HOW.IS
?

How is duckduckgo.com?

Looks fine risk 0/100

Registered 19 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 37 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How duckduckgo.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
37 ms
HTTPS
24 d
left on a DigiCert Inc certificate
Age
19 years
registered 2007-11-11
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A52.149.246.39
MX0 duckduckgo-com.mail.protection.outlook.com
NSns02.quack-dns.com
dns3.p05.nsone.net
ns04.quack-dns.com
dns4.p05.nsone.net
dns1.p05.nsone.net
dns2.p05.nsone.net
ns01.quack-dns.com
ns03.quack-dns.com
TXTslack-domain-verification=oDt8KTPHJdkpcJOZ6J8W8cyJLsEfrJULCQiQ1YbP
OSSRH-87525
bw=IOlfo6xQJX+xewM7+IiPqOSIPtLXKrWoS2RXCTPMmQZc
v=spf1 include:mail.duckduckgo.com include:spf.mailer.duckduckgo.com include:spf.protection.outlook.com include:duck.com include:mail.zendesk.com -all
ZOOM_verify_QSjXtfOfRHiY0O9gD5E4Ug
apple-domain-verification=XeKEoqnRNUfkUc5l
cursor-domain-verification-nxwg1m=QRyFwelq3dM8RzBmvRla2boHy
MS=ms71454350
mistral-domain-verification=1b914b8749d84fc51987d1cd2b9f86b38617aa4d
stripe-verification=e508f445dbb94b1ae51f7b48901897714b661f5298da43bb66b224973c8290d4
openai-domain-verification=dv-OKbsaUeVbNte6OPtWDpdt4Xr
anthropic-domain-verification-c7d48c=mGBhXlQHsvOc64IFwZsaKKVoQ
bitrise-verification=c11237685d624d93-X607LcWjwOdP
CAA{'type': 'CAA', 'issue': 'digicert.com', 'critical': 0}
{'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0}
RegistrationNameCheap, Inc.
registrarNameCheap, Inc.
registered2007-11-11
expires2027-06-23
last changed2026-05-24
ownerPrivacy service provided by WITHHELD FOR PRIVACY LLC
nameserversdns1.p05.nsone.net
dns2.p05.nsone.net
dns3.p05.nsone.net
dns4.p05.nsone.net
ns01.quack-dns.com
ns02.quack-dns.com
ns03.quack-dns.com
ns04.quack-dns.com
statusclient transfer prohibited
registered 2007-11-11expires 2027-06-23
HTTPS certificate24 days left
validyes
issuerDigiCert Inc
covers*.duckduckgo.com, duckduckgo.com
protocolTLSv1.3
issued 2026-05-05expires 2026-11-19
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → duckduckgo.com
Email authenticationexcellent
SPFpass v=spf1 include:mail.duckduckgo.com include:spf.mailer.duckduckgo.com include:spf.protection.outlook.com include:duck.com include:mail.zendesk.com -all
DMARCpass policy reject
DKIMfound: selector1, s1

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 175/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
45/45missing: DKIM Presence
Advanced Security
15/25missing: Mail Server Configuration, IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop52.149.246.39Barracuda52.149.246.39UCEPROTECT Level 152.149.246.39

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=duckduckgo.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=duckduckgo.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on duckduckgo.com. Reference: /llms.txt.

Watch duckduckgo.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days