citrix.weima.com
Scanned 3 hours ago · Oct 11, 2026, 3:56 PM
A
TLS & Certificate
Protocol support, cipher strength and the certificate chain, evaluated the way a browser would.
Score90%
- no Strict-Transport-Security (HSTS) header
NegotiatedTLSv1.3, TLS_AES_256_GCM_SHA384
Forward secrecyYes
HSTSnot enabled
Protocol baseline
YesTLS 1.3 enabled
YesTLS 1.2 enabled
YesTLS 1.1 disabled
YesTLS 1.0 disabled
Cipher suites probed
Each suite below was tested with its own TLS 1.2 handshake, restricted to exactly that cipher - "accepted" means the server completed a handshake using it, not merely that it's listed as a possibility.
ECDHE-ECDSA-AES256-GCM-SHA384
SecureNot offered
ECDHE-RSA-AES256-GCM-SHA384
SecureAccepted
ECDHE-ECDSA-AES128-GCM-SHA256
SecureNot offered
ECDHE-RSA-AES128-GCM-SHA256
SecureAccepted
ECDHE-ECDSA-CHACHA20-POLY1305
SecureNot offered
ECDHE-RSA-CHACHA20-POLY1305
SecureNot offered
DHE-RSA-AES256-GCM-SHA384
SecureNot offered
DHE-RSA-AES128-GCM-SHA256
SecureNot offered
ECDHE-RSA-AES256-SHA384
WeakNot offered
ECDHE-RSA-AES128-SHA256
WeakNot offered
AES256-GCM-SHA384
WeakNot offered
AES128-GCM-SHA256
WeakNot offered
DES-CBC3-SHA
InsecureNot offered
RC4-SHA
InsecureNot offered
NULL-SHA
InsecureNot offered
Certificate
Subject*.weima.com
IssuerThawte TLS RSA CA G1
Additional names*.weima.com, weima.com
ValidJul 23, 2026, 12:00 AM – Jan 25, 2027, 11:59 PM (expires in 106 days)
KeyRSA 2048 bit
Signature algorithmunknown
SHA-256 fingerprint17:59:1D:05:3B:39:8A:AA:4A:93:54:B3:F9:26:84:D6:44:98:97:97:85:79:A8:7F:27:55:A7:69:9E:75:7B:B3
Certificate chain3 certificate(s)
Trusted by common trust storesYes
Matches the scanned hostnameYes
Self-signedNo
C
Security Headers
The HTTP response headers browsers use to restrict what a page - or an attacker inside it - can do.
Score60%
- no Strict-Transport-Security header
- no Permissions-Policy header
- no Cross-Origin-Opener-Policy header
- no Cross-Origin-Resource-Policy header
- the Server header discloses "Apache"
Content-Security-Policydefault-src 'self'; script-src https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/releases/ 'self'; connect-src 'self'; img-src http://localhost:* 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src https://www.google.com/recaptcha/ com.citrix.agmacepa://* citrixng://* com.citrix.nsgclient://* vmware-view://* nsgcepa://* application://* receiver://* 'self'; child-src 'self' com.citrix.agmacepa://* citrixng://* com.citrix.nsgclient://* vmware-view://* nsgcepa://nsgcepa application://*; form-action 'self'; object-src 'none'; base-uri 'self'; report-uri /nscsp_violation/report_uri
Strict-Transport-Securitynot set
X-Content-Type-Optionsnosniff
X-Frame-OptionsSAMEORIGIN
Referrer-Policyno-referrer
Permissions-Policynot set
Cross-Origin-Opener-Policynot set
Cross-Origin-Resource-Policynot set
CEmail
Whether mail delivered to this domain is protected in transit, and whether SPF/DMARC stop it being spoofed.
Score60%
- at least one reachable mail server does not support STARTTLS
- no SPF record
- no DMARC record
SPFnot set
DMARCnot set
MX records2 found: mx00.kundenserver.de, mx01.kundenserver.de
Mail servers
Each mail port is probed with a full TLS handshake - STARTTLS on 25, 587, 143 and 110, implicit TLS on 465, 993 and 995 - to read the certificate actually bound to it. Only inbound SMTP on port 25 affects the grade.
mx00.kundenserver.deMX preference 10
25 SMTPreachable, STARTTLS not offered
587 Submissionconnection refused - nothing is listening on this port
465 SMTPSconnection refused - nothing is listening on this port
143 IMAPconnection refused - nothing is listening on this port
993 IMAPSconnection refused - nothing is listening on this port
110 POP3connection refused - nothing is listening on this port
995 POP3Sconnection refused - nothing is listening on this port
mx01.kundenserver.deMX preference 11
25 SMTPreachable, STARTTLS not offered
587 Submissionconnection refused - nothing is listening on this port
465 SMTPSconnection refused - nothing is listening on this port
143 IMAPconnection refused - nothing is listening on this port
993 IMAPSconnection refused - nothing is listening on this port
110 POP3connection refused - nothing is listening on this port
995 POP3Sconnection refused - nothing is listening on this port