Download websites that use DDoS-Guard
654,487 live sites using DDoS-Guard right now
Security · by DDoS-Guard Ltd. · since 2011 · Proprietary
About DDoS-Guard
webatla tracks 654,487 live websites using DDoS-Guard, 0.2% of every site we index. Download the full list of websites that use DDoS-Guard as a daily JSONL export. Every record includes the domain plus DNS, WHOIS, IP address, hosting country and global rank.
DDoS-Guard is a Russian DDoS mitigation and content delivery network service that protects websites and online infrastructure from distributed denial-of-service attacks. Founded in 2011 and headquartered in Rostov-on-Don, Russia, the company offers network-level and application-level protection.
DDoS-Guard provides services including traffic scrubbing, web application firewall (WAF), SSL offloading, and CDN capabilities. It has become notable for hosting controversial and politically sensitive content due to its permissive policies, drawing international attention. The platform is used by a diverse range of websites, from legitimate businesses seeking affordable DDoS protection to sites that have been dropped by other providers. Its network spans multiple data centers across Europe, Asia, and the Americas.
At a glance
Database preview of DDoS-Guard sites
DDoS-Guard detection is a value inside the Technologies column. Two datasets carry it, switch between them to compare what's included.
| Domain | TLD suffix | TLD | Domain type | HTTP status | IP address | Country by IP | Social networks | Technologies last data checked | Technologies | PR value | Harmonic value | Domain creation date | Domain expiration date |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| hh.ru | ru | ru | ICANN | HTTP 200 | 94.124.200.0 | RU | {"vk":["https://vk.com/headhunter"],"telegram":["https://t.me/hh_ru_official"]} | 2026-08-05 | HSTS, HTTP/2, Sentry, Favicon, hreflang, DDoS-Guard, GlobalSign, Open Graph, Google Site Verification | 0.0000146399 | 18,559,326 | 2000-03-15 | 2027-03-31 |
| garant.ru | ru | ru | ICANN | HTTP 200 | 185.178.208.73 | RU | {"ok":["https://ok.ru/garant1990"],"vk":["https://vk.ru/garant_news"],"telegram":["https://telegram.me/garantnews","https://telegram.me/garant_bot"]} | 2026-08-04 | PWA, HTTP/2, Popper, jQuery 1.8.3, Favicon, Bootstrap, DDoS-Guard, GlobalSign, Open Graph, Google Site Verification | 0.0000134258 | 18,335,180 | 1997-09-15 | 2026-09-30 |
| cbr.ru | ru | ru | ICANN | HTTP 200 | 185.178.208.7 | RU | {"ok":["https://ok.ru/group/68858679787580"],"vk":["https://vk.com/cbr_official"],"youtube":["https://youtube.com/user/BankofRussia"],"telegram":["https://telegram.me/centralbank_russia"]} | 2026-07-26 | HTTP/2, Popper, jQuery 3.7.1, Tippy.js, Prototype, jQuery UI, DDoS-Guard, GlobalSign, Open Graph | 0.0000108052 | 18,507,688 | 1996-11-10 | 2026-11-30 |
| aif.ru | ru | ru | ICANN | HTTP 200 | 95.129.232.166 | RU | {"ok":["https://ok.ru/aifru"],"vk":["https://vk.com/aif_ru"],"viber":["https://vb.me/aif"],"youtube":["https://youtube.com/aifru"],"telegram":["https://t.me/aifonline"]} | 2026-07-22 | PWA, RSS, HTTP/2, jQuery, Favicon, DDoS-Guard, GlobalSign, Liveinternet, Google Site Verification | 0.00000782563 | 17,465,296 | 1997-02-03 | 2027-02-28 |
