thetradedesk.com

Checked 22 October 2026, 11:03 UTC · via 8.8.8.8
!Passed with warnings
23 passed 3 warnings 0 failed 5 info

Registration

info

.com generic · MarkMonitor Inc. · expires 2027-02-01

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
MarkMonitor Inc.
Registered
5 February 2004
Last changed
29 December 2021
Expires
1 February 2027
Status
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-02-01 #3
    The registration is valid until 2027-02-01 (101 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net
NS in the zone
dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net, ns01.ttddnnss.com, ns02.ttddnnss.com, ns03.ttddnnss.com, ns04.ttddnnss.com
NameserverAddressesNetwork (AS)Glue
dns1.p03.nsone.net198.51.44.3 2620:4d:4000:6259:7:3:0:1AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
dns2.p03.nsone.net198.51.45.3 2a00:edc0:6259:7:3::2AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
dns3.p03.nsone.net198.51.44.67 2620:4d:4000:6259:7:3:0:3AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
dns4.p03.nsone.net198.51.45.67 2a00:edc0:6259:7:3::4AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
ns01.ttddnnss.com (zone only)148.163.248.1AS63911 NETACTUATE-AS-AP - NetActuate, Inc, US-
ns02.ttddnnss.com (zone only)148.163.248.65AS63911 NETACTUATE-AS-AP - NetActuate, Inc, US-
ns03.ttddnnss.com (zone only)148.163.248.129AS63911 NETACTUATE-AS-AP - NetActuate, Inc, US-
ns04.ttddnnss.com (zone only)148.163.248.193AS63911 NETACTUATE-AS-AP - NetActuate, Inc, US-

Checks

  • ✓ 4 nameservers #6
    Delegated to dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only in the zone: ns01.ttddnnss.com, ns02.ttddnnss.com, ns03.ttddnnss.com, ns04.ttddnnss.com. dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net, ns01.ttddnnss.com, ns02.ttddnnss.com, ns03.ttddnnss.com, ns04.ttddnnss.com report NS dns1.p03.nsone.net dns2.p03.nsone.net dns3.p03.nsone.net dns4.p03.nsone.net ns01.ttddnnss.com ns02.ttddnnss.com ns03.ttddnnss.com ns04.ttddnnss.com.
    #7
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 3 IPv4 /24s and 2 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS62597 (NSONE - NSONE Inc, US): 8 addresses; AS63911 (NETACTUATE-AS-AP - NetActuate, Inc, US): 4 addresses.
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • i
    Partly IPv6
    These nameservers have no IPv6 address: ns01.ttddnnss.com, ns02.ttddnnss.com, ns03.ttddnnss.com, ns04.ttddnnss.com.
    #13

Nameservers

info

12 of 12 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
dns1.p03.nsone.net 198.51.44.3NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns1.p03.nsone.net 2620:4d:4000:6259:7:3:0:1NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns2.p03.nsone.net 198.51.45.3NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns2.p03.nsone.net 2a00:edc0:6259:7:3::2NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns3.p03.nsone.net 198.51.44.67NOERROR, 6 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns3.p03.nsone.net 2620:4d:4000:6259:7:3:0:3NOERROR, 5 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns4.p03.nsone.net 198.51.45.67NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns4.p03.nsone.net 2a00:edc0:6259:7:3::4NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns01.ttddnnss.com 148.163.248.1NOERROR, 9 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns02.ttddnnss.com 148.163.248.65NOERROR, 9 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns03.ttddnnss.com 148.163.248.129NOERROR, 9 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns04.ttddnnss.com 148.163.248.193NOERROR, 9 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9

Checks

  • ✓ All respond #14
    All 12 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: dns1.p03.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9"; dns2.p03.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9"; dns3.p03.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9"; dns4.p03.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9"; ns01.ttddnnss.com: "19dd46e347df36b70933bf2be8023258586586a9"; ns02.ttddnnss.com: "19dd46e347df36b70933bf2be8023258586586a9"; ns03.ttddnnss.com: "19dd46e347df36b70933bf2be8023258586586a9"; ns04.ttddnnss.com: "19dd46e347df36b70933bf2be8023258586586a9".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 1654731040 · primary dns1.p03.nsone.net

