Sheet DS-00005 · .COM

Domain statistics for tesco.com

Results from 3 hours ago · re-check available after 24 hours

Surveyor's notes

tesco.com was registered on 20 Dec 1994, which makes it 31 years, 9 months old, and its registrar is MarkMonitor Inc.. The current registration runs until 19 Dec 2027 (441 days away).

Its home page answers with status 403 at tesco.com over a secure HTTPS connection, served from the AKAMAI-AS - Akamai Technologies, Inc. network (registered in United States).

The Wayback Machine first captured its home page in March 2000; it ranks 3,288 in the Tranco list of the top million sites.

For email, it receives email (2 mail servers), has an SPF record, has a DMARC policy of "reject". It has no IPv6 address.

Surveyed 4 October 2026, 02:30 (UK time). Results are kept for 24 hours.

31 yrsAge
441 daysRenewal due
#3,288Tranco rank
2000First archived
validHTTPS
£5,000–£25,000Rough worth

Key to symbols

Good Present, valid or working
Worth a look Missing, weak or unusual
Problem Failed, expired or misconfigured
Information A fact, neither good nor bad
Not recorded Not found, not applicable or no answer
Being surveyed Queued or running

Registration

Registered

Registered: 20 Dec 1994 31 years, 9 months ago
Registration ends: 19 Dec 2027 441 days to go
Last updated: 17 Nov 2025
Registrar: MarkMonitor Inc. IANA ID 292
Status codes: client delete prohibited The registrar has locked the domain against deletion.
client transfer prohibited The registrar has locked the domain against transfer to another registrar (a common security setting).
client update prohibited The registrar has locked the domain against changes.
Nameservers: ns12.ultradns2.com
ns12.ultradns2.org
pdns194.ultradns.biz
pdns194.ultradns.co.uk
pdns194.ultradns.com
pdns194.ultradns.info
pdns194.ultradns.net
pdns194.ultradns.org
DNSSEC: Not signed

What this means These dates come from the registry's RDAP record (source: rdap.verisign.com). "Registered" is when the current registration began — if a domain lapsed and was registered again, the clock restarts. We never show personal registrant details. See what domain age means.

Archive history

Archived

First capture: 1 Mar 2000 26 years, 7 months ago
Latest capture: 7 Sep 2026

Months each year with at least one capture of the home page (0–12). Source: Wayback Machine CDX index.

Year by year

Year	Months captured
2000	7
2001	1
2002	1
2004	8
2005	12
2006	12
2007	11
2008	12
2009	12
2010	12
2011	12
2012	12
2013	12
2014	12
2015	12
2016	12
2017	12
2018	12
2019	12
2020	12
2021	12
2022	12
2023	12
2024	12
2025	12
2026	10

Open the Wayback Machine calendar

What this means The Internet Archive's Wayback Machine saves copies of web pages. The first capture shows roughly when a site first appeared on the web — it can be later than registration (nothing published yet) or earlier (an older owner). See the Wayback Machine guide.

Popularity and traffic

In the Tranco list

Tranco rank: #3,288 of the top million
Traffic (rough estimate): 500,000 – 50 million visits a monthA deliberately wide band based only on the rank band (top 10,000). Not measured.

Rank from the Tranco list (list ID Y83KG, 4 Oct 2026), a research ranking by Le Pochat et al. that averages several popularity sources over 30 days.

What this means A rank shows how popular a site is compared with others — 1 is the most popular. Turning a rank into visitor numbers is guesswork, so we show a very wide band and explain the method on our methodology page.

Estimated worth

Rough estimate

£5,000 – £25,00079 points

For interest only — not a valuation. A domain is worth what a buyer will pay; this simple formula can't see trademarks, backlinks, sales history or demand.

How the points were added up
Factor	Points	Why
Length	+13	The name part is 5 characters long; shorter names are scarcer.
Ending	+15	Domain ending .com.
Pronounceable	+4	Letters only, with a balance of vowels and consonants.
Age	+15	Registered 31 years, 9 months ago (by the registry's current record).
Archive history	+3	The Wayback Machine has captures of the home page.
Long archive history	+5	First captured in 2000.
Popularity	+22	Ranked 3,288 in the Tranco top-million list.
HTTPS	+2	A valid, trusted certificate.
Total	79	Mapped to a £ band on our methodology page.

What this means Read how domain value is judged for the factors professionals look at.

