dss-connect.de
Scanned 8 days ago · Oct 22, 2026, 9:43 AM
A
TLS & Certificate
Protocol support, cipher strength and the certificate chain, evaluated the way a browser would.
Score90%
- the server accepts 1 weak cipher suite(s): ECDHE-RSA-AES128-SHA256
NegotiatedTLSv1.3, TLS_AES_256_GCM_SHA384
Forward secrecyYes
HSTSenabled, max-age=31536000
Protocol baseline
YesTLS 1.3 enabled
YesTLS 1.2 enabled
YesTLS 1.1 disabled
YesTLS 1.0 disabled
Cipher suites probed
Each suite below was tested with its own TLS 1.2 handshake, restricted to exactly that cipher - "accepted" means the server completed a handshake using it, not merely that it's listed as a possibility.
ECDHE-ECDSA-AES256-GCM-SHA384
SecureNot offered
ECDHE-RSA-AES256-GCM-SHA384
SecureAccepted
ECDHE-ECDSA-AES128-GCM-SHA256
SecureNot offered
ECDHE-RSA-AES128-GCM-SHA256
SecureAccepted
ECDHE-ECDSA-CHACHA20-POLY1305
SecureNot offered
ECDHE-RSA-CHACHA20-POLY1305
SecureNot offered
DHE-RSA-AES256-GCM-SHA384
SecureNot offered
DHE-RSA-AES128-GCM-SHA256
SecureNot offered
ECDHE-RSA-AES256-SHA384
WeakNot offered
ECDHE-RSA-AES128-SHA256
WeakAccepted
AES256-GCM-SHA384
WeakNot offered
AES128-GCM-SHA256
WeakNot offered
DES-CBC3-SHA
InsecureNot offered
RC4-SHA
InsecureNot offered
NULL-SHA
InsecureNot offered
Certificate
Subjectwww.dss-connect.de
IssuerSectigo Public Server Authentication CA DV R36
Additional nameswww.dss-connect.de, dss-connect.de
ValidFeb 19, 2026, 12:00 AM – Mar 12, 2027, 11:59 PM (expires in 142 days)
KeyRSA 2048 bit
Signature algorithmunknown
SHA-256 fingerprintDE:5E:9D:82:E6:05:13:CD:70:92:92:98:E2:83:6B:30:E1:2A:54:98:59:C5:E9:53:D0:55:21:0F:82:E6:37:4C
Certificate chain4 certificate(s)
Trusted by common trust storesYes
Matches the scanned hostnameYes
Self-signedNo
C
Security Headers
The HTTP response headers browsers use to restrict what a page - or an attacker inside it - can do.
Score60%
- no X-Content-Type-Options: nosniff
- no Permissions-Policy header
- no Cross-Origin-Opener-Policy header
- no Cross-Origin-Resource-Policy header
- the Server header discloses "Apache/2.4.68 (Unix)"
- the X-Powered-By header discloses "PHP/8.4.27"
Content-Security-Policyblock-all-mixed-content
Strict-Transport-Securitymax-age=31536000; includeSubDomains
X-Content-Type-Optionsnosniff, nosniff
X-Frame-OptionsSAMEORIGIN
Referrer-Policysame-origin
Permissions-Policynot set
Cross-Origin-Opener-Policynot set
Cross-Origin-Resource-Policynot set
A+Email
Whether mail delivered to this domain is protected in transit, and whether SPF/DMARC stop it being spoofed.
Score100%
SPFv=spf1 mx ip4:62.225.119.70 include:spf.crsend.com include:spf.hornetsecurity.com include:mail.css-connect.de -all
DMARCv=DMARC1; p=quarantine; rua=mailto:[email protected]; adkim=r; aspf=r
MX records4 found: mx01.hornetsecurity.com, mx02.hornetsecurity.com, mx03.hornetsecurity.com, mx04.hornetsecurity.com
Mail servers
Each mail port is probed with a full TLS handshake - STARTTLS on 25, 587, 143 and 110, implicit TLS on 465, 993 and 995 - to read the certificate actually bound to it. Only inbound SMTP on port 25 affects the grade.
