SurfaceMap › m › mrsskin.fr

mrsskin.fr

Checked 2026-10-22 04:26 UTC · first added 2026-10-21
✗Problems found Score 66 of 100

Domain & DNS

warn

26 passed 4 warn 0 failed

Areas

iRegistration !Delegation !Nameservers !SOA !DNSSEC ✓Records

Problems

  • !
    NS sets differ
    Delegation · The nameservers at the parent and in the zone should be the same. Only in the zone: ns1020.ui-dns.org, ns1038.ui-dns.com, ns1064.ui-dns.de, ns1071.ui-dns.org, ns1104.ui-dns.biz, ns1112.ui-dns.com, ns1120.ui-dns.de, ns1124.ui-dns.biz. cruz.ns.cloudflare.com, roman.ns.cloudflare.com report NS cruz.ns.cloudflare.com ns1020.ui-dns.org ns1038.ui-dns.com ns1064.ui-dns.de ns1071.ui-dns.org ns1104.ui-dns.biz ns1112.ui-dns.com ns1120.ui-dns.de ns1124.ui-dns.biz roman.ns.cloudflare.com.
    #7
  • !
    Software version disclosed
    Nameservers · These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: cruz.ns.cloudflare.com: "2026.10.2"; roman.ns.cloudflare.com: "2026.10.2". Hide or replace the version string.
    #17
  • !
    Serials differ
    SOA · The nameservers serve different versions of the zone: 2017060152 on ns1020.ui-dns.org (185.132.35.20), ns1020.ui-dns.org (2607:f1c0:fe:53:185:132:35:20), ns1038.ui-dns.com (185.132.34.38), ns1038.ui-dns.com (2607:f1c0:fe:53:185:132:34:38), ns1064.ui-dns.de (185.132.32.64), ns1064.ui-dns.de (2607:f1c0:fe:53:185:132:32:64), ns1071.ui-dns.org (185.132.35.71), ns1071.ui-dns.org (2607:f1c0:fe:53:185:132:35:71), ns1104.ui-dns.biz (185.132.33.104), ns1104.ui-dns.biz (2607:f1c0:fe:53:185:132:33:104), ns1112.ui-dns.com (185.132.34.112), ns1112.ui-dns.com (2607:f1c0:fe:53:185:132:34:112), ns1120.ui-dns.de (185.132.32.120), ns1120.ui-dns.de (2607:f1c0:fe:53:185:132:32:120), ns1124.ui-dns.biz (185.132.33.124), ns1124.ui-dns.biz (2607:f1c0:fe:53:185:132:33:124); 2418012621 on cruz.ns.cloudflare.com (108.162.192.88), cruz.ns.cloudflare.com (173.245.58.88), cruz.ns.cloudflare.com (172.64.32.88), cruz.ns.cloudflare.com (2606:4700:50::adf5:3a58), cruz.ns.cloudflare.com (2a06:98c1:50::ac40:2058), cruz.ns.cloudflare.com (2803:f800:50::6ca2:c058), roman.ns.cloudflare.com (172.64.35.103), roman.ns.cloudflare.com (108.162.195.103), roman.ns.cloudflare.com (162.159.44.103), roman.ns.cloudflare.com (2803:f800:50::6ca2:c367), roman.ns.cloudflare.com (2a06:98c1:50::ac40:2367), roman.ns.cloudflare.com (2606:4700:58::a29f:2c67). This is normal for a few minutes after a change; if it lasts, zone transfers to the secondaries are failing.
    #22
  • !
    Signed but not delegated securely
    DNSSEC · The zone is signed but the parent has no DS record, so the signatures are not used. Publish the DS record at your registrar.
    #27

Recent checks

!

Full report

Domain & DNS report for mrsskin.fr ›

Mail

fail

23 passed 4 warn 1 failed

Areas

✓SPF ✗DMARC !DKIM !DNSSEC ✓MX !TLS iBIMI

Problems

  • ✗
    Policy: none (monitoring only)
    DMARC · DMARC policy is set to 'none', which only monitors but doesn't protect against spoofing. Consider upgrading to 'quarantine' or ideally 'reject'.
    #4
  • !
    No key under common selectors
    DKIM · The _domainkey name exists but no DKIM key was found under the common selectors. Selectors are provider-specific; check yours with -selector.
    #7
  • !
    Signed, but no DS at parent
    DNSSEC · The zone is signed (DNSKEY present) but the parent has no DS record, so the chain of trust is incomplete. Publish the DS record at your registrar.
    #8
  • !
    Not configured
    TLS · MTA-STS is not configured, so other mail servers fall back to unencrypted delivery when TLS fails or is stripped by an attacker. Publish a _mta-sts TXT record and a policy at https://mta-sts.<domain>/.well-known/mta-sts.txt.
    #32
  • !
    Not configured
    TLS · MTA-STS or DANE is used without TLS-RPT, so you get no reports when senders fail to deliver because of TLS problems. Publish _smtp._tls TXT "v=TLSRPTv1; rua=mailto:...".
    #35

Recent checks

✗

Full report

Mail report for mrsskin.fr ›