| fontanka.ru | ru | ru | ICANN | HTTP 200 | 195.19.220.21 | RU | {"vk":["https://vk.com/fontanka"],"youtube":["https://youtube.com/user/fontankaRU"],"telegram":["https://t.me/fontankaspb"]} | 2026-08-03 | PWA, RSS, Envoy, HTTP/2, AdRiver, Favicon, DDoS-Guard, Open Graph, Priority Hints, Google Site Verification | 0.00000594845 | 18,356,932 | 2000-08-06 | 2027-08-06 |
| … | … | … | … | … | … | … | … | … | … | … | … | … | … |
| Domain | TLD suffix | TLD | Domain type | HTTP status | IP address | Country by IP | Social networks | Technologies last data checked | Technologies | DNS last data checked | DNS Status | DNS records | PR value | Harmonic value | RDAP/WHOIS last data checked | RDAP/WHOIS method | Domain creation date | Domain expiration date | Domain last changed | Registrar | RDAP/WHOIS Record | Response Status RDAP/WHOIS |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| hh.ru | ru | ru | ICANN | HTTP 200 | 94.124.200.0 | RU | {"vk":["https://vk.com/headhunter"],"telegram":["https://t.me/hh_ru_official"]} | 2026-08-05 | HSTS, HTTP/2, Sentry, Favicon, hreflang, DDoS-Guard, GlobalSign, Open Graph, Google Site Verification | 2026-08-02 | TRUE | {"A":["94.124.200.0"],"MX":[{"host":"mx3.hh.ru","priority":5},{"host":"mx6.hh.ru","priority":10}],"NS":["ns.hh.ru","ns4-cloud.nic.ru","ns4-l2.nic.ru","ns8-cloud.nic.ru","ns8-l2.nic.ru"],"SOA":{"mname":"ns.hh.ru","retry":900,"rname":"admins.hh.ru","expire":1209600,"serial":2026062501,"minimum":900,"refresh":1800},"TXT":["globalsign-domain-verification=soww7SPT7oZe0nIgSaxVWnWId4tVnyhTOMT4NgpF50","google-site-verification=_LYRoCXnE4brlK_32zOVrT6TZU-XXaud9mOo_XfTCEk","holst-verification=oa9ful44k01hzvgdkieao6u265xwon7gt6bjgf31","v=spf1 include:_spf.hh.ru -all","zoom-domain-verification=ZOOM_verify_478ddf8c888d47a7ad6354cb9b5a5d3e"]} | 0.0000146399 | 18,559,326 | 2026-04-26 | WHOIS | 2000-03-15 | 2027-03-31 | 2026-04-26 | RU-CENTER-RU | {"raw_response":"% TCI Whois Service. Terms of use:\n% https://tcinet.ru/documents/whois_ru_rf.pdf (in Russian)\n% https://tcinet.ru/documents/whois_su.pdf (in Russian)\n\ndomain: HH.RU\nnserver: ns4-cloud.nic.ru.\nnserver: ns4-l2.nic.ru.\nnserver: ns8-cloud.nic.ru.\nnserver: ns8-l2.nic.ru.\nnserver: ns.hh.ru. 94.124.200.34\nstate: REGISTERED, DELEGATED, VERIFIED\norg: LLC \"KHEDKHANTER\"\ntaxpayer-id: 7718620740\nregistrar: RU-CENTER-RU\nadmin-contact: https://www.nic.ru/whois\ncreated: 2000-03-15T15:32:29Z\npaid-till: 2027-03-31T21:00:00Z\nfree-date: 2027-05-02\nsource: TCI\n\nLast updated on 2026-04-26T21:08:01Z"} | Domain is active |
| garant.ru | ru | ru | ICANN | HTTP 200 | 185.178.208.73 | RU | {"ok":["https://ok.ru/garant1990"],"vk":["https://vk.ru/garant_news"],"telegram":["https://telegram.me/garantnews","https://telegram.me/garant_bot"]} | 2026-08-04 | PWA, HTTP/2, Popper, jQuery 1.8.3, Favicon, Bootstrap, DDoS-Guard, GlobalSign, Open Graph, Google Site Verification | 2026-08-07 | TRUE | {"A":["185.178.208.73"],"MX":[{"host":"forpost1.garant.ru","priority":10}],"NS":["ns10.garant.ru","ns20.garant.ru"],"SOA":{"mname":"ns10.garant.ru","retry":1800,"rname":"dnsadm.garant.ru","expire":1814400,"serial":2026080301,"minimum":86400,"refresh":36000},"TXT":["065af284-cd12-48fe-8f5a-6e51cd2abfbe","136-TXT-456","MS=E24D097CD329324C57FC13B675DC4B455BE6D0CE","MS=ms33321102","_globalsign-domain-verification=PzhaHxs95mxGvfJrfXDqQLbaFUrse6tpmaBcWKvtqu","facebook-domain-verification=a17d16q1lpzh93nr5jrnrp821xnkn6","google-site-verification=prrgSHIyKU9G8RM04VKFclw42T8wQpiTJ722gghmwXo","v=spf1 