đŸ›Ąī¸ web_audits
Verified Report HTTP 200 OK âš ī¸ Email Spoofing Risk

duckduckgo.org

Target Endpoint: https://duckduckgo.com/

🕒 Logged: 2026-10-13 04:49:26 UTC
đŸ“Ļ Size: 230.16 KB
⚡ TTFB Tier: Excellent (<100ms)

Overall Health Score

87 /100

Healthy Configuration

Security 85%
Email Sec Risk
CAA DNS No
IPv6 Ready No
💡

Executive Overview & Non-Technical Summary

Domain duckduckgo.org responds in 28.54ms. We flagged 2 configuration penalty item(s) that can leave your server exposed or reduce search engine trust.

Speed

⚡

28.54 ms

Excellent (<100ms)

Total Links

🔗

27

19 internal â€ĸ 8 external

Penalties

đŸ› ī¸

2

Penalties applied

SSL Health

🔒

TLSv1.3

Expires in: 141 days

Brand Spoofing Shield
âœ‰ī¸

âš ī¸ VULNERABLE

SPF: Configured
DMARC: Missing
Cookie Privacy Risk
đŸĒ

1 Cookie(s) Scanned

âš ī¸ 1 cookie(s) missing HttpOnly/Secure flags.

Supply Chain SRI
🔗

16 External Script(s)

✓ CDN scripts secure or self-hosted.

Social Card Preview
📱

Missing OG Image

Title: Default HTML Title

đŸ›Ąī¸ Complete Website Scorecard

Weighted evaluation & clear non-technical guides

-10 pts
Critical Fix Advisory

Domain lacks strict SPF/DMARC anti-spoofing policies

â–ŧ

Why points were lost: Domain lacks strict SPF or DMARC enforcement records, allowing malicious actors to impersonate your brand in customer inboxes.

đŸ› ī¸ Recommended Remediation Action

Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.

Click card again to collapse detail view.

-3 pts
Moderate Fix Advisory

Missing DNS CAA record (risk of unauthorized cert issuance)

â–ŧ

Why points were lost: Automated security heuristics detected configuration vulnerabilities requiring remediation.

đŸ› ī¸ Recommended Remediation Action

Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.

Click card again to collapse detail view.

+Preserved
Passed â€ĸ Transport Encryption

Active TLS Cipher Protocol (TLSv1.3)

â–ŧ

Why this helps: Protects user sessions and sensitive data against wiretapping and man-in-the-middle sniffing attacks.

🔒 Technical Deep Dive Modern TLS 1.3 eliminates vulnerable cryptographic primitives, enforcing Perfect Forward Secrecy (PFS) and reducing handshake round-trips to just 1-RTT.
+Optimal
Passed â€ĸ Response Speed

Rapid Round-Trip Time (28.54ms)

â–ŧ

Why this helps: Fast server response keeps visitors engaged and directly boosts search engine ranking signals.

⚡ Core Web Vitals Impact Server response under 200ms ensures minimal Time to First Byte (TTFB), laying a foundation for optimal Largest Contentful Paint (LCP) performance scores.
+Healthy
Passed â€ĸ Search Engine Metadata

Valid HTML Meta & Title Tag Structure

â–ŧ

Why this helps: Ensures Google and search crawlers can index your page title accurately.

🔍 Search Crawler Insight Well-formed title and description metadata maximize Click-Through Rates (CTR) in Search Engine Result Pages (SERPs).
+Verified
Passed â€ĸ Infrastructure Routing

Verified Autonomous Network Hosting (ASN 8075)

â–ŧ

Why this helps: Confirms your website is connected via an established, reliable hosting provider.

🌐 BGP Routing Verification Valid ASN route records confirm clean network reputation, reducing IP blocklist risks across email and web gateways.

