zalando.fr email security: SPF, DKIM & DMARC
Is zalando.fr spoofable? See zalando.fr's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.
Last updated: June 3, 2026
SPF
Warningv=spf1 ip4:185.85.220.205 include:_spf.google.com include:spf.protection.outlook.com ~allDKIM
OKSelectors: googleDMARC
Warningv=DMARC1; p=none; rua=mailto:dmarc_reports@zalando.fr; ruf=mailto:dmarc_auth@zalando.fr;MX
OKaspmx.l.google.com, alt2.aspmx.l.google.com, alt1.aspmx.l.google.com, alt3.aspmx.l.google.com, alt4.aspmx.l.google.comRecommendations
1Change your DMARC policy from p=none to p=reject to block spoofing
With p=none, your DMARC record only monitors — it doesn't actually block spoofed emails. Attackers can still send emails as your domain and they'll be delivered normally. Switching to p=reject instructs receiving servers to drop fraudulent messages before they reach the inbox.
2Harden your SPF by replacing ~all with -all (hardfail)
With ~all (softfail), unauthorized senders are flagged but emails are usually still delivered. Switching to -all (hardfail) explicitly tells receiving servers to reject emails from unauthorized sources, providing much stronger protection against spoofing.
3Add MTA-STS to enforce TLS encryption for incoming emails
Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.
Need help securing your domain?
If you're not sure how to apply these fixes, get in touch and we'll help you out.
Contact usRun a live analysis
The results above are updated daily. For an instant check of zalando.fr, run a live analysis.
Analyze zalando.fr liveFrequently asked questions about zalando.fr
Is zalando.fr spoofable?
Yes. zalando.fr does not enforce a strong DMARC policy, so attackers may be able to send emails that appear to come from zalando.fr. Email security score: 63/100 (grade C).
Does zalando.fr have an SPF record?
Yes, zalando.fr publishes an SPF record (~all qualifier).
What is zalando.fr's DMARC record?
zalando.fr publishes a DMARC record (_dmarc.zalando.fr) with a p=none policy.
Does zalando.fr use DKIM?
Yes, DKIM signatures were detected for zalando.fr.
Want to test another domain? Run a free email spoofing test.
Guides to understand these results
SPF Guide
Understand how SPF defines which servers are authorized to send emails for a domain.
DKIM Guide
Discover how DKIM cryptographically signs your emails to guarantee their authenticity.
DMARC Guide
Learn how DMARC orchestrates SPF and DKIM to protect your domain.
MTA-STS Guide
Learn how MTA-STS enforces TLS encryption to protect your emails in transit.
SPF vs DKIM vs DMARC
Compare the three protocols and understand how they work together.