Full corporate forensics — registration, ownership, people, and risk — at companyforensics.org.
Automatic security check · Public OSINT only
Company website
Trusted — verify
No major public red flags in this pass, but confirm reviews, ownership, and TLS details yourself. Passive OSINT only · inventKeys=false.
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
etoro.com security check
Public OSINT valuation for etoro.com: grade B (74/100). Title signal “etoro. Know better.”. 2 security headers present, 6 commonly expected headers missing. This is a defensive surface review — not a penetration test.
Company website · Services · Social
Company website
Services & products
- No service or product links found on the scanned pages.
Social & LinkedIn
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
Research engines · Complete scan
This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more. Run a live check on the security-check tool for the full interactive dashboard.
Connect this report to your website
Add a free badge that links visitors to this official Company Forensics Online Security Checked report. You get referral traffic and a backlink; customers can verify the dossier.
Trustpilot · Glassdoor
Hosting · IP · map
- IP23.45.106.112
- ASN—
- Hosting—
- Geo—
- PTRa23-45-106-112.deploy.static.akamaitechnologies.com
- Nameservers—
- MX—
- SPF—
- Queryetoro.com
- IP23.45.106.112
- ASN—
- TraceICMP traceroute off by policy
Sources: DNS · MX/SPF/PTR · ipwho.is · OpenStreetMap · hosting-check · tool=vendor.hosting_check (passive only). Soft-fail if geo blocked · inventKeys=false.
Domain registration · business age
Domain age · domain-age-checker · vendor.domain_age
21 years, 11 months, 17 days
Veteran (10+ years)
Public RDAP / WHOIS only · domain-age-checker · tool=vendor.domain_age. Soft-fail when WHOIS is blocked — we never invent registrar or age.
Website worth · free TLDs · age
Adapted from olivernashivy/site-worth · tool=vendor.site_worth · indicative only · inventKeys=false.
Same-name free extensions
- etoro.io · available
- etoro.biz · available
Checked 21 TLDs for “etoro” · 8 registered · 0 unknown · DNS + RDAP only · tool=vendor.domain_scanner · inventKeys=false.
Highlights
Positive Highlights
- SSL/TLS certificate validates (public handshake succeeded).
- Final URL is served over HTTPS.
- DNS resolves publicly (A/AAAA or equivalent).
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
Negative Highlights
- Content-Security-Policy not observed.
- Security header missing: content-security-policy.
- Security header missing: x-frame-options.
- Security header missing: referrer-policy.
- Security header missing: permissions-policy.
Derived from this scan’s findings, RDAP, TLS, and enrichment only · tools=vendor.site_worth,vendor.domain_age,vendor.hosting_check,vendor.domain_scanner · inventKeys=false.
Review Details
Company Evaluation
Registration data lists registrar “Domain The Net Technologies Ltd.”. Treat WHOIS fields as public OSINT only — not a legal ownership certificate. Domain age from RDAP is about 21 year(s) (8012 days).
Webshop Evaluation
Heuristic site-worth model (inventKeys=false) estimates midpoint value around $160,987,500 with monetization potential “High”. This is not an appraisal.
Technical Evaluation
Transport looks healthy: TLSv1.3 with certificate from DigiCert Inc. One or more browser security headers are missing on the final HTTPS response. That weakens clickjacking/XSS defenses even when the site is otherwise legitimate. Registrar on record: Domain The Net Technologies Ltd.. No automated “low-trust registrar” claim is made without a verified feed.
How we scored etoro.com
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (etoro.com).
Risk signals
- Content-Security-Policy not observed.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy not observed.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (etoro.com).
- Final HTTP status 200 at https://www.etoro.com/.
Technical details
DNS
resolved- A
- 23.45.106.112
- AAAA
- —
- PTR
- a23-45-106-112.deploy.static.akamaitechnologies.com
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- DigiCert Inc
- notAfter
- Apr 27 23:59:59 2027 GMT
- SAN sample
- *.etoro.com, etoro.com
- error
- —
HTTP & security headers
2 present- finalUrl
- https://www.etoro.com/
- status
- 200
- server
- cloudflare
- x-powered-by
- —
- present
- strict-transport-security, x-content-type-options
- missing
- content-security-policy, x-frame-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- True
- cookie HttpOnly
- True
Tech fingerprint (public)
passive- title
- etoro. Know better.
- generator
- —
- tech
- Next.js, WordPress
- script hosts
- marketing.etorostatic.com
- description
- What millions know, now you know too. The data, tools, and collective intelligence you need for better investing.
Company presence (crawl links)
extracted- companyWebsite
- https://www.etoro.com/
- serviceLinks
- none found
- socialLinks
- LinkedIn: https://www.linkedin.com/company/etoro/, Facebook: https://www.facebook.com/eToro, Instagram: https://www.instagram.com/etoro_official/, X (Twitter): https://x.com/eToro, YouTube: https://www.youtube.com/etoro
RDAP / registration
rdap- domain
- etoro.com
- registrar
- Domain The Net Technologies Ltd.
- created
- 2004-11-26T19:04:58Z
- expires
- 2027-11-26T19:04:58Z
- nameservers
- eur5.akam.net, eur6.akam.net, ns1-11.akam.net, ns1-13.akam.net, ns4-64.akam.net, usw2.akam.net
- status
- client delete prohibited, client transfer prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404
looking for more information about this company or any company in the world? -Contact http://companyforensics.org
This service was brought to you by http://dotsynergygroup.com
