kabelmail.de email servers, SPF and DMARC

kabelmail.de publishes 2 MX hosts, all at priority 10, so senders spread mail across them.

5 other domains we checked on the same day also route mail to hosts under vodafonemail.de, with different records from kabelmail.de: nexgo.de, vodafone.de, vodafonemail.de, ish.de and kabelbw.de.

The record on 5 November 2026 was v=spf1 include:vodafonemail.de ~all.

In plain terms, it delegates to vodafonemail.de. The top level uses 1 DNS-querying term; SPF allows 10 in total including nested includes (RFC 7208 §4.6.4).

It ends in a soft fail (~all): mail from unlisted servers should be accepted but treated as suspicious.

The record is v=DMARC1; p=reject; rua=mailto:[email protected],mailto:[email protected]; sp=none; fo=1.

p=reject asks receivers to refuse mail that fails DMARC. Subdomains get sp=none.

Aggregate reports go to rep.dmarcanalyzer.com and mediabeam.com, so the domain's owner sees who sends mail as @kabelmail.de.

What that means for you: if a contact gives an @kabelmail.de address and you send to them, nothing changes. But never put an @kabelmail.de address in the From line of mail sent through your own tool or ESP. It can't pass DMARC for kabelmail.de, and this policy tells receivers to refuse it.

_mta-sts.kabelmail.de publishes v=STSv1;id=20251103T120000Z, so kabelmail.de uses MTA-STS: sending servers that support it must deliver over verified TLS or not at all (RFC 8461).

1 other domain published exactly the same MX hosts and SPF record as kabelmail.de on 5 November 2026: unitybox.de. Mail to any of them lands on the same servers.

kabelmail.de shares mx3.vodafonemail.de and mx5.vodafonemail.de with arcor.de. When we tested those servers for arcor.de on 13 October 2026, the result was: Verifiable. The server rejects unknown recipients during the SMTP conversation.

Our checker treats @kabelmail.de like any domain: syntax, MX, disposable and role checks first, then a made-up address to rule out a catch-all, then your address at RCPT TO, disconnecting without sending. We have not tested @kabelmail.de itself, but its mail goes to the same servers as arcor.de, so expect @kabelmail.de results to follow the pattern described there. Each result carries its own reason.

DNS tells you where mail goes, not whether one person's mailbox still exists. For a list, run the whole file through a verifier before you send: invalid rows come out, risky rows (catch-all, unknown, refused) go in their own segment, and valid rows are safe to mail.