Analysis for

brokercheck.finra.org

Flare Score

Safe

FlareAI™ Summary

BrokerCheck, operated by FINRA, is a resource for researching the backgrounds of brokers and investment advisors, including employment history and potential violations. The site exhibits strong security indicators: a valid SSL certificate, a domain age exceeding 18 years, and a clean blacklist status across trusted sources. Google Safe Browsing also reports a CLEAN status. With a FlareScore of 75/100, BrokerCheck is considered safe. Users can generally trust the information provided, but should always exercise due diligence when making financial decisions.

-1.8%

than category average

Canada

Server Country

18 years

Domain Age

Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from Google Trust Services

Established domain (18+ years old)

Registered with reputable registrar (GoDaddy Corporate Domains, LLC)

Not found on any blacklist (1 sources checked)

Modern security headers configured (HSTS, CSP)

Good website performance

Uses CDN for better performance and security

Negative Signals

WHOIS information hidden (privacy protection enabled)

Weak or missing email security configuration

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

80/100

⚠ SSL Expired (20) ✓ HSTS (20) ✓ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

Google Trust Services

Valid From

Dec 22, 2025

Valid Until

Mar 22, 2026

Certificate Expired

Security Headers

HSTS

CSP

X-Frame-Options

How Was This Calculated?

Transparency into our FlareScore™ methodology and data sources used for this analysis.

brokercheck.finra.org Analysis

FlareScore™: 75/100 (Safe Risk)

Our analysis of brokercheck.finra.org identified 7 positive security indicators and 2 potential concerns. The FlareScore™ rating combines technical security measures, domain reputation, and content analysis.

SSL Certificate Analysis

Domain Age: 18 years 9 months

AI Content Review

9 DNS Records

Analysis Sources

• WHOIS: GoDaddy Corporate Domains, LLC
• SSL: Google Trust Services
• DNS: 9 records analyzed
• Content: Visual & text analysis

Last Checked

Feb 11, 2026
2 months ago

Transparency Note: Our analysis is based on publicly available data and automated scanning. For detailed methodology and accuracy metrics, visit our methodology page.

Domain & WHOIS Information

Domain Age

18 years 9 months

Registered Jun 29, 2007

Very High Trust

Jun 2007 Expires Jun 2026

Established domain (5+ years) - High trust indicator

Registrar

GoDaddy Corporate Domains

Registration Date

Jun 29, 2007 (18 years ago)

Last Updated

Jun 04, 2025

Expiration Date

Jun 29, 2026 (76 days remaining)

Server Location

Canada

Abuse Contact

[email protected]

+1.518831586

Domain Name: finra.org
Registry Domain ID: REDACTED
Registrar WHOIS Server: gcd.com.whois
Registrar URL: https://gcd.com/whois/
Updated Date: 2025-06-04T23:07:12Z
Creation Date: 2007-06-29T20:51:32Z
Registry Expiry Date: 2026-06-29T20:51:32Z
Registrar: GoDaddy Corporate Domains, LLC
Registrar IANA ID: 3786
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.518831586
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: edns1.ultradns.org
Name Server: edns1.ultradns.biz
Name Server: edns1.ultradns.net
Name Server: edns1.ultradns.com
Name Server: ns33.ultradns2.org
Name Server: ns33.ultradns2.com
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://icann.org/wicf/
>>> Last update of WHOIS database: 2026-02-11T13:06:03Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

Terms of Use: Access to Public Interest Registry WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Public Interest Registry registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Identity Digital except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Public Interest Registry reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.  The Registrar of Record identified in this output may have an RDDS service that can be queried for additional information on how to contact the Registrant, Admin, or Tech contact of the queried domain name.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

None

AAAA

CNAME

                                                            172.65.90.27
                                                        

                                                            172.65.90.24
                                                        

                                                            172.65.90.25
                                                        

                                                            172.65.90.26
                                                        

                                                            2606:4700:78::90:0:183
                                                        

                                                            2606:4700:78::90:0:182
                                                        

                                                            2606:4700:78::90:0:180
                                                        

                                                            2606:4700:78::90:0:181
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (5)

HSTS

XSS Filter

Content Security Policy

MIME Sniffing Protection

Clickjacking Protection

Web Server

                                            cloudflare
                                        

Cache Policy

                                            public,max-age=600
                                        

Cache Status

                                            Hit from cloudfront
                                        

Proxy/CDN

                                            1.1 909dc08a64955c91...
                                        

