How privacy works

Private lookups are not added to public searches, stored reports or change history. This does not remove a report that was already public. Your choice lasts for this browser session.

Who hosts duo.com?

Answer

duo.com sits behind Amazon CloudFront, which hides the server that really hosts it.

Host hidden

Checked 7 hours ago from Cloudflare ZRH in 388 ms. This is a saved result.

Your next steps

What needs attention

Prioritized observations from this check. Review changes with whoever manages the website.

  1. Improve

    Review browser security headers

    Content-Security-Policy, Referrer-Policy, Permissions-Policy did not meet the conservative header checks. This is not a complete security audit.

    Next step: Review these headers with the site developer and test policy changes before enforcing them.

Evidence by layer

The company operating a network and the company selling the hosting can be different.

CDN / proxy
Amazon CloudFrontStrong evidence

Network operators

Amazon Web Services

Network ownership alone does not confirm the retail hosting provider.

How we know

  • 3.165.190.117 belongs to AS16509 (Amazon Web Services), reverse DNS server-3-165-190-117.zrh55.r.cloudfront.net
  • 3.165.190.31 belongs to AS16509 (Amazon Web Services), reverse DNS server-3-165-190-31.zrh55.r.cloudfront.net
  • 3.165.190.103 belongs to AS16509 (Amazon Web Services), reverse DNS server-3-165-190-103.zrh55.r.cloudfront.net
  • HTTP header x-amz-cf-id: VIHITspnpL6xuPMWExDbPW6IQV_MuRcm3cCll-tDZXh0SlP54fAarg==
  • HTTP header x-amz-cf-pop: ZRH55-P2
  • HTTP header via: 1.1 6a7d3673cfa1cc4f27eaf092ee41d17a.cloudfront.net (CloudFr

Servers

The addresses the name points to and the networks that own them.

  • 3.165.190.117Amazon CloudFrontNetwork AS16509 (Amazon Web Services)🇺🇸 Registered in United States, block 3.165.190.0/23Reverse DNS server-3-165-190-117.zrh55.r.cloudfront.net
  • 3.165.190.31Amazon CloudFrontNetwork AS16509 (Amazon Web Services)🇺🇸 Registered in United States, block 3.165.190.0/23Reverse DNS server-3-165-190-31.zrh55.r.cloudfront.net
  • 3.165.190.103Amazon CloudFrontNetwork AS16509 (Amazon Web Services)🇺🇸 Registered in United States, block 3.165.190.0/23Reverse DNS server-3-165-190-103.zrh55.r.cloudfront.net
  • 3.165.190.57Not analysed

No IPv6 address.

Website

What the site answered when we visited its home page.

Status
200 OK
Address
https://duo.com/
Page title
IAM & MFA Identity Security for Business, Humans, AI | Cisco Duo
HTTPS
Yes
HTTP/3
Not advertised
Response time
381 ms from Cloudflare ZRH

Security headers

C
  • Strict-Transport-Security
  • Content-Security-Policy (too weak)
  • Clickjacking protection
  • X-Content-Type-Options
  • Referrer-Policy (too weak)
  • Permissions-Policy

DNS

Who answers for the domain name, and its records.