ip4:80.253.4.14 ip4:80.253.7.114 ip4:80.253.4.57 ip4:80.253.7.115 ip4:80.253.4.71 ip4:80.253.7.22 ip4:80.253.7.23 ip4:80.253.7.24 ip4:80.253.7.35 ip4:80.253.7.130 ip4:80.253.7.147 ip4:185.124.208.33 ip4:185.124.208.67 ip4:84.47.153.48/28 -all"]} | 0.0000134258 | 18,335,180 | 2025-08-22 | WHOIS | 1997-09-15 | 2026-09-30 | 2025-08-22 | RU-CENTER-RU | {"raw_response":"% TCI Whois Service. Terms of use:\n% https://tcinet.ru/documents/whois_ru_rf.pdf (in Russian)\n% https://tcinet.ru/documents/whois_su.pdf (in Russian)\n\ndomain: GARANT.RU\nnserver: ns10.garant.ru. 80.253.7.4\nnserver: ns20.garant.ru. 185.124.208.18\nstate: REGISTERED, DELEGATED, VERIFIED\norg: NPP \"Garant-Service\" (LLC).\ntaxpayer-id: 7718013048\nregistrar: RU-CENTER-RU\nadmin-contact: https://www.nic.ru/whois\ncreated: 1997-09-15T16:28:51Z\npaid-till: 2026-09-30T21:00:00Z\nfree-date: 2026-11-01\nsource: TCI\n\nLast updated on 2025-08-22T10:58:01Z\n\n"} | Domain is active |
| cbr.ru | ru | ru | ICANN | HTTP 200 | 185.178.208.7 | RU | {"ok":["https://ok.ru/group/68858679787580"],"vk":["https://vk.com/cbr_official"],"youtube":["https://youtube.com/user/BankofRussia"],"telegram":["https://telegram.me/centralbank_russia"]} | 2026-07-26 | HTTP/2, Popper, jQuery 3.7.1, Tippy.js, Prototype, jQuery UI, DDoS-Guard, GlobalSign, Open Graph | 2026-08-02 | TRUE | {"A":["185.178.208.7"],"MX":[{"host":"mx.cbr.ru","priority":50}],"NS":["ns4.cbr.ru","ns5.cbr.ru","ns6.cbr.ru"],"CAA":[{"tag":"issue","flags":0,"value":"certum.pl"},{"tag":"issue","flags":0,"value":"emsign.com"},{"tag":"issue","flags":0,"value":"harica.gr"},{"tag":"issue","flags":0,"value":"jprs.jp"},{"tag":"issue","flags":0,"value":"letsencrypt.org"},{"tag":"issue","flags":0,"value":"ssl.com"},{"tag":"issue","flags":0,"value":"trustasia.com"},{"tag":"issue","flags":0,"value":"wosign.com"}],"SOA":{"mname":"ns1.iis.cbr.ru","retry":600,"rname":"dns-mnt.cbr.ru","expire":2419200,"serial":2021138994,"minimum":600,"refresh":3600},"TXT":["46EEBBCA5822E885BD71ACCCFBCECB36","HARICA-HMMLQkUrLq8Olga0Ofm","HARICA-kGrV5L5EQCsrV1TtNTe","_globalsign-domain-verification=BsHd-Jq1n5yZKYdl7ohEilGKugv0wgA3wecQtYxJ1R","kgjfklerKJDKLFjk23rj3gkljgkl","tci-dcv=f72adf7c6295822aefd5cc0b40d1f21988867bb9dcf99afe8b99536ed8dae5c4","v=spf1 ip4:212.40.192.223 ip4:212.40.192.224 ip4:212.40.192.225 ip4:212.40.192.134 ip4:212.40.192.135 ip4:212.40.193.134 ip4:212.40.193.135 ip4:212.40.192.64 ip4:212.40.192.65 ip4:212.40.192.61 ip4:212.40.192.62 ip4:212.40.192.63 -all"]} | 0.0000108052 | 18,507,688 | 2025-12-02 | WHOIS | 1996-11-10 | 2026-11-30 | 2025-12-02 | RU-CENTER-RU | {"raw_response":"% TCI Whois Service. Terms of use:\n% https://tcinet.ru/documents/whois_ru_rf.pdf (in Russian)\n% https://tcinet.ru/documents/whois_su.pdf (in Russian)\n\ndomain: CBR.RU\nnserver: ns4.cbr.ru. 212.40.193.68\nnserver: ns5.cbr.ru. 212.40.193.69\nnserver: ns6.cbr.ru. 212.40.202.68\nstate: REGISTERED, DELEGATED, VERIFIED\norg: The Central Bank of the Russian Federation\ntaxpayer-id: 7702235133\nregistrar: RU-CENTER-RU\nadmin-contact: https://www.nic.ru/whois\ncreated: 1996-11-10T14:52:14Z\npaid-till: 2026-11-30T21:00:00Z\nfree-date: 2027-01-01\nsource: TCI\n\nLast updated on 2025-12-02T22:13:01Z\n\n"} | Domain is active |