CDN Cache

                                            DYNAMIC
                                        

Cloudflare Ray ID

                                            9cc40fb43df3e9ca-DFW
                                        

{
    "date": "Wed, 11 Feb 2026 13:06:03 GMT",
    "content-type": "text\/html",
    "set-cookie": "__cf_bm=dh1RX69Fa481zbzKkbT6VfkKrr8YislN5LkjnoolrFA-1770815163.5511174-1.0.1.1-cpBCSLrhX6zYu3tEK7x903Mu221wwiQTJ4sAe5.oFwTIuK6dLGilUbEp3M6o42Ag1WtWacjb0p5GxgI6BIxyeismQnDkEbjhTw1Mpd.WoajTGg2_7yWdnO5bTF8NN7Qd; HttpOnly; Secure; Path=\/; Domain=brokercheck.finra.org; Expires=Wed, 11 Feb 2026 13:36:03 GMT",
    "last-modified": "Wed, 05 Nov 2025 23:11:46 GMT",
    "x-amz-server-side-encryption": "AES256",
    "server": "cloudflare",
    "cache-control": "public,max-age=600",
    "x-ua-compatible": "IE=edge,chrome=1",
    "strict-transport-security": "max-age=31536000",
    "allow": "GET, HEAD, OPTIONS",
    "x-xss-protection": "1; mode=block",
    "content-security-policy": "default-src 'self' 'unsafe-inline' *.cbridgert.vhtcloud.com *.getmindful.com stats.g.doubleclick.net *.finra.org data: *.finra.org cdnjs.cloudflare.com www.googletagmanager.com www.google-analytics.com www.google.com analytics.google.com cdn-prod.securiti.ai  app.securiti.ai; frame-ancestors 'self'; font-src fonts.googleapis.com fonts.gstatic.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.cbridgert.vhtcloud.com *.getmindful.com *.finra.org cdn-prod.securiti.ai;",
    "x-content-type-options": "nosniff",
    "x-frame-options": "SAMEORIGIN",
    "vary": "Accept-Encoding",
    "x-cache": "Hit from cloudfront",
    "via": "1.1 909dc08a64955c911d0b05752c3fed8c.cloudfront.net (CloudFront)",
    "x-amz-cf-pop": "DFW56-P9",
    "x-amz-cf-id": "AOZyCWzUAn8NepIZqSSDhlxH6dpVt68bhbehS4GkWfWAC31HlCBYiw==",
    "age": "8430838",
    "cf-cache-status": "DYNAMIC",
    "content-encoding": "gzip",
    "cf-ray": "9cc40fb43df3e9ca-DFW"
}

IP Geolocation

Server location and network information

Canada

Toronto

IP Address

172.65.90.24

ISP / Hosting

Cloudflare, Inc.

Coordinates

43.6532, -79.3832

Country Code

View on Google Maps

Performance Metrics

Website loading speed and performance analysis

100

Fast

Load Time

0.33s

Excellent

Page Size

0.01MB

Optimized

Requests

Minimal

Overall

100/100

Performance score

Excellent! This website loads quickly and provides a great user experience.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.brokercheck.finra.org

api.brokercheck.finra.org

Privacy & Trackers

2 Trackers Found

Google Analytics

General

Google Tag Manager

General

These trackers may be used for analytics, advertising, or site functionality.

Website Screenshot

In-Depth Analysis

Overview

BrokerCheck, accessible at brokercheck.finra.org, is a tool provided by FINRA (Financial Industry Regulatory Authority). Its purpose is to allow investors to research the background and qualifications of brokers, investment advisors, and brokerage firms. The site provides information on employment history, certifications, licenses, and any reported violations or disciplinary actions.

Security Assessment

The website demonstrates a strong security posture. It uses a valid SSL certificate issued by Google Trust Services, ensuring encrypted communication. The domain is relatively old (18+ years), suggesting stability and legitimacy. Importantly, Google Safe Browsing reports a clean status, indicating the absence of detected threats. Hosting is provided by Cloudflare, a reputable CDN and security provider.

Trust Level

With a FlareScore of 75/100, brokercheck.finra.org presents a moderate risk level. While the security measures are robust, the presence of trackers and lack of a direct privacy policy are considerations. The clean Google Safe Browsing status is a positive signal.

Recommendations

Users can generally trust the information provided on BrokerCheck, as it is sourced from FINRA's regulatory database. However, be aware of the presence of trackers and consider using browser extensions to limit data collection. While the site itself appears safe, always verify critical information independently and exercise caution when making investment decisions based solely on the information provided.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

No reviews yet.