This subdomain is a content delivery network endpoint, likely serving assets for getduna.com. The technical side looks capable: it runs on AWS CloudFront, uses modern encryption, and loads fast. But that is where the reassurance ends. For any business relying on this CDN, the bigger question is who operates it. We found no public ownership information, no WHOIS data on the domain, and no trace of the site in web archives. Most CDN providers — even small ones — have a company page, contact details, or some kind of track record. Here, that is absent. If you are evaluating getduna.com as a whole, check the primary domain for ownership and customer reviews first. Right now, this subdomain is a black box: technically functional but impossible to vouch for. Treat it as unknown until the operators identify themselves.
No — cdn.getduna.com doesn't look safe
In plain English
This is a CDN subdomain with solid technical security but no identifiable owner or history. The complete lack of transparency about who runs it makes it hard to assess the trustworthiness of the underlying service. Unless you can verify the parent company's reputation independently, treat this with caution.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
Solid fundamentals: modern encryption with a valid certificate and no blacklist flags. The missing browser-level protections like clickjacking guards are a minor shortfall for a CDN but not alarming.
There is no visible ownership for this subdomain. The domain itself returned no WHOIS match, and the site gives away nothing about who runs it. For a commercial service, that level of opacity is a significant concern.
Clean on blacklists and Google Web Risk, but there is no web archive history or ranking data. The absence of any track record makes it hard to tell whether this is a brand-new setup or a short-lived one.
The subdomain itself offers no contact or about information, which is normal for a CDN endpoint. The real transparency test would be on the parent site, but that is outside this analysis.
Legal pages like privacy policies are not expected on a CDN subdomain. They would normally live on the primary domain, so the absence here is not a red flag.
The infrastructure is robust: AWS CloudFront with multiple IPs, fast load times, and modern encryption. No email handling is fine for a CDN. Lacks DNSSEC, but that is common.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.
