SurfaceMap › t › thehackernews.com

thehackernews.com

Checked 2026-10-22 11:02 UTC · first added 2026-10-21

✗Problems found Score 65 of 100

Domain & DNS

warn

27 passed 2 warn 0 failed

Areas

iRegistration iDelegation !Nameservers ✓SOA !DNSSEC ✓Records

Problems

!

Software version disclosed

Nameservers · These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: kurt.ns.cloudflare.com: "2026.10.2"; maria.ns.cloudflare.com: "2026.10.2". Hide or replace the version string.

#17
!

Signed but not delegated securely

DNSSEC · The zone is signed but the parent has no DS record, so the signatures are not used. Publish the DS record at your registrar.

#27

Recent checks

!

Full report

Domain & DNS report for thehackernews.com ›

Mail

fail

25 passed 3 warn 2 failed

Areas

✓SPF ✗DMARC ✓DKIM !DNSSEC !MX ✗TLS iBIMI

Problems

✗

Policy: none (monitoring only)

DMARC · DMARC policy is set to 'none', which only monitors but doesn't protect against spoofing. Consider upgrading to 'quarantine' or ideally 'reject'.

#4
✗

Policy not reachable

TLS · The MTA-STS record exists but the policy could not be fetched, so senders ignore MTA-STS: Get "https://mta-sts.thehackernews.com/.well-known/mta-sts.txt": dial tcp: lookup mta-sts.thehackernews.com on 127.0.0.53:53: no such host.

#33
!

Signed, but no DS at parent

DNSSEC · The zone is signed (DNSKEY present) but the parent has no DS record, so the chain of trust is incomplete. Publish the DS record at your registrar.

#8
!

More than 5 MX records

MX · Found 7 MX records, which is more than the recommended maximum of 5. Too many MX records may indicate a misconfiguration.

#13
!

Not configured

TLS · MTA-STS or DANE is used without TLS-RPT, so you get no reports when senders fail to deliver because of TLS problems. Publish _smtp._tls TXT "v=TLSRPTv1; rua=mailto:...".

#35

Recent checks

✗

Full report

Mail report for thehackernews.com ›