How privacy works
Private lookups are not added to public searches, stored reports or change history. This does not remove a report that was already public. Your choice lasts for this browser session.
Who hosts deepseek.com?
Answer
deepseek.com sits behind Amazon CloudFront, which hides the server that really hosts it.
Checked 1 hour ago from Cloudflare ZRH in 353 ms. This is a saved result.
What needs attention
Prioritized observations from this check. Review changes with whoever manages the website.
- Improve
Review browser security headers
Strict-Transport-Security, Content-Security-Policy, Clickjacking protection, X-Content-Type-Options, Referrer-Policy, Permissions-Policy did not meet the conservative header checks. This is not a complete security audit.
Next step: Review these headers with the site developer and test policy changes before enforcing them.
Evidence by layer
The company operating a network and the company selling the hosting can be different.
- CDN / proxy
- Amazon CloudFrontStrong evidence
Network operators
Amazon Web Services
Network ownership alone does not confirm the retail hosting provider.
How we know
- HTTP header x-amz-cf-id: 2U3Wjo9sBN3n8tEY5A1MaUdIL7WSPMfEsOe5oFOkakEvlBp-JcSrpw==
- HTTP header x-amz-cf-pop: ZRH52-P1
- HTTP header via: 1.1 15ec222720b66945bbc5c3c677b15d28.cloudfront.net (CloudFr
- 3.173.21.63 belongs to AS16509 (Amazon Web Services)
Servers
The addresses the name points to and the networks that own them.
- 3.173.21.63Amazon Web Services
No IPv6 address.
Website
What the site answered when we visited its home page.
- Status
- 200 OK
- Address
- https://deepseek.com/
- Page title
- DeepSeek | 深度求索
- HTTPS
- Yes
- HTTP/3
- Not advertised
- Response time
- 345 ms from Cloudflare ZRH
Security headers
- Strict-Transport-Security
- Content-Security-Policy
- Clickjacking protection
- X-Content-Type-Options
- Referrer-Policy
- Permissions-Policy
Built with
DNS
Who answers for the domain name, and its records.
- DNS provider
- dnsv4.com
- Name servers
- ns3.dnsv4.com
ns4.dnsv4.com - Zone
- deepseek.com
- DNSSEC
- Not signed
- Certificates
- Any certificate authority (no CAA record)
All DNS records (7)
| Type | Name | Value | TTL |
|---|---|---|---|
| A | deepseek.com | 3.173.21.63 | 3 |
| NS | deepseek.com | ns4.dnsv4.com | 83743 |
| NS | deepseek.com | ns3.dnsv4.com | 83743 |
| MX | deepseek.com | 5 hzmx01.mxmail.netease.com | 600 |
| MX | deepseek.com | 10 hzmx02.mxmail.netease.com | 600 |
| TXT | deepseek.com | v=spf1 include:spf.163.com -all | 600 |
| CNAME | deepseek.com | d3bbv8sr76az5s.cloudfront.net | 600 |
Well protected against spoofing: SPF plus an enforced DMARC policy.
- Mailbox provider
- netease.com
- Mail servers
- 5 hzmx01.mxmail.netease.com
10 hzmx02.mxmail.netease.com - Allowed senders
- Only servers listed in the SPF record
- SPF
- Mail from any other server is rejected.
- DMARC
- Spoofed mail goes to spam.
- MTA-STS
- Not enabled
SPF and DMARC records
v=spf1 include:spf.163.com -all
v=DMARC1; p=quarantine; fo=1; ruf=mailto:dmarc@qiye.163.com; rua=mailto:dmarc_report@qiye.163.com
Domain registration
- Registrar
- DNSPod, Inc.
- Registered
- 13 Aug 2000 (26 years ago)
- Paid until
- 13 Aug 2028 (in 656 days)
- Last changed
- 14 Feb 2025
- Status
- Active
- DNSSEC at registry
- No
- Source
- rdap.verisign.com
Observed changes
A compact record of what changed between public checks. Rechecks happen only when someone requests them.
History starts with saved public observations. No earlier changes are inferred.
Something look wrong? Report an incorrect result
Tell us which result needs a second look. Reports are reviewed privately and do not change detection automatically. Please do not include personal or confidential information.
Last 10 searches
| Domain Name | Host |
|---|---|
| ubs.com | Akamai (host hidden) |
| datafa.st | Vercel |
| anthropic.com | Unknown |
| chatgpt.com | Cloudflare (host hidden) |
| openai.com | Vercel |
| claude.ai | Unknown |
| deepinfra.com | Vercel |
| vercel.com | Vercel |
| supabase.com | Vercel |