Found

Primary (MNAME)
dns1.p03.nsone.net
Contact (RNAME)
hostmaster.nsone.net
Serial
1654731040
Refresh / retry
10800 s / 3600 s
Expire
2592000 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
dns1.p03.nsone.net (198.51.44.3)1654731040
dns1.p03.nsone.net (2620:4d:4000:6259:7:3:0:1)1654731040
dns2.p03.nsone.net (198.51.45.3)1654731040
dns2.p03.nsone.net (2a00:edc0:6259:7:3::2)1654731040
dns3.p03.nsone.net (198.51.44.67)1654731040
dns3.p03.nsone.net (2620:4d:4000:6259:7:3:0:3)1654731040
dns4.p03.nsone.net (198.51.45.67)1654731040
dns4.p03.nsone.net (2a00:edc0:6259:7:3::4)1654731040
ns01.ttddnnss.com (148.163.248.1)1654731040
ns02.ttddnnss.com (148.163.248.65)1654731040
ns03.ttddnnss.com (148.163.248.129)1654731040
ns04.ttddnnss.com (148.163.248.193)1654731040

Checks

  • ✓ Serial 1654731040 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 3h, retry 1h, expire 30d, negative TTL 1h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver dns1.p03.nsone.net is one of the listed nameservers.
  • ✓ Contact hostmaster@nsone.net #25
    The SOA RNAME hostmaster.nsone.net means hostmaster@nsone.net.
  • ✓ Timestamp serial #26
    The serial 1654731040 is a Unix timestamp (2022-06-08 23:30 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

