← Check another domain

ycombinator.com

60/100

C

Scanned 2026-05-12

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	none	5/25
SPF record	ok	10/10
DKIM selector	found	10/10
TLS certificate	ok	20/20
WHOIS integrity	whois rate limited	5/10
Subdomain takeover	vulnerable	10/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	unsigned	0/5

Recommendations

Upgrade DMARC from p=none to p=quarantine or p=reject at _dmarc.ycombinator.com to block spoofed email
Publish MTA-STS: add _mta-sts.ycombinator.com TXT and host a policy at https://mta-sts.ycombinator.com/.well-known/mta-sts.txt
Enable DNSSEC on ycombinator.com — DS records must be published to the com zone by your registrar
One or more ycombinator.com subdomains may be vulnerable to takeover — audit and remove dangling DNS entries

Details

Area	Detail
DMARC	v=DMARC1; p=none; pct=100; sp=none; ruf=mailto:dmarc-reports+f@ycombinator.com; rua=mailto:dmarc-reports@ycombinator.com; aspf=r;
SPF	v=spf1 include:_spf.google.com include:mailgun.org a:rsweb1-36.investorflow.com include:_spf.createsend.com include:servers.mcsv.net -all
DKIM selectors	google
TLS certificate	Ok (241 days remaining) — CN=Amazon RSA 2048 M04,O=Amazon,C=US
WHOIS registrar	—
WHOIS expires	—
Subdomains (12 subdomains scanned, 1 at risk)	12 found
DNSSEC	Unsigned