DE EN IT

~/home / e-mail ranking: germany

E-mail ranking: Germany.

Can someone send mail in the name of these domains without it landing in spam? We read SPF, DMARC and MTA-STS of 40 domains from public DNS, as of 6 November 2026.

AllGermanyItalyBanks

40domains checked
20with DMARC p=reject
50 %without an effective DMARC block
80median score

50% of the domains do not reject forged mail (no DMARC, p=none or p=quarantine).

Grade distribution

RankDomainScoreSPFSPF -allDMARCPolicyReportsMTA-STS
1Acommerzbank.de100SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: yesCheck live
2Abund.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
3Abundesregierung.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
4Acomdirect.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
5Adeutsche-bank.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
6Ahetzner.com90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
7Aing.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
8Akaufland.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
9Amediamarkt.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
10Arewe.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
11Atagesschau.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
12Avodafone.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: yesCheck live
13Azalando.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
14Bconsorsbank.de83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
15Bdhl.de83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
16Bebay.de83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
17Bn26.com83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
18Bstrato.de83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
19Bwelt.de83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
20B1und1.de80SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
21Bamazon.de80SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
22Bhypovereinsbank.de80SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
23Bspiegel.de80SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
24Bbild.de75SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
25Bgmx.net75SPF: yesSPF -all: noDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: yesCheck live
26Bionos.de75SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
27Bweb.de75SPF: yesSPF -all: noDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: yesCheck live
28Ctargobank.de73SPF: yesSPF -all: noDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
29Ctelekom.de73SPF: yesSPF -all: noDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
30Cdeutschebahn.com70SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: yesCheck live
31Ct-online.de63SPF: yesSPF -all: noDMARC: yesDMARC policy: noneReports: yesMTA-STS: yesCheck live
32Cdkb.de60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
33Clidl.de60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
34Cotto.de60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
35Cpostbank.de60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
36Csparkasse.de55SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: noMTA-STS: noCheck live
37Csueddeutsche.de55SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: noMTA-STS: noCheck live
38Dheise.de53SPF: yesSPF -all: noDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
39Dzeit.de48SPF: yesSPF -all: noDMARC: yesDMARC policy: noneReports: noMTA-STS: noCheck live
40Fvolksbank.de0SPF: noSPF -all: noDMARC: noDMARC policy: –Reports: noMTA-STS: noCheck live

And your domain?

Check SPF, DMARC and MX in ten seconds.

Create a DMARC record →

Why it matters

Without DMARC at p=reject, scammers can send mail with exactly this sender address and many mailboxes will deliver it. That is how a lot of phishing in the name of banks, parcel services and authorities works. SPF says which servers may send; DMARC tells the receiver what to do with forgeries.

How we measured

Public DNS queries only; nothing is sent to the domains. Points: SPF present 20, SPF with -all 15 (~all 8), DMARC present 20, p=reject 30 (quarantine 20), reports (rua) 5, MTA-STS 10. Grade A from 90, B from 75, C from 55, D from 35, otherwise F. The main domain is measured (the organisational domain for subdomains).

Reading it fairly

DKIM cannot be checked from outside without the selector, so it is left out. p=quarantine is better than nothing but protects less than reject. A low grade does not mean the provider's mail is insecure, only that forgeries get through more easily.

Also: header ranking (HSTS, CSP & co) →