DDoS-Guard logo

Download websites that use DDoS-Guard

649,336 live sites using DDoS-Guard right now

Security · by DDoS-Guard Ltd. · since 2011 · Proprietary

649K sites Dataset updated · 2026-07-28
Categories Security
🔒 Get the list
Requires a dataset purchase

About DDoS-Guard

webatla tracks 649,336 live websites using DDoS-Guard — 0.2% of every site we index. Download the full list of websites that using DDoS-Guard technology as a daily JSONL export — every record includes the domain plus DNS, WHOIS, IP address, hosting country and global rank.

DDoS-Guard is a Russian DDoS mitigation and content delivery network service that protects websites and online infrastructure from distributed denial-of-service attacks. Founded in 2011 and headquartered in Rostov-on-Don, Russia, the company offers network-level and application-level protection.

DDoS-Guard provides services including traffic scrubbing, web application firewall (WAF), SSL offloading, and CDN capabilities. It has become notable for hosting controversial and politically sensitive content due to its permissive policies, drawing international attention. The platform is used by a diverse range of websites, from legitimate businesses seeking affordable DDoS protection to sites that have been dropped by other providers. Its network spans multiple data centers across Europe, Asia, and the Americas.

At a glance

VendorDDoS-Guard Ltd.
LicenseProprietary
First release2011-01-01
All figures as of Jul 28, 2026
649,336 Sites detected
0.2% Of all websites

Database preview of DDoS-Guard sites

DDoS-Guard detection is a value inside the Technologies column. Two datasets carry it — switch between them to compare what's included.

