Skip to main content
DNS Tool
Executive's DNS Intelligence Brief
Generated 3 Apr 2026, 14:43 UTC
Duration 16.8s
Version v26.41.04
Integrity e26c7b0a2ed3deb373721e2e5c03eef58ee5ec201424d9ab6b24ded2f1e8973f7a614223d664f4783e063dcd95b47fbfa62a49cf7a1ff50efc56cf65b3035515
Subject Domain
maltejk.de

Executive's DNS Intelligence Brief

Board-level domain security assessment — maltejk.de

3 Apr 2026, 14:43 UTC · 16.8s · SHA-3-512: e26c✱✱✱✱ Verify
Engineer
DNS Security & Trust Posture
Risk Level: Low Risk
6 protocols configured, 3 not configured
1 recommendation
Analysis Confidence
MODERATE
Resolver agreement is inconsistent for some protocols, limiting confidence. Data currency and system maturity are adequate.
Email Spoofing
Protected
Brand Impersonation
Not Set Up
DNS Tampering
Protected
Certificate Control
Configured
What Requires Attention
Recommended Upgrade DMARC policy from quarantine to reject (p=reject) for maximum spoofing protection
The BIG Questions
Can this domain be impersonated by email? Unlikely SPF and DMARC quarantine policy enforced
Can DNS itself be tampered with? No DNSSEC signed and validated, cryptographic chain of trust verified
Can this brand be convincingly faked? Likely DMARC quarantine flags but does not reject spoofed mail (RFC 7489 §6.3), and no BIMI brand verification — lookalike domains display identically in inboxes; CAA restricts certificate issuance (RFC 8659 §4) but visual brand faking remains open
Is mail transport encryption enforced? Yes DANE/TLSA provides cryptographic transport verification
Is certificate issuance controlled? Yes CAA records restrict which certificate authorities may issue certificates
Does this domain publish AI agent instructions? Yes llms.txt and llms-full.txt published — AI models receive structured context about this domain
Is AI crawling of our content controlled? No robots.txt present but does not block AI crawlers — content may be freely scraped
Has someone manipulated AI recommendations about us? No No indicators of AI recommendation manipulation found
Are there hidden AI prompts on our site? No No hidden prompt artifacts found in page source
Domain Overview
Registrar Cloudflare Registrar
Email Provider Unknown
Web Hosting Unknown
DNS Hosting Cloudflare

Technical Findings

Email Authentication
Can this domain be impersonated by email? Unlikely — SPF and DMARC quarantine policy enforced
SPF (Sender Policy) Configured
DMARC (Policy) Configured Policy: quarantine
DKIM (Signatures) Not Detected
Mail Posture Moderately Protected
Mail Transport Security
Is mail transport encryption enforced? Yes — DANE/TLSA provides cryptographic transport verification
MTA-STS Partial
DANE / TLSA Active
TLS-RPT (Reporting) Not Configured
Mail Transport Enforced Policy-assessed 2 probes
DNS Security
Can DNS itself be tampered with? No — DNSSEC signed and validated, cryptographic chain of trust verified
DNSSEC Signed & Validated
DNSSEC fully configured and validated — AD (Authenticated Data) flag set by resolver 8.8.8.8 confirming cryptographic chain of trust from root to zone (RFC 4035 §3.2.3)
NS Delegation Healthy Managed DNS
Delegation Consistency 1 Issue
NS Fleet Health Healthy Diversity: Fair
DNSSEC Operations 1 Issue 2 keys, 0 sigs
Brand & Certificate Controls
Can this brand be convincingly faked? Likely — DMARC quarantine flags but does not reject spoofed mail (RFC 7489 §6.3), and no BIMI brand verification — lookalike domains display identically in inboxes; CAA restricts certificate issuance (RFC 8659 §4) but visual brand faking remains open
Is certificate issuance controlled? Yes — CAA records restrict which certificate authorities may issue certificates
BIMI (Brand Logo) Not Configured
CAA (Certificate) Configured
AI Surface Scanner Governance Active
Does this domain publish AI agent instructions? Yes — llms.txt and llms-full.txt published — AI models receive structured context about this domain
Is AI crawling of our content controlled? No — robots.txt present but does not block AI crawlers — content may be freely scraped
Has someone manipulated AI recommendations about us? No — No indicators of AI recommendation manipulation found
Are there hidden AI prompts on our site? No — No hidden prompt artifacts found in page source
LLM Context File llms.txt Found Domain provides structured context for AI models Extended
AI Crawler Governance Not Blocking No AI crawler restrictions found in robots.txt
Poisoning Indicators None Found No AI recommendation poisoning indicators detected
Hidden Prompt Artifacts None Found No hidden prompt artifacts detected
Public Exposure Clear No secrets detected in publicly accessible source
Priority Actions 3 total Achievable: Secure
Medium Upgrade DMARC to Reject

Your DMARC policy is set to quarantine. Upgrade to p=reject for maximum protection — reject instructs receivers to discard spoofed mail entirely rather than quarantining it.

