TRENCHCOAT
Website blueprint · 14 h ago

thehackernews.com

“The Hacker News | #1 Trusted Source for Cybersecurity News”

Template-written 33 evidence items REA analysed 8 scripts
What this means for you

The Hacker News talked to 7 outside services on a first visit, including 4 that measure visits or show ads.E10E12E9E13

  • Tech check: the site claims live data / analytics and a working app / platform, and its public page shows matching evidence.E31E32E26E26
  • Tech check: the site mentions ai / agents, but we found nothing behind it in what its public page loads.E30
  • Before you click anything, the page loads analytics or ad services: Google Analytics / Tag Manager and Google Ads / DoubleClick.E10E12E9E13
  • 4 cookies were set in your browser, all by the site itself.E14E15E16E17

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Nothing found on the public page

AI / agents

“…inars Expert Insights Awards   CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Ta…”E30

No matching code, calls or services in what loaded for us.

Evidence found

Live data / analytics

“…the world, including some in Australia, the Australian Signals Directorate (ASD) says. The agency's operators gained…”E31

Calls to its own backend: /ga/cE26

Evidence found

A working app / platform

“…cator for Android version 6.2606.4246, so anyone using the app should update. In the researchers' tests, the tokens g…”E32

Calls to its own backend: /ga/cE26

Calls its own backend /ga/cE26
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What it is

  • The Internet Archive first saved this site on 2010-11-01 (5839 days ago).E33
  • The site describes itself as: “The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach reports, expert analy”E2
  • In your browser it can ask to send you notifications, installs a background script (offline use, push messages), stores data in your browser's built-in database and saves small bits of data in your browser.E22E23E24E25
  • It has sections such as /p, /search, /expert-insights, /2026 and /videos.E29
  • While loading, it called 1 endpoint on its own servers, such as /ga/c.E26

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 3
www.google-analytics.comGoogle Analytics / Tag Manager: Google's visitor analytics and tag loader 2×E10
analytics.google.comGoogle Analytics / Tag Manager: Google's visitor analytics and tag loader 1×E12
www.googletagmanager.comGoogle Analytics / Tag Manager: Google's visitor analytics and tag loader 1×E9
AdvertisingShow ads and follow you across sites to target them. 1
stats.g.doubleclick.netGoogle Ads / DoubleClick: Google's ad network (serving and measuring ads) 1×E13
Not identifiedServices we don't have in our list yet. 3
blogger.googleusercontent.comnot identified 59×E6
www.google.comnot identified 3×E11
www.blogger.comnot identified 1×E7

How key features work

Loading its content

Its content loads from its own API while you browse (/ga/c).E26

/ga/c

Measuring what you do

Visits and clicks are measured with Google Analytics / Tag Manager and Google tag (gtag.js) (found in its traffic or its code).E10E12E9E21

Google Analytics / Tag ManagerGoogle tag (gtag.js)

How ads get picked

Ads are chosen through ad networks and exchanges (Google Ads / DoubleClick); they receive details about your visit to bid on the ad space.E13

Google Ads / DoubleClick

Saving data on your device

It saves data in your browser (a service worker, IndexedDB (a browser database), localStorage and sessionStorage), so some things persist between visits.E23E24E25E18

service_workerindexeddblocal_storagelocalStoragesessionStorage

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
_gcl_auE14thehackernews.com about 90 daysthe site
_ga_ZDZCZPGJ7NE15thehackernews.com about 400 daysthe site
_gaE16thehackernews.com about 400 daysthe site
_ga_3VWMMV8X94E17thehackernews.com about 400 daysthe site

localStorageE18: _fq, _0, _gcl_ls, _iid, _s

sessionStorageE19: _lpv, _dh, _spv, _dd

IndexedDBE20: _x

Pages and API calls

Pages it links to

//p/search/expert-insights/2026/videos

Endpoints

Called while loading (seen) or named in the code (code).

thehackernews.com/ga/cseenE26
/push/subscribecodeE27
www.google-analytics.com/g/collectcodeE28

