Site report for https://duckduckgo.com

IPv4 address (79.125.108.55)

IP range	Country	Name	Description
0.0.0.0-255.255.255.255	N/A	IANA-BLK	The whole IPv4 address space
↳ 79.0.0.0-79.255.255.255	Netherlands	79-RIPE	RIPE Network Coordination Centre
↳ 79.125.0.0-79.125.127.255	Ireland	IE-AMAZON-20070824
↳ 79.125.64.0-79.125.127.255	Ireland	AMAZON-EU-AWS	Amazon Web Services, Elastic Compute Cloud, EC2, EU
↳ 79.125.108.55	Ireland	AMAZON-EU-AWS	Amazon Web Services, Elastic Compute Cloud, EC2, EU

Signed Certificate Timestamps (SCTs)

Source	Log	Timestamp	Signature Verification
Certificate	Google Pilot pLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BA=	2019-08-09 14:30:19	Success
Certificate	DigiCert 2 h3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8=	2019-08-09 14:30:19	Success

SSLv3/POODLE

Heartbleed

The site offered the Heartbeat TLS extension prior to the Heartbleed disclosure, but is using a new certificate and no longer offers Heartbeat.

This test does not exploit the Heartbleed vulnerability but uses information from conventional HTTPS requests. More information about Heartbleed detection.

Netblock owner	IP address	OS	Web server	Last seen
Amazon Data Services I… Amazon Data Services Ireland Limited Unit 4033, Citywest Avenue Citywest Business Park Dublin D24 IE	52.213.95.108	Linux	nginx	4-Apr-2020
Amazon Web Services, Elastic Compute Cloud, EC2, EU	79.125.108.59	Linux	nginx	21-Mar-2020
Amazon Data Services I… Amazon Data Services Ireland Limited Unit 4033, Citywest Avenue Citywest Business Park Dublin D24 IE	52.213.95.108	Linux	nginx	13-Mar-2020
Amazon Web Services, Elastic Compute Cloud, EC2, EU	46.51.179.90	Linux	nginx	19-Feb-2020
Amazon Web Services, Elastic Compute Cloud, EC2, EU	79.125.105.113	Linux	nginx	12-Feb-2020
Amazon Web Services, Elastic Compute Cloud, EC2, EU	46.51.179.90	Linux	nginx	16-Jan-2020
CloudFront DUB6	176.34.155.23	Linux	nginx	7-Jan-2020
Amazon Web Services, Elastic Compute Cloud, EC2, EU	79.125.105.113	Linux	nginx	14-Dec-2019
Amazon Web Services, Elastic Compute Cloud, EC2, EU	46.51.179.90	Linux	nginx	15-Nov-2019
CloudFront DUB6	176.34.155.23	Linux	nginx	6-Nov-2019

A host's Sender Policy Framework (SPF) describes who can send mail on its behalf. This is done by publishing an SPF record containing a series of rules. Each rule consists of a qualifier followed by a specification of which domains to apply this qualifier to. For more information please see open-spf.org.

Qualifier	Mechanism	Argument
+ (Pass)	include	mailer.duckduckgo.com
+ (Pass)	include	amazonses.com
+ (Pass)	include	spf.protection.outlook.com
- (Fail)	all

DMARC (Domain-based Message Authentication, Reporting and Conformance) is a mechanism for domain owners to indicate how mail purporting to originate from their domain should be authenticated. It builds on SPF and DKIM, providing a method to set policy and to give reporting of failures. For more information please see dmarc.org.

Raw DMARC record:

v=DMARC1; p=none; rua=mailto:dmarc@duckduckgo.com

Tag	Field	Value
p=none	Requested handling policy	None: no specific action to be taken regarding delivery of messages.
rua=mailto:dmarc@duckduckgo.com	Reporting URI(s) for aggregate data	dmarc@duckduckgo.com

Web Trackers are third-party resources loaded onto a webpage. Trackable resources include social sharing widgets, javascript files, and images. These trackers can be used to monitor individual user behaviour across the web. Data derived from these trackers are primarily used for advertising or analytics purposes.

