Domain
duckduckgo.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of duckduckgo.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
18
A/AAAA targets
Subdomains
101
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
2
in our scans
DNS Records
A
40.114.177.156, 40.89.244.232, 52.142.124.215, 52.149.246.39
AAAA
—
MX
0 duckduckgo-com.mail.protection.outlook.com
NS
dns1.p05.nsone.net, dns2.p05.nsone.net, dns3.p05.nsone.net, dns4.p05.nsone.net, ns01.quack-dns.com, ns02.quack-dns.com, ns03.quack-dns.com, ns04.quack-dns.com
TXT
MS=ms71454350, OSSRH-87525, ZOOM_verify_QSjXtfOfRHiY0O9gD5E4Ug, anthropic-domain-verification-c7d48c=mGBhXlQHsvOc64IFwZsaKKVoQ, apple-domain-verification=XeKEoqnRNUfkUc5l, bw=IOlfo6xQJX+xewM7+IiPqOSIPtLXKrWoS2RXCTPMmQZc, cursor-domain-verification-nxwg1m=QRyFwelq3dM8RzBmvRla2boHy, mistral-domain-verification=1b914b8749d84fc51987d1cd2b9f86b38617aa4d
CNAME
—
CAA
0 issue "digicert.com", 0 issue "letsencrypt.org"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
194.48.142.61:80
href · ×44
138.124.38.106:80
href · ×44
20.221.85.50:443
href · ×30
20.107.130.241:443
href · ×29
118.27.113.129:443
href · ×28
20.88.178.212:443
href · ×10
64.62.167.213:80
href · ×6
80.211.201.160:443
href · ×6
209.127.66.14:80
href · ×6
51.79.117.116:8080
href · ×5
140.238.11.122:443
href · ×5
130.162.186.141:8000
href · ×5
176.170.226.54:80
href · ×5
47.76.88.149:443
href · ×4
87.106.129.62:443
href · ×4
95.211.164.165:80
href · ×4
217.194.219.58:443
href · ×4
195.201.11.54:443
href · ×3
192.210.150.51:80
href · ×3
47.83.28.132:443
href · ×3
116.203.86.172:80
href · ×3
178.156.196.161:443
href · ×3
45.77.166.54:443
href · ×3
35.221.234.220:443
href · ×2
45.12.114.228:80
href · ×2
46.101.28.4:80
href · ×2
124.221.161.98:80
href · ×2
34.87.140.96:443
href · ×2
45.56.122.181:443
href · ×2
142.248.137.247:8443
href · ×2
78.94.239.40:80
href · ×2
129.211.80.101:80
href · ×2
203.63.170.146:8443
href · ×2
54.149.41.85:443
href · ×2
146.66.74.99:80
href · ×2
103.16.130.185:80
href · ×2
124.220.222.26:443
href · ×2
65.49.209.118:443
href · ×2
165.227.173.58:443
href · ×2
91.64.1.212:80
href · ×2
154.26.193.236:443
href · ×2
46.14.216.179:80
href · ×2
158.248.58.247:443
href · ×2
172.234.246.89:443
href · ×2
34.222.246.19:443
href · ×2
96.126.124.51:80
href · ×2
178.250.156.39:443
href · ×2
52.194.215.191:443
href · ×2
36.111.184.216:443
href · ×2
89.238.64.65:443
href · ×2
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 185.18.55.186 | AS16003 | AS8075 | 95% | cert b865041f… served by 185.18.55.186 (AS16003) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 52.142.124.215, 52.149.246.39, 40.114.177.156 |
| 151.243.224.189 | AS57043 | AS8075 | 95% | cert b865041f… served by 151.243.224.189 (AS57043) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 52.142.124.215, 40.114.177.156, 52.149.246.39 |
| 65.109.178.69 | AS24940 | AS8075 | 95% | cert b865041f… served by 65.109.178.69 (AS24940) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 52.142.124.215, 40.114.177.156, 52.149.246.39 |
| 158.160.210.70 | AS200350 | AS8075 | 95% | cert b865041f… served by 158.160.210.70 (AS200350) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 52.142.124.215, 40.114.177.156, 52.149.246.39 |
| 193.228.128.203 | AS215540 | AS8075 | 95% | cert b865041f… served by 193.228.128.203 (AS215540) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 52.142.124.215, 40.114.177.156, 52.149.246.39, 40.89.244.232 |
| 109.120.179.71 | AS210644 | AS8075 | 95% | cert b865041f… served by 109.120.179.71 (AS210644) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 52.142.124.215, 40.114.177.156, 52.149.246.39, 40.89.244.232 |
| 217.30.10.37 | AS56630 | AS8075 | 95% | cert b865041f… served by 217.30.10.37 (AS56630) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 52.142.124.215, 40.114.177.156, 52.149.246.39, 40.89.244.232 |
| 89.127.216.49 | AS16003 | AS8075 | 95% | cert b865041f… served by 89.127.216.49 (AS16003) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 52.142.124.215, 40.114.177.156, 52.149.246.39, 40.89.244.232 |
| 194.48.140.206 | AS50053 | AS8075 | 95% | cert b865041f… served by 194.48.140.206 (AS50053) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 40.114.177.156, 52.142.124.215, 52.149.246.39, 40.89.244.232 |
| 95.163.176.123 | AS210644 | AS8075 | 95% | cert b865041f… served by 95.163.176.123 (AS210644) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 52.142.124.215, 40.114.177.156, 40.89.244.232 |
| 89.125.48.184 | AS213702 | AS8075 | 95% | cert b865041f… served by 89.125.48.184 (AS213702) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 52.142.124.215, 40.114.177.156, 52.149.246.39, 40.89.244.232 |
