Domain health - jons.nl
D
6things to fix
✗Multiple SPF records - receivers will reject; keep exactly one.▸
Merge every v=spf1 entry into a single TXT record. Combine the include: statements from each provider into one line ending in -all. Read the guide →
✗No DMARC record - domain is open to spoofing.▸
Publish a TXT record at _dmarc starting with v=DMARC1; p=none; rua=mailto:you@yourdomain, then tighten it to reject once senders pass. Read the guide →
!No IPv6 (AAAA) record.▸
Add an AAAA record with your server's IPv6 address, or switch on IPv6 at your host or CDN (on Cloudflare it's on by default for proxied records).
!DNSSEC not enabled - enable it to prevent DNS spoofing.▸
Turn on DNSSEC at your DNS host, then publish the DS record at your registrar to complete the chain of trust. Read the guide →
!No Content-Security-Policy header.▸
Add a Content-Security-Policy. Start in Content-Security-Policy-Report-Only mode, refine it, then enforce. Read the guide →
!Missing X-Content-Type-Options: nosniff.▸
Add the header X-Content-Type-Options: nosniff to stop browsers MIME-sniffing responses. Read the guide →
Keep an eye on jons.nl
We re-check it every day and email you the moment something changes — a check starts failing, a fix lands, or the certificate is about to expire.
Double opt-in · unsubscribe anytime · we only email you about this domain.
DNS records
Mail authentication
DNSSEC
IP intelligence
TLS certificate
HTTP security headers
Add this badge to your site
<a href="https://nattvakt.com/report/jons.nl"><img src="https://nattvakt.com/badge/jons.nl.svg" alt="Domain health"></a>