Kanton Wallis
admin.vs.ch
- Industry
- Cantonal administrations
- Headquarters
- Sion, Valais
- Type
- public
- Checked on
- 19 October 2026
Protection against forged senders: not protected
Points per criterion
- MX 10 / 10
- SPF 15 / 15
- DKIM 0 / 20
- DMARC 0 / 25
- DNSSEC 0 / 10
- Transport (MTA-STS/DANE) 0 / 15
- TLS-RPT 0 / 5
- Industry avg.: 55.7 ▼ 30.7
- Canton avg.: 55.9 ▼ 30.9
- Overall avg.: 53.5 ▼ 28.5
- Rank 26 of 26 in the industry
Findings
-
✕No DMARC record
Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.
-
!SPF close to the 10-lookup limit (10)
One more sending service can break the limit. Flattening or subdomains for third parties create headroom.
-
!No DKIM key found
No key was found under more than 100 common selectors. A custom selector is possible, but without DKIM there is no cryptographic sender check.
-
!DNSSEC not enabled
Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.
-
!No MTA-STS
Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.
-
!No TLS reporting (TLS-RPT)
Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.
Who runs the mail?
- Mailbox provider
- Self-hosted / other
- Provider jurisdiction
- Switzerland · MX: CH
- Detection confidence
- 85 / 100
- Microsoft tenant
- Federated · Etat du Valais - Staat Wallis
- Tenant region
- EU
- Federated via
adfs.vs.ch
Signals (3)
| SPF | Microsoft 365 | include:spf.protection.outlook.com |
|---|---|---|
| SPF | Amazon | include:amazonses.com |
| Entra ID | Microsoft 365 | Entra-ID-Tenant (Federated) |
MX servers
| Pref | Host | IP | Network | Country | TLSA |
|---|---|---|---|---|---|
| 10 | ktvmx03.mail.admin.ch | 162.23.22.171 | AS33845 SWISSGOV - SWISSGOV | CH | – |
| 10 | ktvmx04.mail.admin.ch | 162.23.23.171 | AS33845 SWISSGOV - SWISSGOV | CH | – |
| 10 | ktvmx02.mail.admin.ch | 162.23.23.161 | AS33845 SWISSGOV - SWISSGOV | CH | – |
| 10 | ktvmx01.mail.admin.ch | 162.23.22.161 | AS33845 SWISSGOV - SWISSGOV | CH | – |
SPF
v=spf1 redirect=_spf1.vs.ch- all
-all- DNS lookups
- 10 / 10
- Includes
_spf1.vs.ch_netblocks1.vs.ch_netblocks2.vs.ch- Detected sending services
- Infomaniak, Amazon SES, Salesforce, Microsoft 365
DMARC
Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.
DKIM
No DKIM key found
Checked: 100 common selectors. Keys under custom selectors remain invisible.
Transport encryption
- MTA-STS
- missing
- DANE
- missing
- DNSSEC
- missing
- TLS-RPT
- missing
- BIMI
- missing
Verified services
From verification records in the domain TXT: services where the domain is verified.
AppleCisco Webex
History
- Score 25 · DMARC -
Raw data
admin.vs.ch. IN MX 10 ktvmx03.mail.admin.ch.
admin.vs.ch. IN MX 10 ktvmx04.mail.admin.ch.
admin.vs.ch. IN MX 10 ktvmx02.mail.admin.ch.
admin.vs.ch. IN MX 10 ktvmx01.mail.admin.ch.
admin.vs.ch. IN TXT "v=spf1 redirect=_spf1.vs.ch"