| 178.253.23.68 | AS210976 | AS8075 | 95% | cert b865041f… served by 178.253.23.68 (AS210976) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 52.142.124.215, 40.114.177.156, 52.149.246.39, 40.89.244.232 |
| 155.212.244.230 | AS215272 | AS8075 | 95% | cert b865041f… served by 155.212.244.230 (AS215272) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 52.142.124.215, 40.114.177.156, 40.89.244.232 |
| 94.159.104.107 | AS215730 | AS8075 | 95% | cert b865041f… served by 94.159.104.107 (AS215730) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 52.142.124.215, 40.114.177.156, 40.89.244.232 |
| 87.251.16.38 | AS209693 | AS8075 | 95% | cert b865041f… served by 87.251.16.38 (AS209693) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 52.142.124.215, 40.114.177.156, 40.89.244.232 |
| 83.147.222.243 | AS207569 | AS8075 | 95% | cert b865041f… served by 83.147.222.243 (AS207569) carries SAN duckduckgo.com which currently resolves through Microsoft (AS8075) at 40.114.177.156, 52.142.124.215, 40.89.244.232 |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
c280828b6bf22be2…
google · argon2026h2
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Valid: 2025-11-19 00:00:00 → 2026-12-20 23:59:59
c83987372f0fd7be…
google · argon2026h2
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Valid: 2025-11-19 00:00:00 → 2026-12-20 23:59:59
c280828b6bf22be2…
google · xenon2026h2
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Valid: 2025-11-19 00:00:00 → 2026-12-20 23:59:59
c83987372f0fd7be…
google · xenon2026h2
Subject: *.duckduckgo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.duckduckgo.com, duckduckgo.com
Valid: 2025-11-19 00:00:00 → 2026-12-20 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 40.114.177.156 | 2026-05-25 21:58:50.500 | 2026-07-28 20:05:38.639 |
| CAA | 0 issue "digicert.com" | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| MX | 0 duckduckgo-com.mail.protection.outlook.com | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| TXT | OSSRH-87525 | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| TXT | apple-domain-verification=XeKEoqnRNUfkUc5l | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| NS | ns04.quack-dns.com | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| NS | dns4.p05.nsone.net | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| TXT | MS=ms71454350 | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| NS | ns03.quack-dns.com | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| TXT | stripe-verification=e508f445dbb94b1ae51f7b48901897714b661f5298da43bb66b224973c8290d4 | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| NS | dns2.p05.nsone.net | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| TXT | bw=IOlfo6xQJX+xewM7+IiPqOSIPtLXKrWoS2RXCTPMmQZc | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| NS | ns02.quack-dns.com | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| TXT | cursor-domain-verification-nxwg1m=QRyFwelq3dM8RzBmvRla2boHy | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| TXT | mistral-domain-verification=1b914b8749d84fc51987d1cd2b9f86b38617aa4d | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| TXT | anthropic-domain-verification-c7d48c=mGBhXlQHsvOc64IFwZsaKKVoQ | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| NS | dns3.p05.nsone.net | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| TXT | v=spf1 include:mailer.duckduckgo.com include:spf.protection.outlook.com include:duck.com include:mail.zendesk.com -all | 2026-05-26 00:07:44.959 | 2026-07-26 12:24:35.677 |
| TXT | ZOOM_verify_QSjXtfOfRHiY0O9gD5E4Ug | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| TXT | openai-domain-verification=dv-OKbsaUeVbNte6OPtWDpdt4Xr | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| CAA | 0 issue "letsencrypt.org" | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| NS | ns01.quack-dns.com | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| NS | dns1.p05.nsone.net | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| SRV | _sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com | 2026-05-26 00:07:44.959 | 2026-07-28 20:23:38.809 |
| A | 40.89.244.232 | 2026-05-27 18:47:40.754 | 2026-07-28 18:27:17.459 |
| A | 52.142.124.215 | 2026-05-27 21:35:40.751 | 2026-07-28 20:23:38.809 |
| A | 52.149.246.39 | 2026-07-16 20:03:12.248 | 2026-07-22 08:56:44.925 |
| TXT | v=spf1 include:mail.duckduckgo.com include:spf.protection.outlook.com include:duck.com include:mail.zendesk.com -all | 2026-07-26 14:20:02.700 | 2026-07-27 13:50:27.161 |
| TXT | v=spf1 include:mail.duckduckgo.com include:spf.mailer.duckduckgo.com include:spf.protection.outlook.com include:duck.com include:mail.zendesk.com -all | 2026-07-27 15:45:40.580 | 2026-07-28 20:23:38.809 |
| TXT | slack-domain-verification=oDt8KTPHJdkpcJOZ6J8W8cyJLsEfrJULCQiQ1YbP | 2026-07-28 20:05:38.639 | 2026-07-28 20:05:38.639 |