Domain health - watheersternu.nl

watheersternu.nl

3 / 10 passed - 0 critical · 7 warnings

7things to fix

!No IPv6 (AAAA) record.▸

Add an AAAA record with your server's IPv6 address, or switch on IPv6 at your host or CDN (on Cloudflare it's on by default for proxied records).

!DMARC is p=none (monitor only) - tighten to quarantine/reject.▸

Use the aggregate reports to confirm your legitimate senders pass, then raise the policy to p=quarantine and finally p=reject. Read the guide →

!DNSSEC not enabled - enable it to prevent DNS spoofing.▸

Turn on DNSSEC at your DNS host, then publish the DS record at your registrar to complete the chain of trust. Read the guide →

!No HSTS header - add Strict-Transport-Security.▸

Send Strict-Transport-Security: max-age=31536000; includeSubDomains on every response, at your server or CDN edge. Read the guide →

!No Content-Security-Policy header.▸

Add a Content-Security-Policy. Start in Content-Security-Policy-Report-Only mode, refine it, then enforce. Read the guide →

!Missing X-Content-Type-Options: nosniff.▸

Add the header X-Content-Type-Options: nosniff to stop browsers MIME-sniffing responses. Read the guide →

!HTTP does not redirect to HTTPS.▸

Redirect all HTTP traffic to HTTPS with a 301. Most hosts and CDNs have a one-click 'Always use HTTPS' setting.

Keep an eye on watheersternu.nl

We re-check it every day and email you the moment something changes — a check starts failing, a fix lands, or the certificate is about to expire.

Also send me a weekly summary

Double opt-in · unsubscribe anytime · we only email you about this domain.

DNS records

A35.214.187.90

AAAAnone

Nameserversns2.siteground.net.
ns1.siteground.net.

MX10 mx10.antispam.mailspamprotection.com.
20 mx20.antispam.mailspamprotection.com.
30 mx30.antispam.mailspamprotection.com.

SOAns1.siteground.net. admins.siteground.com. 87 10800 3600 1209600 3600

Mail authentication

SPFv=spf1 +a +mx include:watheersternu.nl.spf.auto.dnssmarthost.net ~allPass

DMARCpolicy: p=noneWarn

DKIMselectors: defaultFound

DNSSEC

ZoneOff

IP intelligence

Primary IP35.214.187.90

Reverse DNS90.187.214.35.bc.googleusercontent.com.

TLS certificate

CertificateLet's Encrypt · expires 2026-10-18 (47d)Valid

HTTP security headers

HTTPS redirectNo

HSTSNo

CSPNo

X-Content-TypeNo

X-Frame-OptionsNo

Referrer-PolicyNo

Permissions-PolicyNo

Servernginx