Full corporate forensics — registration, ownership, people, and risk — at companyforensics.org.
Automatic security check · Public OSINT only
Company website
Strong protections
Public signals look solid. Keep verifying ownership and payment flows for high-stakes use. Passive OSINT only · inventKeys=false.
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
kraken.com security check
Public OSINT valuation for kraken.com: grade A (94/100). Title signal “Kraken | Mach mehr aus deinem Geld – Krypto, Aktien und mehr”. 6 security headers present, 2 commonly expected headers missing. This is a defensive surface review — not a penetration test.
Company website · Services · Social
Company website
Services & products
Social & LinkedIn
- No social or LinkedIn company links found on the scanned pages.
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
Research engines · Complete scan
This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more. Run a live check on the security-check tool for the full interactive dashboard.
Connect this report to your website
Add a free badge that links visitors to this official Company Forensics Online Security Checked report. You get referral traffic and a backlink; customers can verify the dossier.
Trustpilot · Glassdoor
Hosting · IP · map
- IP104.16.15.28
- ASN—
- Hosting—
- Geo—
- PTR—
- Nameservers—
- MX—
- SPF—
- Querykraken.com
- IP104.16.15.28
- ASN—
- TraceICMP traceroute off by policy
Sources: DNS · MX/SPF/PTR · ipwho.is · OpenStreetMap · hosting-check · tool=vendor.hosting_check (passive only). Soft-fail if geo blocked · inventKeys=false.
Domain registration · business age
Domain age · domain-age-checker · vendor.domain_age
26 years, 7 months, 10 days
Veteran (10+ years)
Public RDAP / WHOIS only · domain-age-checker · tool=vendor.domain_age. Soft-fail when WHOIS is blocked — we never invent registrar or age.
Website worth · free TLDs · age
Adapted from olivernashivy/site-worth · tool=vendor.site_worth · indicative only · inventKeys=false.
Same-name free extensions
- kraken.me · available
- kraken.xyz · available
Checked 21 TLDs for “kraken” · 8 registered · 0 unknown · DNS + RDAP only · tool=vendor.domain_scanner · inventKeys=false.
Highlights
Positive Highlights
- SSL/TLS certificate validates (public handshake succeeded).
- Final URL is served over HTTPS.
- DNS resolves publicly (A/AAAA or equivalent).
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
Negative Highlights
- Security header missing: cross-origin-opener-policy.
- Security header missing: cross-origin-resource-policy.
Derived from this scan’s findings, RDAP, TLS, and enrichment only · tools=vendor.site_worth,vendor.domain_age,vendor.hosting_check,vendor.domain_scanner · inventKeys=false.
Review Details
Company Evaluation
Registration data lists registrar “MarkMonitor Inc.”. Treat WHOIS fields as public OSINT only — not a legal ownership certificate. Domain age from RDAP is about 26 year(s) (9710 days).
Webshop Evaluation
Heuristic site-worth model (inventKeys=false) estimates midpoint value around $160,987,500 with monetization potential “High”. This is not an appraisal.
Technical Evaluation
Transport looks healthy: TLSv1.3 with certificate from Google Trust Services. One or more browser security headers are missing on the final HTTPS response. That weakens clickjacking/XSS defenses even when the site is otherwise legitimate. Registrar on record: MarkMonitor Inc.. No automated “low-trust registrar” claim is made without a verified feed.
How we scored kraken.com
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- RDAP domain record available (kraken.com).
Risk signals
- No elevated risk signals recorded in this pass.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (kraken.com).
- Final HTTP status 200 at https://www.kraken.com/.
Technical details
DNS
resolved- A
- 104.16.15.28, 104.16.14.28
- AAAA
- —
- PTR
- —
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- Google Trust Services
- notAfter
- Jan 26 20:50:45 2027 GMT
- SAN sample
- kraken.com
- error
- —
HTTP & security headers
6 present- finalUrl
- https://www.kraken.com/
- status
- 200
- server
- cloudflare
- x-powered-by
- —
- present
- content-security-policy, permissions-policy, referrer-policy, strict-transport-security, x-content-type-options, x-frame-options
- missing
- cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- True
- cookie HttpOnly
- True
Tech fingerprint (public)
passive- title
- Kraken | Mach mehr aus deinem Geld – Krypto, Aktien und mehr
- generator
- —
- tech
- —
- script hosts
- cdn.cookielaw.org, x
- description
- Hol dir mit Kraken die Kontrolle über dein Geld. Trade Krypto, Aktien, Futures, Staking und mehr. Millionen von Nutzern weltweit vertrauen Kraken seit 2011. Jetzt starten.
Company presence (crawl links)
extracted- companyWebsite
- https://www.kraken.com/
- serviceLinks
- Sicherheit Sicherheit: https://www.kraken.com/features/security, Hohe Liquidität Hohe Liquidität: https://www.kraken.com/features/liquidity
- socialLinks
- none found
RDAP / registration
rdap- domain
- kraken.com
- registrar
- MarkMonitor Inc.
- created
- 2000-04-03T10:39:06Z
- expires
- 2033-04-03T10:39:06Z
- nameservers
- art.ns.cloudflare.com, kim.ns.cloudflare.com
- status
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404
looking for more information about this company or any company in the world? -Contact http://companyforensics.org
This service was brought to you by http://dotsynergygroup.com