Gemeinde Tübach
tuebach.ch
- Industry
- Municipalities
- Headquarters
- Tübach, St. Gallen
- Type
- public
- Population
- 1,587
- FSO no.
- 3218
- Checked on
- 19 October 2026
72/100Grade B
Protection against forged senders: protected
Points per criterion
- MX 10 / 10
- SPF 0 / 15
- DKIM 20 / 20
- DMARC 25 / 25
- DNSSEC 0 / 10
- Transport (MTA-STS/DANE) 12 / 15
- TLS-RPT 5 / 5
- Industry avg.: 50.9 ▲ 21.1
- Canton avg.: 52.3 ▲ 19.7
- Overall avg.: 53.5 ▲ 18.5
- Rank 362 of 2077 in the industry
Findings
-
!SPF contains void includes (1)
At least one include points to a domain without SPF. Usually a leftover of a retired service; it can cause a permerror.
-
!DKIM key below 2048 bits
RSA-1024 is considered too weak (RFC 8301, M3AAWG). Rotate to 2048-bit keys.
-
!DNSSEC not enabled
Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.
-
iStrict DMARC alignment
adkim=s or aspf=s requires exact domain matches. Secure, but demanding when sending from subdomains.
Who runs the mail?
- Mailbox provider
- Microsoft 365
- Upstream gateway
- Abraxas
- Provider jurisdiction
- USA · MX: CH
- Detection confidence
- 99 / 100
- Microsoft tenant
- Managed · Gemeinde Tübach
- Tenant region
- EU
Signals (5)
| SPF | Microsoft 365 | include:spf.protection.outlook.com |
|---|---|---|
| DKIM | Microsoft 365 | selector1 → selector1-tuebach-ch._domainkey.gemeindetuebach.onmicrosoft.com |
| Autodiscover | Microsoft 365 | autodiscover.outlook.com |
| Domain verification | Google Workspace | google-site-verification=h0CJ97DQ9GUpnex |
| Entra ID | Microsoft 365 | Entra-ID-Tenant (Managed) |
MX servers
| Pref | Host | IP | Network | Country | TLSA |
|---|---|---|---|---|---|
| 10 | mta1.abxsec.com | 193.246.95.101 | AS9108 ABXnet - Abraxas Informatik AG | CH | – |
| 10 | mta2.abxsec.com | 193.246.95.121 | AS9108 ABXnet - Abraxas Informatik AG | CH | – |
| 110 | smtasg01.abxsec.com | 193.246.95.121 | AS9108 ABXnet - Abraxas Informatik AG | CH | – |
| 111 | smtagb02.abxsec.com | 193.246.95.101 | AS9108 ABXnet - Abraxas Informatik AG | CH | – |
| 120 | smtazh01.abxsec.com | 193.246.95.101 | AS9108 ABXnet - Abraxas Informatik AG | CH | – |
| 121 | smtazh02.abxsec.com | 193.246.95.121 | AS9108 ABXnet - Abraxas Informatik AG | CH | – |
SPF
v=spf1 include:spf.protection.outlook.com include:_spf.mlsend.com mx include:_spf.abxsec.com include:_spf.mail.webland.ch include:_spf.ch.seppmail.cloud ~all- all
~all- DNS lookups
- 6 / 10
- Includes
spf.protection.outlook.com_spf.mlsend.com_spf.abxsec.com_spf.mail.webland.ch_spf.ch.seppmail.cloud- Detected sending services
- Microsoft 365, SEPPmail
DMARC
v=DMARC1; p=reject; rua=mailto:8b073e41@in.mailhardener.com; aspf=s; adkim=s; sp=reject; np=reject; ruf=mailto:8b073e41@in.mailhardener.com- Policy
- p=reject
- Subdomains (sp)
- reject
- np
- reject
- Share (pct)
- 100 %
- Alignment DKIM/SPF
- strict / strict
- Aggregate reports (rua)
8b073e41@in.mailhardener.com- Forensic reports (ruf)
8b073e41@in.mailhardener.com- Report services
- Mailhardener
DKIM
| Selector | Key | delegated to |
|---|---|---|
default | RSA 2048 | – |
ml | RSA 1024 | – |
selector1 | RSA 2048 | selector1-tuebach-ch._domainkey.gemeindetuebach.onmicrosoft.com |
Checked: 100 common selectors. Keys under custom selectors remain invisible.
Transport encryption
- MTA-STS
- Mode: enforce · max_age: 1,209,600 s · covers all MX: yes
- mx
mta1.abxsec.commta2.abxsec.comsmtasg01.abxsec.comsmtagb02.abxsec.comsmtazh01.abxsec.comsmtazh02.abxsec.com- DANE
- missing
- DNSSEC
- missing
- TLS-RPT
mailto:8b073e41@in.mailhardener.com- BIMI
- missing
Verified services
From verification records in the domain TXT: services where the domain is verified.
History
- Score 72 · DMARC reject
Raw data
tuebach.ch. IN MX 10 mta1.abxsec.com.
tuebach.ch. IN MX 10 mta2.abxsec.com.
tuebach.ch. IN MX 110 smtasg01.abxsec.com.
tuebach.ch. IN MX 111 smtagb02.abxsec.com.
tuebach.ch. IN MX 120 smtazh01.abxsec.com.
tuebach.ch. IN MX 121 smtazh02.abxsec.com.
tuebach.ch. IN TXT "v=spf1 include:spf.protection.outlook.com include:_spf.mlsend.com mx include:_spf.abxsec.com include:_spf.mail.webland.ch include:_spf.ch.seppmail.cloud ~all"
_dmarc.tuebach.ch. IN TXT "v=DMARC1; p=reject; rua=mailto:8b073e41@in.mailhardener.com; aspf=s; adkim=s; sp=reject; np=reject; ruf=mailto:8b073e41@in.mailhardener.com"
_mta-sts.tuebach.ch. IN TXT "v=STSv1; id=20190601000000Z"
_smtp._tls.tuebach.ch. IN TXT "v=TLSRPTv1; rua=mailto:8b073e41@in.mailhardener.com"