Unclassified // For public releaseWordle · Official security dossier

Looking for more in-depth information on this company—or any company worldwide? Visit companyforensics.org.

Automatic security check · Public OSINT only

Company website

https://trello.com/

64%

Caution advised

Mixed public signals. Review missing headers, domain age, and independent reputation before trusting it. Passive OSINT only · inventKeys=false.

  1. High concern
  2. Elevated risk
  3. Caution advised
  4. Trusted — verify
  5. Strong protections

trello.com security check

Public OSINT valuation for trello.com: grade C (64/100). Title signal “Capture, organize, and tackle your to-dos from anywhere”. 2 security headers present, 6 commonly expected headers missing. This is a defensive surface review — not a penetration test.

64
/100
Grade C
Caution advised

Mixed public signals. Review missing headers, domain age, and independent reputation before trusting it.

Checked 2026-11-02T15:49:28Z · Method: automated passive checks · No attacks, no exploits

Company website · Services · Social

Company website

https://trello.com/

Services & products

Social & LinkedIn

  • No social or LinkedIn company links found on the scanned pages.

Links are extracted from public crawl HTML only. We never invent profiles or product pages.

Research engines · Complete scan

This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more. Run a live check on the security-check tool for the full interactive dashboard.

Connect this report to your website

Add a free badge that links visitors to this official Wordle security report. You get referral traffic and a backlink; customers can verify the dossier.

Open this public report

Trustpilot · Glassdoor

Trustpilot

—

Official Trustpilot signals only — never scraped. Shown when a public Business Unit profile exists (inventKeys=false).

Open Trustpilot for trello.com ↗

Glassdoor

—

No Glassdoor scrape. Search the official employer directory when no linked profile is present.

Search Glassdoor ↗

Hosting · IP · map

  • IP108.138.7.51
  • ASN—
  • Hosting—
  • Geo—
  • PTRserver-108-138-7-51.fra56.r.cloudfront.net
  • Nameservers—
  • MX—
  • SPF—
Map pending — IP geolocation not available (inventKeys=false).
  1. Query
    trello.comRequested hostname
  2. IP
    108.138.7.51Resolved A record
  3. ASN
    —Hosting org
  4. Trace
    ICMP traceroute off by policyPassive IP path only · inventKeys=false

Sources: DNS · MX/SPF/PTR · ipwho.is · OpenStreetMap · hosting-check · tool=vendor.hosting_check (passive only). Soft-fail if geo blocked · inventKeys=false.

Domain registration · business age

Domain age · domain-age-checker · vendor.domain_age

22 years, 2 months, 19 days

Veteran (10+ years)

RegistrarMarkMonitor Inc.
Registered2004-08-20
Domain age22 years, 2 months, 19 days
Age bandVeteran (10+ years)
Registry / location.com registry (RDAP)

Public RDAP / WHOIS only · domain-age-checker · tool=vendor.domain_age. Soft-fail when WHOIS is blocked — we never invent registrar or age.

Website worth · free TLDs · age

Est. midpoint$160,987,500
Range$6,075,000 – $315,900,000
Confidencehigh
Traffic (est.)3,375,000 – 11,250,000 / mo
RPM$18–$78
MonetizationHigh

Adapted from olivernashivy/site-worth · tool=vendor.site_worth · indicative only · inventKeys=false.

Same-name free extensions

  • trello.io · available
  • trello.info · available
  • trello.site · available
  • trello.tech · available
  • trello.pro · available
  • trello.cc · available

Checked 21 TLDs for “trello” · 8 registered · 0 unknown · DNS + RDAP only · tool=vendor.domain_scanner · inventKeys=false.

Highlights

Positive Highlights

  • SSL/TLS certificate validates (public handshake succeeded).
  • Final URL is served over HTTPS.
  • DNS resolves publicly (A/AAAA or equivalent).
  • TLS handshake OK (TLSv1.3).
  • HTTP Strict Transport Security is present.
  • DNS resolves publicly (A/AAAA).
  • security.txt found (coordinated disclosure signal).
  • RDAP domain record available (trello.com).

