Domain health - valid.mldsa44.dnstest.dev
D
6things to fix
✗No DMARC record - domain is open to spoofing.▸
Publish a TXT record at _dmarc starting with v=DMARC1; p=none; rua=mailto:you@yourdomain, then tighten it to reject once senders pass. Read the guide →
!No IPv6 (AAAA) record.▸
Add an AAAA record with your server's IPv6 address, or switch on IPv6 at your host or CDN (on Cloudflare it's on by default for proxied records).
!No SPF record for a mail-enabled domain.▸
Publish one SPF TXT record listing your senders, e.g. v=spf1 include:_spf.yourprovider.com -all. Read the guide →
!No HSTS header - add Strict-Transport-Security.▸
Send Strict-Transport-Security: max-age=31536000; includeSubDomains on every response, at your server or CDN edge. Read the guide →
!No Content-Security-Policy header.▸
Add a Content-Security-Policy. Start in Content-Security-Policy-Report-Only mode, refine it, then enforce. Read the guide →
!Missing X-Content-Type-Options: nosniff.▸
Add the header X-Content-Type-Options: nosniff to stop browsers MIME-sniffing responses. Read the guide →
Keep an eye on valid.mldsa44.dnstest.dev
We re-check it every day and email you the moment something changes — a check starts failing, a fix lands, or the certificate is about to expire.
Double opt-in · unsubscribe anytime · we only email you about this domain.
DNS records
Mail authentication
DNSSEC
IP intelligence
TLS certificate
HTTP security headers
Add this badge to your site
<a href="https://nattvakt.com/report/valid.mldsa44.dnstest.dev"><img src="https://nattvakt.com/badge/valid.mldsa44.dnstest.dev.svg" alt="Domain health"></a>