SSL Certificate Details for web.de – Expiry & Chain Checker

⚡ Live Data: Report generated fresh from authoritative registries. 🔄 Force Refresh

🤖 AI Intelligence Summary

The domain web.de is registered with an undisclosed registrar. It resolves to IP address 217.72.199.68, hosted by IONOS SE. Email delivery is handled by Self-hosted or Custom. SPF authentication is published and valid. DMARC policy is published.

Domain Overview: web.de

Domain Registration 🌐

Active N/A

Expires in N/A · DNSSEC: Unsigned

Email Security 🛡️

SPF: Pass DKIM: Not Detected DMARC: Quarantine

Self-hosted or Custom (2 MX)

SSL Certificate 🔒

Untrusted N/A Days Left

Issuer: N/A

Server & Hosting 🖥️

200 nginx

Frankfurt am Main, Hesse, Germany (DE)

🌐 Domain & Registration Identity View Full Whois Details →

Domain	web.de
Website Title	WEB.DE - kostenlose E-Mail-Adresse, FreeMail & Nachrichten
Registered	N/A
Expires	N/A
Remaining Validity	N/A
Domain Age	N/A
Registrar	N/A
Domain Status	N/A i
DNSSEC Delegation	Unsigned · Zone not signed with DNSSEC keys i
Authoritative Nameservers	`ns-webde.ui-dns.biz, ns-webde.ui-dns.de, ns-webde.ui-dns.org, ns-webde.ui-dns.com` i

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

Detected Email Provider	📬 Self-hosted or Custom
Primary Mail Server (MX)	`mx-ha02.web.de (Priority: 100)` · 2 MX servers configured i
SPF Record (Sender Policy)	Pass · 1/10 DNS Lookups i `v=spf1 redirect=_spf.web.de`
DKIM Authentication	Not Detected · (No common third-party selector found; custom keys may be configured) i
DMARC Policy	Pass (Quarantine) · Reports: `mailto:dmarcreport@web.de` i `v=DMARC1; p=quarantine; rua=mailto:dmarcreport@web.de`
SMTP Port 25 Status	Online (470ms) · Inbound mail server handshake response

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

Web Server Software	nginx i
HTTP Status Code	200 i
Server IP (IPv4)	217.72.199.68 View Geo Details →
IPv6 Address (AAAA)	`Not Configured`
Reverse DNS (PTR)	`ip-cde889a5.platform.pub.mam.dev`
Server Location	📍 Frankfurt am Main, Hesse, Germany (DE)
ASN Network & ISP	`AS8560 (IONOS SE)`
Hosting Provider	IONOS SE i
Control Panel	Not Detected i
Technology Stack	Nginx Google Analytics
HTTP Security Headers	6 / 6 Active (HSTS, CSP, X-Frame, X-Content, Referrer-Policy, Permissions-Policy) Audit Details →
DNSBL Blacklist Reputation	Clean (0/5 lists)

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Primary Hostname (CN)	N/A
SSL Issuer	N/A
SSL Valid Till	N/A
Remaining Validity	N/A Days
Chain Status	Invalid / Untrusted
Signature Algorithm	`N/A`

Whois Ownership & Registration for web.de

📄 View Raw Registry Response ↓

Domain Information i

Registrar Information i

Registrant Contact i

Contact information for this role is not provided or redacted.

Administrative Contact i

Contact information for this role is not provided or redacted.

Technical Contact i

Contact information for this role is not provided or redacted.

📄 View Raw Registry Response Legacy Whois (Port 43)

Domain: web.de
Status: connect

DNS Records for web.de

NS Records i

Name	Data	Copy
web.de.	`ns-webde.ui-dns.biz.`
web.de.	`ns-webde.ui-dns.de.`
web.de.	`ns-webde.ui-dns.org.`
web.de.	`ns-webde.ui-dns.com.`

A Records i

Name	Data	Copy
web.de.	`217.72.199.68`

AAAA Records i

No AAAA records found.

