Unclassified // For public releaseCompany Forensics · Online Security Checked

Full corporate forensics — registration, ownership, people, and risk — at companyforensics.org.

Automatic security check · Public OSINT only

Company website

https://www.oanda.com/eu-en

81%

Trusted — verify

No major public red flags in this pass, but confirm reviews, ownership, and TLS details yourself. Passive OSINT only · inventKeys=false.

High concern
Elevated risk
Caution advised
Trusted — verify
Strong protections

oanda.com security check

Name: oanda.com security check — Trusted — verify | Company Forensics
Item: oanda.com
Rating: 81
Author: Company Forensics

Public OSINT valuation for oanda.com: grade B (81/100). Title signal “Online Forex, Shares & Crypto CFD Trading Broker | OANDA”. 4 security headers present, 4 commonly expected headers missing. This is a defensive surface review — not a penetration test.

/100

Grade B

Company website · Services · Social

Company website

https://www.oanda.com/eu-en

Services & products

Trade online https://www.oanda.com/eu-en/platform

Social & LinkedIn

No social or LinkedIn company links found on the scanned pages.

Links are extracted from public crawl HTML only. We never invent profiles or product pages.

Research engines · Complete scan

This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more. Run a live check on the security-check tool for the full interactive dashboard.

Connect this report to your website

Add a free badge that links visitors to this official Company Forensics Online Security Checked report. You get referral traffic and a backlink; customers can verify the dossier.

Open this public report

Badge HTML (copy into your footer or About page)

<!-- Company Forensics Online Security Checked badge -->
<a href="https://companyforensics.org/oanda.com/#security-report" title="Company Forensics Online Security Checked for oanda.com" rel="noopener"><img src="https://companyforensics.org/security-check/assets/official-security-report-seal-v20261103cf.png" alt="Company Forensics Online Security Checked · score 81/100" width="88" height="88" loading="lazy" /></a>

Trustpilot · Glassdoor

Trustpilot

—

Official Trustpilot signals only — never scraped. Shown when a public Business Unit profile exists (inventKeys=false).

Open Trustpilot for oanda.com ↗

Glassdoor

—

No Glassdoor scrape. Search the official employer directory when no linked profile is present.

Search Glassdoor ↗

Hosting · IP · map

IP104.17.38.191
ASN—
Hosting—
Geo—
PTR—
Nameservers—
MX—
SPF—

Map pending — IP geolocation not available (inventKeys=false).

Query
oanda.comRequested hostname
IP
104.17.38.191Resolved A record
ASN
—Hosting org
Trace
ICMP traceroute off by policyPassive IP path only · inventKeys=false

Sources: DNS · MX/SPF/PTR · ipwho.is · OpenStreetMap · hosting-check · tool=vendor.hosting_check (passive only). Soft-fail if geo blocked · inventKeys=false.

Domain registration · business age

Domain age · domain-age-checker · vendor.domain_age

30 years, 3 months, 8 days

Veteran (10+ years)

RegistrarTucows Domains Inc.

Registered1996-08-04

Domain age30 years, 3 months, 8 days

Age bandVeteran (10+ years)

Registry / location.com registry (RDAP)

Public RDAP / WHOIS only · domain-age-checker · tool=vendor.domain_age. Soft-fail when WHOIS is blocked — we never invent registrar or age.

Website worth · free TLDs · age

Est. midpoint$160,987,500

Range$6,075,000 – $315,900,000

Confidencehigh

Traffic (est.)3,375,000 – 11,250,000 / mo

RPM$18–$78

MonetizationHigh

Adapted from olivernashivy/site-worth · tool=vendor.site_worth · indicative only · inventKeys=false.

Same-name free extensions

oanda.ai · available
oanda.dev · available
oanda.store · available
oanda.pro · available

Checked 21 TLDs for “oanda” · 8 registered · 0 unknown · DNS + RDAP only · tool=vendor.domain_scanner · inventKeys=false.

