888AI Trusted Reviews · Public OSINT security valuation
zoho.com
Public OSINT valuation for zoho.com: grade B (80/100). Title signal “Zoho | Cloud-Software-Suite für Unternehmen”. 3 security headers present, 5 commonly expected headers missing. This is a defensive surface review — not a penetration test.
80
B
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (zoho.com).
- Final HTTP status 200 at https://www.zoho.com/de/?sredirect=true.
Checks
DNS
resolved- A
- 136.143.190.155
- AAAA
- —
- PTR
- —
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_128_GCM_SHA256
- issuer
- Sectigo Limited
- notAfter
- Apr 16 23:59:59 2027 GMT
- SAN sample
- *.zoho.com, zoho.com
- error
- —
HTTP & security headers
3 present- finalUrl
- https://www.zoho.com/de/?sredirect=true
- status
- 200
- server
- cloudflare
- x-powered-by
- —
- present
- content-security-policy, strict-transport-security, x-content-type-options
- missing
- x-frame-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- True
- cookie HttpOnly
- True
Tech fingerprint (public)
passive- title
- Zoho | Cloud-Software-Suite für Unternehmen
- generator
- —
- tech
- —
- script hosts
- x
- description
- Eine einzigartige und leistungsstarke Software-Suite, die Ihre Arbeitsweise verändert. Entwickelt für Unternehmen jeder Größe; von einem Unternehmen gebaut, das Ihre Privatsphäre schätzt.
RDAP / registration
rdap- domain
- zoho.com
- registrar
- MarkMonitor Inc.
- created
- 2004-01-16T19:05:15Z
- expires
- 2031-01-16T19:05:15Z
- nameservers
- ns1.zohocorp.com, ns11.zns-53.com, ns21.zns-53.net, ns31.zns-53.com, ns41.zns-53.net, pdns90.ultradns.biz, pdns90.ultradns.com, pdns90.ultradns.net
- status
- client delete prohibited, client transfer prohibited, client update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404
Reviews from Trustpilot
Official Trustpilot profile for this domain (public page — we do not scrape Trustpilot).
Open Trustpilot for zoho.comScores/widgets require SECSCAN_TRUSTPILOT_API_KEY on scan.888ai.org · inventKeys=false
888AI Trusted Reviews are brought to You by DOT Synergy llc, the worlds leader in Trusted Reviews.