🌍 Network Infrastructure & DNS Compliance

Server hosting profile, CAA records, and GeoIP data

Server IP Address
52.149.246.39
DNS CAA Authorization Records
âš ī¸ Missing DNS CAA Record
ISP / ASN Provider
MICROSOFT-CORP-MSN-AS-BLOCK ASN 8075
Location & Timezone
📍 United States (US)
TZ: America/New_York
Server Software
nginx

🔍 Live Search Snippet Simulator

Simulate search result listings across web engines

🌐
https://duckduckgo.com/
DuckDuckGo - Protection. Privacy. Peace of mind.
The Internet privacy company that empowers you to seamlessly take control of your personal information online, without any tradeoffs.
Title Len

48

Meta Desc

133

No Alt Imgs

0

Forms

1

Deep Inspection Hub

💡 SEO & Content Recommendations

Metadata and ranking enhancements

2 Notes
  • ⚡ No H1 heading found
  • ⚡ Missing OpenGraph social sharing image

Link Distribution Footprint

Int: 19 Ext: 8
Detailed Inspect Lists
🔀 Redirect Chain (1) â–ŧ
1. https://duckduckgo.org/
đŸ›Ąī¸ SSL Alt Names (102) â–ŧ
donttrack.us
cispaletter.com
cispaletter.org
cometotheduckside.com
ddg.co
dontbubble.us
dontrack.us
duckduckco.de
duckduckgo.ca
duckduckgo.co.uk
duckduckgo.de
duckduckgo.in
duckduckgo.nl
duckduckgo.org
duckduckgo.pl
duckduckgo.uk
ducksear.ch
enteentegeh.de
fixtracking.com
goduckgo.com
hacksear.ch
privacysimplified.com
privatebrowsingmyths.com
duckduckgo.com.mx
duckgo.com
duckduckgo.co
duckduckco.com
justduckit.com
duckside.com
duckduckgo.jp
duckduckgo.sg
duckduckgo.mx
duckduckgo.com.tw
duckduckgo.ke
www.cispaletter.com
www.cispaletter.org
www.cometotheduckside.com
www.ddg.co
www.dontbubble.us
www.dontrack.us
www.donttrack.us
www.duckduckco.de
www.duckduckgo.ca
www.duckduckgo.co.uk
www.duckduckgo.de
www.duckduckgo.in
www.duckduckgo.nl
www.duckduckgo.org
www.duckduckgo.pl
www.duckduckgo.uk
www.ducksear.ch
www.enteentegeh.de
www.fixtracking.com
www.goduckgo.com
www.hacksear.ch
www.privacysimplified.com
www.privatebrowsingmyths.com
www.duckduckgo.com.mx
www.duckgo.com
www.duckduckgo.co
www.duckduckco.com
www.justduckit.com
www.duckside.com
www.duckduckgo.jp
www.duckduckgo.sg
www.duckduckgo.mx
www.duckduckgo.com.tw
www.duckduckgo.ke
ddg.gg
dgg.gg
ddh.gg
www.ddg.gg
www.dgg.gg
www.ddh.gg
creepysite.com
www.creepysite.com
dukgo.com
www.dukgo.com
duckpan.org
www.duckpan.org
duckpan.com
www.duckpan.com
duck.co
www.duck.co
duckduckhack.com
www.duckduckhack.com
duck.ai
www.duck.ai
duckduckgo.ai
www.duckduckgo.ai
duckduckgo.pro
www.duckduckgo.pro
www.duck.it
duck.it
duckai.com
www.duckai.com
voteyesornoai.com
www.voteyesornoai.com
duckno.ai
duckduckno.ai
www.duckduckno.ai
www.duckno.ai
🌐 External Domains (7) â–ŧ
apps.apple.com
duck.ai
insideduckduckgo.substack.com
play.google.com
spreadprivacy.com
start.duckduckgo.com
www.reddit.com
Auditor Status
â„šī¸ Auditor Limitations (6) â–ŧ
â€ĸ Historical uptime monitoring
â€ĸ Full-site crawling
â€ĸ Malware or phishing analysis
â€ĸ External blacklist/reputation checks
â€ĸ Vulnerability exploitation or authenticated testing
â€ĸ Real-browser Core Web Vitals

Enterprise Audit Disclaimer: This dashboard displays automated technical observations and security heuristics. Scores and metrics reflect point-in-time measurements rather than a definitive security verdict.