WWW Records (www.web.de) i

Type	Host	Value	Copy
A	www.web.de.	`217.72.199.68`

MX Records i

Priority	Mail Server Target	Copy
100	`mx-ha02.web.de.`
100	`mx-ha03.web.de.`

TXT Records i

Name	Value	Copy
web.de.	`google-site-verification=4kOTEODoJ0gf-gR71erruc56vEPOpyAuppJRHNC-hk0`
web.de.	`dzd5thdqpcp7f5d2p8l4vj5m5wdt21cs`
web.de.	`v=spf1 redirect=_spf.web.de`
web.de.	`kqpx82j1ql9zhqh54gdr8pj9f1ytvht1`
web.de.	`Trustpilot-Verification-kqvVskCm6JQ9Vg1qAmahpBSJ5tvZORbriFyVIk4E`
web.de.	`g6ftbncmryg0y6h956jfd242s1z9tndk`
web.de.	`google-site-verification=uHSKas5L2d4qGiqXVFuwvgu-In8Byl7dJXmTSLcOJuY`
web.de.	`mindmanager-verification=1ea2fdbe5379cc0f8cfe95fa5ecfdc1ff943a7bd015aed8afb5717dad146adac`
web.de.	`google-site-verification=No4jlUg2OIV7IsI2UF0v792Q8HgI9Brnp7qary1nMAQ`
web.de.	`facebook-domain-verification=ksd7xc6g15rm7xkdga4qcm9hasgkny`
web.de.	`_cddkhzzdq16uacbk5ilv3giqg9evcti`

Email Security (MX, SPF, DKIM, DMARC, SMTP) for web.de

Detected Email Provider

📬 Self-hosted or Custom

✓ Active MX Routing (2 Servers)

Mail Exchange (MX) Routing Records i

Priority	Mail Server Hostname	Copy
100	`mx-ha02.web.de`
100	`mx-ha03.web.de`

SPF Record Validation i

v=spf1 redirect=_spf.web.de

Record Breakdown

Prefix	Mechanism	Value	Description
+	`v`	spf1	The SPF record version.
+	`redirect`	_spf.web.de	The SPF check is redirected to another domain.

Validation Summary

SPF Record Published	Pass An SPF record was found.
Multiple SPF Records	Pass Only one SPF record was found.
Included Lookups	Pass The number of DNS lookups (1) is within the limit of 10.
Type PTR Check	Pass The deprecated PTR mechanism was not found.
Characters After ALL	Pass No mechanisms were found after the "all" mechanism.

Common DKIM Selectors i

No common third-party DKIM selectors found. Custom selectors may be configured.

🔍 Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on web.de:

DMARC Policy Validation i

v=DMARC1; p=quarantine; rua=mailto:dmarcreport@web.de

Tag Breakdown

Tag	Value	Description
`v`	DMARC1	Version: Must be "DMARC1".
`p`	quarantine	Policy: The action to take for failed emails (none, quarantine, reject).
`rua`	mailto:dmarcreport@web.de	Aggregate Reports: Email address(es) to send summary reports.

Validation Summary

DMARC Record Published	Pass A DMARC record was found.
Syntax Check	Pass The record has a valid version tag.
Policy Enforcement	Pass The policy is "p=quarantine", which sends failing emails to spam.
Aggregate Reporting	Pass An address for aggregate reports was found.

Optimization Suggestions

This is a good step. Continue monitoring reports and consider moving to "p=reject" for the highest level of protection.

SMTP Connectivity Test (Port 25)

Mail Server	Status	Latency	Banner / Handshake Response
mx-ha02.web.de	Success	470ms	`220 web.de (mxweb105) Nemesis ESMTP Service ready`

Server IP Blacklist Check (217.72.199.68)

Spamhaus ZEN: Clean

SpamCop: Clean

Barracuda: Clean

GBUdb Truncate: Clean

DroneBL: Clean

SSL/TLS Certificate Details for web.de

Could not connect to get SSL certificate.

Website & Server Intelligence for web.de

Website Identity

Title	WEB.DE - kostenlose E-Mail-Adresse, FreeMail & Nachrichten
Meta Description	Sichere Kommunikation, aktuelle Nachrichten und nützliche Online-Services - alles an einem Ort. Einfach, kostenlos und zuverlässig.

Hosting & Server Network

IP Address	217.72.199.68
HTTP Status	200 i
Hosting Provider	IONOS SE i
Web Server	nginx i
Control Panel	Not Detected i

Technology Profile

Nginx
Google Analytics

HTTP Security Headers

Strict-Transport-Security	Present
Content-Security-Policy	Present
X-Frame-Options	Present
X-Content-Type-Options	Present
Referrer-Policy	Present
Permissions-Policy	Present

IP Details & Geolocation

IP Address	217.72.199.68
Reverse DNS (PTR)	`ip-cde889a5.platform.pub.mam.dev`
Country	Germany (DE)
Region	Hesse
City	Frankfurt am Main
ZIP Code	N/A
ASN	8560
Organization / ISP	IONOS SE

Understanding Diagnostic Terms for web.de

Domain Status (EPP)

EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

Registrar Information

The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

Nameservers (NS)

Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

A & AAAA Records

Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

MX (Mail Exchange)

Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

SPF & DMARC Security

Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

DKIM Signatures

Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

SSL Certificate & Chain

Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

Hosting Provider & ASN

The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

Reverse DNS (PTR)

Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

HTTP Security Headers

Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

⚠️ Report Limitations & Data Sources

Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.