{ "domain": "speed-hosting4you.de", "timestamp": "2026-08-24 23:20:05", "checks": { "arc_readiness": { "status": "info", "raw": "Dynamisch", "msg": "ARC \u00fcber Mail-Relay/MTA verarbeitet", "icon": "bi-link-45deg", "title": "ARC Authenticated Chain", "weight": 2, "got": 2 }, "autodiscover": { "status": "success", "raw": "SRV IMAPS: mail.sh4y.de", "msg": "Mail-Client Auto-Config verifiziert", "icon": "bi-gear-wide-connected", "title": "Autodiscover Client Config", "weight": 2, "got": 2 }, "bimi": { "status": "success", "raw": "BIMI: v=BIMI1; l=https://Speed-Hosting4you.de/images/logo/sh4ylogoemail.svg; a=https://Speed-Hosting4you.de/.well-known/certificate.pem\nVMC Cert: https://Speed-Hosting4you.de/.well-known/certificate.pem", "msg": "BIMI mit VMC konfiguriert", "icon": "bi-patch-check-fill", "title": "BIMI Logo & VMC Cert", "weight": 2, "got": 2 }, "caa": { "status": "info", "raw": "Kein CAA Record", "msg": "CAA Record nicht konfiguriert", "icon": "bi-shield-lock", "title": "CAA Certificate Auth", "weight": 2, "got": 2 }, "dane": { "status": "success", "raw": "TLSA Entry: 3 0 1 097EFB339C3A613D457E09DDB77A7D832CD16240BE18BDCA3EE883DC B5800371", "msg": "DANE TLSA Record vorhanden & verifiziert", "icon": "bi-key-fill", "title": "DANE TLSA Hash Match", "weight": 5, "got": 5 }, "dkim": { "status": "success", "raw": "Selector: default [~2352 Bit RSA]\nv=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH0Y8so9FNqmFa9ui7xNg+yOWMWqjCW+DKT5pGXhcByBXPQfBRcfQ8LpsXRUVnUNnTHO6Bv4fn3ZPScs9lMaO4bEGsxqTjmeDbccLDgopxvRFQJc+Vqizi+2BWBu/VCqfhuoW0dIo+XIllU0FvpkvnJyezrL2sygIUoLMRU1u2R2UilAWtv3AzgBdxAO2mMQYPr6wb9/zOOaUzNDbFQ2O1XtlHyzyJT9+xQL96yNHkMq5TCd7NPlTLIs66wJ1ZE1PMerZR8AR+C0wtiLkBO1AQwLMriNqHoNfaW4HHT16rtCPcpPJHwmlEH0xaj4qHxF8rGWU0jwR0MQ7n72jrecnQIDAQAB;", "msg": "DKIM Key gefunden (~2352 Bit)", "icon": "bi-key", "title": "DKIM Key Strength & Selector", "weight": 10, "got": 10 }, "dmarc": { "status": "success", "raw": "v=DMARC1; p=reject; rua=mailto:Webmaster@Speed-Hosting4you.de; ruf=mailto:Webmaster@Speed-Hosting4you.de; aspf=r; adkim=r", "msg": "DMARC Policy: p=reject", "icon": "bi-shield-lock-fill", "title": "DMARC Alignment Policy", "weight": 10, "got": 10 }, "dnssec": { "status": "info", "raw": "Standard DNS", "msg": "Keine DNSSEC Signatur", "icon": "bi-shield-check", "title": "DNSSEC Validation Status", "weight": 5, "got": 4 }, "geolocation": { "status": "success", "raw": "IP: 83.136.82.37\nLand: Germany [DE]\nProvider: richportal GmbH\nASN: AS24961 WIIT AG", "msg": "Server in der EU (Germany - DSGVO-konform)", "icon": "bi-geo-alt-fill", "title": "MX IP Geolocation & DSGVO", "weight": 3, "got": 3 }, "ipv6_mx": { "status": "success", "raw": "IPv6: 2001:4ba0:ffea:2c9:1::5\nPTR: Mail.Sh4y.de", "msg": "IPv6 Dual-Stack verifiziert", "icon": "bi-globe2", "title": "IPv6 Dual-Stack MX Engine", "weight": 3, "got": 3 }, "smtp_latency": { "status": "success", "raw": "RTT: 25.92 ms", "msg": "Antwortzeit: 25.92 ms", "icon": "bi-speedometer2", "title": "SMTP Latency Response", "weight": 2, "got": 2 }, "mta_sts_dns": { "status": "success", "raw": "DNS: v=STSv1; id=20260328001;\nPolicy Mode: ENFORCE", "msg": "MTA-STS aktiv (Mode: ENFORCE)", "icon": "bi-shield-shaded", "title": "MTA-STS DNS & HTTPS Policy", "weight": 3, "got": 3 }, "mx": { "status": "info", "raw": "mail.speed-hosting4you.de", "msg": "1 MX Server aktiv", "icon": "bi-hdd-network-fill", "title": "MX High Availability", "weight": 5, "got": 4 }, "open_relay": { "status": "success", "raw": "RCPT Response: 550 5.7.27 : Sender address rejected: Domain example.org does not accept mail (nullMX)", "msg": "Sicher (Relay Access Denied)", "icon": "bi-door-open-fill", "title": "Open Relay Vulnerability", "weight": 2, "got": 2 }, "ports": { "status": "success", "raw": "SMTP (25): OPEN | SMTPS (465): OPEN | Submission (587): OPEN", "msg": "3/3 Ports erreichbar auf mail.speed-hosting4you.de", "icon": "bi-ethernet", "title": "Mail Ports (25, 465, 587) & Banner", "weight": 2, "got": 2 }, "propagation": { "status": "success", "raw": "3/3 Resolvers Synced", "msg": "Globale Resolver synchronisiert (3/3)", "icon": "bi-globe", "title": "Global DNS Propagation", "weight": 2, "got": 2 }, "ptr": { "status": "success", "raw": "MX IP: 83.136.82.37\nPTR: Mail.Sh4y.de", "msg": "FCrDNS strikt valide", "icon": "bi-arrow-down-up", "title": "Reverse DNS FCrDNS Strict", "weight": 6, "got": 6 }, "rbl": { "status": "success", "raw": "IP: 83.136.82.37\nStatus: Saubere Reputation", "msg": "Keine Listung auf bekannten RBLs", "icon": "bi-slash-circle-fill", "title": "RBL Blacklist Engine", "weight": 5, "got": 5 }, "smtp_auth": { "status": "info", "raw": "Kein AUTH auf Port 25", "msg": "Sicher (Reiner MX Port 25)", "icon": "bi-person-badge-fill", "title": "SMTP Auth Security", "weight": 3, "got": 2 }, "smtp_handshake": { "status": "success", "raw": "250 2.1.0 Ok", "msg": "SMTP Handshake erfolgreich", "icon": "bi-hand-thumbs-up-fill", "title": "SMTP Handshake Deep", "weight": 3, "got": 3 }, "smtp_smuggling": { "status": "info", "raw": "CHUNKING Support: YES\nRCPT Check Response: 250 2.1.5 Ok", "msg": "MTA unterst\u00fctzt CHUNKING (BDAT Vektor beachten)", "icon": "bi-shield-slash-fill", "title": "SMTP Smuggling Resilience", "weight": 4, "got": 3 }, "smtp_user_enum": { "status": "success", "raw": "VRFY root -> 502 5.5.1 VRFY command is disabled\nEXPN admin -> 500 5.5.2 Error: command not recognized", "msg": "Sicher (VRFY & EXPN deaktiviert)", "icon": "bi-person-x-fill", "title": "SMTP VRFY/EXPN User Enum", "weight": 2, "got": 2 }, "soa": { "status": "success", "raw": "Primary NS: ns2.sh4y.de\nAdmin Email: Admin.speed-hosting4you.de\nSerial: 2026082204\nRefresh: 14400s | Retry: 3600s", "msg": "SOA Record valide (Serial: 2026082204)", "icon": "bi-journal-check", "title": "SOA Record Audit", "weight": 2, "got": 2 }, "spf": { "status": "success", "raw": "Record: v=spf1 ip4:83.136.82.37 ip6:2001:4ba0:ffea:2c9:1::5 include:_spf.google.com include:spf.nl2go.com include:_spf.atlassian.net -all", "msg": "Optimal gesch\u00fctzt (-all).", "icon": "bi-shield-shaded", "title": "SPF Recursive Deep Audit", "weight": 10, "got": 10 }, "ssl_cert": { "status": "success", "raw": "CN: speed-hosting4you.de\nPort: 25 | G\u00fcltig bis: 2026-10-26 (63d)", "msg": "SSL/TLS Zertifikat verifiziert & aktiv", "icon": "bi-file-earmark-lock-fill", "title": "SSL/TLS Certificate Audit", "weight": 4, "got": 4 }, "subdomain_spf": { "status": "info", "raw": "*.speed-hosting4you.de TXT", "msg": "Subdomain SPF Absicherung empfohlen", "icon": "bi-shield-lock", "title": "Subdomain SPF Wildcard Protection", "weight": 2, "got": 2 }, "tls_cipher": { "status": "success", "raw": "Protokoll: TLSv1.3\nCipher: TLS_AES_256_GCM_SHA384", "msg": "TLS Handshake OK (TLSv1.3)", "icon": "bi-shield-lock-fill", "title": "TLS 1.3 Cipher & Crypto", "weight": 4, "got": 4 }, "tls_rpt": { "status": "success", "raw": "v=TLSRPTv1; rua=mailto:webmaster@sh4y.de,mailto:webmaster@sh4y.de", "msg": "TLS Reporting (TLS-RPT) valide", "icon": "bi-envelope-paper-fill", "title": "TLS Reporting (TLS-RPT)", "weight": 3, "got": 3 }, "webmail_security": { "status": "success", "icon": "bi-shield-check", "msg": "Webmail-Endpunkt ist mit HTTPS & HSTS gesch\u00fctzt (Empfohlen: CSP, X-Content-Type-Options)", "raw": "https://webmail.speed-hosting4you.de | HSTS: max-age=15768000; includeSubDomains", "title": "Webmail Security Headers", "weight": 5, "got": 5 }, "wildcard_dns": { "status": "success", "raw": "No Wildcard A-Record", "msg": "Kein Wildcard DNS", "icon": "bi-diagram-3", "title": "Wildcard DNS Risk Analyzer", "weight": 2, "got": 2 } }, "overall_score": 97, "grade": "A+" }