Full corporate forensics — registration, ownership, people, and risk — at companyforensics.org.
Automatic security check · Public OSINT only
Company website
Trusted — verify
No major public red flags in this pass, but confirm reviews, ownership, and TLS details yourself. Passive OSINT only · inventKeys=false.
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
chainalysis.com security check
Public OSINT valuation for chainalysis.com: grade B (80/100). Title signal “The Blockchain Data Platform - Chainalysis”. 3 security headers present, 5 commonly expected headers missing. This is a defensive surface review — not a penetration test.
Company website · Services · Social
Company website
Services & products
- Investigations Solutions
- Reactor Investigate and trace funds across blockchains
- Wallet Scan Check recovery seeds for seizable crypto
- Rapid Instant crypto triage with AI-powered insights
- Compliance Solutions
- KYT Monitor transactions in real-time
- Sentinel Understand a stablecoins’s risk profile
- Address Screening Assess a wallet’s risk exposure
- VASP Risking Understand the risk profile of a VASP
- Alterya AI-powered fraud prevention
- Chainalysis Data Solutions (DS) Proactive threat intelligence and alerting
- Platform Enterprise ready infrastructure for blockchain analysis solutions
- Global Services Tailored, expert-led solutions to navigate crypto challenges and
- Company Chainalysis is the blockchain data platform
- Chainalysis Government Solutions Expert crypto investigation and analytics for t
Social & LinkedIn
- No social or LinkedIn company links found on the scanned pages.
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
Research engines · Complete scan
This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more. Run a live check on the security-check tool for the full interactive dashboard.
Connect this report to your website
Add a free badge that links visitors to this official Company Forensics Online Security Checked report. You get referral traffic and a backlink; customers can verify the dossier.
Trustpilot · Glassdoor
Hosting · IP · map
- IP13.35.58.106
- ASN—
- Hosting—
- Geo—
- PTRserver-13-35-58-106.fra60.r.cloudfront.net
- Nameservers—
- MX—
- SPF—
- Querychainalysis.com
- IP13.35.58.106
- ASN—
- TraceICMP traceroute off by policy
Sources: DNS · MX/SPF/PTR · ipwho.is · OpenStreetMap · hosting-check · tool=vendor.hosting_check (passive only). Soft-fail if geo blocked · inventKeys=false.
Domain registration · business age
Domain age · domain-age-checker · vendor.domain_age
12 years, 14 days
Veteran (10+ years)
Public RDAP / WHOIS only · domain-age-checker · tool=vendor.domain_age. Soft-fail when WHOIS is blocked — we never invent registrar or age.
Website worth · free TLDs · age
Adapted from olivernashivy/site-worth · tool=vendor.site_worth · indicative only · inventKeys=false.
Same-name free extensions
- chainalysis.store · available
- chainalysis.tv · available
Checked 21 TLDs for “chainalysis” · 8 registered · 0 unknown · DNS + RDAP only · tool=vendor.domain_scanner · inventKeys=false.
Highlights
Positive Highlights
- SSL/TLS certificate validates (public handshake succeeded).
- Final URL is served over HTTPS.
- DNS resolves publicly (A/AAAA or equivalent).
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
Negative Highlights
- Content-Security-Policy not observed.
- Security header missing: content-security-policy.
- Security header missing: referrer-policy.
- Security header missing: permissions-policy.
- Security header missing: cross-origin-opener-policy.
Derived from this scan’s findings, RDAP, TLS, and enrichment only · tools=vendor.site_worth,vendor.domain_age,vendor.hosting_check,vendor.domain_scanner · inventKeys=false.
Review Details
Company Evaluation
Registration data lists registrar “Amazon Registrar, Inc.”. Treat WHOIS fields as public OSINT only — not a legal ownership certificate. Domain age from RDAP is about 12 year(s) (4394 days).
Webshop Evaluation
Heuristic site-worth model (inventKeys=false) estimates midpoint value around $83,713,500 with monetization potential “High”. This is not an appraisal.
Technical Evaluation
Transport looks healthy: TLSv1.3 with certificate from Amazon. One or more browser security headers are missing on the final HTTPS response. That weakens clickjacking/XSS defenses even when the site is otherwise legitimate. Registrar on record: Amazon Registrar, Inc.. No automated “low-trust registrar” claim is made without a verified feed.
How we scored chainalysis.com
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (chainalysis.com).
Risk signals
- Content-Security-Policy not observed.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy not observed.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (chainalysis.com).
- Final HTTP status 200 at https://www.chainalysis.com/.
Technical details
DNS
resolved- A
- 13.35.58.106, 13.35.58.4, 13.35.58.61, 13.35.58.23
- AAAA
- —
- PTR
- server-13-35-58-106.fra60.r.cloudfront.net
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_128_GCM_SHA256
- issuer
- Amazon
- notAfter
- Mar 15 23:59:59 2027 GMT
- SAN sample
- chainalysis.com
- error
- —
HTTP & security headers
3 present- finalUrl
- https://www.chainalysis.com/
- status
- 200
- server
- cloudflare
- x-powered-by
- —
- present
- strict-transport-security, x-content-type-options, x-frame-options
- missing
- content-security-policy, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- True
- cookie HttpOnly
- True
Tech fingerprint (public)
passive- title
- The Blockchain Data Platform - Chainalysis
- generator
- WordPress 7.1.4
- tech
- WordPress
- script hosts
- www.chainalysis.com, js.qualified.com, cdn.weglot.com
- description
- Chainalysis combines blockchain data and AI to help government agencies, crypto businesses, and financial institutions engage confidently with crypto.
Company presence (crawl links)
extracted- companyWebsite
- https://www.chainalysis.com/
- serviceLinks
- Investigations Solutions: https://www.chainalysis.com/solution/crypto-investigations/, Reactor Investigate and trace funds across blockchains: https://www.chainalysis.com/product/reactor/, Wallet Scan Check recovery seeds for seizable crypto: https://www.chainalysis.com/product/wallet-scan/, Rapid Instant crypto triage with AI-powered insights: https://www.chainalysis.com/product/rapid/, Compliance Solutions: https://www.chainalysis.com/solution/crypto-compliance/, KYT Monitor transactions in real-time: https://www.chainalysis.com/product/kyt/, Sentinel Understand a stablecoins’s risk profile: https://www.chainalysis.com/product/sentinel/, Address Screening Assess a wallet’s risk exposure: https://www.chainalysis.com/product/address-screening/, VASP Risking Understand the risk profile of a VASP: https://www.chainalysis.com/product/vasp-risking/, Alterya AI-powered fraud prevention: https://www.chainalysis.com/product/alterya/, Chainalysis Data Solutions (DS) Proactive threat intelligence and alerting: https://www.chainalysis.com/product/ds/, Platform Enterprise ready infrastructure for blockchain analysis solutions: https://www.chainalysis.com/platform/
- socialLinks
- none found
RDAP / registration
rdap- domain
- chainalysis.com
- registrar
- Amazon Registrar, Inc.
- created
- 2014-10-28T08:19:25Z
- expires
- 2027-02-05T11:59:59Z
- nameservers
- ns-1240.awsdns-27.org, ns-1938.awsdns-50.co.uk, ns-8.awsdns-01.com, ns-880.awsdns-46.net
- status
- client transfer prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 404
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 200 · found
looking for more information about this company or any company in the world? -Contact http://companyforensics.org
This service was brought to you by http://dotsynergygroup.com