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: The Hacker News | #1 Trusted Source for Cybersecurity News
page title · https://thehackernews.com/
E2
Page description: The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach reports, expert analysis, and a
page description · https://thehackernews.com/
E3
Site name: The Hacker News
page site_name · https://thehackernews.com/
E4
Main heading: The Hacker News | #1 Trusted Source for Cybersecurity News
page h1 · https://thehackernews.com/
E5
6 request(s) to thehackernews.com
types: 2 script, 2 font, 1 document
GET https://thehackernews.com/ · script · 6 requests · network recording
E6
59 request(s) to blogger.googleusercontent.com
types: 59 image
GET https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgpv5Y6QePil1MjgPiKuj9qVcOEzN1QdpjV55lFLD7Nyll1Wy1-rDkPzUxoUxZBjyhD7… · image · 59 requests · network recording
E7
1 request(s) to www.blogger.com
types: 1 stylesheet
GET https://www.blogger.com/dyncss/4802841478634147276/authorization.css · stylesheet · network recording
E8
2 request(s) to files.thehackernews.com
types: 2 script
GET https://files.thehackernews.com/assets/f.min.js · script · 2 requests · network recording
E9
1 request(s) to www.googletagmanager.com
types: 1 script
GET https://www.googletagmanager.com/gtag/js · script · network recording
E10
2 request(s) to www.google-analytics.com
types: 2 fetch
GET https://www.google-analytics.com/g/collect · fetch · 2 requests · network recording
E11
3 request(s) to www.google.com
types: 3 fetch
GET https://www.google.com/measurement/conversion · fetch · 3 requests · network recording
E12
1 request(s) to analytics.google.com
types: 1 fetch
GET https://analytics.google.com/g/collect · fetch · network recording
E13
1 request(s) to stats.g.doubleclick.net
types: 1 ping
GET https://stats.g.doubleclick.net/g/collect · ping · network recording
E14
Cookie '_gcl_au' set for thehackernews.com
kept for about 90 days
cookie _gcl_au on thehackernews.com · value not stored
E15
Cookie '_ga_ZDZCZPGJ7N' set for thehackernews.com
kept for about 400 days
cookie _ga_ZDZCZPGJ7N on thehackernews.com · value not stored
E16
Cookie '_ga' set for thehackernews.com
kept for about 400 days
cookie _ga on thehackernews.com · value not stored
E17
Cookie '_ga_3VWMMV8X94' set for thehackernews.com
kept for about 400 days
cookie _ga_3VWMMV8X94 on thehackernews.com · value not stored
E18
localStorage: 5 key(s) saved in your browser
localStorage keys: _fq, _0, _gcl_ls, _iid, _s · values not stored
E19
sessionStorage: 4 key(s) saved in your browser
sessionStorage keys: _lpv, _dh, _spv, _dd · values not stored
E20
IndexedDB: 1 key(s) saved in your browser
IndexedDB keys: _x · values not stored
E21
Google tag (gtag.js) found in the code
thehackernews.com/ (page HTML) @ 574:190 · “googletagmanager.com/gtag” · pattern scan
E22
Uses the browser ability: notifications
can ask to send you notifications
thehackernews.com/thn-push.js @ 1:5574 · “Notification.requestPermission” · pattern scan
E23
Uses the browser ability: service_worker
installs a background script (offline use, push messages)
thehackernews.com/ (page HTML) @ 1529:76 · “serviceWorker.register(” · pattern scan
E24
Uses the browser ability: indexeddb
stores data in your browser's built-in database
files.thehackernews.com/assets/f.min.js @ 1:4281 · “indexedDB.open(” · pattern scan
E25
Uses the browser ability: local_storage
saves small bits of data in your browser
thehackernews.com/thn-push.js @ 1:286 · “localStorage.setItem(” · pattern scan
E26
The page called /ga/c on thehackernews.com (POST)
POST https://thehackernews.com/ga/c · fetch · network recording
E27
REA found the endpoint /push/subscribe
how: call:fetch
thehackernews.com/thn-push.js @ 1:1892 · “/push/subscribe” · REA analyze-web-bundle 6.4.0
E28
REA found the endpoint www.google-analytics.com/g/collect
how: call:fetch
s02-fonts.js · “www.google-analytics.com/g/collect” · REA analyze-javascript-application 6.4.0
E29
57 links to pages on the same site
page links · https://thehackernews.com/ · /, /p, /search, /expert-insights, /2026, /videos
E30
The site says: “…inars Expert Insights Awards   CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Ta…”
page text · https://thehackernews.com/ · …inars Expert Insights Awards   CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Ta…
E31
The site says: “…the world, including some in Australia, the Australian Signals Directorate (ASD) says. The agency's operators gained…”
page text · https://thehackernews.com/ · …the world, including some in Australia, the Australian Signals Directorate (ASD) says. The agency's operators gained…
E32
The site says: “…cator for Android version 6.2606.4246, so anyone using the app should update. In the researchers' tests, the tokens g…”
page text · https://thehackernews.com/ · …cator for Android version 6.2606.4246, so anyone using the app should update. In the researchers' tests, the tokens g…
E33
The Internet Archive first saved thehackernews.com on 2010-11-01 and has snapshots from 2000 different days
page web archive · https://web.archive.org/web/20101101225448/thehackernews.com

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id gGGpepXa.