No known trackers were identified.

• Cloud & PaaS

  Cloud computing is the use of computing resources (hardware and software) that are delivered as a service over a network (typically the Internet). Platform as a service (PaaS) is a category of cloud computing services that provide a computing platform and a solution stack as a service.

  Technology	Description	Popular sites using this technology
  Amazon Web Services - EC2	Cloud computing service (Elastic Compute Cloud)	sp.auth.adobe.com, headway-widget.net, usermatch.targeting.unrulymedia.com

• Server-Side

  Includes all the main technologies that Netcraft detects as running on the server such as PHP.

  Technology	Description	Popular sites using this technology
  SSL	A cryptographic protocol providing communication security over the Internet	login.microsoftonline.com

• Client-Side

  Includes all the main technologies that run on the browser (such as JavaScript and Adobe Flash).

  Technology	Description	Popular sites using this technology
  JavaScript	Widely-supported programming language commonly used to power client-side dynamic content on websites

• Character Encoding

  A character encoding system consists of a code that pairs each character from a given repertoire with something else such as a bit pattern, sequence of natural numbers, octets, or electrical pulses in order to facilitate the transmission of data (generally numbers or text) through telecommunication networks or for data storage.

  Technology	Description	Popular sites using this technology
  UTF8	UCS Transformation Format 8 bit	googleads.g.doubleclick.net, gmail.com

• HTTP Compression

  HTTP compression is a capability that can be built into web servers and web clients to make better use of available bandwidth, and provide greater transmission speeds between both.

  Technology	Description	Popular sites using this technology
  Gzip Content Encoding	Gzip HTTP Compression protocol	www.seznam.cz, www.tsetmc.com, www.mathworks.com

• Web Browser Targeting

  Web browser targeting enables software applications to make use of specific functions of the browser as well as optimizing the application for specific browser versions.

  Technology	Description	Popular sites using this technology
  Document Compatibility Mode	A meta-tag used in Internet Explorer 8 to enable compatibility mode	www.microsoft.com, www.ebay.com, www.amazon.es
  Expect Certificate Transparency Header	Enforce Certificate Transparency requirements	www.upwork.com, www.kraken.com, www.linkedin.com
  X-Content-Type-Options	Browser MIME type sniffing is disabled	www.googleadservices.com, vars.hotjar.com, accounts.google.com
  Strict Transport Security	Web security policy mechanism whereby a web server declares that complying user agents are to interact with it using only secure HTTP connections	www.facebook.com, medium.com, static.addtoany.com
  X-Frame-Options Same Origin	Do not allow this site to be rendered within an iframe	www.google.com, www.bitmex.com, teams.microsoft.com
  Referrer Policy	Restrict referrer information included in subsequent requests	www.tumblr.com, www.digikala.com, www.repubblica.it
  Content Security Policy	Detect and mitigate attacks in the browser	discordapp.com, yandex.ru, dtm.advertising.com
  X-XSS-Protection Block	Block pages on which cross-site scripting is detected	disqus.com, clickserve.dartsearch.net

• Doctype

  A Document Type Declaration, or DOCTYPE, is an instruction that associates a particular SGML or XML document (for example, a webpage) with a Document Type Definition (DTD).

  Technology	Description	Popular sites using this technology
  HTML5	Latest revision of the HTML standard, the main markup language on the web

• HTML 5

  HTML5 is a markup language for structuring and presenting content for the World Wide Web and a core technology of the Internet. It is the fifth revision of the HTML standard.

  Technology	Description	Popular sites using this technology
  Viewport meta tag	HTML5 tag usually used for mobile optimization

• CSS Usage

  Cascading Style Sheets (CSS) is a style sheet language used for describing the presentation semantics (the look and formatting) of a document written in a markup language (such as XHTML).

  Technology	Description	Popular sites using this technology
  External	Styles defined within an external CSS file	www.paypal.com, www.amazon.fr, www.amazon.co.uk