Gemeinde Bussnang

bussnang.ch

Industry
Municipalities
Headquarters
Bussnang, Thurgau
Type
public
Population
2,599
FSO no.
4921
Checked on
19 October 2026
55/100Grade C

Protection against forged senders: not protected

Points per criterion

  • MX 10 / 10
  • SPF 15 / 15
  • DKIM 20 / 20
  • DMARC 0 / 25
  • DNSSEC 10 / 10
  • Transport (MTA-STS/DANE) 0 / 15
  • TLS-RPT 0 / 5

Findings

  • ✕No DMARC record

    Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

  • !SPF close to the 10-lookup limit (8)

    One more sending service can break the limit. Flattening or subdomains for third parties create headroom.

  • !No MTA-STS

    Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.

  • !No TLS reporting (TLS-RPT)

    Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider
Self-hosted / other
Provider jurisdiction
Switzerland · MX: CH
Detection confidence
85 / 100
Microsoft tenant
Managed · Gemeindeverwaltung Bussnang
Tenant region
EU
Signals (4)
SPFMicrosoft 365include:spf.protection.outlook.com
Domain verificationMicrosoft 365MS=ms19064521
NetworkSwisscomAS3303 SWISSCOM - Swisscom (Schweiz) AG
Entra IDMicrosoft 365Entra-ID-Tenant (Managed)

MX servers

PrefHostIPNetworkCountryTLSA
0 mx.bussnang.ch 213.200.194.242 AS3303 SWISSCOM - Swisscom (Schweiz) AG CH –

SPF

v=spf1 mx include:tg.ch include:spf.protection.cyon.net include:spf.abxsec.com -all
all
-all
DNS lookups
8 / 10
Includes
tg.chspf.protection.cyon.netspf.abxsec.com
Detected sending services
Microsoft 365

DMARC

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

DKIM

SelectorKeydelegated to
default RSA 2048 –

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS
missing
DANE
missing
DNSSEC
active
TLS-RPT
missing
BIMI
missing

Verified services

From verification records in the domain TXT: services where the domain is verified.

Microsoft 365

History

  • Score 55 · DMARC -

All changes of this organisation in the change log →

Raw data
bussnang.ch. IN MX 0 mx.bussnang.ch.
bussnang.ch. IN TXT "v=spf1 mx include:tg.ch include:spf.protection.cyon.net include:spf.abxsec.com -all"

More from this industry

← Back to overview