172.67.160.0/20.

BGP present · registry present

GOOGLE WEB RISK—

Official threat-list context

The optional official Web Risk integration is not configured.

Checked Jul 26, 2026

TRUSTPILOT—

Official profile lookup

Trustpilot requires an official API key. DarkOra does not scrape profile pages; administrators can enable the supported integration from the dashboard.

Open Trustpilot profile

HTTP DELIVERY

Response and redirect details

Origin address used: 172.67.170.242
Server header: cloudflare
Content type: text/html; charset=UTF-8
Downloaded response: 5,424 bytes
Redirect hops: 0
Initial response time: 70 ms

CONTENT FOOTPRINT

What the homepage exposes

Internal links: 0
External links: 0
External-link ratio: 0%
Forms detected: 0
Suspicious phrase groups: 0
Scanner methodology: Version 4.0.0

REPORT GUIDANCE

Questions readers commonly ask

The answers below describe this report’s scope and limitations in plain language.

Is doniaweb.com safe to use?+

How is the DarkOra score calculated?+

The score combines six independently capped areas: connection and TLS, domain maturity and DNS, browser security, identity and transparency, page behaviour, and external reputation. Anti-bot pages are not treated as the website’s real content.

Does a high score guarantee legitimacy?+

No. Automated evidence can reduce uncertainty, but it cannot prove ownership, product quality or honest intent. Verify payment details, company identity and independent reputation before sharing sensitive information.

COMMUNITY EXPERIENCE

Reviews from DarkOra members

Every review is tied to an account, checked for spam and published only after manual moderation. Reviews do not replace technical evidence.

No approved community review yet

Be the first member to describe a direct experience with this website.

SHARE A DIRECT EXPERIENCE

Write a review

Use this report as one part of your decision. Automated checks can miss newly created threats and may flag legitimate configurations. Verify the organization, payment recipient, refund terms and independent reputation before sharing money, credentials or sensitive data.