Unclassified // For public releaseWordle · Official security dossier

Looking for more in-depth information on this company—or any company worldwide? Visit companyforensics.org.

Automatic security check · Public OSINT only

Company website

https://www.salesforce.com/de/?ir=1&bc=DB

71%

Trusted — verify

No major public red flags in this pass, but confirm reviews, ownership, and TLS details yourself. Passive OSINT only · inventKeys=false.

  1. High concern
  2. Elevated risk
  3. Caution advised
  4. Trusted — verify
  5. Strong protections

salesforce.com security check

Public OSINT valuation for salesforce.com: grade B (71/100). Title signal “Salesforce: Das führende CRM mit KI | Salesforce DE”. 4 security headers present, 4 commonly expected headers missing. This is a defensive surface review — not a penetration test.

71
/100
Grade B
Trusted — verify

No major public red flags in this pass, but confirm reviews, ownership, and TLS details yourself.

Checked 2026-11-02T15:48:17Z · Method: automated passive checks · No attacks, no exploits

Company website · Services · Social

Company website

https://www.salesforce.com/de/?ir=1&bc=DB

Services & products

Social & LinkedIn

  • No social or LinkedIn company links found on the scanned pages.

Links are extracted from public crawl HTML only. We never invent profiles or product pages.

Research engines · Complete scan

This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more. Run a live check on the security-check tool for the full interactive dashboard.

Connect this report to your website

Add a free badge that links visitors to this official Wordle security report. You get referral traffic and a backlink; customers can verify the dossier.

Open this public report

Trustpilot · Glassdoor

Trustpilot

—

Official Trustpilot signals only — never scraped. Shown when a public Business Unit profile exists (inventKeys=false).

Open Trustpilot for salesforce.com ↗

Glassdoor

—

No Glassdoor scrape. Search the official employer directory when no linked profile is present.

Search Glassdoor ↗

Hosting · IP · map

  • IP23.1.106.133
  • ASN—
  • Hosting—
  • Geo—
  • PTRa23-1-106-133.deploy.static.akamaitechnologies.com
  • Nameservers—
  • MX—
  • SPF—
Map pending — IP geolocation not available (inventKeys=false).
  1. Query
    salesforce.comRequested hostname
  2. IP
    23.1.106.133Resolved A record
  3. ASN
    —Hosting org
  4. Trace
    ICMP traceroute off by policyPassive IP path only · inventKeys=false

Sources: DNS · MX/SPF/PTR · ipwho.is · OpenStreetMap · hosting-check · tool=vendor.hosting_check (passive only). Soft-fail if geo blocked · inventKeys=false.

Domain registration · business age

Domain age · domain-age-checker · vendor.domain_age

27 years, 11 months, 13 days

Veteran (10+ years)

RegistrarMarkMonitor Inc.
Registered1998-12-02
Domain age27 years, 11 months, 13 days
Age bandVeteran (10+ years)
Registry / location.com registry (RDAP)

Public RDAP / WHOIS only · domain-age-checker · tool=vendor.domain_age. Soft-fail when WHOIS is blocked — we never invent registrar or age.

Website worth · free TLDs · age

Est. midpoint$115,911,000
Range$4,374,000 – $227,448,000
Confidencehigh
Traffic (est.)2,430,000 – 8,100,000 / mo
RPM$18–$78
MonetizationHigh

Adapted from olivernashivy/site-worth · tool=vendor.site_worth · indicative only · inventKeys=false.

Same-name free extensions

  • salesforce.online · available
  • salesforce.site · available
  • salesforce.tech · available
  • salesforce.store · available

Checked 21 TLDs for “salesforce” · 8 registered · 0 unknown · DNS + RDAP only · tool=vendor.domain_scanner · inventKeys=false.

Highlights

Positive Highlights

  • SSL/TLS certificate validates (public handshake succeeded).
  • Final URL is served over HTTPS.
  • DNS resolves publicly (A/AAAA or equivalent).
  • TLS handshake OK (TLSv1.3).
  • HTTP Strict Transport Security is present.
  • DNS resolves publicly (A/AAAA).
  • RDAP domain record available (salesforce.com).
  • Domain registration age is mature (27+ years via RDAP).

