EWA Elektrizitätswerk Altdorf

ewa.ch

47/100Grade C

Protection against forged senders: not protected

Points per criterion

✕No DMARC record

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.
!No DKIM key found

No key was found under more than 100 common selectors. A custom selector is possible, but without DKIM there is no cryptographic sender check.
!No MTA-STS

Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.
!No TLS reporting (TLS-RPT)

Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.
iDANE active (TLSA with DNSSEC)

All MX hosts publish TLSA records secured by DNSSEC.

Signals (4)

MX	Swiss hoster	`mx1.mail.hostpoint.ch`
SPF	Swiss hoster	`include:spf.mail.hostpoint.ch`
Autodiscover	Swiss hoster	`autoconfig-nonssl.mail.hostpoint.ch`
Entra ID	Microsoft 365	`Entra-ID-Tenant (Managed)`

Pref	Host	IP	Network	Country	TLSA
10	`mx1.mail.hostpoint.ch`	`217.26.49.138`	AS29097 HOSTPOINT-AS - Hostpoint AG	CH	✓ DNSSEC
10	`mx2.mail.hostpoint.ch`	`217.26.49.139`	AS29097 HOSTPOINT-AS - Hostpoint AG	CH	✓ DNSSEC

v=spf1 redirect=spf.mail.hostpoint.ch

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

No DKIM key found

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Raw data

ewa.ch. IN MX 10 mx1.mail.hostpoint.ch.
ewa.ch. IN MX 10 mx2.mail.hostpoint.ch.
ewa.ch. IN TXT "v=spf1 redirect=spf.mail.hostpoint.ch"