otto.de email security: SPF, DKIM & DMARC
Is otto.de spoofable? See otto.de's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.
Last updated: June 3, 2026
SPF
OKv=spf1 ip4:80.85.192.0/20 include:spf.hornetsecurity.com include:spf.protection.outlook.com include:_spf.salesforce.com a:_spf.otto.de -allDKIM
OKSelectors: selector1, selector2, mailMX
OKotto-de.mail.protection.outlook.comRecommendations
1Change your DMARC policy from p=none to p=reject to block spoofing
With p=none, your DMARC record only monitors — it doesn't actually block spoofed emails. Attackers can still send emails as your domain and they'll be delivered normally. Switching to p=reject instructs receiving servers to drop fraudulent messages before they reach the inbox.
2Add MTA-STS to enforce TLS encryption for incoming emails
Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.
Need help securing your domain?
If you're not sure how to apply these fixes, get in touch and we'll help you out.
Contact usRun a live analysis
The results above are updated daily. For an instant check of otto.de, run a live analysis.
Analyze otto.de liveFrequently asked questions about otto.de
Is otto.de spoofable?
Yes. otto.de does not enforce a strong DMARC policy, so attackers may be able to send emails that appear to come from otto.de. Email security score: 73/100 (grade B).
Does otto.de have an SPF record?
Yes, otto.de publishes an SPF record (-all qualifier).
What is otto.de's DMARC record?
otto.de publishes a DMARC record (_dmarc.otto.de) with a p=none policy.
Does otto.de use DKIM?
Yes, DKIM signatures were detected for otto.de.
Want to test another domain? Run a free email spoofing test.
Guides to understand these results
SPF Guide
Understand how SPF defines which servers are authorized to send emails for a domain.
DKIM Guide
Discover how DKIM cryptographically signs your emails to guarantee their authenticity.
DMARC Guide
Learn how DMARC orchestrates SPF and DKIM to protect your domain.
MTA-STS Guide
Learn how MTA-STS enforces TLS encryption to protect your emails in transit.
SPF vs DKIM vs DMARC
Compare the three protocols and understand how they work together.