mx01.hornetsecurity.comMX preference 10
25 SMTPTLSv1.3, TLS_AES_256_GCM_SHA384
587 SubmissionTLSv1.3, TLS_AES_256_GCM_SHA384
465 SMTPSno response - the port is filtered, or blocked between our scanner and the host
143 IMAPno response - the port is filtered, or blocked between our scanner and the host
993 IMAPSno response - the port is filtered, or blocked between our scanner and the host
110 POP3no response - the port is filtered, or blocked between our scanner and the host
995 POP3Sno response - the port is filtered, or blocked between our scanner and the host
Certificate on ports 25, 587
Subject*.hornetsecurity.com
IssuerSectigo Public Server Authentication CA DV R36
Additional names*.hornetsecurity.com, hornetsecurity.com
ValidAug 18, 2026, 12:00 AM – Mar 4, 2027, 11:59 PM (expires in 134 days)
KeyRSA 4096 bit
Signature algorithmunknown
SHA-256 fingerprintDC:79:1B:B1:21:35:BE:F0:F3:DD:16:7F:88:F4:15:25:C7:5F:79:EB:F7:07:76:64:73:10:C0:0E:FC:52:EF:45
Certificate chain4 certificate(s)
Trusted by common trust storesYes
Matches the scanned hostnameYes
Self-signedNo
mx02.hornetsecurity.comMX preference 20
25 SMTPTLSv1.3, TLS_AES_256_GCM_SHA384
587 SubmissionTLSv1.3, TLS_AES_256_GCM_SHA384
465 SMTPSno response - the port is filtered, or blocked between our scanner and the host
143 IMAPno response - the port is filtered, or blocked between our scanner and the host
993 IMAPSno response - the port is filtered, or blocked between our scanner and the host
110 POP3no response - the port is filtered, or blocked between our scanner and the host
995 POP3Sno response - the port is filtered, or blocked between our scanner and the host
Certificate on ports 25, 587
Subject*.hornetsecurity.com
IssuerSectigo Public Server Authentication CA DV R36
Additional names*.hornetsecurity.com, hornetsecurity.com
ValidAug 18, 2026, 12:00 AM – Mar 4, 2027, 11:59 PM (expires in 134 days)
KeyRSA 4096 bit
Signature algorithmunknown
SHA-256 fingerprintDC:79:1B:B1:21:35:BE:F0:F3:DD:16:7F:88:F4:15:25:C7:5F:79:EB:F7:07:76:64:73:10:C0:0E:FC:52:EF:45
Certificate chain4 certificate(s)
Trusted by common trust storesYes
Matches the scanned hostnameYes
Self-signedNo
mx03.hornetsecurity.comMX preference 200
25 SMTPTLSv1.3, TLS_AES_256_GCM_SHA384
587 SubmissionTLSv1.3, TLS_AES_256_GCM_SHA384
465 SMTPSno response - the port is filtered, or blocked between our scanner and the host
143 IMAPno response - the port is filtered, or blocked between our scanner and the host
993 IMAPSno response - the port is filtered, or blocked between our scanner and the host
110 POP3no response - the port is filtered, or blocked between our scanner and the host
995 POP3Sno response - the port is filtered, or blocked between our scanner and the host
Certificate on ports 25, 587
Subject*.hornetsecurity.com
IssuerSectigo Public Server Authentication CA DV R36
Additional names*.hornetsecurity.com, hornetsecurity.com
ValidAug 18, 2026, 12:00 AM – Mar 4, 2027, 11:59 PM (expires in 134 days)
KeyRSA 4096 bit
Signature algorithmunknown
SHA-256 fingerprintDC:79:1B:B1:21:35:BE:F0:F3:DD:16:7F:88:F4:15:25:C7:5F:79:EB:F7:07:76:64:73:10:C0:0E:FC:52:EF:45
Certificate chain4 certificate(s)
Trusted by common trust storesYes
Matches the scanned hostnameYes
Self-signedNo
Also published as MX, not probed: mx04.hornetsecurity.com