Highlights

Positive Highlights

SSL/TLS certificate validates (public handshake succeeded).
Final URL is served over HTTPS.
DNS resolves publicly (A/AAAA or equivalent).
TLS handshake OK (TLSv1.3).
HTTP Strict Transport Security is present.
Content-Security-Policy observed.
Set-Cookie includes Secure and HttpOnly flags.
DNS resolves publicly (A/AAAA).

Negative Highlights

Security header missing: referrer-policy.
Security header missing: permissions-policy.
Security header missing: cross-origin-opener-policy.
Security header missing: cross-origin-resource-policy.

Derived from this scan’s findings, RDAP, TLS, and enrichment only · tools=vendor.site_worth,vendor.domain_age,vendor.hosting_check,vendor.domain_scanner · inventKeys=false.

Review Details

Company Evaluation

Registration data lists registrar “Tucows Domains Inc.”. Treat WHOIS fields as public OSINT only — not a legal ownership certificate. Domain age from RDAP is about 30 year(s) (11048 days).

Webshop Evaluation

Heuristic site-worth model (inventKeys=false) estimates midpoint value around $160,987,500 with monetization potential “High”. This is not an appraisal.

Technical Evaluation

Transport looks healthy: TLSv1.3 with certificate from Google Trust Services. One or more browser security headers are missing on the final HTTPS response. That weakens clickjacking/XSS defenses even when the site is otherwise legitimate. Registrar on record: Tucows Domains Inc.. No automated “low-trust registrar” claim is made without a verified feed.

How we scored oanda.com

Positive signals

TLS handshake OK (TLSv1.3).
HTTP Strict Transport Security is present.
Content-Security-Policy observed.
Set-Cookie includes Secure and HttpOnly flags.
DNS resolves publicly (A/AAAA).
robots.txt is publicly available.
RDAP domain record available (oanda.com).

Risk signals

No elevated risk signals recorded in this pass.

Findings

TLS handshake OK (TLSv1.3).
HTTP Strict Transport Security is present.
Content-Security-Policy observed.
Set-Cookie includes Secure and HttpOnly flags.
DNS resolves publicly (A/AAAA).
robots.txt is publicly available.
RDAP domain record available (oanda.com).
Final HTTP status 200 at https://www.oanda.com/eu-en.

Technical details

DNS

resolved

A: 104.17.38.191, 104.17.37.191
AAAA: —
PTR: —
error: —

TLS / certificate

version: TLSv1.3
cipher: TLS_AES_256_GCM_SHA384
issuer: Google Trust Services
notAfter: Feb 1 08:12:42 2027 GMT
SAN sample: oanda.com, *.oanda.com
error: —

HTTP & security headers

4 present

finalUrl: https://www.oanda.com/eu-en
status: 200
server: cloudflare
x-powered-by: —
present: content-security-policy, strict-transport-security, x-content-type-options, x-frame-options
missing: referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
cookie Secure: True
cookie HttpOnly: True

Tech fingerprint (public)

passive

title: Online Forex, Shares & Crypto CFD Trading Broker | OANDA
generator: Drupal 11 (https://www.drupal.org)
tech: Google Analytics
script hosts: storage.googleapis.com, cdn.optimizely.com, www.tradingview-widget.com
description: Learn why OANDA has been a leading broker for over 25 years.

Company presence (crawl links)

extracted

companyWebsite: https://www.oanda.com/eu-en
serviceLinks: Trade online: https://www.oanda.com/eu-en/platform
socialLinks: none found

RDAP / registration

rdap

domain: oanda.com
registrar: Tucows Domains Inc.
created: 1996-08-04T04:00:00Z
expires: 2027-08-03T04:00:00Z
nameservers: henrik.ns.cloudflare.com, may.ns.cloudflare.com
status: client transfer prohibited, client update prohibited
error: —

Public well-known

passive

/.well-known/security.txt: HTTP 404
/robots.txt: HTTP 200 · found
/security.txt: HTTP 404

Analyzed 2026-11-03T11:41:59Z CF passive OSINT (DNS/TLS/HTTP/RDAP/well-known) — no exploits More recent checks

looking for more information about this company or any company in the world? -Contact http://companyforensics.org

This service was brought to you by http://dotsynergygroup.com