Negative Highlights

  • Content-Security-Policy not observed.
  • Set-Cookie present but Secure/HttpOnly incomplete on sampled header.
  • Security header missing: content-security-policy.
  • Security header missing: permissions-policy.
  • Security header missing: cross-origin-opener-policy.
  • Security header missing: cross-origin-resource-policy.

Derived from this scan’s findings, RDAP, TLS, and enrichment only · tools=vendor.site_worth,vendor.domain_age,vendor.hosting_check,vendor.domain_scanner · inventKeys=false.

Review Details

Company Evaluation

Registration data lists registrar “MarkMonitor Inc.”. Treat WHOIS fields as public OSINT only — not a legal ownership certificate. Domain age from RDAP is about 27 year(s) (10198 days).

Webshop Evaluation

Heuristic site-worth model (inventKeys=false) estimates midpoint value around $115,911,000 with monetization potential “High”. This is not an appraisal.

Technical Evaluation

Transport looks healthy: TLSv1.3 with certificate from DigiCert Inc. One or more browser security headers are missing on the final HTTPS response. That weakens clickjacking/XSS defenses even when the site is otherwise legitimate. Registrar on record: MarkMonitor Inc.. No automated “low-trust registrar” claim is made without a verified feed.

How we scored salesforce.com

Positive signals

  • TLS handshake OK (TLSv1.3).
  • HTTP Strict Transport Security is present.
  • DNS resolves publicly (A/AAAA).
  • robots.txt is publicly available.
  • RDAP domain record available (salesforce.com).
  • Final HTTP status 200 at https://www.salesforce.com/de/?ir=1&bc=DB.

Risk signals

  • Content-Security-Policy not observed.
  • Set-Cookie present but Secure/HttpOnly incomplete on sampled header.

Findings

Technical details

DNS

resolved
A
23.1.106.133, 104.109.10.129, 104.109.11.129, 184.25.179.132, 184.31.3.130, 184.31.10.133, 23.1.35.132, 23.1.99.130
AAAA
—
PTR
a23-1-106-133.deploy.static.akamaitechnologies.com
error
—

TLS / certificate

ok
version
TLSv1.3
cipher
TLS_AES_256_GCM_SHA384
issuer
DigiCert Inc
notAfter
Apr 9 23:59:59 2027 GMT
SAN sample
salesforce.com, agentblazer.com, askmoreof.ai, askmoreofai.com, assistly.com, atonit.com.br, atonit.digital, attic.io
error
—

HTTP & security headers

4 present
finalUrl
https://www.salesforce.com/de/?ir=1&bc=DB
status
200
server
—
x-powered-by
—
present
referrer-policy, strict-transport-security, x-content-type-options, x-frame-options
missing
content-security-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
cookie Secure
False
cookie HttpOnly
False

Tech fingerprint (public)

passive
title
Salesforce: Das führende CRM mit KI | Salesforce DE
generator
PBC on Nunjucks
tech
WordPress, Google Analytics
script hosts
c.salesforce.com, x, a.sfdcstatic.com
description
Salesforce ist das führende CRM mit KI. Es hilft Unternehmen, sich auf völlig neue Weise mit Kund:innen zu vernetzen, indem es die Daten, Apps und Agents zusammenbringt, die das Unternehmen am Laufen halten.

RDAP / registration

rdap
domain
salesforce.com
registrar
MarkMonitor Inc.
created
1998-12-02T05:00:00Z
expires
2028-10-21T13:34:56Z
nameservers
pch1.salesforce-dns.com, pch2.salesforce-dns.com, udns1.salesforce.com, udns2.salesforce.com, udns3.salesforce.com, udns4.salesforce.com
status
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
error
—

Public well-known

passive
/.well-known/security.txt
HTTP 404
/robots.txt
HTTP 200 · found
/security.txt
HTTP 404
Analyzed 2026-11-02T15:48:17Z WORDLE passive OSINT (DNS/TLS/HTTP/RDAP/well-known) — no exploits More recent checks

looking for more information about this company or any company in the world? -Contact http://companyforensics.org

This service was brought to you by http://dotsynergygroup.com