SurfaceMap › s › soufun.com

soufun.com

Checked 2026-10-22 10:46 UTC · first added 2026-10-21
✗Problems found Score 26 of 100

Domain & DNS

fail

19 passed 3 warn 3 failed

Areas

iRegistration !Delegation ✗Nameservers ✗SOA !DNSSEC iRecords

Problems

  • ✗
    Nameservers not responding
    Nameservers · These addresses did not answer, so resolvers waste time on timeouts: ns.soufun.com (124.251.87.78): read udp 46.225.38.91:51329->124.251.87.78:53: i/o timeout; ns3.soufun.com (111.230.83.187): read udp 46.225.38.91:36937->111.230.83.187:53: i/o timeout.
    #14
  • ✗
    Open recursion
    Nameservers · These nameservers resolve names for anyone, which makes them usable for DNS amplification attacks and cache poisoning: ns1.soufun.com (2403:a200:a200:11fe:a:1803:2000:0). Disable recursion on authoritative servers.
    #16
  • ✗
    Invalid contact address
    SOA · The SOA RNAME "root\\@soufun.com" contains an @; it must be written with a dot instead (hostmaster.example.com).
    #25
  • !
    Glue differs from the zone
    Delegation · The addresses at the parent (glue) differ from the addresses in the zone: ns1.soufun.com (glue 124.251.47.105, zone 124.251.47.105, 2403:a200:a200:11fe:a:1803:2000:0). Update the glue at your registrar.
    #8
  • !
    Unusual SOA timers
    SOA · refresh 15m is outside 20m–1d; expire 12h is shorter than 7d; secondaries stop answering too soon when the primary is down. Current values: refresh 15m, retry 10m, expire 12h, negative TTL 10m.
    #23
  • !
    Not signed
    DNSSEC · The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Recent checks

✗

Full report

Domain & DNS report for soufun.com ›

Mail

fail

14 passed 5 warn 2 failed

Areas

✗SPF ✗DMARC !DKIM !DNSSEC !MX !TLS iBIMI

Problems

  • ✗
    No DMARC record
    DMARC · No DMARC record was found for this domain. DMARC is essential for preventing email spoofing. Add a DMARC record with p=reject or at least p=quarantine.
    #5
  • ✗
    Syntax errors
    SPF · Receivers reject the whole SPF record (permerror) because of: unknown mechanism "ipv4:192.155.91.4".
    #25
  • !
    No key under common selectors
    DKIM · The _domainkey name exists but no DKIM key was found under the common selectors. Selectors are provider-specific; check yours with -selector.
    #7
  • !
    Not enabled
    DNSSEC · DNSSEC is not enabled for this domain. Consider enabling DNSSEC to protect against DNS spoofing attacks.
    #8
  • !
    Hosts without IPv6
    MX · The following MX hosts could not be resolved to IPv6 addresses: mailmx.soufun.com, mailmx1.soufun.com
    #11
  • !
    Reverse DNS does not match
    MX · The PTR name of these addresses does not resolve back to the same address: 124.251.47.100 -> mail.soufun.com, 124.251.47.100 -> mail.soufun.com.
    #30
  • !
    Not configured
    TLS · MTA-STS is not configured, so other mail servers fall back to unencrypted delivery when TLS fails or is stripped by an attacker. Publish a _mta-sts TXT record and a policy at https://mta-sts.<domain>/.well-known/mta-sts.txt.
    #32

Recent checks

✗

Full report

Mail report for soufun.com ›