webatla-technologies-ddos-guard-2026-07-28.jsonl.zst · 649,336 rows · 14 columns Daily fresh export
DomainTLD suffixTLDDomain typeHTTP statusIP addressCountry by IPSocial networksTechnologies last data checkedTechnologiesPR valueHarmonic valueDomain creation dateDomain expiration date
garant.rururuICANNHTTP 200185.178.208.73RU{"ok":["https://ok.ru/garant1990"],"vk":["https://vk.com/garant_news"],"telegram":["https://telegram.me/garantnews","https://telegram.me/garant_bot"]}2026-05-10PWA, Popper, jQuery 1.8.3, Bootstrap, DDoS-Guard, Open Graph0.000013266118,787,4741997-09-152026-09-30
cbr.rururuICANNHTTP 200185.178.208.7RU{"ok":["https://ok.ru/group/68858679787580"],"vk":["https://vk.com/cbr_official"],"youtube":["https://youtube.com/user/BankofRussia"],"telegram":["https://telegram.me/centralbank_russia"]}2026-07-26HTTP/2, Popper, jQuery 3.7.1, Tippy.js, Prototype, jQuery UI, DDoS-Guard, GlobalSign, Open Graph0.000010867118,000,5661996-11-102026-11-30
iz.rururuICANNHTTP 200185.178.208.4RU{"ok":["https://ok.ru/group/53243993063542"],"vk":["https://vk.com/izvestia"],"telegram":["https://t.me/izvestia"]}2026-05-15PHP, PWA, HSTS, Criteo, Drupal, jQuery, YouTube, DDoS-Guard, Liveinternet, OWL Carousel0.0000094570118,794,0742000-03-152027-03-31
aif.rururuICANNHTTP 20095.129.232.166RU{"ok":["https://ok.ru/aifru"],"vk":["https://vk.com/aif_ru"],"viber":["https://vb.me/aif"],"youtube":["https://youtube.com/aifru"],"telegram":["https://t.me/aifonline"]}2026-07-22PWA, RSS, HTTP/2, jQuery, Favicon, DDoS-Guard, GlobalSign, Liveinternet, Google Site Verification0.0000080805917,774,1961997-02-032027-02-28
litres.rururuICANNHTTP 200193.26.19.101RU{"ok":["https://ok.ru/litres"],"vk":["https://vk.com/mylitres"],"youtube":["https://youtube.com/@MyBookbyLitres"],"telegram":["https://t.me/LitRes_ebooks"]}2026-05-18PWA, RSS, Express, Node.js, DDoS-Guard, Google Ads, Open Graph, Facebook Pixel, Priority Hints, Yandex.Metrika0.0000076846618,915,0062005-10-152026-10-15
DomainTLD suffixTLDDomain typeHTTP statusIP addressCountry by IPSocial networksTechnologies last data checkedTechnologiesDNS last data checkedDNS StatusDNS recordsPR valueHarmonic valueRDAP/WHOIS last data checkedRDAP/WHOIS methodDomain creation dateDomain expiration dateDomain last changedRegistrarRDAP/WHOIS RecordResponse Status RDAP/WHOIS
garant.rururuICANNHTTP 200185.178.208.73RU{"ok":["https://ok.ru/garant1990"],"vk":["https://vk.com/garant_news"],"telegram":["https://telegram.me/garantnews","https://telegram.me/garant_bot"]}2026-05-10PWA, Popper, jQuery 1.8.3, Bootstrap, DDoS-Guard, Open Graph2026-07-25TRUE{"A":["185.178.208.73"],"MX":[{"host":"forpost1.garant.ru","priority":10}],"NS":["ns10.garant.ru","ns20.garant.ru"],"SOA":{"mname":"ns10.garant.ru","retry":1800,"rname":"dnsadm.garant.ru","expire":1814400,"serial":2026072302,"minimum":86400,"refresh":36000},"TXT":["065af284-cd12-48fe-8f5a-6e51cd2abfbe","136-TXT-456","MS=E24D097CD329324C57FC13B675DC4B455BE6D0CE","MS=ms33321102","_globalsign-domain-verification=PzhaHxs95mxGvfJrfXDqQLbaFUrse6tpmaBcWKvtqu","facebook-domain-verification=a17d16q1lpzh93nr5jrnrp821xnkn6","google-site-verification=prrgSHIyKU9G8RM04VKFclw42T8wQpiTJ722gghmwXo","v=spf1 ip4:80.253.4.14 ip4:80.253.7.114 ip4:80.253.4.57 ip4:80.253.7.115 ip4:80.253.4.71 ip4:80.253.7.22 ip4:80.253.7.23 ip4:80.253.7.24 ip4:80.253.7.35 ip4:80.253.7.130 ip4:80.253.7.147 ip4:185.124.208.33 ip4:185.124.208.67 ip4:84.47.153.48/28 -all"]}0.000013266118,787,4742025-08-22WHOIS1997-09-152026-09-302025-08-22RU-CENTER-RU{"raw_response":"% TCI Whois Service. Terms of use:\n% https://tcinet.ru/documents/whois_ru_rf.pdf (in Russian)\n% https://tcinet.ru/documents/whois_su.pdf (in Russian)\n\ndomain: GARANT.RU\nnserver: ns10.garant.ru. 80.253.7.4\nnserver: ns20.garant.ru. 185.124.208.18\nstate: REGISTERED, DELEGATED, VERIFIED\norg: NPP \"Garant-Service\" (LLC).\ntaxpayer-id: 7718013048\nregistrar: RU-CENTER-RU\nadmin-contact: https://www.nic.ru/whois\ncreated: 1997-09-15T16:28:51Z\npaid-till: 2026-09-30T21:00:00Z\nfree-date: 2026-11-01\nsource: TCI\n\nLast updated on 2025-08-22T10:58:01Z\n\n"}Domain is active