DNS provider
Amazon Route 53
Name servers
ns-1365.awsdns-42.org
ns-1733.awsdns-24.co.uk
ns-55.awsdns-06.com
ns-932.awsdns-52.net
Zone
duo.com
DNSSEC
Not signed
Certificates
issue amazon.com
issue amazonaws.com
issue amazontrust.com
issue awstrust.com
issue digicert.com
issue globalsign.com
issue identrust.com
issue letsencrypt.org
issue pki.goog
issue starfieldtech.com
All DNS records (36)
TypeNameValueTTL
Aduo.com3.165.190.11760
Aduo.com3.165.190.3160
Aduo.com3.165.190.10360
Aduo.com3.165.190.5760
NSduo.comns-1365.awsdns-42.org172800
NSduo.comns-1733.awsdns-24.co.uk172800
NSduo.comns-55.awsdns-06.com172800
NSduo.comns-932.awsdns-52.net172800
MXduo.com10 alln-mx-01.cisco.com300
MXduo.com20 rcdn-mx-01.cisco.com300
MXduo.com30 aer-mx-01.cisco.com300
TXTduo.comapple-domain-verification=0NFHW4xLPA7qMAUl300
TXTduo.comgoogle-site-verification=88KLpNEv0nOJ-yRHH3mp3TIvrG4rhNTP3DbODLQeIYg300
TXTduo.comgoogle-site-verification=F16Zf7RnF8CVcYnsbn6C308KFSeldSRrLiJK1cCgoBQ300
TXTduo.comgoogle-site-verification=FyHTkA00weOnJqC50U6D_1Etz0FeTAV36UzX-mR0t7Y300
TXTduo.comgoogle-site-verification=QSlNcf5REPqDzZZtYQdQ02iTtFdCkF4iGzRgOHWeAfk300
TXTduo.comgoogle-site-verification=UxTqzaF64RMmCuE_cfz67aerfbJyPW7jSWJaDRf8U4Q300
TXTduo.comgoogle-site-verification=WvGzO9Z62GF-06EZawhrguz4lX-3soAJz8l5Zdd0kpc300
TXTduo.comgoogle-site-verification=_6xJQkVWQvhjZ8WH17r2qEjOu0CYifwUq5DqV-aUPIE300
TXTduo.comgoogle-site-verification=gY1gXbTT44Hc2xjnx-TmKdBLXKzpthxWKGhlqJL0EDw300
TXTduo.comgoogle-site-verification=uo-yyMBObeQzZDH55aAFLRLyf0IiN20p0GJ0H6N2jQQ300
TXTduo.comgoogle-site-verification=zagew00MIXPj4NT7NSuvolRYA9BWUFvOvUU9On5SkLs300
TXTduo.comidentrust_validate=SMpkw2Y899uXgKrzdHnqptIfXiIOyDNlX1foFF1S209M300
TXTduo.comidentrust_validate=VOOjXXB2PpF7kC14MiiEHi40phwnkIP1dhJ1AbyZxWKP300
TXTduo.comv=spf1 ip4:72.35.40.113/28 ip4:66.51.154.240/29 include:_spf.google.com include:_spf.salesforce.com include:mktomail.com include:stspg-customer.com include:_spf.intacct.com include:servers.mcsv.net ~all300
TXTduo.comworkplace-domain-verification=M0nohbh4MpXazNtpfeLQrdlEAbaeQ3300
CAAduo.com0 issue "amazon.com"300
CAAduo.com0 issue "amazonaws.com"300
CAAduo.com0 issue "amazontrust.com"300
CAAduo.com0 issue "awstrust.com"300
CAAduo.com0 issue "digicert.com"300
CAAduo.com0 issue "globalsign.com"300
CAAduo.com0 issue "identrust.com"300
CAAduo.com0 issue "letsencrypt.org"300
CAAduo.com0 issue "pki.goog"300
CAAduo.com0 issue "starfieldtech.com"300

Email

Well protected against spoofing: SPF plus an enforced DMARC policy.

Mailbox provider
cisco.com
Mail servers
10 alln-mx-01.cisco.com
20 rcdn-mx-01.cisco.com
30 aer-mx-01.cisco.com
Allowed senders
Google WorkspaceSalesforceMailchimp
SPF
Mail from other servers is marked as suspicious.
DMARC
Spoofed mail is rejected.
MTA-STS
Not enabled
SPF and DMARC records

v=spf1 ip4:72.35.40.113/28 ip4:66.51.154.240/29 include:_spf.google.com include:_spf.salesforce.com include:mktomail.com include:stspg-customer.com include:_spf.intacct.com include:servers.mcsv.net ~all

v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; fo=1; rf=afrf; pct=100; ri=86400; ruf=mailto:thknwdkw@fr.dmarcian.com; rua=mailto:thknwdkw@ag.dmarcian.com

Domain registration

Registrar
MarkMonitor Inc.
Registered
14 Oct 1998 (28 years ago)
Paid until
13 Oct 2027 (in 338 days)
Last changed
24 Jun 2024
Status
Deletion lock (registrar)Transfer lock (registrar)Update lock (registrar)
DNSSEC at registry
No
Source
rdap.verisign.com

Connected services

Verification records in DNS show the domain is linked to these accounts.

AppleGoogle Search Console

Observed changes

A compact record of what changed between public checks. Rechecks happen only when someone requests them.

History starts with saved public observations. No earlier changes are inferred.

Last 10 searches

Domain NameHost
tv.comUnknown
infomaniak.chInfomaniak
multimania.frUnknown
netflix.comUnknown
hulu.comAkamai (host hidden)
kitboga.comCloudflare (host hidden)
uno.comWix
peppapig.comImperva (host hidden)
porcinet.frUnknown

View the last 500 searches