SurfaceMap › h › hebban.nl

hebban.nl

Checked 2026-10-21 21:21 UTC · first added 2026-10-21

!Check could not complete

Domain & DNS

error

23 passed 2 warn 0 failed 2 errors

lookups failed for dnssec, tld; results are incomplete

Areas

!Registration iDelegation ✓Nameservers ✓SOA iDNSSEC !Records

Problems

!

TLD not DNSSEC-signed

Registration · The root has no DS record for .nl, so DNSSEC for domains under it can't be validated.

#2
!

Very low TTLs

Records · These records have a TTL below 5m, causing extra queries and slower lookups: A (1m), AAAA (1m), MX (1m). Low TTLs are useful just before a planned change. The NS TTL at the parent is 1h and in the zone 1d; resolvers may use either.

#32

Recent checks

!

Full report

Domain & DNS report for hebban.nl ›

Mail

error

21 passed 4 warn 1 failed 1 errors

lookups failed for mta-sts; results are incomplete

Areas

!SPF ✗DMARC !DKIM ✓DNSSEC !MX iTLS iBIMI

Problems

✗

Policy: none (monitoring only)

DMARC · DMARC policy is set to 'none', which only monitors but doesn't protect against spoofing. Consider upgrading to 'quarantine' or ideally 'reject'.

#4
!

7 of 10 DNS lookups, with problems

SPF · SPF record needs 7 DNS lookups (limit is 10). Problems found: include:spf.whih.nl could not be resolved: DNS query for spf.whih.nl failed: read udp 46.225.38.91:59472->8.8.8.8:53: i/o timeout; include:smtpeter.com could not be resolved: DNS query for smtpeter.com failed: read udp 46.225.38.91:44644->8.8.8.8:53: i/o timeout.

#2
!

Hosts without IPv6

MX · The following MX hosts could not be resolved to IPv6 addresses: hebban-nl.mail.protection.outlook.com

#11
!

Single MX host, no backup

MX · Only one MX record found. For better email reliability, consider adding at least one backup MX server.

#12
!

1024-bit DKIM key

DKIM · 1024-bit RSA keys are the minimum and are considered weak today: mail (1024 bits). Rotate to a 2048-bit key.

#23

Recent checks

!

Full report

Mail report for hebban.nl ›