cbr.rururuICANNHTTP 200185.178.208.7RU{"ok":["https://ok.ru/group/68858679787580"],"vk":["https://vk.com/cbr_official"],"youtube":["https://youtube.com/user/BankofRussia"],"telegram":["https://telegram.me/centralbank_russia"]}2026-07-26HTTP/2, Popper, jQuery 3.7.1, Tippy.js, Prototype, jQuery UI, DDoS-Guard, GlobalSign, Open Graph2026-07-19TRUE{"A":["185.178.208.7"],"MX":[{"host":"mx.cbr.ru","priority":50}],"NS":["ns4.cbr.ru","ns5.cbr.ru","ns6.cbr.ru"],"CAA":[{"tag":"issue","flags":0,"value":"certum.pl"},{"tag":"issue","flags":0,"value":"emsign.com"},{"tag":"issue","flags":0,"value":"harica.gr"},{"tag":"issue","flags":0,"value":"jprs.jp"},{"tag":"issue","flags":0,"value":"letsencrypt.org"},{"tag":"issue","flags":0,"value":"ssl.com"},{"tag":"issue","flags":0,"value":"wosign.com"}],"SOA":{"mname":"ns1.iis.cbr.ru","retry":600,"rname":"dns-mnt.cbr.ru","expire":2419200,"serial":2021138992,"minimum":600,"refresh":3600},"TXT":["46EEBBCA5822E885BD71ACCCFBCECB36","HARICA-HMMLQkUrLq8Olga0Ofm","HARICA-kGrV5L5EQCsrV1TtNTe","_globalsign-domain-verification=BsHd-Jq1n5yZKYdl7ohEilGKugv0wgA3wecQtYxJ1R","kgjfklerKJDKLFjk23rj3gkljgkl","tci-dcv=f72adf7c6295822aefd5cc0b40d1f21988867bb9dcf99afe8b99536ed8dae5c4","v=spf1 ip4:212.40.192.223 ip4:212.40.192.224 ip4:212.40.192.225 ip4:212.40.192.134 ip4:212.40.192.135 ip4:212.40.193.134 ip4:212.40.193.135 ip4:212.40.192.64 ip4:212.40.192.65 ip4:212.40.192.61 ip4:212.40.192.62 ip4:212.40.192.63 -all"]}0.000010867118,000,5662025-12-02WHOIS1996-11-102026-11-302025-12-02RU-CENTER-RU{"raw_response":"% TCI Whois Service. Terms of use:\n% https://tcinet.ru/documents/whois_ru_rf.pdf (in Russian)\n% https://tcinet.ru/documents/whois_su.pdf (in Russian)\n\ndomain: CBR.RU\nnserver: ns4.cbr.ru. 212.40.193.68\nnserver: ns5.cbr.ru. 212.40.193.69\nnserver: ns6.cbr.ru. 212.40.202.68\nstate: REGISTERED, DELEGATED, VERIFIED\norg: The Central Bank of the Russian Federation\ntaxpayer-id: 7702235133\nregistrar: RU-CENTER-RU\nadmin-contact: https://www.nic.ru/whois\ncreated: 1996-11-10T14:52:14Z\npaid-till: 2026-11-30T21:00:00Z\nfree-date: 2027-01-01\nsource: TCI\n\nLast updated on 2025-12-02T22:13:01Z\n\n"}Domain is active
iz.rururuICANNHTTP 200185.178.208.4RU{"ok":["https://ok.ru/group/53243993063542"],"vk":["https://vk.com/izvestia"],"telegram":["https://t.me/izvestia"]}2026-05-15PHP, PWA, HSTS, Criteo, Drupal, jQuery, YouTube, DDoS-Guard, Liveinternet, OWL Carousel2026-07-22TRUE{"A":["185.178.208.4"],"MX":[{"host":"mx.ren-tv.com","priority":10}],"NS":["ns1.ren-tv.com","ns2.ren-tv.com","ns3.ren-tv.com","ns4.ren-tv.com","ns5.ren-tv.com","ns6.ren-tv.com"],"SOA":{"mname":"ns1.ren-tv.com","retry":600,"rname":"msk-admin.ren-tv.com","expire":172800,"serial":1032,"minimum":600,"refresh":900},"TXT":["_globalsign-domain-verification=NOKqee6k7G6Jmop2HcWS652y2349rciL7wf3BbwQ6e","_globalsign-domain-verification=dmMaAEkFYDdEaMV11qmx-52xWp6YvIH1xuv1AF69pu","_globalsign-domain-verification=kbRj6MvZGzHSNG6yap34S1eqNZuPrAk3TjL3rX4I31","google-site-verification=nzcoWzwYr4KRI_l8q9rJ5KYSyJZ2kc96m5zl11oACX8","ngenix-verification=b614a95509ebab2e3bb55495b2522b98","rm_verify=24cc394aa9","v=spf1 redirect=ren-tv.com","yandex-verification: fd4735c898fb69e3"],"DNSKEY":[{"flags":257,"protocol":3,"algorithm":13,"public_key":"nz+JdjVMGmQQGQmgnv5D8F1HV08B+CNbDdVtY7veu5IvzeNofjnrLGPDCKSkmhtEdFwsAfPrbbe7HXj7eBuRnA=="}]}0.0000094570118,794,0742026-04-14WHOIS2000-03-152027-03-312026-04-14RU-CENTER-RU{"raw_response":"% TCI Whois Service. Terms of use:\n% https://tcinet.ru/documents/whois_ru_rf.pdf (in Russian)\n% https://tcinet.ru/documents/whois_su.pdf (in Russian)\n\ndomain: IZ.RU\nnserver: ns1.ren-tv.com.\nnserver: ns2.ren-tv.com.\nnserver: ns3.ren-tv.com.\nnserver: ns4.ren-tv.com.\nnserver: ns5.ren-tv.com.\nnserver: ns6.ren-tv.com.\nstate: REGISTERED, DELEGATED, VERIFIED\norg: Obshchestvo s ogranichennoj otvetstvennostyu \"Multimedijnyj informacionnyj centr \"Izvestiya\"\ntaxpayer-id: 7704399970\nregistrar: RU-CENTER-RU\nadmin-contact: https://www.nic.ru/whois\ncreated: 2000-03-15T16:04:34Z\npaid-till: 2027-03-31T21:00:00Z\nfree-date: 2027-05-02\nsource: TCI\n\nLast updated on 2026-04-14T15:03:02Z"}Domain is active