Low Add TLS-RPT Reporting

Your domain has DNSSEC + DANE — the strongest email transport security available. TLS-RPT (TLS Reporting) sends you reports about TLS connection failures when other servers try to deliver mail to your domain.

Low Deploy MTA-STS

MTA-STS enforces TLS encryption for inbound mail delivery, preventing downgrade attacks on your mail transport.

Appendix — Additional Resources

Full technical details including raw DNS records, DKIM public keys, IP/ASN mappings, resolver consensus evidence, and verification commands are available in the Engineer's DNS Intelligence Report.

View Engineer's DNS Intelligence Report

Appendix — What AIs Are Being Told About This Organization What do AI systems see when they query this domain?

The following content is served to AI systems (ChatGPT, Gemini, Claude, Perplexity, and others) when they visit this domain. This is the organization's machine-readable narrative — it shapes how AI models describe, recommend, and represent this brand in conversations worldwide.

llms.txt (https://maltejk.de/.well-known/llms.txt)
<!DOCTYPE html>
<html lang="de">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="description"
    content="Die Webseite von Malte Jan Kaffenberger, @maltejk, mit Kontaktadresse (Email), Telefonnummer, Links zu Twitter, Github, Xing, LinkedIn und Facebook.">
<meta name="keywords"
    content="maltejk, malte jan kaffenberger, malte, berlin, kadsen ^_^, maltejk twitter, maltejk github, kaffenberger xing, kaffenberger linkedin, maltejk gpg key">
<meta name="msapplication-TileColor" content="#cfd8dc">
<meta name="msapplication-TileImage" content="/mstile-144x144.png">
<title>malte jan kaffenberger</title>
<link rel="shortcut icon" href="/favicon.ico">
<link rel="icon" type="image/png" href="/favicon.png" sizes="128x128">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/css/materialize.min.css">
<link rel="stylesheet" href="assets/css/main.css">
<div class="container">
    <div class="row valign-wrapper valign-box">
        <div class="col l8 offset-l2 m12">
            <div class="card horizontal small">
                <div class="card-image hide-on-small-only">
                    <img src="assets/img/myself-300px-v3.jpg" title="malte jan kaffenberger" alt="malte">
                </div>
                <div class="card-stacked">
                    <div class="card-content">
                        <span role="heading" aria-level="1" class="card-title shadowed-text">
                            Malte Jan Kaffenberger
                        </span>
                        <p class="hide-on-small-only">&nbsp;</p>
                        <p>
                            <span class="fa-stack fa-1x">
                                <i class="far fa-stack-2x fa-envelope grey-text text-darken-2" aria-hidden="true"></i>
                            </span>
                            <a class="grey-text text-darken-2" href="mailto:malte@maltejk.de"
                                title="email an malte@maltejk.de">
                                Email senden
                            </a>
                        </p>
                        <p title="gpg schl&uuml;ssel">
                            <span class="fa-stack fa-1x grey-text text-darken-2">
                                <i class="far fa-envelope fa-stack-2x" aria-hidden="true"></i>
                                <i class="fas fa-lock fa-stack-1x"></i>
                            </span>
                            <a class="grey-text text-darken-2"
                                href="https://keys.openpgp.org/search?q=CE3915955467830648A91E25D38FACC6F546FD25">
                                0xd38facc6f546fd25
                            </a>
                        </p>
                        <p title="eine sprachnachricht hinterlassen">
                            <span class="fa-stack fa-1x">
                                <i class="fas fa-voicemail fa-stack-2x grey-text text-darken-2 voicemail-icon"
                                    aria-hidden="true"></i>
                            </span>
                            <a href="tel:+493057707682" class="grey-text text-darken-2">
                                +49.30.57707682
                            </a>
                        </p>
                    </div>
                    <div class="card-action">
                        <span class="right">
                            <a class="grey-text text-darken-2" href="https://github.com/maltejk"
                                title="maltejk bei github">
                                <i class="fab fa-2x fa-github" aria-hidden="true"></i>
                                <span class="hide">maltejk bei Github</span>
                            </a>
                            <a class="grey-text text-darken-2" href="https://gitlab.com/maltejk"
                                title="maltejk bei gitlab">
                                <i class="fab fa-2x fa-gitlab" aria-hidden="true"></i>
                                <span class="hide">maltejk bei Gitlab</span>
                            </a>
                            <a class="grey-text text-darken-2" href="https://de.linkedin.com/in/maltejankaffenberger"
                                title="malte jan kaffenberger bei linkedin">
                                <i class="fab fa-2x fa-linkedin" aria-hidden="true"></i>
                                <span class="hide">Malte Jan Kaffenberger bei LinkedIn</span>
                            </a>
                            <a class="grey-text text-darken-2" href="https://keybase.io/maltejk"
                                title="maltejk bei keybase">
                                <i class="fab fa-2x fa-keybase" aria-hidden="true"></i>
                                <span class="hide">maltejk bei Keybase</span>