Negative Highlights

  • Content-Security-Policy not observed.
  • Set-Cookie present but Secure/HttpOnly incomplete on sampled header.
  • Security header missing: content-security-policy.
  • Security header missing: x-frame-options.
  • Security header missing: referrer-policy.
  • Security header missing: permissions-policy.

Derived from this scan’s findings, RDAP, TLS, and enrichment only · tools=vendor.site_worth,vendor.domain_age,vendor.hosting_check,vendor.domain_scanner · inventKeys=false.

Review Details

Company Evaluation

Registration data lists registrar “MarkMonitor Inc.”. Treat WHOIS fields as public OSINT only — not a legal ownership certificate. Domain age from RDAP is about 22 year(s) (8109 days).

Webshop Evaluation

Heuristic site-worth model (inventKeys=false) estimates midpoint value around $160,987,500 with monetization potential “High”. This is not an appraisal.

Technical Evaluation

Transport looks healthy: TLSv1.3 with certificate from Amazon. One or more browser security headers are missing on the final HTTPS response. That weakens clickjacking/XSS defenses even when the site is otherwise legitimate. Registrar on record: MarkMonitor Inc.. No automated “low-trust registrar” claim is made without a verified feed.

How we scored trello.com

Positive signals

  • TLS handshake OK (TLSv1.3).
  • HTTP Strict Transport Security is present.
  • DNS resolves publicly (A/AAAA).
  • security.txt found (coordinated disclosure signal).
  • robots.txt is publicly available.
  • RDAP domain record available (trello.com).

Risk signals

  • Content-Security-Policy not observed.
  • Set-Cookie present but Secure/HttpOnly incomplete on sampled header.

Findings

Technical details

DNS

resolved
A
108.138.7.51, 108.138.7.108, 108.138.7.86, 108.138.7.42
AAAA
—
PTR
server-108-138-7-51.fra56.r.cloudfront.net
error
—

TLS / certificate

ok
version
TLSv1.3
cipher
TLS_AES_128_GCM_SHA256
issuer
Amazon
notAfter
Feb 9 23:59:59 2027 GMT
SAN sample
*.frontend.public.atl-paas.net, bitbucket.org, *.bitbucket.com, *.bitbucket.io, *.teamworkgraph.ai, *.dataapps.shared.atlassian-3p.com, *.devsphere.tools.atlassian.com, *.rovo.com
error
—

HTTP & security headers

2 present
finalUrl
https://trello.com/
status
200
server
AtlassianEdge
x-powered-by
—
present
strict-transport-security, x-content-type-options
missing
content-security-policy, x-frame-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
cookie Secure
True
cookie HttpOnly
False

Tech fingerprint (public)

passive
title
Capture, organize, and tackle your to-dos from anywhere
generator
—
tech
—
script hosts
atl-onetrust-wrapper.atlassian.com, trello-bifrost.prod-east.frontend.public.atl-paas.net
description
Make the impossible, possible with Trello. The ultimate tool to boost your productivity. Escape the clutter and chaos—stay efficient with Inbox, Boards, and Planner from anywhere, even on mobile.

RDAP / registration

rdap
domain
trello.com
registrar
MarkMonitor Inc.
created
2004-08-20T18:07:36Z
expires
2027-06-01T11:59:59Z
nameservers
ns-1442.awsdns-52.org, ns-2013.awsdns-59.co.uk, ns-402.awsdns-50.com, ns-722.awsdns-26.net
status
client delete prohibited, client transfer prohibited, client update prohibited
error
—

Public well-known

passive
/.well-known/security.txt
HTTP 200 · found
/robots.txt
HTTP 200 · found
/security.txt
HTTP 200 · found
Analyzed 2026-11-02T15:49:28Z WORDLE passive OSINT (DNS/TLS/HTTP/RDAP/well-known) — no exploits More recent checks

looking for more information about this company or any company in the world? -Contact http://companyforensics.org

This service was brought to you by http://dotsynergygroup.com