karrierebibel.de

Delegation · The nameservers at the parent and in the zone should be the same. 01.rack26ns.de, 02.rack26ns.de, 03.rack26ns.de, 04.rack26ns.de, ns1.hostpress.de, ns2.hostpress.de, ns3.hostpress.de, ns4.hostpress.de report NS 01.rack26ns.de 02.rack26ns.de 03.rack26ns.de 04.rack26ns.de. Only at the parent: ns1.hostpress.de, ns2.hostpress.de, ns3.hostpress.de, ns4.hostpress.de; only in the zone: 01.rack26ns.de, 02.rack26ns.de, 03.rack26ns.de, 04.rack26ns.de.

DNSSEC · The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

Records · These records have a TTL below 5m, causing extra queries and slower lookups: A (1m). Low TTLs are useful just before a planned change.

DMARC · DMARC policy is set to 'quarantine'. Consider upgrading to 'reject' for stronger protection once you've verified legitimate emails are passing authentication.

DNSSEC · DNSSEC is not enabled for this domain. Consider enabling DNSSEC to protect against DNS spoofing attacks.

MX · The following MX hosts could not be resolved to IPv6 addresses: mail.karrierebibel.de

MX · Only one MX record found. For better email reliability, consider adding at least one backup MX server.

DMARC · DMARC record has no rua tag, so you receive no aggregate reports about who sends mail as your domain. Add rua=mailto:...

TLS · MTA-STS is not configured, so other mail servers fall back to unencrypted delivery when TLS fails or is stripped by an attacker. Publish a _mta-sts TXT record and a policy at https://mta-sts.<domain>/.well-known/mta-sts.txt.