aif.rururuICANNHTTP 20095.129.232.166RU{"ok":["https://ok.ru/aifru"],"vk":["https://vk.com/aif_ru"],"viber":["https://vb.me/aif"],"youtube":["https://youtube.com/aifru"],"telegram":["https://t.me/aifonline"]}2026-07-22PWA, RSS, HTTP/2, jQuery, Favicon, DDoS-Guard, GlobalSign, Liveinternet, Google Site Verification2026-07-17TRUE{"A":["95.129.232.166"],"MX":[{"host":"edge.aif.ru","priority":50},{"host":"mail.aif.ru","priority":10}],"NS":["ns1.aif.ru","ns2.aif.ru","ns3-l2.nic.ru","ns4-l2.nic.ru"],"SOA":{"mname":"ns.aif.ru","retry":1801,"rname":"nsmaster.aif.ru","expire":31536000,"serial":2026042300,"minimum":600,"refresh":7201},"TXT":["MS=5AB030797CFF3628FAB704FA8754437B2FA08215","globalsign-domain-verification=UnAAAyI0_OePDAeZQ6JB-emYB6fSNr0iFwdnpCi-Ub","google-site-verification=5INS8Ge0Y7thypxq6stbsZgKFFYVYQdNkCxmwqpRl0I","v=spf1 mx a:smtp-relay.aif.ru ip4:81.23.15.0/24 include:spf.mailganer.com ~all"]}0.0000080805917,774,1962026-04-16WHOIS1997-02-032027-02-282026-04-15RU-CENTER-RU{"raw_response":"% TCI Whois Service. Terms of use:\n% https://tcinet.ru/documents/whois_ru_rf.pdf (in Russian)\n% https://tcinet.ru/documents/whois_su.pdf (in Russian)\n\ndomain: AIF.RU\nnserver: ns1.aif.ru. 94.198.52.52\nnserver: ns2.aif.ru. 81.23.15.88\nnserver: ns4-cloud.nic.ru.\nnserver: ns4-l2.nic.ru.\nnserver: ns8-cloud.nic.ru.\nnserver: ns8-l2.nic.ru.\nstate: REGISTERED, DELEGATED, VERIFIED\norg: JSC Argumenti i fakty\ntaxpayer-id: 7701103751\nregistrar: RU-CENTER-RU\nadmin-contact: https://www.nic.ru/whois\ncreated: 1997-02-03T17:01:42Z\npaid-till: 2027-02-28T21:00:00Z\nfree-date: 2027-04-01\nsource: TCI\n\nLast updated on 2026-04-15T23:08:01Z"}Domain is active
litres.rururuICANNHTTP 200193.26.19.101RU{"ok":["https://ok.ru/litres"],"vk":["https://vk.com/mylitres"],"youtube":["https://youtube.com/@MyBookbyLitres"],"telegram":["https://t.me/LitRes_ebooks"]}2026-05-18PWA, RSS, Express, Node.js, DDoS-Guard, Google Ads, Open Graph, Facebook Pixel, Priority Hints, Yandex.Metrika2026-07-22TRUE{"A":["193.26.19.101","193.26.19.14","193.26.19.16","193.26.19.99"],"MX":[{"host":"alt1.aspmx.l.google.com","priority":5},{"host":"alt2.aspmx.l.google.com","priority":5},{"host":"aspmx.l.google.com","priority":1},{"host":"aspmx2.googlemail.com","priority":10},{"host":"aspmx3.googlemail.com","priority":10}],"NS":["ns1.litres.ru","ns2.litres.ru","ns4-l2.nic.ru","ns8-l2.nic.ru"],"SOA":{"mname":"ns1.litres.ru","retry":5000,"rname":"domains.litres.ru","expire":1209600,"serial":2026071702,"minimum":86400,"refresh":28800},"TXT":["_globalsign-domain-verification=NBNCJCrqiMAdhaPXz11jcDFjHF18DBV0I370VnSeSg","_globalsign-domain-verification=u7FgaVbfrYl8QCn0NUh4rlnGG0DC8kmmQ2g_rskK77","google-site-verification=ZO6-LnzHwJbDa7gAObKjxka9lim4UGGwG4H5T0JAPTk","google-site-verification=nDvU2rIQyaECUOh-JceF1J6LnYUsa807qZkhBW9S26w","google-site-verification=oseV1i965tpZNwxRQCVPOIyYiIi8yDyFUUKkCl3BsFM","mailru-domain: nTU0IRathAEVS2yk","mailru-verification: 704887e4b2120469","mailru-verification: 750b6c85b6950025","mailru-verification: 794c9c22e2adc2b0","v=spf1 ip4:193.26.19.0/24 include:spf.mindbox.ru include:_spf.yandex.net include:_spf.google.com ~all","yandex-verification: 004081540e70cf45"]}0.0000076846618,915,0062025-09-16WHOIS2005-10-152026-10-152025-09-16RD-RU{"raw_response":"% TCI Whois Service. Terms of use:\n% https://tcinet.ru/documents/whois_ru_rf.pdf (in Russian)\n% https://tcinet.ru/documents/whois_su.pdf (in Russian)\n\ndomain: LITRES.RU\nnserver: ns1.litres.ru. 193.26.19.123\nnserver: ns2.litres.ru. 193.26.19.3\nnserver: ns3.litres.ru. 193.26.19.122\nnserver: ns4.litres.ru. 193.26.19.4\nstate: REGISTERED, DELEGATED, VERIFIED\norg: LitRes Ltd\ntaxpayer-id: 7719571260\nregistrar: RD-RU\nadmin-contact: https://cp.mastername.ru/domain_feedback/\ncreated: 2005-10-15T20:00:00Z\npaid-till: 2026-10-15T21:00:00Z\nfree-date: 2026-11-16\nsource: TCI\n\nLast updated on 2025-09-16T01:08:01Z\n\n"}Domain is active
Showing 5 of 649,336 rows · Technologies · Full website tech stack per site — CMS, payments, analytics, frameworks.