DNS and email

SPF and DMARC set

A (IPv4): 23.39.184.75
AAAA (IPv6): none
www: CNAME → www.tesco.com.edgekey.net
Nameservers: pdns194.ultradns.co.uk
pdns194.ultradns.biz
pdns194.ultradns.com
pdns194.ultradns.net
pdns194.ultradns.org
pdns194.ultradns.info
ns12.ultradns2.com
ns12.ultradns2.org
Mail (MX): 10 mxa-00492d01.gslb.pphosted.com
10 mxb-00492d01.gslb.pphosted.com
SPF: v=spf1 include:spf-00492d01.pphosted.com include:spf.protection.outlook.com include:mail.zendesk.com include:_spf.salesforce.com include:spf.sendinblue.com ip4:212.140.180.250 ip4:212.140.187.24 ip4:212.140.189.59 ip4:35.177.140.163 ip4:35.178.162.89 ip4:52.56.79.124 ip4:31.193.11.33 ip4:31.193.11.41 ip4:62.13.153.174 ip4:85.115.52.190 ip4:141.145.47.16/28 ip4:160.34.31.16/28 ip4:77.32.150.153 ip4:183.78.170.182 ip4:94.125.18.60/31 ip4:147.154.255.192/26 ip4:129.149.22.192/26 -allEnds with -all; about 5 of the 10 DNS lookups SPF allows are used at the top level (includes can add more).
DMARC: v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.comPolicy: reject; aggregate reports requested
CAA: none — any certificate authority may issue certificates
TXT: 25 TXT records
google-site-verification=DWJrXDJC4zmjCbaIqfXTtt5JORBxJTzpnqpUa3n0fx4
google-site-verification=MjF6fnCVti1DI5PFF1z9dN9QV0-ublc4JOvGMcoggbc
liveramp-site-verification=clkAdzlfst-Behbl7rVHXzuTHciA2SdFqLx4QCOCUdk
h1-domain-verification=ARq7Fyh5Akdto2wW8aw9UWWaAbWE3W6Bk7mkZ2UHhwqZc1Ca
h1-domain-verification=vwBLdcfNpeE7F1mC3EPJZFCQrMGbn5AXYWJxEwNirFczPTs7
stripe-verification=03bf54a545ba5313be8191bbb2b8949e1cd79c0d89e4bf4d42fdce54001d3b5b
stripe-verification=19a3dcababfe8bba26b29b92786b5040103b0c9f0fd0d7e3f48000ae3fa80fd1
Kis9jvtphKubMl4kK6NF2LIB0z/b55ElGSqZgs69ZHr477wACPSbbgWWh4lhx+b/QMH3jJV8UbMEQdnVsZrynA==
OfIrMdH47XzlBvnBb3zpLrzkvrcgq+KeYh1/3R5gf5cxxfY06+jUgtp8i37FxqwJeChiaUQZ+U3qEbuWY9LENw==
yz+ynZicKBgIXFdF72Zy0imgDIjE0OPRcvSqnVfWPSb2zvFtvdVlfu1ooCseJ9rOv1o0orkqjfMoKE2NcXLcVg==
sophos-domain-verification=0bc031a050735e1c2acff35cfc67d3bd175decd186e3a0011f46ecac555db0f1
adobe-idp-site-verification=fa39eddb7c330d34becca72c5d37be0f0ffd355961e807376eb4438e46753faa
atlassian-domain-verification=OAAOJVgn5dmEwQ0eI6wLtKPMqjC6hyZihf4qMCK4q2icVwEBMwgku+736RrBqlVx
atlassian-domain-verification=gm04TPagsUhKmDWYp8o8qk8JIn15nNmkeu9TQEuvziMmPCf1jCuPpKEPVycvubtE
atlassian-domain-verification=h4T7MohAGx3aZIzeQ7B5vyizURa6uvO3q6aO9RhBDn/zpi3rZhYOcrTHi8VYyEQ5
figma-domain-verification=f57d4850f826114e335f1e4965fe3b35487b42c630aaf6a33af06a81d977f2cc-1767801983
v=spf1 include:spf-00492d01.pphosted.com include:spf.protection.outlook.com include:mail.zendesk.com include:_spf.salesforce.com include:spf.sendinblue.com ip4:212.140.180.250 ip4:212.140.187.24 ip4:212.140.189.59 ip4:35.177.140.163 ip4:35.178.162.89 ip4:52.56.79.124 ip4:31.193.11.33 ip4:31.193.11.41 ip4:62.13.153.174 ip4:85.115.52.190 ip4:141.145.47.16/28 ip4:160.34.31.16/28 ip4:77.32.150.153 ip4:183.78.170.182 ip4:94.125.18.60/31 ip4:147.154.255.192/26 ip4:129.149.22.192/26 -all
MS=ms24275605
as=1483625869
dropbox-domain-verification=w1mhubbs2gc7
apple-domain-verification=1RAiTIBCT1CEajPl
apple-domain-verification=EvXHd5soJuVQA4rE
flexera-domain-verification-vrfjpetxaqqpcsgu
docusign=da84d3e5-a4b2-4bc9-b8b3-2e6da3819ae6
jamf-site-verification=oIaJFfQu8J9131b-DZ6TMw
IPv6: No IPv6 address for the domain or www
DNSSEC validation: Not validated (unsigned, or not checked)

What this means DNS records tell the internet where a domain's website and email live. SPF lists the servers allowed to send its email and DMARC tells receivers what to do with messages that fail checks — both help stop spoofing. DKIM keys live under selectors we cannot guess, so they are not shown. Read DNS records explained and SPF, DKIM and DMARC.

