Online

SH4Y CyberMail

v2026.4
WebCode Systems UG Speed-Hosting4you
ENGINE CORE
PHP 8.5.9
PERSISTENCE
MySQL PDO ACTIVE
ARCHITECTURE
30+ PLUGINS LOADED
Dashboard
SH4Y CyberMail Quick Reference
// REST API USAGE

Rufe Audit-Ergebnisse direkt als JSON ab:

GET https://dosreisantunes.de/api.php?domain=speed-hosting4you.de
// PLUGIN DEVELOPMENT CONTRACT

Erstelle neue Scans im Ordner /plugins/:

class MyCheckPlugin implements AuditPluginInterface {
  public function getKey(): string { return 'my_check'; }
  public function getTitle(): string { return 'My Custom Audit'; }
  public function getWeight(): int { return 5; }
  public function run(...): array { ... }
}
// MYSQL SCHEMAS

Die Datenbank speichert Audits in zwei Haupttabellen:

  • domains: Speichert eindeutige Ziel-Domains.
  • audits: Speichert historische JSON-Ergebnisse.

_dmarc.google.com. IN TXT "v=DMARC1; p=reject; sp=reject; pct=100; rua=mailto:dmarc@google.com"
google.com. IN TXT "v=spf1 ip4:192.178.183.100 mx -all"
85%
A GRADE
Audit Target

google.com

Sync: 2026-08-25 00:43:41
Score Historie (MySQL DB)
ACTIONABLE ADVICE & OPTIMIZATION ROADMAP
SMTP VRFY/EXPN User Enum
MTA responds to VRFY/EXPN (Enumeration risk)
Authentifizierung & Mail-Schutz
SPF Recursive Deep Audit INFO

Softfail (~all) active.

Record: v=spf1 include:_spf.google.com ~all
DMARC Alignment Policy SUCCESS

DMARC Policy: p=reject

v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com
DKIM Key Strength & Selector INFO

No standard DKIM found under tested selectors

15 Selectors gescannt
BIMI Logo & VMC Cert SECONDARY

No BIMI record.

Optional
Subdomain SPF Wildcard Protection INFO

Subdomain SPF protection recommended

*.google.com TXT
DNS & Krypto-Sicherheit
DNSSEC Validation Status INFO

No DNSSEC signature

Standard DNS
DANE TLSA Hash Match SECONDARY

No TLSA record found (DANE optional)

Entry: _25._tcp.smtp.google.com
CAA Certificate Auth SUCCESS

CAA record present

Tag: issue -> pki.goog
SOA Record Audit SUCCESS

SOA record valid (Serial: 969321400)

Primary NS: ns1.google.com Admin Email: dns-admin.google.com Serial: 969321400 Refresh: 900s | Retry: 900s
Wildcard DNS Risk Analyzer SUCCESS

No wildcard DNS

No Wildcard A-Record
Global DNS Propagation SUCCESS

Global resolvers synced (3/3)

3/3 Resolvers Synced
SMTP, Server & Zertifikate
MX High Availability INFO

1 MX servers active

smtp.google.com
TLS Reporting (TLS-RPT) SUCCESS

TLS Reporting (TLS-RPT) valid

v=TLSRPTv1;rua=mailto:sts-reports@google.com
SSL/TLS Certificate Audit SUCCESS

SSL/TLS Zertifikat verifiziert & aktiv

CN: mx.google.com Port: 25 | Gültig bis: 2026-10-28 (65d)
Mail Ports (25, 465, 587) & Banner SUCCESS

1/3 Ports erreichbar auf smtp.google.com

SMTP (25): OPEN | SMTPS (465): CLOSED | Submission (587): CLOSED
Open Relay Vulnerability SUCCESS

Secure (Relay Access Denied)

RCPT Response: 550-5.1.1 The email account that you tried to reach does not exist. Please try
SMTP Smuggling Resilience INFO

MTA supports CHUNKING (Review BDAT vector)

CHUNKING Support: YES RCPT Check Response: 250 2.1.5 OK 4fb4d7f45d1cf-6a59e1de1c2si8044114a12.170 - gsmtp
Infrastruktur, IP & Routing
Reverse DNS FCrDNS Strict SUCCESS

FCrDNS strikt valide

MX IP: 142.251.127.26 PTR: lcfrai-in-f26.1e100.net
RBL Blacklist Engine SUCCESS

Not listed on common RBLs

IP: 142.251.127.27 Status: Saubere Reputation
MX IP Geolocation & DSGVO INFO

Server outside EU (United States)

IP: 142.251.127.27 Land: United States [US] Provider: Google LLC ASN: AS15169 Google LLC
Autodiscover Client Config INFO

Autodiscover/SRV optional

Keine Auto-Config Records
Webmail Security Headers SUCCESS

Webmail active with HTTPS & HSTS (Alle Header optimal)

https://mail.google.com | HSTS: max-age=31536000; includeSubDomains
SMTP Auth Security INFO

Secure (Pure MX Port 25)

Kein AUTH auf Port 25
SMTP VRFY/EXPN User Enum WARNING

MTA responds to VRFY/EXPN (Enumeration risk)

VRFY root -> 252 2.1.5 Send some mail, I'll try my best 4fb4d7f45d1cf-6a59dff92b9si8062661a12.83 - gsmtp EXPN admin -> 502-5.5.1 Unimplemented command. For more information, go to