| aif.ru | ru | ru | ICANN | HTTP 200 | 95.129.232.166 | RU | {"ok":["https://ok.ru/aifru"],"vk":["https://vk.com/aif_ru"],"viber":["https://vb.me/aif"],"youtube":["https://youtube.com/aifru"],"telegram":["https://t.me/aifonline"]} | 2026-07-22 | PWA, RSS, HTTP/2, jQuery, Favicon, DDoS-Guard, GlobalSign, Liveinternet, Google Site Verification | 2026-07-31 | TRUE | {"A":["95.129.232.166"],"MX":[{"host":"edge.aif.ru","priority":50},{"host":"mail.aif.ru","priority":10}],"NS":["ns1.aif.ru","ns2.aif.ru","ns3-l2.nic.ru","ns4-l2.nic.ru"],"SOA":{"mname":"ns.aif.ru","retry":1801,"rname":"nsmaster.aif.ru","expire":31536000,"serial":2026042300,"minimum":600,"refresh":7201},"TXT":["MS=5AB030797CFF3628FAB704FA8754437B2FA08215","globalsign-domain-verification=UnAAAyI0_OePDAeZQ6JB-emYB6fSNr0iFwdnpCi-Ub","google-site-verification=5INS8Ge0Y7thypxq6stbsZgKFFYVYQdNkCxmwqpRl0I","v=spf1 mx a:smtp-relay.aif.ru ip4:81.23.15.0/24 include:spf.mailganer.com ~all"]} | 0.00000782563 | 17,465,296 | 2026-04-16 | WHOIS | 1997-02-03 | 2027-02-28 | 2026-04-15 | RU-CENTER-RU | {"raw_response":"% TCI Whois Service. Terms of use:\n% https://tcinet.ru/documents/whois_ru_rf.pdf (in Russian)\n% https://tcinet.ru/documents/whois_su.pdf (in Russian)\n\ndomain: AIF.RU\nnserver: ns1.aif.ru. 94.198.52.52\nnserver: ns2.aif.ru. 81.23.15.88\nnserver: ns4-cloud.nic.ru.\nnserver: ns4-l2.nic.ru.\nnserver: ns8-cloud.nic.ru.\nnserver: ns8-l2.nic.ru.\nstate: REGISTERED, DELEGATED, VERIFIED\norg: JSC Argumenti i fakty\ntaxpayer-id: 7701103751\nregistrar: RU-CENTER-RU\nadmin-contact: https://www.nic.ru/whois\ncreated: 1997-02-03T17:01:42Z\npaid-till: 2027-02-28T21:00:00Z\nfree-date: 2027-04-01\nsource: TCI\n\nLast updated on 2026-04-15T23:08:01Z"} | Domain is active |
| fontanka.ru | ru | ru | ICANN | HTTP 200 | 195.19.220.21 | RU | {"vk":["https://vk.com/fontanka"],"youtube":["https://youtube.com/user/fontankaRU"],"telegram":["https://t.me/fontankaspb"]} | 2026-08-03 | PWA, RSS, Envoy, HTTP/2, AdRiver, Favicon, DDoS-Guard, Open Graph, Priority Hints, Google Site Verification | 2026-08-07 | TRUE | {"A":["195.19.220.21"],"MX":[{"host":"mx1.fontanka.ru","priority":30},{"host":"mx2.fontanka.ru","priority":20},{"host":"mx3.fontanka.ru","priority":40}],"NS":["ns.hsdrn.ru","ns1.ngs.ru"],"SOA":{"mname":"ns1.ngs.ru","retry":3600,"rname":"hostmaster.ngs.ru","expire":604800,"serial":2026080601,"minimum":3600,"refresh":36000},"TXT":["google-site-verification=0ysoNUuFbbcWhztIYj6P-IMDUFI0dBg4EVVLW2VYCk8","google-site-verification=jN1zK2itP0Q1wQqkkBEUC0Hg-7H8bAOts_ihUVGJdxQ","google-site-verification=wYnRu0FXMNAFvCAe86dmvfcomdOyKdhLeAsuYTRJ2gI","v=DMARC1; p=none; sp=none; rua=mailto:hosting-admin@fontanka.ru","v=spf1 mx a ip4:93.189.144.238 ip4:195.182.153.34 ip4:185.167.121.13 ip4:195.19.70.10 include:mxsspf.sendpulse.com include:ajur.info include:spf.unisender.com ~all"]} | 0.00000594845 | 18,356,932 | 2026-08-05 | WHOIS | 2000-08-06 | 2027-08-06 | — | RU-CENTER-RU | {"raw_response":"% TCI Whois Service. Terms of use:\n% https://tcinet.ru/documents/whois_ru_rf.pdf (in Russian)\n% https://tcinet.ru/documents/whois_su.pdf (in Russian)\n\ndomain: FONTANKA.RU\nnserver: ns1.ngs.ru.\nnserver: ns.hsdrn.ru.\nstate: REGISTERED, DELEGATED, VERIFIED\norg: \ntaxpayer-id: \nregistrar: RU-CENTER-RU\nadmin-contact: https://www.nic.ru/whois\ncreated: 2000-08-06T20:00:00Z\npaid-till: 2027-08-06T21:00:00Z\nfree-date: 2027-09-07\nsource: TCI\n\nLast updated on 2026-08-04T22:18:01Z"} | Domain is active |
| … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … |
DDoS-Guard sites by country
| Country | Sites | Share |
|---|---|---|
| 🇷🇺 Russia | 574,728 | 90.0% |
| 🇦🇪 United Arab Emirates | 23,192 | 3.6% |
| 🇳🇱 Netherlands | 20,166 | 3.2% |
| 🇧🇾 Belarus | 12,069 | 1.9% |
| 🇰🇿 Kazakhstan | 3,906 | 0.6% |
DDoS-Guard sites by TLD
The DDoS-Guard dataset
Every site we've detected as running DDoS-Guard, with version, hosting, country, TLD and traffic rank.
DDoS-Guard lives inside 2 datasets
DDoS-Guard detection is part of Technologies (€159/mo) and All data (€599/mo). Buy either to filter the full 654,487-site list, or grab a free preview first.
Which websites are using DDoS-Guard?
webatla detects every site using DDoS-Guard and exports them as one downloadable list, so you can see who relies on this technology and what else runs alongside it.
Open the DDoS-Guard technology dataset to break adoption down by country and TLD, compare it with a competing technology, and track new domains over time.
Frequently asked questions
How many websites use DDoS-Guard?
webatla detects DDoS-Guard on 654K websites, refreshed daily, each with its domain, DNS, WHOIS, IP, country and ranking.
Can I download the list of websites using DDoS-Guard?
Yes, as structured JSONL. Grab a free sample first.
What's included for each site, and how fresh is it?
Domain, DNS, RDAP/WHOIS, the full technology stack, IP & country, PageRank and Harmonic, re-detected and re-exported daily.
How do I find the websites using DDoS-Guard?
Buy the technology dataset, then download the complete list of domains we detect using DDoS-Guard, re-exported every day.
What else is in the DDoS-Guard technology data?
Each row places DDoS-Guard next to the other technology on the same site, plus DNS, WHOIS, IP, country and ranking.
Can I download just the sites using DDoS-Guard, or the whole database?
Both. Every site running DDoS-Guard comes in the Technologies dataset, one downloadable file. Or buy All data for the entire database: technologies plus identity, ranking, DNS and RDAP/WHOIS for every domain, combined in one file. Daily fresh export.
How do I download the list of websites using DDoS-Guard?
Three steps: (1) grab the free 10,000-row sample to inspect the schema, (2) buy the Technologies dataset, (3) download the full list of every domain we detect running DDoS-Guard as a JSON Lines file. It is re-exported daily, so you can re-download the freshest list any time inside your access window. Each row carries the domain plus DNS, WHOIS, IP, hosting country and rank.
Get the full list of websites using DDoS-Guard
Pick the dataset that covers what you need. Each one includes DDoS-Guard and downloads as JSONL, rebuilt daily.
Want to compare every dataset side by side? Visit the pricing page
Related technologies
