Full corporate forensics — registration, ownership, people, and risk — at companyforensics.org.
Automatic security check · Public OSINT only
Company website
https://www.schroders.com/en/global/individual/
Strong protections
Public signals look solid. Keep verifying ownership and payment flows for high-stakes use. Passive OSINT only · inventKeys=false.
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
schroders.com security check
Public OSINT valuation for schroders.com: grade A (86/100). Title signal “Schroders global | Active Investment Management”. 5 security headers present, 3 commonly expected headers missing. This is a defensive surface review — not a penetration test.
Company website · Services · Social
Company website
Services & products
Social & LinkedIn
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
Research engines · Complete scan
This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more. Run a live check on the security-check tool for the full interactive dashboard.
Connect this report to your website
Add a free badge that links visitors to this official Company Forensics Online Security Checked report. You get referral traffic and a backlink; customers can verify the dossier.
Trustpilot · Glassdoor
Hosting · IP · map
- IP150.171.110.194
- ASN—
- Hosting—
- Geo—
- PTR—
- Nameservers—
- MX—
- SPF—
- Queryschroders.com
- IP150.171.110.194
- ASN—
- TraceICMP traceroute off by policy
Sources: DNS · MX/SPF/PTR · ipwho.is · OpenStreetMap · hosting-check · tool=vendor.hosting_check (passive only). Soft-fail if geo blocked · inventKeys=false.
Domain registration · business age
Domain age · domain-age-checker · vendor.domain_age
31 years, 11 days
Veteran (10+ years)
Public RDAP / WHOIS only · domain-age-checker · tool=vendor.domain_age. Soft-fail when WHOIS is blocked — we never invent registrar or age.
Website worth · free TLDs · age
Adapted from olivernashivy/site-worth · tool=vendor.site_worth · indicative only · inventKeys=false.
Same-name free extensions
- schroders.xyz · available
- schroders.tech · available
- schroders.cloud · available
- schroders.club · available
- schroders.pro · available
Checked 21 TLDs for “schroders” · 8 registered · 1 unknown · DNS + RDAP only · tool=vendor.domain_scanner · inventKeys=false.
Highlights
Positive Highlights
- SSL/TLS certificate validates (public handshake succeeded).
- Final URL is served over HTTPS.
- DNS resolves publicly (A/AAAA or equivalent).
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
Negative Highlights
- Security header missing: permissions-policy.
- Security header missing: cross-origin-opener-policy.
- Security header missing: cross-origin-resource-policy.
Derived from this scan’s findings, RDAP, TLS, and enrichment only · tools=vendor.site_worth,vendor.domain_age,vendor.hosting_check,vendor.domain_scanner · inventKeys=false.
Review Details
Company Evaluation
Registration data lists registrar “CSC Corporate Domains, Inc.”. Treat WHOIS fields as public OSINT only — not a legal ownership certificate. Domain age from RDAP is about 31 year(s) (11326 days).
Webshop Evaluation
Heuristic site-worth model (inventKeys=false) estimates midpoint value around $115,911,000 with monetization potential “High”. This is not an appraisal.
Technical Evaluation
Transport looks healthy: TLSv1.3 with certificate from DigiCert Inc. One or more browser security headers are missing on the final HTTPS response. That weakens clickjacking/XSS defenses even when the site is otherwise legitimate. Registrar on record: CSC Corporate Domains, Inc.. No automated “low-trust registrar” claim is made without a verified feed.
How we scored schroders.com
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (schroders.com).
Risk signals
- No elevated risk signals recorded in this pass.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (schroders.com).
- Final HTTP status 200 at https://www.schroders.com/en/global/individual/.
Technical details
DNS
resolved- A
- 150.171.110.194
- AAAA
- 2603:1061:14:69::1
- PTR
- —
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- DigiCert Inc
- notAfter
- Nov 8 23:59:59 2026 GMT
- SAN sample
- schroders.com
- error
- —
HTTP & security headers
5 present- finalUrl
- https://www.schroders.com/en/global/individual/
- status
- 200
- server
- —
- x-powered-by
- —
- present
- content-security-policy, referrer-policy, strict-transport-security, x-content-type-options, x-frame-options
- missing
- permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- False
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- Schroders global | Active Investment Management
- generator
- —
- tech
- Next.js, Google Analytics
- script hosts
- x
- description
- Insight-led investing, built for what matters most to you.
Company presence (crawl links)
extracted- companyWebsite
- https://www.schroders.com/en/global/individual/
- serviceLinks
- TCFD/SDR Entity and Product reports: https://www.schroders.com/en/global/individual/corporate-transparency/tcfd-entity-and-product-reports/
- socialLinks
- LinkedIn: https://www.linkedin.com/company/schroders, Facebook: https://www.facebook.com/SchrodersIM/, X (Twitter): https://twitter.com/schroders, YouTube: https://www.youtube.com/user/schroders
RDAP / registration
rdap- domain
- schroders.com
- registrar
- CSC Corporate Domains, Inc.
- created
- 1995-10-31T05:00:00Z
- expires
- 2027-10-30T04:00:00Z
- nameservers
- udns1.cscdns.net, udns2.cscdns.uk
- status
- client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 200 · found
looking for more information about this company or any company in the world? -Contact http://companyforensics.org
This service was brought to you by http://dotsynergygroup.com
