SurfaceMap › p › protestantsekerk.nl

protestantsekerk.nl

Checked 2026-10-21 21:24 UTC · first added 2026-10-21
!Passed with warnings Score 82 of 100

Domain & DNS

warn

23 passed 3 warn 0 failed

Areas

iRegistration !Delegation !Nameservers !SOA iDNSSEC iRecords

Problems

  • !
    No IPv6
    Delegation · None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13
  • !
    Software version disclosed
    Nameservers · These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns1.pknhosting.nl: "9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.15"; ns2.pknhosting.nl: "9.11.36-RedHat-9.11.36-11.el8_9". Hide or replace the version string.
    #17
  • !
    Unusual SOA timers
    SOA · retry 1h should be shorter than refresh 1h. Current values: refresh 1h, retry 1h, expire 14d, negative TTL 1d.
    #23

Recent checks

!

Full report

Domain & DNS report for protestantsekerk.nl ›

Mail

warn

30 passed 3 warn 0 failed

Areas

✓SPF !DMARC !DKIM ✓DNSSEC !MX iTLS iBIMI

Problems

  • !
    Policy: quarantine
    DMARC · DMARC policy is set to 'quarantine'. Consider upgrading to 'reject' for stronger protection once you've verified legitimate emails are passing authentication.
    #4
  • !
    Single MX host, no backup
    MX · Only one MX record found. For better email reliability, consider adding at least one backup MX server.
    #12
  • !
    1024-bit DKIM key
    DKIM · 1024-bit RSA keys are the minimum and are considered weak today: k1 (1024 bits), s2 (1024 bits). Rotate to a 2048-bit key.
    #23

Recent checks

!

Full report

Mail report for protestantsekerk.nl ›