66 records at the apex

Found

Read from
198.51.44.3:53
TypeValueTTL
SOAdns1.p03.nsone.net. hostmaster.nsone.net. 1654731040 10800 3600 2592000 36003600
NSdns1.p03.nsone.net.86400
NSdns2.p03.nsone.net.86400
NSdns3.p03.nsone.net.86400
NSdns4.p03.nsone.net.86400
NSns01.ttddnnss.com.86400
NSns02.ttddnnss.com.86400
NSns03.ttddnnss.com.86400
NSns04.ttddnnss.com.86400
A13.32.121.239
A13.32.121.379
A13.32.121.1249
A13.32.121.189
AAAA2600:9000:2240:4400:1a:9ca:c700:93a112
AAAA2600:9000:236e:a800:1a:9ca:c700:93a112
AAAA2600:9000:236e:da00:1a:9ca:c700:93a112
AAAA2600:9000:2240:2200:1a:9ca:c700:93a112
AAAA2600:9000:236e:fa00:1a:9ca:c700:93a112
AAAA2600:9000:2240:c600:1a:9ca:c700:93a112
AAAA2600:9000:236e:8800:1a:9ca:c700:93a112
AAAA2600:9000:236e:9000:1a:9ca:c700:93a112
MX0 thetradedesk-com.mail.protection.outlook.com.300
TXT"docusign=894de12f-98d0-4118-b7d5-3a36a104c2f4"3600
TXT"docusign=d6bdfe7c-ed45-4f57-8835-ba96ba7a3aab"3600
TXT"45606480-93b3-4b4f-a258-0f724fb8b014"3600
TXT"MS=ms85484796"3600
TXT"citrix-verification-code=c2677173-d0d9-493a-b968-b006e9049923"3600
TXT"ZOOM_verify_6UuFt5PSQNyhC23lRiIEyA"3600
TXT"v=spf1 include:spf.protection.outlook.com include:spf_c.oraclecloud.com include:_spf.salesforce.com include:mktomail.com include:docebosaas.com include:amazonses.com ip4:168.245.1.182 -all"3600
TXT"a863940a-cdae-4c78-9664-b4d92e427c82"3600
TXT"03da213e-9940-4dd0-ad7d-952109eab527"3600
TXT"traction-guest=62a7a6ff-62fd-43b0-b456-e98aea957694"3600
TXT"be81387f-b84e-45a4-8c30-72755859546f"3600
TXT"0ed1fe018ad666725d02b3446b94cd31a9592c2b25"3600
TXT"google-site-verification=CsprCAM6XKQ82Gm5IrN3DGyQenrXdzaoqmOhA_xhW2c"3600
TXT"atlassian-domain-verification=nqCqJvVrpDHz7MXsIxB3TLa7lVZekXCCzYVAqXRnlfrzO8RWxwaFWafUpHSln8jb"3600
TXT"64u6gfgh5ddqcrej9cogtb06jk"3600
TXT"_globalsign-domain-verification=jl0z6cRgWGqA_M1XOnpbvvlq17TjXHo08FA8Umkxll"3600
TXT"kRb2Pe4v2LSe9AYBW_86dYT063xMoXg"3600
TXT"omfbye16qj"3600
TXT"google-site-verification=uid_qN-BQZAIRtzWKNPuKgwf0mqWwpFnF6kyL4_k7rA"3600
TXT"apple-domain-verification=BkLCDc4C5xltzx3R"3600
TXT"facebook-domain-verification=pll156cg6scuz6z66ryu7b3vzvdjef"3600
TXT"google-site-verification=9eQt_vWnhR8q9J8dgtNrsWIxgcDqQYJu5rZSw3UmI-A"3600
TXT"miro-verification=21b580213322c041fa7fbaad657a1afade58429f"3600
TXT"asv=82d08917e6368e3e3e4510def375ce29"3600
TXT"zapier-domain-verification-challenge=2a8f6f0f-a5c5-4822-9b5c-9f3eb6e9a06c"3600
TXT"google-site-verification=bm5O3KyFKntInEb9DCz34GqgiBw8v3hftgRH4J9YzSM"3600
TXT"teamviewer-sso-verification=0d572c9254ea4341ab7d479cd1a98e7d"3600
TXT"onetrust-domain-verification=ee0a10c51c8946cfba9f0198cbd6f5c6"3600
TXT"clickup-verification = TbdenKPQzSvwmS+pbt26QApvEBO19L60mOjIFvAAOro"3600
TXT"nitro-verification-code=MzcyNDg2Njg4NDg5NzIyOTg2Mw=="3600
TXT"docker-verification=ac431a6c-589f-4bbc-b255-c1247005b89d"3600
TXT"canva-site-verification=LCUarYPleZVliJngrWPcxQ"3600
TXT"google-site-verification=A60rYKTz3gkRDdwHEQJ_1Gj_7V2tTTwTmB_iMLHsSSs"3600
TXT"atlassian-domain-verification=JIdV5CoxfX3SFQqmcjesrY3ra5vbZoL6tVmWBFC9waaGebgyPSaiu67gayYcSRi6"3600
TXT"mongodb-site-verification=Qg1PEAJDXRz2uneg52su7EqYGePvNVRV"3600
TXT"uo8bptv8qv69p2lmi6cap74f3v"3600
TXT"infoblox-domain-mastery=99f73d684127ed257f8020bde9932326bc81ead52db9b25fa8ba4d0e6ba058be18"3600
TXT"atlassian-sending-domain-verification=9d9c6aa6-bb2a-40ea-acfc-b3c3cc7d9be2"3600
TXT"stripe-verification=4B7D071367083B2DD4060AC449580E9D71E8615F571AC535EB4B7D3A18DE1526"3600
TXT"adobe-idp-site-verification=46842212dba4ac32836719dbadcd9e041246cdd3a1969a9e7eb1b1b69fc6ed1c"3600
TXT"cursor-domain-verification-6mz4qn=phLIXGO0SLnkUSSLaDvygrBaH"3600
TXT"jamf-site-verification=vOS6LrScCRLaXVh-iYym3w"3600
TXT"anthropic-domain-verification-9bj57s=MPqLMI1SdO0g9KEWEew8aGyHv"3600
TXT"openai-domain-verification=dv-2XhPHu09bK17bNRILcrqc5BO"3600

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (9s), AAAA (12s). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35