Hosting network

Network identified

IP address: 23.39.184.75 one of 2 addresses
Network: AKAMAI-AS - Akamai Technologies, Inc., US
AS number: AS16625
IP block: 23.39.184.0/22
Network country: United StatesWhere the network is registered — not necessarily where the server sits.
Reverse DNS: a23-39-184-75.deploy.static.akamaitechnologies.com
CDN / platform hint: none detected

What this means The hosting network is the autonomous system (AS) that announces the website's IP address on the internet — often a hosting company or a content delivery network (CDN). Looked up through Team Cymru's IP-to-ASN service.

Search engines

Not checked automatically

We don't check Google or Bing automatically: neither offers a free API for this, and we don't scrape search results. You can check yourself with a site: search:

Common Crawl: Found in the September 2026 IndexCommon Crawl is an open, free web archive — a rough sign of whether crawlers reach the site. Sites can block its crawler (CCBot) in robots.txt.

Check on Google Check on Bing

What this means A site: search shows a sample of the pages a search engine has indexed — the count is only an estimate. For a definite answer for your own site, use Google Search Console and Bing Webmaster Tools. See how to check Google indexing.

The name itself

Name facts

Name part: tesco 5 characters
Whole domain: tesco.com 9 characters
Characters: 5 letters, 0 digits, 0 hyphens
Internationalised (IDN): No — plain ASCII
Dictionary: Not a dictionary word (or not one in our list)
Pronounceable: Yes, by our simple vowel/consonant test
Ending: .com A generic ending

What this means Short, easy-to-say names without hyphens or digits are easier to remember and type. Domain names can be up to 63 characters per label; in DNS, non-ASCII names are stored as "xn--" Punycode.

Website

Website returned status 403

Status: 403 ForbiddenMany sites show automated visitors like our lookup bot a block or "checking your browser" page — people using a normal browser may see the real site. The details below describe the page our bot was given.
Final address: https://tesco.com/
HTTPS: Loads over HTTPS
HTTP → HTTPS: Plain HTTP does not redirect to HTTPS
Redirects (HTTPS): 403 https://tesco.com/
Redirects (HTTP): 403 http://tesco.com/
Response time: 90 ms to first byteMeasured once from our server in the UK, for the final page only.
Page weight (HTML): 357 bytesThe HTML document only — images, scripts and styles are not counted.
Server header: Tesco Web Server
Page title: Access Denied
Meta description: none
Language: not declared
Canonical: none
Robots directives: none (indexable by default)
Generator / CMS hints: none detected
Open Graph tags: Not present
robots.txt: Couldn't read it (status 403)
sitemap.xml: Not at /sitemap.xml

What this means We load the home page once over HTTPS and once over plain HTTP, following up to five redirects, and read only the page's headers and head tags — we don't store the page. A missing title or description is worth fixing for search results; a robots "noindex" keeps a page out of search engines.

SSL certificate

Valid certificate

Checked host: tesco.com
Trusted: Yes — the chain verifies against standard root certificates
Name match: The certificate covers tesco.com
Issuer: Sectigo Limited · Sectigo Public Server Authentication CA EV R36
Subject: www.tesco.com
Valid from: 16 Feb 2026
Valid until: 18 Mar 2027 165 days left
Lifetime: 396 days
Names covered (SANs): 4
Show some
www.tesco.com
direct.tescoassets.com
tesco.com
ui.tescoassets.com
Connection: TLSv1.3 TLS_AES_256_GCM_SHA384

What this means A TLS certificate proves the server is entitled to use the name and encrypts the connection. Certificates now last months rather than years, so automatic renewal matters. Read SSL certificates explained.

Security headers

Few headers set

0/6 recommended security headers present on the home page.

Strict-Transport-Security (HSTS): Not setTells browsers to use HTTPS only.
Content-Security-Policy: Not setLimits where scripts and other content can load from.
X-Content-Type-Options: Not setStops browsers guessing file types.
Frame protection: Not setX-Frame-Options or CSP frame-ancestors — prevents clickjacking.
Referrer-Policy: Not setControls what address is passed on when visitors click away.
Permissions-Policy: Not setTurns off browser features the site doesn't use.

What this means These response headers are defences a site can switch on in its server settings. Missing ones are common and not proof of a problem, but they are cheap to add.

Other endings

0 apparently free

tesco.co.uk Registered since 1996
tesco.uk Registered since 2014
tesco.net Registered since 1998
tesco.org Registered since 1999
tesco.info Registered since 2001

What this means "Apparently available" means the registry's RDAP service has no record of the name. Some names are reserved or premium-priced, so confirm at a registrar before relying on it.