How privacy works

Private lookups are not added to public searches, stored reports or change history. This does not remove a report that was already public. Your choice lasts for this browser session.

Who hosts news.ycombinator.com?

Answer

news.ycombinator.com uses the M5 Computer Security network; the hosting company is unconfirmed.

Likely🇺🇸 United StatesIPv6

Checked 2 hours ago from Cloudflare ZRH in 498 ms. This is a saved result.

Your next steps

What needs attention

Prioritized observations from this check. Review changes with whoever manages the website.

  1. Improve

    DMARC is in monitoring mode

    The published p=none policy does not request rejection or quarantine of failing messages.

    Next step: Review DMARC reports and SPF/DKIM alignment before considering a stricter policy.

  2. Improve

    Review browser security headers

    Content-Security-Policy, Referrer-Policy, Permissions-Policy did not meet the conservative header checks. This is not a complete security audit.

    Next step: Review these headers with the site developer and test policy changes before enforcing them.

  3. Good to know

    Only the network operator is identified

    The visible IP network is known, but no hosting-specific evidence confirms the company or reseller serving the site.

    Next step: Use the evidence as a network attribution and verify the hosting provider with the website owner if needed.

Evidence by layer

The company operating a network and the company selling the hosting can be different.

Network operators

M5HOSTING - M5 Computer Security, US

Network ownership alone does not confirm the retail hosting provider.

How we know

  • 209.216.230.207 belongs to AS21581 (M5HOSTING - M5 Computer Security, US), reverse DNS news.ycombinator.com
  • 2606:7100:1:67::26 belongs to AS21581 (M5HOSTING - M5 Computer Security, US)

Servers

The addresses the name points to and the networks that own them.

  • 209.216.230.207M5 Computer SecurityNetwork AS21581 (M5HOSTING - M5 Computer Security, US)🇺🇸 Registered in United States, block 209.216.230.0/24Reverse DNS news.ycombinator.com
  • 2606:7100:1:67::26M5 Computer SecurityNetwork AS21581 (M5HOSTING - M5 Computer Security, US)🇺🇸 Registered in United States, block 2606:7100::/32

Reachable over IPv6.

Website

What the site answered when we visited its home page.

Status
200 OK
Address
https://news.ycombinator.com/
Page title
Hacker News
HTTPS
Yes
HTTP/3
Not advertised
Response time
492 ms from Cloudflare ZRH

Security headers

C
  • Strict-Transport-Security
  • Content-Security-Policy (too weak)
  • Clickjacking protection
  • X-Content-Type-Options
  • Referrer-Policy (too weak)
  • Permissions-Policy

DNS

Who answers for the domain name, and its records.

DNS provider
Amazon Route 53
Name servers
ns-1411.awsdns-48.org
ns-1914.awsdns-47.co.uk
ns-225.awsdns-28.com
ns-556.awsdns-05.net
Zone
ycombinator.com
DNSSEC
Not signed
Certificates
Any certificate authority (no CAA record)
All DNS records (23)
TypeNameValueTTL
Anews.ycombinator.com209.216.230.2071
AAAAnews.ycombinator.com2606:7100:1:67::261
NSycombinator.comns-1411.awsdns-48.org172800
NSycombinator.comns-1914.awsdns-47.co.uk172800
NSycombinator.comns-225.awsdns-28.com172800
NSycombinator.comns-556.awsdns-05.net172800
MXycombinator.com10 aspmx.l.google.com300
MXycombinator.com20 alt1.aspmx.l.google.com300
MXycombinator.com20 alt2.aspmx.l.google.com300
MXycombinator.com30 aspmx4.googlemail.com300
TXTycombinator.comMS=ms37374900300
TXTycombinator.comWayback verify for support request 741082300
TXTycombinator.comZOOM_verify_2ndw8KZxSRa8PT8NmdyXvw300
TXTycombinator.comanthropic-domain-verification-0qe2ww=yK576oHdDgyTcXgkPfj1KXgGt300
TXTycombinator.comapple-domain-verification=WG0sP5Alm7N6h1Te300
TXTycombinator.comca3-4861b957e83847c188e45d04ec314ee3300
TXTycombinator.comdropbox-domain-verification=asc63coma4mv300
TXTycombinator.comgoogle-site-verification=GJKdQskycEclAGPua3yXB9m_nVhxbrsVps_y-t9SXV0300
TXTycombinator.comgoogle-site-verification=KsI69Y_jEVkp4eXqSQ9R9gwxjIpZznvuvrus6UolB9Y300
TXTycombinator.comgoogle-site-verification=rivq8jKu6AADGtbbEzJhmOpcqq08B7QxIzXxYV8DtyU300
TXTycombinator.comopenai-domain-verification=dv-QbhxxK0G0JK0dnyZ4YTsNAfw300
TXTycombinator.comrippling-domain-verification=a660f7a4ab77a3de300
TXTycombinator.comv=spf1 include:_spf.google.com include:mailgun.org a:rsweb1-36.investorflow.com include:_spf.createsend.com include:servers.mcsv.net -all300

Email

Partly protected: DMARC is set to monitoring only.

Mailbox provider
Google Workspace
Mail servers
10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 aspmx4.googlemail.com
Allowed senders
Google WorkspaceMailgunCampaign MonitorMailchimp
SPF
Mail from any other server is rejected.
DMARC
Monitoring only — spoofed mail is still delivered.
MTA-STS
Not enabled
SPF and DMARC records

v=spf1 include:_spf.google.com include:mailgun.org a:rsweb1-36.investorflow.com include:_spf.createsend.com include:servers.mcsv.net -all

v=DMARC1; p=none; pct=100; sp=none; ruf=mailto:dmarc-reports+f@ycombinator.com; rua=mailto:dmarc-reports@ycombinator.com,mailto:fbaf106b@dmarc.mailgun.org; aspf=r;

Domain registration

Registrar
Gandi SAS
Registered
20 Mar 2005 (21 years ago)
Paid until
20 Mar 2027 (in 143 days)
Last changed
13 Feb 2026
Status
Transfer lock (registrar)
DNSSEC at registry
No
Source
rdap.verisign.com

Connected services

Verification records in DNS show the domain is linked to these accounts.

Microsoft 365ZoomAppleDropboxGoogle Search ConsoleOpenAI

Observed changes

A compact record of what changed between public checks. Rechecks happen only when someone requests them.

History starts with saved public observations. No earlier changes are inferred.

Last 10 searches

Domain NameHost
byd.comUnknown
tesla.comAkamai (host hidden)
x.comFastly (host hidden)
apple.comAkamai (host hidden)
hackernews.comUnknown
seo.comKinsta
claude.aiUnknown
dominom.comUnknown
divinative.comCloudflare (host hidden)

View the last 500 searches