Commune de Tramelan

tramelan.ch

Industry
Municipalities
Headquarters
Tramelan, Bern
Type
public
Population
4,670
FSO no.
446
Checked on
19 October 2026
74/100Grade B

Protection against forged senders: largely protected

Points per criterion

  • MX 10 / 10
  • SPF 15 / 15
  • DKIM 20 / 20
  • DMARC 19 / 25
  • DNSSEC 10 / 10
  • Transport (MTA-STS/DANE) 0 / 15
  • TLS-RPT 0 / 5

Findings

  • !DMARC without reporting (no rua)

    Without aggregate reports it stays invisible who sends in the domain's name.

  • !DKIM key below 2048 bits

    RSA-1024 is considered too weak (RFC 8301, M3AAWG). Rotate to 2048-bit keys.

  • !No MTA-STS

    Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.

  • !No TLS reporting (TLS-RPT)

    Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider
Self-hosted / other
Provider jurisdiction
Switzerland · MX: CH
Detection confidence
85 / 100
Microsoft tenant
Managed · Commune de Tramelan
Tenant region
EU
Signals (3)
Domain verificationMicrosoft 365MS=ms96550500
NetworkInfomaniakAS29222 Infomaniak-AS - Infomaniak Network SA
Entra IDMicrosoft 365Entra-ID-Tenant (Managed)

MX servers

PrefHostIPNetworkCountryTLSA
1 mx140.zline.ch 195.15.223.62 AS29222 Infomaniak-AS - Infomaniak Network SA CH –
5 mx3.zline.ch 212.74.177.176 AS12651 IPWORLDCOM - IP worldcom SA CH –
10 mx30.zline.ch 212.74.141.25 AS12651 IPWORLDCOM - IP worldcom SA CH –

SPF

v=spf1 ip4:83.166.134.44 ip4:109.164.210.48/28 include:spf.zline.ch include:spf.mandrillapp.com -all
all
-all
DNS lookups
2 / 10
Includes
spf.zline.chspf.mandrillapp.com
Detected sending services
Mailchimp/Mandrill, Mailchimp Transactional
IPv4
17 addresses authorised directly

DMARC

v=DMARC1; p=quarantine; sp=quarantine; adkim=r; aspf=r
Policy
p=quarantine
Subdomains (sp)
quarantine
Share (pct)
100 %
Alignment DKIM/SPF
relaxed / relaxed
Aggregate reports (rua)
–

DKIM

SelectorKeydelegated to
mandrill RSA 1024 –

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS
missing
DANE
missing
DNSSEC
active
TLS-RPT
missing
BIMI
missing

Verified services

From verification records in the domain TXT: services where the domain is verified.

Microsoft 365

History

  • Score 74 · DMARC quarantine

All changes of this organisation in the change log →

Raw data
tramelan.ch. IN MX 1 mx140.zline.ch.
tramelan.ch. IN MX 5 mx3.zline.ch.
tramelan.ch. IN MX 10 mx30.zline.ch.
tramelan.ch. IN TXT "v=spf1 ip4:83.166.134.44 ip4:109.164.210.48/28 include:spf.zline.ch include:spf.mandrillapp.com -all"
_dmarc.tramelan.ch. IN TXT "v=DMARC1; p=quarantine; sp=quarantine; adkim=r; aspf=r"

More from this industry

← Back to overview