StatsMyWeb
Main menu

Domain report

decloak.dev

decloak.dev ranks in the top 0.20% of domains by connectivity (Common Crawl, cc-main-2026-jul-aug-sep), with 1 distinct host observed under it.

Explore decloak.dev in the Web Graph

Connectivity

#264,194harmonic-centrality rank
Top percentile
0.20%
Hosts observed
1

From the Common Crawl cc-main-2026-jul-aug-sep hyperlink graph, 133,241,980 domains total. What this rank means

HTTPS reachability

200HTTP status

https://decloak.dev/ answered with HTTP 200.

DNS records

A
  • decloak-frontend.onrender.com.
  • gcp-us-west1-1.origin.onrender.com.
  • gcp-us-west1-1.origin.onrender.com.cdn.cloudflare.net.
  • 216.24.57.16
  • 216.24.57.18
AAAA
  • decloak-frontend.onrender.com.
  • gcp-us-west1-1.origin.onrender.com.
  • gcp-us-west1-1.origin.onrender.com.cdn.cloudflare.net.
MX
  • 1 smtp.google.com.
NS
  • dns1.registrar-servers.com.
  • dns2.registrar-servers.com.

Live preview

Screenshot of decloak.dev

This site sends "X-Frame-Options: DENY", which blocks embedding it here.

Since decloak.dev can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

Domain registration (WHOIS / RDAP)

RDAP lookup failed (HTTP 429).

How to read WHOIS and RDAP data

SSL certificate

Certificate Transparency lookup failed (HTTP 429).

How to check when a certificate expires

HTTP & security headers

Response

Server
cloudflare
Content-Type
text/html; charset=utf-8
Cache-Control
private, no-cache, no-store, max-age=0, must-revalidate
Content-Encoding
Not sent

Security

Content-Security-Policy
default-src 'self'; script-src 'self' 'nonce-be52f0450a34497390aa0a1036d6037c' 'strict-dynamic' https:; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://www.redditstatic.com https://alb.reddit.com https://static.ads-twitter.com https://analytics.twitter.com https://t.co https://app.endorsely.com https://api.decloak.dev https://ppeethkjaerezsvfnuos.supabase.co; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests
Strict-Transport-Security
max-age=63072000; includeSubDomains; preload
X-Frame-Options
DENY
X-Content-Type-Options
nosniff
Referrer-Policy
strict-origin-when-cross-origin
Permissions-Policy
camera=(), microphone=(), geolocation=()

What each security header does

Redirect chain

  1. 1.http://decloak.dev/HTTP 301

    → https://decloak.dev/

  2. 2.https://decloak.dev/HTTP 200

Meta tags

Title
Decloak - Web Security Intelligence
Description
Free security scan in 15 seconds. Then go deeper - AI agent investigation, authenticated pentesting, and compliance-ready evidence for SOC 2, ISO 27001, NIS2, DORA, LGPD, PCI DSS, NIST CSF, EU CRA.
Canonical
https://decloak.dev
Robots
index, follow, max-video-preview:-1, max-image-preview:large, max-snippet:-1
Generator
Not set
Open Graph title
Decloak - Web Security Intelligence
Open Graph description
Free 15-second scan. Then go deeper - AI agent investigation, authenticated pentesting, and compliance-ready evidence.
Open Graph image
https://decloak.dev/opengraph-image.png?024e8eaa206abbab
Open Graph type
website
Twitter card
summary_large_image
Twitter title
Decloak - Web Security Intelligence
Twitter image
https://decloak.dev/twitter-image.png?024e8eaa206abbab

robots.txt

Disallow rules (User-agent: *)
6
Disallow rules (other agents)
60

Sitemap declared:

  • https://decloak.dev/sitemap.xml

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

  • Cloudflarecdn

    Server: cloudflare

  • Next.jsframework

    Found "_next/static/" in the page's HTML

Related domains

Similar connectivity

Domains ranked just above and below it in the same snapshot.