Unclassified // For public release888AI · Official security dossier

Looking for more in-depth information on this company—or any company worldwide? Visit companyforensics.org.

888AI Trusted Reviews · Public OSINT security valuation

Company website

https://www.bitrix24.de/?redirect_from=www.bitrix24.com%2F

bitrix24.com

Public OSINT valuation for bitrix24.com: grade C (68/100). Title signal “Bitrix24 ist ein kostenfreier Online-Arbeitsplatz für Ihr Unternehmen: CRM, Aufgaben, Online-Termine und vieles mehr.”. 2 security headers present, 6 commonly expected headers missing. This is a defensive surface review — not a penetration test.

68
C
68%

Security posture

Grade C · Passive public OSINT assessment. Official 888AI security dossier · inventKeys=false.

Company website · Services · Social

Company website

https://www.bitrix24.de/?redirect_from=www.bitrix24.com%2F

Services & products

Social & LinkedIn

  • No social or LinkedIn company links found on the scanned pages.

Links are extracted from public crawl HTML only. We never invent profiles or product pages.

Hosting · IP · map

  • IP185.104.211.34
  • ASN—
  • Hosting—
  • Geo—
  • PTR—
  • Nameservers—
  • MX—
  • SPF—
Map pending — IP geolocation not available (inventKeys=false).
  1. Query
    bitrix24.comRequested hostname
  2. IP
    185.104.211.34Resolved A record
  3. ASN
    —Hosting org
  4. Trace
    ICMP traceroute off by policyPassive IP path only · inventKeys=false

Sources: DNS · MX/SPF/PTR · ipwho.is · OpenStreetMap · hosting-check · tool=vendor.hosting_check (passive only). Soft-fail if geo blocked · inventKeys=false.

Domain registration · business age

Domain age · domain-age-checker · vendor.domain_age

15 years, 9 months, 13 days

Veteran (10+ years)

RegistrarKey-Systems GmbH
Registered2011-01-27
Domain age15 years, 9 months, 13 days
Age bandVeteran (10+ years)
Registry / location.com registry (RDAP)

Public RDAP / WHOIS only · domain-age-checker · tool=vendor.domain_age. Soft-fail when WHOIS is blocked — we never invent registrar or age.

Website worth · free TLDs · age

Est. midpoint$115,911,000
Range$4,374,000 – $227,448,000
Confidencehigh
Traffic (est.)2,430,000 – 8,100,000 / mo
RPM$18–$78
MonetizationHigh

Adapted from olivernashivy/site-worth · tool=vendor.site_worth · indicative only · inventKeys=false.

Same-name free extensions

  • bitrix24.io · available

Checked 21 TLDs for “bitrix24” · 8 registered · 5 unknown · DNS + RDAP only · tool=vendor.domain_scanner · inventKeys=false.

Highlights

Positive Highlights

  • SSL/TLS certificate validates (public handshake succeeded).
  • Final URL is served over HTTPS.
  • DNS resolves publicly (A/AAAA or equivalent).
  • TLS handshake OK (TLSv1.3).
  • Content-Security-Policy observed.
  • DNS resolves publicly (A/AAAA).
  • security.txt found (coordinated disclosure signal).
  • RDAP domain record available (bitrix24.com).

Negative Highlights

  • HSTS header missing on the final HTTPS response.
  • X-Content-Type-Options missing.
  • Security header missing: strict-transport-security.
  • Security header missing: x-content-type-options.
  • Security header missing: referrer-policy.
  • Security header missing: permissions-policy.

Derived from this scan’s findings, RDAP, TLS, and enrichment only · tools=vendor.site_worth,vendor.domain_age,vendor.hosting_check,vendor.domain_scanner · inventKeys=false.

Review Details

Company Evaluation

Registration data lists registrar “Key-Systems GmbH”. Treat WHOIS fields as public OSINT only — not a legal ownership certificate. Domain age from RDAP is about 15 year(s) (5758 days).

Webshop Evaluation

Heuristic site-worth model (inventKeys=false) estimates midpoint value around $115,911,000 with monetization potential “High”. This is not an appraisal.

Technical Evaluation

Transport looks healthy: TLSv1.3 with certificate from GoDaddy.com, Inc.. One or more browser security headers are missing on the final HTTPS response. That weakens clickjacking/XSS defenses even when the site is otherwise legitimate. Registrar on record: Key-Systems GmbH. No automated “low-trust registrar” claim is made without a verified feed.

Research engines · Complete scan

This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more. Run a live check on the security-check tool for the full interactive dashboard.

Connect this report to your website

Add a free badge that links visitors to this official 888AI security report. You get referral traffic and a backlink; customers can verify the dossier.

Open this public report

Findings

Checks

DNS

resolved
A
185.104.211.34
AAAA
—
PTR
—
error
—

TLS / certificate

ok
version
TLSv1.3
cipher
TLS_AES_128_GCM_SHA256
issuer
GoDaddy.com, Inc.
notAfter
Dec 28 10:28:36 2026 GMT
SAN sample
*.bitrix24.com, bitrix24.com
error
—

HTTP & security headers

2 present
finalUrl
https://www.bitrix24.de/?redirect_from=www.bitrix24.com%2F
status
200
server
QRATOR
x-powered-by
—
present
content-security-policy, x-frame-options
missing
strict-transport-security, x-content-type-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
cookie Secure
False
cookie HttpOnly
False

Tech fingerprint (public)

passive
title
Bitrix24 ist ein kostenfreier Online-Arbeitsplatz für Ihr Unternehmen: CRM, Aufgaben, Online-Termine und vieles mehr.
generator
—
tech
Google Analytics
script hosts
x
description
Die All-in-One Lösung von Bitrix24 hilft Ihnen dabei, Ihre Teams zu verwalten und den Vertrieb voranzutreiben. Bitrix24 lässt sich hervorragend in Ihre Geschäftsprozesse integrieren und sorgt für deren hochgenaue und effiziente Verwaltung.

RDAP / registration

rdap
domain
bitrix24.com
registrar
Key-Systems GmbH
created
2011-01-27T12:11:30Z
expires
2027-01-27T12:11:30Z
nameservers
ns-1377.awsdns-44.org, ns-1745.awsdns-26.co.uk, ns-439.awsdns-54.com, ns-572.awsdns-07.net
status
client transfer prohibited
error
—

Public well-known

passive
/.well-known/security.txt
HTTP 200 · found
/robots.txt
HTTP 200 · found
/security.txt
HTTP 404

Trustpilot · Glassdoor

Trustpilot

—

Official Trustpilot signals only — never scraped. Scores appear when SECSCAN_TRUSTPILOT_API_KEY is configured (inventKeys=false).

Open Trustpilot for bitrix24.com ↗

Glassdoor

—

No Glassdoor scrape. Search the official employer directory when no linked profile is present.

Search Glassdoor ↗
Analyzed 2026-11-01T14:56:08Z 888AI passive OSINT (DNS/TLS/HTTP/RDAP/well-known) — no exploits Public OSINT only More recent checks

looking for more information about this company or any company in the world? -Contact http://companyforensics.org

This service was brought to you by http://dotsynergygroup.com