cryptocurrency blockchain

healthcare medical

technology software

finance banking

documentation technical

The domain name 'www.decorsteals.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. Its registrable label 'decorsteals' stretches across 11 characters containing 4 vowels alongside seven consonants. Splitting it apart reveals 2 words: decor, steals. Expect 5.5 characters per word on average. The linguistic tilt is English for 'decor'. You may catch it in Chinese (Pinyin) and Dutch as well.

html/98/45/98453b64-72ff-4f0e-8769-24f617ad4c30.html.gz

block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;

sandbox allow-scripts allow-forms allow-modals allow-popups allow-downloads allow-top-navigation-by-user-activation

script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri /cspreport/allowlist

default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-VseXGOnw5KqClt2jcPTXnJ+zfeAiumcRtUm8syabgPtHRgH7' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-VseXGOnw5KqClt2jcPTXnJ+zfeAiumcRtUm8syabgPtHRgH7' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp

sandbox allow-scripts; report-to csp-reports

frame-ancestors 'self'; report-uri /csp-report?source%5Baction%5D=web_pixel_javascript_response&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=web_pixels&source%5Bsection%5D=services&source%5Buuid%5D=800c6498-00ce-4fc2-83ff-433f7050b4e5-1760108287; report-to shopify-csp

frame-ancestors 'self'; report-uri /csp-report?source%5Baction%5D=web_pixel_javascript_response&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=web_pixels&source%5Bsection%5D=services&source%5Buuid%5D=cc2391b8-e714-4151-b015-55c54defc9e4-1760108288; report-to shopify-csp

; report-uri /csp-report?source%5Baction%5D=web_pixel_html_response&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=web_pixels&source%5Bsection%5D=services&source%5Buuid%5D=336d1f9d-387e-4888-875a-44362b952b4a-1760109094; report-to shopify-csp

; report-uri /csp-report?source%5Baction%5D=web_pixel_html_response&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=web_pixels&source%5Bsection%5D=services&source%5Buuid%5D=e486f65c-3664-461c-b71e-fdf05e3985d1-1760109094; report-to shopify-csp

; report-uri /csp-report?source%5Baction%5D=web_pixel_html_response&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=web_pixels&source%5Bsection%5D=services&source%5Buuid%5D=2aa4a4ea-4a34-4fb4-b873-e9b3e03202d7-1760109094; report-to shopify-csp

; report-uri /csp-report?source%5Baction%5D=web_pixel_html_response&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=web_pixels&source%5Bsection%5D=services&source%5Buuid%5D=e0c26ad9-9443-42fa-9ab7-489ac2397207-1760109094; report-to shopify-csp

frame-ancestors 'self'; report-uri /csp-report?source%5Baction%5D=web_pixel_html_response&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=web_pixels&source%5Bsection%5D=services&source%5Buuid%5D=338ed307-a531-42cb-9c91-0ee7331286d4-1760494931; report-to shopify-csp

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

default-src 'none'; font-src 'self' https: data: https://cdn.shopify.com https://cdn.shopifycloud.com; child-src blob: merchant-feedback.shopify.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: cdnjs.cloudflare.com v.shopify.com https://cdn.shopify.com https://cdn.shopifycloud.com https://www.google-analytics.com https://mpsnare.iesnare.com https://cdn1-sandbox.affirm.com https://checkout.pci.shopifyinc.com/build/739af4d/card_fields.js https://www.google.com https://www.gstatic.com https://hcaptcha.com https://*.hcaptcha.com https://*.googleapis.com https://unpkg.com; style-src 'self' 'unsafe-inline' blob: cdn.shopify.com sdks.shopifycdn.com https://cdn.shopify.com https://cdn.shopifycloud.com https://hcaptcha.com https://*.hcaptcha.com https://*.googleapis.com; media-src 'self' blob: data: cdn.shopify.com; img-src 'self' data: blob: https: cdn.shopify.com proxy.shopifycdn.com sdks.shopifycdn.com shopify-arrive.s3.amazonaws.com storage.googleapis.com v.shopify.com; connect-src 'self' https: https://cdn.shopify.com https://cdn.shopifycloud.com https://sessions.bugsnag.com https://notify.bugsnag.com https://monorail-edge.shopifysvc.com https://www.google-analytics.com https://stats.g.doubleclick.net https://atlas.shopifysvc.com https://hcaptcha.com https://*.hcaptcha.com; object-src 'none'; upgrade-insecure-requests; frame-src 'self' https://app.mode.com https://www.youtube.com https://app.datadoghq.com https://lookerstudio.google.com/ https://js.stripe.com https://hooks.stripe.com https://www.sandbox.paypal.com https://www.paypal.com https://t.paypal.com https://www.paypalobjects.com https://c.paypal.com https://uri.paypal.com https://centinelapi.cardinalcommerce.com https://*.shopifycs.com https://*.shopifyinc.com https://*.pci.shopifyinc.com https://pay.shopify.com https://checkout.pci.shopifyinc.com/ https://www.affirm.com https://api.global.sandbox.affirm.com https://cdn1-sandbox.affirm.com https://www.google.com https://recaptcha.google.com https://hcaptcha.com https://*.hcaptcha.com; frame-ancestors https: *.myshopify.com admin.shopify.com; report-uri /csp-report?source%5Baction%5D=show&source%5Bapp%5D=ShopServer&source%5Bcontroller%5D=pay%2Fusers%2Fsessions&source%5Buuid%5D=232592e6-bccf-48a0-921e-1e305c94a0c2-1760627862; report-to shopify-csp

script-src 'self' https://cdn.shopify.com/shopifycloud/arrive-server/ 'report-sample'; report-to csp-reports

GoDaddy.com, LLC

DECORSTEALS.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Technologies Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AT-88-Z

Shopify

HTTP/3

HSTS

Cloudflare Bot Management

Cloudflare

Untitled

⚠️ High Risk - https://www.decorsteals.com/?srsltid=AfmBOoqGnsFEXwbAOdaNj8u-eidZV24_7Nczh-OSOenfhLLfyBaA1mB8

Requests	IP Address	Location	AS Autonomous System
63	52.218.216.24	Boardman, Oregon, United States	AS16509AMAZON-02
5	18.66.112.36	United States	AS15169
5	2.21.239.23	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
5	23.227.39.200	Ottawa, Ontario, Canada	AS13335CLOUDFLARENET
5	104.20.36.110	United States	AS13335CLOUDFLARENET
5	104.18.39.221	United States	AS13335CLOUDFLARENET
5	172.64.155.96	United States	AS13335CLOUDFLARENET
5	34.73.251.59	North Charleston, South Carolina, United States	AS396982GOOGLE-CLOUD-PLATFORM
5	108.138.7.43	United States	AS16509AMAZON-02
5	172.66.164.219	United States	AS13335CLOUDFLARENET
368	62	-	-

Security Scan Report: www.decorsteals.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History