Unclassified // For public releaseWordle · Official security dossier

Looking for more in-depth information on this company—or any company worldwide? Visit companyforensics.org.

Automatic security check · Public OSINT only

Company website

https://gemini.google.com/

89%

Strong protections

Public signals look solid. Keep verifying ownership and payment flows for high-stakes use. Passive OSINT only · inventKeys=false.

  1. High concern
  2. Elevated risk
  3. Caution advised
  4. Trusted — verify
  5. Strong protections

gemini.google.com security check

Public OSINT valuation for gemini.google.com: grade A (89/100). Title signal “gemini.google.com”. 6 security headers present, 2 commonly expected headers missing. This is a defensive surface review — not a penetration test.

89
/100
Grade A
Strong protections

Public signals look solid. Keep verifying ownership and payment flows for high-stakes use.

Checked 2026-11-02T16:08:40Z · Method: automated passive checks · No attacks, no exploits

Company website · Services · Social

Company website

https://gemini.google.com/

Services & products

  • No service or product links found on the scanned pages.

Social & LinkedIn

  • No social or LinkedIn company links found on the scanned pages.

Links are extracted from public crawl HTML only. We never invent profiles or product pages.

Research engines · Complete scan

This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more — researched in the spirit of Lissy93/web-check. Port scan, traceroute and Shodan stay off by policy. Run a live check on the security-check tool for the full interactive dashboard.

Connect this report to your website

Add a free badge that links visitors to this official Wordle security report. You get referral traffic and a backlink; customers can verify the dossier.

Open this public report

Trustpilot · Glassdoor

Trustpilot

—

Official Trustpilot signals only — never scraped. Shown when a public Business Unit profile exists (inventKeys=false).

Open Trustpilot for gemini.google.com ↗

Glassdoor

—

No Glassdoor scrape. Search the official employer directory when no linked profile is present.

Search Glassdoor ↗

Hosting · IP · map

  • IP142.251.155.2
  • ASNAS15169
  • HostingGoogle LLC
  • GeoSan Jose, California, United States
  1. Query
    gemini.google.comRequested hostname
  2. IP
    142.251.155.2San Jose, California, United States
  3. ASN
    AS15169Google LLC
  4. Trace
    ICMP traceroute off by policyPassive IP path only · inventKeys=false

Sources: DNS · ipwho.is geolocation · OpenStreetMap embed. Soft-fail if geo blocked · inventKeys=false.

Domain registration · business age

RegistrarMarkMonitor Inc.
Registered1997-09-15
Domain age29 years 1 mo
Registry / location.com registry (RDAP)

Public RDAP / WHOIS only. Soft-fail when WHOIS is blocked — we never invent registrar or age.

How we scored gemini.google.com

Positive signals

  • TLS handshake OK (TLSv1.3).
  • Content-Security-Policy observed.
  • Set-Cookie includes Secure and HttpOnly flags.
  • DNS resolves publicly (A/AAAA).
  • robots.txt is publicly available.
  • RDAP domain record available (google.com).

Risk signals

  • HSTS header missing on the final HTTPS response.

Findings

Technical details

DNS

resolved
A
142.251.155.2, 142.251.151.2, 142.251.156.2, 142.251.153.2, 142.251.154.2, 142.251.150.2, 142.251.152.2, 142.251.157.2
AAAA
2001:4860:482a:200::, 2001:4860:4827:200::, 2001:4860:482b:200::, 2001:4860:482d:200::, 2001:4860:4829:200::, 2001:4860:4826:200::, 2001:4860:4828:200::, 2001:4860:482c:200::
PTR
—
error
—

TLS / certificate

ok
version
TLSv1.3
cipher
TLS_AES_256_GCM_SHA384
issuer
Google Trust Services
notAfter
Dec 30 19:07:41 2026 GMT
SAN sample
*.google.com, *.appengine.google.com, *.bdn.dev, *.origin-test.bdn.dev, *.cloud.google.com, *.crowdsource.google.com, *.datacompute.google.com, *.google.ca
error
—

HTTP & security headers

6 present
finalUrl
https://gemini.google.com/
status
200
server
ESF
x-powered-by
—
present
content-security-policy, cross-origin-opener-policy, cross-origin-resource-policy, permissions-policy, x-content-type-options, x-frame-options
missing
strict-transport-security, referrer-policy
cookie Secure
True
cookie HttpOnly
True

Tech fingerprint (public)

passive
title
—
generator
—
tech
—
script hosts
—
description
—

RDAP / registration

rdap
domain
google.com
registrar
MarkMonitor Inc.
created
1997-09-15T04:00:00Z
expires
2028-09-14T04:00:00Z
nameservers
ns1.google.com, ns2.google.com, ns3.google.com, ns4.google.com
status
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
error
—

Public well-known

passive
/.well-known/security.txt
HTTP 404
/robots.txt
HTTP 200 · found
/security.txt
HTTP 404
Analyzed 2026-11-02T16:08:40Z WORDLE passive OSINT (DNS/TLS/HTTP/RDAP/well-known) — no exploits More recent checks

looking for more information about this company or any company in the world? -Contact http://companyforensics.org

This service was brought to you by http://dotsynergygroup.com