Full corporate forensics — registration, ownership, people, and risk — at companyforensics.org.
Automatic security check · Public OSINT only
Company website
High concern
Public OSINT highlights serious gaps. Do not rely on this site for sensitive actions without a deeper review. Passive OSINT only · inventKeys=false.
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
tdameritrade.com security check
Public OSINT valuation for tdameritrade.com: grade F (0/100). Title signal “tdameritrade.com”. 0 security headers present, 8 commonly expected headers missing. This is a defensive surface review — not a penetration test.
Company website · Services · Social
Company website
Services & products
- No service or product links found on the scanned pages.
Social & LinkedIn
- No social or LinkedIn company links found on the scanned pages.
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
Research engines · Complete scan
This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more. Run a live check on the security-check tool for the full interactive dashboard.
Connect this report to your website
Add a free badge that links visitors to this official Company Forensics Online Security Checked report. You get referral traffic and a backlink; customers can verify the dossier.
Trustpilot · Glassdoor
Hosting · IP · map
- IP—
- ASN—
- Hosting—
- Geo—
- PTR—
- Nameservers—
- MX—
- SPF—
- Querytdameritrade.com
- IP—
- ASN—
- TraceICMP traceroute off by policy
Sources: DNS · MX/SPF/PTR · ipwho.is · OpenStreetMap · hosting-check · tool=vendor.hosting_check (passive only). Soft-fail if geo blocked · inventKeys=false.
Domain registration · business age
Domain age · domain-age-checker · vendor.domain_age
23 years, 1 month
Veteran (10+ years)
Public RDAP / WHOIS only · domain-age-checker · tool=vendor.domain_age. Soft-fail when WHOIS is blocked — we never invent registrar or age.
Website worth · free TLDs · age
Adapted from olivernashivy/site-worth · tool=vendor.site_worth · indicative only · inventKeys=false.
Same-name free extensions
- tdameritrade.ai · available
- tdameritrade.co · available
- tdameritrade.dev · available
- tdameritrade.me · available
- tdameritrade.online · available
- tdameritrade.cloud · available
- tdameritrade.store · available
- tdameritrade.club · available
- tdameritrade.pro · available
- tdameritrade.tv · available
- tdameritrade.cc · available
Checked 21 TLDs for “tdameritrade” · 8 registered · 1 unknown · DNS + RDAP only · tool=vendor.domain_scanner · inventKeys=false.
Highlights
Positive Highlights
- DNS resolves publicly (A/AAAA or equivalent).
- RDAP domain record available (tdameritrade.com).
- Domain registration age is mature (23+ years via RDAP).
Negative Highlights
- TLS inspection failed: [Errno -5] No address associated with hostname.
- HSTS header missing on the final HTTPS response.
- Content-Security-Policy not observed.
- X-Content-Type-Options missing.
- No public A/AAAA records resolved.
- Final URL remained on HTTP (no HTTPS landing).
- Security header missing: strict-transport-security.
- Security header missing: content-security-policy.
Derived from this scan’s findings, RDAP, TLS, and enrichment only · tools=vendor.site_worth,vendor.domain_age,vendor.hosting_check,vendor.domain_scanner · inventKeys=false.
Review Details
Company Evaluation
Registration data lists registrar “MarkMonitor Inc.”. Treat WHOIS fields as public OSINT only — not a legal ownership certificate. Domain age from RDAP is about 23 year(s) (8425 days).
Webshop Evaluation
Heuristic site-worth model (inventKeys=false) estimates midpoint value around $42,997,500 with monetization potential “High”. This is not an appraisal.
Technical Evaluation
TLS details were incomplete or failed in this passive pass — confirm certificate validity manually. One or more browser security headers are missing on the final HTTPS response. That weakens clickjacking/XSS defenses even when the site is otherwise legitimate. Registrar on record: MarkMonitor Inc.. No automated “low-trust registrar” claim is made without a verified feed.
How we scored tdameritrade.com
Positive signals
- RDAP domain record available (tdameritrade.com).
Risk signals
- TLS inspection failed: [Errno -5] No address associated with hostname.
- HSTS header missing on the final HTTPS response.
- Content-Security-Policy not observed.
- X-Content-Type-Options missing.
- No public A/AAAA records resolved.
- Final URL remained on HTTP (no HTTPS landing).
Findings
- TLS inspection failed: [Errno -5] No address associated with hostname.
- HSTS header missing on the final HTTPS response.
- Content-Security-Policy not observed.
- X-Content-Type-Options missing.
- No public A/AAAA records resolved.
- RDAP domain record available (tdameritrade.com).
- Final URL remained on HTTP (no HTTPS landing).
Technical details
DNS
failed- A
- —
- AAAA
- —
- PTR
- —
- error
- [Errno -5] No address associated with hostname
TLS / certificate
fail- version
- —
- cipher
- —
- issuer
- —
- notAfter
- —
- SAN sample
- —
- error
- [Errno -5] No address associated with hostname
HTTP & security headers
0 present- finalUrl
- http://tdameritrade.com/
- status
- —
- server
- —
- x-powered-by
- —
- present
- —
- missing
- strict-transport-security, content-security-policy, x-content-type-options, x-frame-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- False
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- —
- generator
- —
- tech
- —
- script hosts
- —
- description
- —
Company presence (crawl links)
extracted- companyWebsite
- http://tdameritrade.com/
- serviceLinks
- none found
- socialLinks
- none found
RDAP / registration
rdap- domain
- tdameritrade.com
- registrar
- MarkMonitor Inc.
- created
- 2003-10-10T14:38:48Z
- expires
- 2027-10-10T14:38:48Z
- nameservers
- a1-116.akam.net, a20-65.akam.net, np1.schwab.com, np2.schwab.com, np3.schwab.com, np4.schwab.com
- status
- client delete prohibited, client transfer prohibited, client update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 0
- /robots.txt
- HTTP 0
- /security.txt
- HTTP 0
looking for more information about this company or any company in the world? -Contact http://companyforensics.org
This service was brought to you by http://dotsynergygroup.com