DDoS-Guard sites by country

CountrySitesShare
🇷🇺 Russia 568,872 89.6%
🇳🇱 Netherlands 21,369 3.4%
🇦🇪 United Arab Emirates 17,706 2.8%
🇧🇾 Belarus 12,237 1.9%
🇷🇴 Romania 4,037 0.6%

DDoS-Guard sites by TLD

TLDSitesShare
.ru 404,378 62.3%
.com 53,113 8.2%
.xn--p1ai 42,987 6.6%
.top 35,384 5.4%
.pro 11,483 1.8%

The DDoS-Guard dataset

Every site we've detected as running DDoS-Guard — with version, hosting, country, TLD and traffic rank.

DDoS-Guard lives inside 2 datasets

DDoS-Guard detection is part of Technologies (€159/mo) and All data (€599/mo). Buy either to filter the full 649,336-site list — or grab a free preview first.

Your DDoS-Guard downloads

The datasets you own, sliced to DDoS-Guard. Every button streams the latest daily export directly.

Format: JSONL (zstd) Dataset updated: 2026-07-28

API, columns & recipes → /account/api

Which websites are using DDoS-Guard?

webatla detects every site using DDoS-Guard and exports them as one downloadable list, so you can see who relies on this technology and what else runs alongside it.

Open the DDoS-Guard technology dataset to break adoption down by country and TLD, compare it with a competing technology, and track new domains over time.

Frequently asked questions

How many websites use DDoS-Guard?

webatla detects DDoS-Guard on 649K websites, refreshed daily — each with its domain, DNS, WHOIS, IP, country and ranking.

Can I download the list of websites using DDoS-Guard?

Yes, as structured JSONL. Grab a free sample first.

What's included for each site, and how fresh is it?

Domain, DNS, RDAP/WHOIS, the full technology stack, IP & country, PageRank and Harmonic — re-detected and re-exported daily.

How do I find the websites using DDoS-Guard?

Buy the technology dataset, then download the complete list of domains we detect using DDoS-Guard — re-exported every day.

What else is in the DDoS-Guard technology data?

Each row places DDoS-Guard next to the other technology on the same site, plus DNS, WHOIS, IP, country and ranking.

Can I download just the sites using DDoS-Guard, or the whole database?

Both. Every site running DDoS-Guard comes in the Technologies dataset, one downloadable file. Or buy All data for the entire database: technologies plus identity, ranking, DNS and RDAP/WHOIS for every domain, combined in one file. Daily fresh export.

How do I download the list of websites using DDoS-Guard?

Three steps: (1) grab the free 10,000-row sample to inspect the schema, (2) buy the Technologies dataset, (3) download the full list of every domain we detect running DDoS-Guard as a JSON Lines file. It is re-exported daily, so you can re-download the freshest list any time inside your access window. Each row carries the domain plus DNS, WHOIS, IP, hosting country and rank.

Get the full list of websites using DDoS-Guard

Pick the dataset that covers what you need. Each one includes DDoS-Guard and downloads as JSONL, rebuilt daily.

Want to compare every dataset side by side? Visit the pricing page