decizia[.]ro

decizia.ro is flagged as a high‑risk brand‑impersonation site. The domain was registered on 2021‑01‑06 through ICI – Registrar and is hosted on IP 89.42.218.98, which belongs to AS205275 ROMARG SRL in Romania. The server presents a valid Let's Encrypt certificate (R13) and runs a typical WordPress stack including MySQL, PHP, Yoast SEO, LiteSpeed, Slider Revolution, Modernizr and Lightbox, as identified by passive fingerprinting. The public page title returned by HTTP 200 is “Home ‑ Decizia”, and the site is classified as a cryptocurrency‑related scam. Reputation services assign a trust score of 1/100 (Scamadviser) and 0/100 (Gridinsoft), and 14 of 95 VirusTotal scanners have raised alerts. The domain appears on two public phishing blocklists and is referenced in sixteen AlienVault OTX threat pulses, indicating ongoing monitoring by the security community. Nameservers ns1‑ns4.romarg.com resolve to the same provider, confirming a single‑point hosting environment. While the exact phishing or credential‑harvesting mechanisms have not been publicly disclosed, the combination of low trust scores, multiple vendor detections, and active blocklisting justifies treating the domain as malicious. Defenders should deny network connections to 89.42.218.98, add decizia.ro to URL filtering and DNS sink‑hole lists, and monitor for any related C2 traffic or credential exfiltration attempts. Continuous re‑evaluation is advised in case the site’s content evolves.