other · DE

DKB

Deutsche Kreditbank AG

German direct bank (BayernLB subsidiary); "Das kann Bank" is its advertising slogan.

Primary official domain
dkb.de
Reviewed official domains
1 (directory review; organization has not verified)
Directory source
DomainSpoof directory · Suggest a correction
Matching domains, 30 days
0
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
1
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC none
SPF Could not fully evaluate (sender-specific macros) · Mail: Not checked · checked 2026-10-18 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
daskannbankdeutschekreditbank
Label aliases
Das kann Bank · Deutsche Kreditbank · DKB
Official domains
dkb.de (all)
Generated spellings
371 tracked · 0 observed somewhere · 371 not observed (all)

Official domains and email policies

Domains reviewed as belonging to DKB. DMARC helps receivers check the From domain; lookalike domains remain possible. Published policies cannot confirm actual mail configuration or receiver behavior.

DomainRelationshipEvidenceDMARC policyPolicy sourceSPFReportingMailDKIMMTA-STSLast check
dkb.de
primaryReviewed 2026-10-18
DomainSpoof directory (curated)noneDirectCould not fully evaluate (sender-specific macros)Aggregate reports requested (rua)Not checkedUnknown (no known selector)
Not checkedNot checked
2026-10-18 22:58 UTC
Records and check details

Published records

DMARC (_dmarc.dkb.de)
v=DMARC1; p=none; pct=100; rua=mailto:…@ag.eu.dmarcian.com; ruf=mailto:…@fr.eu.dmarcian.com; fo=1:d:s; adkim=r; aspf=r
SPF (dkb.de)
v=spf1 include:_spf.zimpel.de include:spf.mail.s-web.de include:_spf.dkb.de include:spf.protection.outlook.com include:_spf.salesforce.com include:_spf.axs-net.de include:mailout.p4.net include:spf.servicemail24.de -all
MX (dkb.de)
Not checked
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing, and no key at the probed common selectors proves nothing.
MTA-STS (_mta-sts.dkb.de)
Not checked
TLS-RPT (_smtp._tls.dkb.de)
Not checked

Interpretation

  • p=none: no quarantine/reject instruction (monitoring only).
  • Relaxed DKIM alignment (default).
  • Relaxed SPF alignment (default).
  • pct=100 is a legacy tag removed by RFC 9989; its effect is receiver-dependent.
  • Could not fully evaluate: the record uses sender-specific macros (for example %{i}) whose targets depend on each sending host, so a static check cannot evaluate them and this is not reported as a valid record.
  • -all: unlisted hosts fail SPF.
  • At least 9 DNS-querying terms (include, a, mx, ptr, exists, redirect), counted recursively; the limit is 10.

Observations

  • SPF (sender-specific): _spf.salesforce.com: exists:%{i}._spf.mta.salesforce.com uses a sender-dependent macro

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.dkb.de: ok, 1 DMARC record

Recent checks

  • 2026-10-18 22:58 UTC: DMARC none; SPF could not fully evaluate

Assessment posture-v2. DNS lookup failures leave the policy unknown.

“Not checked”: no check yet (mail, DKIM and MTA-STS facts were added later, so older checks show “Not checked” for them). “Lookup failed”: DNS result unknown. DKIM is probed at a fixed list of common selectors only. Report mailbox names are redacted.

Reports on official domains appear under “Official assets with reports” on the Reported matches tab.