~/d/ah.nl

// ah.nl

Live audit across 8 checks. Cached 24h · generated less than a minute ago.

domain_grade
B
good
82
/ 100 · across 8 checks
// points lost on:
security headers −12 whois −3 dnssec −3
[ save & monitor ]
SSL Certificate
[ OK ]
Valid for 128 more days.
Issued by Sectigo Public Server Authentication CA OV E36 · 128 days left · TLSv1.3
→ open SSL Certificate tool
DMARC Policy
[ OK ]
Strict DMARC policy enforced. Spoofed mail is rejected.
v=DMARC1; p=reject; rua=mailto:[email protected];
→ open DMARC Policy tool
SPF Record
[ OK ]
Strict SPF (-all). Unauthorized senders are rejected.
7 lookups · all=-all
→ open SPF Record tool
MX Records
[ OK ]
MX configured. Detected provider: Microsoft 365.
10 ah-nl.mail.protection.outlook.com
→ open MX Records tool
Name Servers
[ OK ]
6 authoritative nameservers
a1-249.akam.net · a14-64.akam.net · a6-65.akam.net
WHOIS
[ WARN ]
Could not determine expiration date.
Registrar: KPN B.V. · expires —
→ open WHOIS tool
Security Headers
[ CRIT ]
Weak security posture (17/100) — missing: CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
Score 17/100
→ open Security Headers tool
DNSSEC
[ WARN ]
No DNSSEC — domain is not signed.
Not signed
→ open DNSSEC tool
[ embed_grade_badge ]
grade badge
Domain grade: B — good
markdown (github readme)
[![DomBrains grade](https://dombrains.com/badge/ah.nl/grade.svg)](https://dombrains.com/d/ah.nl)
html (any webpage)
<a href="https://dombrains.com/d/ah.nl"><img src="https://dombrains.com/badge/ah.nl/grade.svg" alt="DomBrains grade: B"></a>
// re-queries our scoring engine · cached 1h at the edge · backlinks to this profile page
[ per_check_badges ]
ssl badge <img src="https://dombrains.com/badge/ah.nl/ssl">
dmarc badge <img src="https://dombrains.com/badge/ah.nl/dmarc">
spf badge <img src="https://dombrains.com/badge/ah.nl/spf">
mx badge <img src="https://dombrains.com/badge/ah.nl/mx">
dnssec badge <img src="https://dombrains.com/badge/ah.nl/dnssec">
security_headers badge <img src="https://dombrains.com/badge/ah.nl/security_headers">
// Snapshot freshness: this page is cached 24h. To force a re-scan, run any tool above with the same domain — that always queries live.