Email & DNS report

katrinziebart.de

Scanned Oct 14, 2026 06:40 UTC · 7 checks · public report

Health grade

Solid base — three policy steps remain.

BGrade B

3 warnings3 passing1 not checkedNot-checked is by design — details inline below.

In one line

Can katrinziebart.de be spoofed?

katrinziebart.de publishes DMARC with p=none — spoofed mail is monitored but not blocked.

WarningSPF

Start here

SPF ends in '~all' (softfail) rather than '-all' — acceptable for DMARC (non-pass either way); hardening to '-all' is optional and only safe once every legitimate sender is in the record

2 of 10 DNS lookups used

Current SPF

v=spf1 a mx ~all

All findings — worst first

WarningDMARCDMARC is recorded but p=none (monitoring only — no protection)
Start monitoring katrinziebart.de →
- no enforcement record is recommended yet — a scan alone could not confirm that your mail aligns (valid SPF and a DKIM signature), and moving off p=none without that evidence risks silently blocking legitimate mail. Gather aggregate-report evidence first, then step up: evidence before enforcement
- p=none only monitors — it does not block spoofing
- no np= tag: non-existent subdomains fall back to sp/p — RFC 9989 §4.7's np=reject can protect them now
Current DMARC
v=DMARC1; p=none; rua=mailto:dmarc@katrinziebart.de; adkim=r; aspf=r
More on DMARC

Email me this report

One send: the full report — every finding and fix — lands in your inbox, with a free account waiting. Opening it signs you in and starts a 14-day Monitor trial. No card, and you can unsubscribe in one click.

Domain owner? Re-scan any time — or email hello@dnsdoctor.dev to have this page removed.

Scanning your domain…

Can katrinziebart.de be spoofed?

SPF ends in '~all' (softfail) rather than '-all' — acceptable for DMARC (non-pass either way); hardening to '-all' is optional and only safe once every legitimate sender is in the record

All findings — worst first