~/d/hema.nl

// hema.nl

Live audit across 8 checks. Cached 24h · generated less than a minute ago.

domain_grade
B
good
82
/ 100 · across 8 checks
// points lost on:
dmarc −10 security headers −5 whois −3
[ save & monitor ]
SSL Certificate
[ OK ]
Valid for 65 more days.
Issued by E8 · 65 days left · TLSv1.2
→ open SSL Certificate tool
DMARC Policy
[ WARN ]
DMARC record exists but policy is 'none' — monitoring only, not enforcing. Switch to 'quarantine' or 'reject' to block spoofing.
v=DMARC1;p=none;rua=mailto:[email protected],mailto:[email protected];ruf=mailto:[email protected],mailto:[email protected];fo=1;
→ open DMARC Policy tool
SPF Record
[ OK ]
Strict SPF (-all). Unauthorized senders are rejected.
5 lookups · all=-all
→ open SPF Record tool
MX Records
[ OK ]
MX configured. Detected provider: Microsoft 365.
50 hema-nl.mail.protection.outlook.com
→ open MX Records tool
Name Servers
[ OK ]
2 authoritative nameservers
ns01.brandshelter.com · ns02.brandshelter.net
WHOIS
[ WARN ]
Could not determine expiration date.
Registrar: Novagraaf Nederland B.V. · expires —
→ open WHOIS tool
Security Headers
[ WARN ]
Below average (45/100) — missing: HSTS, CSP, Permissions-Policy
Score 45/100
→ open Security Headers tool
DNSSEC
[ OK ]
Fully DNSSEC-signed — DNSKEY and DS both present.
Fully signed
→ open DNSSEC tool
[ embed_grade_badge ]
grade badge
Domain grade: B — good
markdown (github readme)
[![DomBrains grade](https://dombrains.com/badge/hema.nl/grade.svg)](https://dombrains.com/d/hema.nl)
html (any webpage)
<a href="https://dombrains.com/d/hema.nl"><img src="https://dombrains.com/badge/hema.nl/grade.svg" alt="DomBrains grade: B"></a>
// re-queries our scoring engine · cached 1h at the edge · backlinks to this profile page
[ per_check_badges ]
ssl badge <img src="https://dombrains.com/badge/hema.nl/ssl">
dmarc badge <img src="https://dombrains.com/badge/hema.nl/dmarc">
spf badge <img src="https://dombrains.com/badge/hema.nl/spf">
mx badge <img src="https://dombrains.com/badge/hema.nl/mx">
dnssec badge <img src="https://dombrains.com/badge/hema.nl/dnssec">
security_headers badge <img src="https://dombrains.com/badge/hema.nl/security_headers">
// Snapshot freshness: this page is cached 24h. To force a re-scan, run any tool above with the same domain — that always queries live.