4things to fix
!No IPv6 (AAAA) record.▸
Add an AAAA record with your server's IPv6 address, or switch on IPv6 at your host or CDN (on Cloudflare it's on by default for proxied records).
!No HSTS header - add Strict-Transport-Security.▸
Send Strict-Transport-Security: max-age=31536000; includeSubDomains on every response, at your server or CDN edge.
Read the guide →!No Content-Security-Policy header.▸
Add a Content-Security-Policy. Start in Content-Security-Policy-Report-Only mode, refine it, then enforce.
Read the guide →!Missing X-Content-Type-Options: nosniff.▸
Add the header X-Content-Type-Options: nosniff to stop browsers MIME-sniffing responses.
Read the guide →DNS records
A85.10.159.179
AAAAnone
Nameserversns0.transip.net.
ns1.transip.nl.
ns2.transip.eu.
MX5 leithonpark-nl.r-v1.mx.microsoft.
SOAns0.transip.net. hostmaster.transip.nl. 2026081600 86400 1800 2419200 300
Mail authentication
SPFv=spf1 include:spf.protection.outlook.com -allPass
DMARCpolicy: p=rejectPass
DKIMselectors: selector1, selector2Found
DNSSEC
Zone2 DNSKEY record(s)Signed
IP intelligence
Primary IP85.10.159.179
Reverse DNS85.10.159.179.nl.transip.me.
TLS certificate
CertificateLet's Encrypt · expires 2026-11-14 (75d)Valid
HTTP security headers
HTTPS redirectYes
HSTSNo
CSPNo
X-Content-TypeNo
X-Frame-OptionsNo
Referrer-PolicyNo
Permissions-PolicyNo
Servernginx
Add this badge to your site
<a href="https://nattvakt.com/report/leithonpark.nl"><img src="https://nattvakt.com/badge/leithonpark.nl.svg" alt="Domain health"></a>