                            </a>
                        </span>
                    </div>
                </div>
            </div>
        </div>
    </div>
</div>
llms-full.txt (https://maltejk.de/.well-known/llms-full.txt)
<!DOCTYPE html>
<html lang="de">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="description"
    content="Die Webseite von Malte Jan Kaffenberger, @maltejk, mit Kontaktadresse (Email), Telefonnummer, Links zu Twitter, Github, Xing, LinkedIn und Facebook.">
<meta name="keywords"
    content="maltejk, malte jan kaffenberger, malte, berlin, kadsen ^_^, maltejk twitter, maltejk github, kaffenberger xing, kaffenberger linkedin, maltejk gpg key">
<meta name="msapplication-TileColor" content="#cfd8dc">
<meta name="msapplication-TileImage" content="/mstile-144x144.png">
<title>malte jan kaffenberger</title>
<link rel="shortcut icon" href="/favicon.ico">
<link rel="icon" type="image/png" href="/favicon.png" sizes="128x128">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/css/materialize.min.css">
<link rel="stylesheet" href="assets/css/main.css">
<div class="container">
    <div class="row valign-wrapper valign-box">
        <div class="col l8 offset-l2 m12">
            <div class="card horizontal small">
                <div class="card-image hide-on-small-only">
                    <img src="assets/img/myself-300px-v3.jpg" title="malte jan kaffenberger" alt="malte">
                </div>
                <div class="card-stacked">
                    <div class="card-content">
                        <span role="heading" aria-level="1" class="card-title shadowed-text">
                            Malte Jan Kaffenberger
                        </span>
                        <p class="hide-on-small-only">&nbsp;</p>
                        <p>
                            <span class="fa-stack fa-1x">
                                <i class="far fa-stack-2x fa-envelope grey-text text-darken-2" aria-hidden="true"></i>
                            </span>
                            <a class="grey-text text-darken-2" href="mailto:malte@maltejk.de"
                                title="email an malte@maltejk.de">
                                Email senden
                            </a>
                        </p>
                        <p title="gpg schl&uuml;ssel">
                            <span class="fa-stack fa-1x grey-text text-darken-2">
                                <i class="far fa-envelope fa-stack-2x" aria-hidden="true"></i>
                                <i class="fas fa-lock fa-stack-1x"></i>
                            </span>
                            <a class="grey-text text-darken-2"
                                href="https://keys.openpgp.org/search?q=CE3915955467830648A91E25D38FACC6F546FD25">
                                0xd38facc6f546fd25
                            </a>
                        </p>
                        <p title="eine sprachnachricht hinterlassen">
                            <span class="fa-stack fa-1x">
                                <i class="fas fa-voicemail fa-stack-2x grey-text text-darken-2 voicemail-icon"
                                    aria-hidden="true"></i>
                            </span>
                            <a href="tel:+493057707682" class="grey-text text-darken-2">
                                +49.30.57707682
                            </a>
                        </p>
                    </div>
                    <div class="card-action">
                        <span class="right">
                            <a class="grey-text text-darken-2" href="https://github.com/maltejk"
                                title="maltejk bei github">
                                <i class="fab fa-2x fa-github" aria-hidden="true"></i>
                                <span class="hide">maltejk bei Github</span>
                            </a>
                            <a class="grey-text text-darken-2" href="https://gitlab.com/maltejk"
                                title="maltejk bei gitlab">
                                <i class="fab fa-2x fa-gitlab" aria-hidden="true"></i>
                                <span class="hide">maltejk bei Gitlab</span>
                            </a>
                            <a class="grey-text text-darken-2" href="https://de.linkedin.com/in/maltejankaffenberger"
                                title="malte jan kaffenberger bei linkedin">
                                <i class="fab fa-2x fa-linkedin" aria-hidden="true"></i>
                                <span class="hide">Malte Jan Kaffenberger bei LinkedIn</span>
                            </a>
                            <a class="grey-text text-darken-2" href="https://keybase.io/maltejk"
                                title="maltejk bei keybase">
                                <i class="fab fa-2x fa-keybase" aria-hidden="true"></i>
                                <span class="hide">maltejk bei Keybase</span>
                            </a>
                        </span>
                    </div>
                </div>
            </div>
        </div>
    </div>
</div>
Why this matters: This content directly influences how AI models describe your organization, products, and services. Review it for accuracy, brand alignment, and competitive positioning. If no llms.txt exists, AI models rely on whatever they can scrape — with no editorial control.
Verify Report Integrity SHA-3-512 Has this report been tampered with? Verify below

Tamper-evident fingerprint binding this analysis to its data, domain, timestamp, and tool version.

e26c7b0a2ed3deb373721e2e5c03eef58ee5ec201424d9ab6b24ded2f1e8973f7a614223d664f4783e063dcd95b47fbfa62a49cf7a1ff50efc56cf65b3035515
12 RFCs evaluated · DNS state at 3 Apr 2026, 14:43 UTC