erenlos.de
Scanned 2 hours ago · Oct 5, 2026, 2:12 PM
–
TLS & Certificate
Protocol support, cipher strength and the certificate chain, evaluated the way a browser would.
Scoren/a
- could not establish a TLS connection to erenlos.de:443
–
Security Headers
The HTTP response headers browsers use to restrict what a page - or an attacker inside it - can do.
Scoren/a
- could not fetch https://erenlos.de/
BEmail
Whether mail delivered to this domain is protected in transit, and whether SPF/DMARC stop it being spoofed.
Score79%
- no SPF record
SPFnot set
DMARCv=DMARC1;p=reject;
MX recordssmtpin.rzone.de
Mail servers
Each mail port is probed with a full TLS handshake - STARTTLS on 25, 587, 143 and 110, implicit TLS on 465, 993 and 995 - to read the certificate actually bound to it. Only inbound SMTP on port 25 affects the grade.
smtpin.rzone.deMX preference 5
25 SMTPTLSv1.3, TLS_AES_256_GCM_SHA384
587 Submissionconnection refused - nothing is listening on this port
465 SMTPSconnection refused - nothing is listening on this port
143 IMAPconnection refused - nothing is listening on this port
993 IMAPSconnection refused - nothing is listening on this port
110 POP3connection refused - nothing is listening on this port
995 POP3Sconnection refused - nothing is listening on this port
Certificate on port 25
Subjectsmtpin.rzone.de
IssuerTelekom Security ServerID OV Class 2 CA
Additional namessmtpin.rzone.de
ValidJan 13, 2026, 8:55 AM – Jan 17, 2027, 11:59 PM (expires in 104 days)
KeyRSA 4096 bit
Signature algorithmunknown
SHA-256 fingerprint39:B7:14:C3:C2:2C:25:29:3E:99:18:4C:11:82:61:60:D1:3F:A9:96:15:12:9F:D8:BA:4C:C7:B9:AE:62:7D:2B
Certificate chain3 certificate(s)
Trusted by common trust storesYes
Matches the scanned hostnameYes
Self-signedNo