Rafael Pfister
+41 58 510 22 08 Consulting

AVIA Osterwalder

osterwalder.ch

Industry
Energy
Headquarters
St. Gallen, St. Gallen
Type
private
Employees (approx.)
300
Checked on
19 October 2026
59/100Grade C

Protection against forged senders: not protected (monitoring only)

Points per criterion

  • MX 10 / 10
  • SPF 13 / 15
  • DKIM 20 / 20
  • DMARC 6 / 25
  • DNSSEC 10 / 10
  • Transport (MTA-STS/DANE) 0 / 15
  • TLS-RPT 0 / 5

Findings

  • ✕DMARC in monitoring mode only (p=none)

    p=none provides reports but does not reject a single forgery. The goal is p=reject.

  • !DKIM key below 2048 bits

    RSA-1024 is considered too weak (RFC 8301, M3AAWG). Rotate to 2048-bit keys.

  • !No MTA-STS

    Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.

  • !No TLS reporting (TLS-RPT)

    Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider
Microsoft 365
Upstream gateway
Hornetsecurity
Provider jurisdiction
USA · MX: DE, CH
Detection confidence
90 / 100
Microsoft tenant
Managed · Osterwalder St. Gallen AG
Tenant region
EU
Signals (5)
SPFMicrosoft 365include:spf.protection.outlook.com
Domain verificationMicrosoft 365MS=ms92734245
Domain verificationGoogle Workspacegoogle-site-verification=rPWyl1RJbH8N77C
NetworkSwiss hosterAS6730 SUNRISE - Sunrise GmbH
Entra IDMicrosoft 365Entra-ID-Tenant (Managed)

MX servers

PrefHostIPNetworkCountryTLSA
10 mx01.hornetsecurity.com 94.100.132.8 AS25394 MK-NETZDIENSTE-AS - MK Netzdienste Verwaltungs GmbH trading as MK Netzdienste GmbH & Co. KG DE –
20 mx02.hornetsecurity.com 94.100.136.8 AS24679 SSERV-AS - kyberio GmbH DE –
30 mail.osterwalder.ch 62.12.145.186 AS15623 CYBERLINK - Cyberlink AG CH –
40 mail2.osterwalder.ch 46.140.73.194 AS6730 SUNRISE - Sunrise GmbH CH –
70 mxhost.osterwalder.ch 62.12.145.186 AS15623 CYBERLINK - Cyberlink AG CH –
80 mxhost2.osterwalder.ch 62.12.145.186 AS15623 CYBERLINK - Cyberlink AG CH –

SPF

v=spf1 mx ip4:62.12.145.186 ip4:46.140.73.194 ip4:213.193.99.130 ip4:92.43.217.114 ip4:176.28.8.241 include:ostendis.ch include:agenturserver.de include:spf.hornetsecurity.com include:spf.protection.outlook.com ~all
all
~all
DNS lookups
6 / 10
Includes
ostendis.chagenturserver.despf.hornetsecurity.comspf.protection.outlook.com
Detected sending services
Microsoft 365, Hornetsecurity
IPv4
5 addresses authorised directly

DMARC

v=DMARC1; p=none; rua=mailto:dmarc@osterwalder.ch; ruf=mailto:dmarc@osterwalder.ch; rf=afrf; pct=100; ri=86400
Policy
p=none
Subdomains (sp)
inherits p=none
Share (pct)
100 %
Alignment DKIM/SPF
relaxed / relaxed
Aggregate reports (rua)
dmarc@osterwalder.ch
Forensic reports (ruf)
dmarc@osterwalder.ch

DKIM

SelectorKeydelegated to
k2 RSA 2048 dkim2.mcsv.net
k3 RSA 2048 dkim3.mcsv.net
mail RSA 1024 –

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS
missing
DANE
missing
DNSSEC
active
TLS-RPT
missing
BIMI
missing

Verified services

From verification records in the domain TXT: services where the domain is verified.

Microsoft 365GoogleBrevo

History

  • Score 59 · DMARC none

All changes of this organisation in the change log →

Raw data 
osterwalder.ch. IN MX 10 mx01.hornetsecurity.com.
osterwalder.ch. IN MX 20 mx02.hornetsecurity.com.
osterwalder.ch. IN MX 30 mail.osterwalder.ch.
osterwalder.ch. IN MX 40 mail2.osterwalder.ch.
osterwalder.ch. IN MX 70 mxhost.osterwalder.ch.
osterwalder.ch. IN MX 80 mxhost2.osterwalder.ch.
osterwalder.ch. IN TXT "v=spf1 mx ip4:62.12.145.186 ip4:46.140.73.194 ip4:213.193.99.130 ip4:92.43.217.114 ip4:176.28.8.241 include:ostendis.ch include:agenturserver.de include:spf.hornetsecurity.com include:spf.protection.outlook.com ~all"
_dmarc.osterwalder.ch. IN TXT "v=DMARC1; p=none; rua=mailto:dmarc@osterwalder.ch; ruf=mailto:dmarc@osterwalder.ch; rf=afrf; pct=100; ri=86400"

More from this industry

← Back to overview