Full corporate forensics — registration, ownership, people, and risk — at companyforensics.org.
Automatic security check · Public OSINT only
Company website
Caution advised
Mixed public signals. Review missing headers, domain age, and independent reputation before trusting it. Passive OSINT only · inventKeys=false.
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
crypto.com security check
Public OSINT valuation for crypto.com: grade C (60/100). Title signal “Crypto.com Deutschland: Kryptowährungen sicher kaufen, verkaufen und handeln”. 1 security headers present, 7 commonly expected headers missing. This is a defensive surface review — not a penetration test.
Company website · Services · Social
Company website
Services & products
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
Research engines · Complete scan
This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more. Run a live check on the security-check tool for the full interactive dashboard.
Connect this report to your website
Add a free badge that links visitors to this official Company Forensics Online Security Checked report. You get referral traffic and a backlink; customers can verify the dossier.
Trustpilot · Glassdoor
Hosting · IP · map
- IP104.19.223.17
- ASN—
- Hosting—
- Geo—
- PTR—
- Nameservers—
- MX—
- SPF—
- Querycrypto.com
- IP104.19.223.17
- ASN—
- TraceICMP traceroute off by policy
Sources: DNS · MX/SPF/PTR · ipwho.is · OpenStreetMap · hosting-check · tool=vendor.hosting_check (passive only). Soft-fail if geo blocked · inventKeys=false.
Domain registration · business age
Domain age · domain-age-checker · vendor.domain_age
33 years, 6 months, 9 days
Veteran (10+ years)
Public RDAP / WHOIS only · domain-age-checker · tool=vendor.domain_age. Soft-fail when WHOIS is blocked — we never invent registrar or age.
Website worth · free TLDs · age
Adapted from olivernashivy/site-worth · tool=vendor.site_worth · indicative only · inventKeys=false.
Same-name free extensions
- No confirmed free sibling TLDs for “crypto” (unknown ≠ available).
- Registered: crypto.net, crypto.org, crypto.io, crypto.ai, crypto.co, crypto.app
- Unknown (not treated as free): crypto.shop
DNS + RDAP only (domain-scanner) · tool=vendor.domain_scanner · inventKeys=false.
Highlights
Positive Highlights
- SSL/TLS certificate validates (public handshake succeeded).
- Final URL is served over HTTPS.
- DNS resolves publicly (A/AAAA or equivalent).
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- RDAP domain record available (crypto.com).
Negative Highlights
- Content-Security-Policy not observed.
- X-Content-Type-Options missing.
- X-Powered-By disclosed: Next.js.
- Security header missing: content-security-policy.
- Security header missing: x-content-type-options.
- Security header missing: x-frame-options.
- Security header missing: referrer-policy.
Derived from this scan’s findings, RDAP, TLS, and enrichment only · tools=vendor.site_worth,vendor.domain_age,vendor.hosting_check,vendor.domain_scanner · inventKeys=false.
Review Details
Company Evaluation
Registration data lists registrar “Network Solutions, LLC”. Treat WHOIS fields as public OSINT only — not a legal ownership certificate. Domain age from RDAP is about 33 year(s) (12234 days).
Webshop Evaluation
Heuristic site-worth model (inventKeys=false) estimates midpoint value around $160,987,500 with monetization potential “High”. This is not an appraisal.
Technical Evaluation
Transport looks healthy: TLSv1.3 with certificate from Google Trust Services. One or more browser security headers are missing on the final HTTPS response. That weakens clickjacking/XSS defenses even when the site is otherwise legitimate. Registrar on record: Network Solutions, LLC. No automated “low-trust registrar” claim is made without a verified feed.
How we scored crypto.com
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- robots.txt is publicly available.
- RDAP domain record available (crypto.com).
Risk signals
- Content-Security-Policy not observed.
- X-Content-Type-Options missing.
- X-Powered-By disclosed: Next.js.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy not observed.
- X-Content-Type-Options missing.
- Set-Cookie includes Secure and HttpOnly flags.
- X-Powered-By disclosed: Next.js.
- DNS resolves publicly (A/AAAA).
- robots.txt is publicly available.
- RDAP domain record available (crypto.com).
- Final HTTP status 200 at https://crypto.com/de.
Technical details
DNS
resolved- A
- 104.19.223.17, 104.19.222.17
- AAAA
- 2606:4700::6813:df11, 2606:4700::6813:de11
- PTR
- —
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- Google Trust Services
- notAfter
- Dec 24 10:02:08 2026 GMT
- SAN sample
- crypto.com
- error
- —
HTTP & security headers
1 present- finalUrl
- https://crypto.com/de
- status
- 200
- server
- cloudflare
- x-powered-by
- Next.js
- present
- strict-transport-security
- missing
- content-security-policy, x-content-type-options, x-frame-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- True
- cookie HttpOnly
- True
Tech fingerprint (public)
passive- title
- Crypto.com Deutschland: Kryptowährungen sicher kaufen, verkaufen und handeln
- generator
- —
- tech
- React, Next.js
- script hosts
- x
- description
- Über 400 Kryptowährungen sicher kaufen, verkaufen, verwahren und handeln mit Crypto.com.
Company presence (crawl links)
extracted- companyWebsite
- https://crypto.com/de
- serviceLinks
- Financial Services: https://crypto.com/de/financialservices
- socialLinks
- LinkedIn: https://www.linkedin.com/company/cryptocom, Facebook: https://www.facebook.com/CryptoComOfficial, GitHub: https://github.com/crypto-com/crypto-agent-trading, Instagram: https://www.instagram.com/cryptocomofficial/, Reddit: https://www.reddit.com/r/Crypto_com/, X (Twitter): https://x.com/cryptocom
RDAP / registration
rdap- domain
- crypto.com
- registrar
- Network Solutions, LLC
- created
- 1993-05-06T04:00:00Z
- expires
- 2034-05-07T04:00:00Z
- nameservers
- chad.ns.cloudflare.com, sima.ns.cloudflare.com
- status
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 404
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404
looking for more information about this company or any company in the world? -Contact http://companyforensics.org
This service was brought to you by http://dotsynergygroup.com
