Abraxas Informatik

abraxas.ch

Industry: Telecom, IT & media
Headquarters: St. Gallen, St. Gallen
Type: public
Employees (approx.): 900
Checked on: 19 October 2026

85/100Grade A

Protection against forged senders: protected

Points per criterion

MX 10 / 10
SPF 15 / 15
DKIM 20 / 20
DMARC 25 / 25
DNSSEC 10 / 10
Transport (MTA-STS/DANE) 0 / 15
TLS-RPT 5 / 5

Industry avg.: 63.6 ▲ 21.4
Canton avg.: 52.3 ▲ 32.7
Overall avg.: 53.5 ▲ 31.5
Rank 5 of 50 in the industry

Findings

!DKIM key below 2048 bits

RSA-1024 is considered too weak (RFC 8301, M3AAWG). Rotate to 2048-bit keys.
!No MTA-STS

Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider: Microsoft 365
Upstream gateway: Abraxas
Provider jurisdiction: USA · MX: CH
Detection confidence: 42 / 100
Microsoft tenant: Managed · Abraxas Informatik AG
Tenant region: EU

Signals (4)

Autodiscover	Microsoft 365	`autodiscover.outlook.com`
Domain verification	Microsoft 365	`MS=ms37314169`
Domain verification	Google Workspace	`google-site-verification=VGJWwX6iHDyaDUD`
Entra ID	Microsoft 365	`Entra-ID-Tenant (Managed)`

MX servers

Pref	Host	IP	Network	Country	TLSA
10	`mta1.abxsec.com`	`193.246.95.101`	AS9108 ABXnet - Abraxas Informatik AG	CH	–
10	`mta2.abxsec.com`	`193.246.95.121`	AS9108 ABXnet - Abraxas Informatik AG	CH	–

SPF

v=spf1 mx include:_spf.abxsec.com include:spf.sendinblue.com include:_spf.senders.scnem.com ip4:195.201.245.180 ip4:212.25.0.148 ip4:212.25.0.144 ip4:185.142.212.159 ip6:2001:1680:101:30d::1 ip4:46.140.189.32/28 ip4:193.201.168.0/24 a:mail01.refline.ch a:mail02.refline.ch ip4:168.119.10.19 ip4:193.246.64.1 ip4:194.56.188.201 include:spf.kontainer.com -all

all: -all
DNS lookups: 7 / 10
Includes: _spf.abxsec.comspf.sendinblue.com_spf.senders.scnem.comspf.kontainer.com
Detected sending services: Brevo
IPv4: 279 addresses authorised directly

DMARC

v=DMARC1;p=reject;sp=reject;pct=100;rua=mailto:secsys-rua@abraxas.ch;ruf=mailto:secsys-ruf@abraxas.ch;adkim=r;aspf=r;

Policy: p=reject
Subdomains (sp): reject
Share (pct): 100 %
Alignment DKIM/SPF: relaxed / relaxed
Aggregate reports (rua): secsys-rua@abraxas.ch
Forensic reports (ruf): secsys-ruf@abraxas.ch

DKIM

Selector	Key	delegated to
`mail`	RSA 1024	–
`s1`	RSA 2048	`s1.domainkey.u18171442.wl193.sendgrid.net`
`s2`	RSA 1024	`s2.domainkey.u18171442.wl193.sendgrid.net`

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS: missing
DANE: missing
DNSSEC: active
TLS-RPT: mailto:tlsrpt@abxsec.com
BIMI: missing

Verified services

From verification records in the domain TXT: services where the domain is verified.

Microsoft 365GoogleAppleHave I Been PwnedMiroBrevo

History

18 October 2026 Score 85 · DMARC reject

All changes of this organisation in the change log →

Raw data

abraxas.ch. IN MX 10 mta1.abxsec.com.
abraxas.ch. IN MX 10 mta2.abxsec.com.
abraxas.ch. IN TXT "v=spf1 mx include:_spf.abxsec.com include:spf.sendinblue.com include:_spf.senders.scnem.com ip4:195.201.245.180 ip4:212.25.0.148 ip4:212.25.0.144 ip4:185.142.212.159 ip6:2001:1680:101:30d::1 ip4:46.140.189.32/28 ip4:193.201.168.0/24 a:mail01.refline.ch a:mail02.refline.ch ip4:168.119.10.19 ip4:193.246.64.1 ip4:194.56.188.201 include:spf.kontainer.com -all"
_dmarc.abraxas.ch. IN TXT "v=DMARC1;p=reject;sp=reject;pct=100;rua=mailto:secsys-rua@abraxas.ch;ruf=mailto:secsys-ruf@abraxas.ch;adkim=r;aspf=r;"
_smtp._tls.abraxas.ch. IN TXT "v=TLSRPTv1; rua=mailto:tlsrpt@abxsec.com"

More from this industry

← Back to overview