Lienhardt & Partner Privatbank
lienhardt.ch
Protection against forged senders: not protected (monitoring only)
Points per criterion
- MX 10 / 10
- SPF 13 / 15
- DKIM 0 / 20
- DMARC 6 / 25
- DNSSEC 0 / 10
- Transport (MTA-STS/DANE) 0 / 15
- TLS-RPT 0 / 5
- Industry avg.: 54.8 ▼ 25.8
- Canton avg.: 53 ▼ 24
- Overall avg.: 53.5 ▼ 24.5
- Rank 96 of 98 in the industry
Findings
-
✕DMARC in monitoring mode only (p=none)
p=none provides reports but does not reject a single forgery. The goal is p=reject.
-
!No DKIM key found
No key was found under more than 100 common selectors. A custom selector is possible, but without DKIM there is no cryptographic sender check.
-
!DNSSEC not enabled
Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.
-
!No MTA-STS
Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.
-
!No TLS reporting (TLS-RPT)
Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.
Who runs the mail?
- Mailbox provider
- Self-hosted / other
- Provider jurisdiction
- Switzerland · MX: CH
- Detection confidence
- 85 / 100
- Microsoft tenant
- Federated · Lienhardt & Partner Privatbank Zürich AG
- Tenant region
- EU
- Federated via
sts.esprit-netzwerk.ch
Signals (4)
| Domain verification | Microsoft 365 | MS=ms97973365 |
|---|---|---|
| Domain verification | Google Workspace | google-site-verification=tzapfC_uZCBwLOK |
| SPF | Swisscom | include:spf.swisscom.com |
| Entra ID | Microsoft 365 | Entra-ID-Tenant (Federated) |
MX servers
| Pref | Host | IP | Network | Country | TLSA |
|---|---|---|---|---|---|
| 10 | smtp3.hugy.ch | 195.64.134.122 | AS42059 HUGY - HuGy GmbH | CH | – |
| 10 | smtp2.hugy.ch | 195.64.134.121 | AS42059 HUGY - HuGy GmbH | CH | – |
| 10 | smtp1.hugy.ch | 195.64.134.124 | AS42059 HUGY - HuGy GmbH | CH | – |
| 20 | smtp4.hugy.ch | 195.64.134.123 | AS42059 HUGY - HuGy GmbH | CH | – |
| 30 | smtp5.hugy.ch | 5.183.1.4 | AS212865 NETCONNECT - netconnect AG | CH | – |
SPF
v=spf1 include:spf.hugy.ch include:spf.swisscom.com include:_spf4.xcampaign.de include:_spf6.xcampaign.de ip4:217.71.90.199/32 ip4:62.12.176.199 ip4:212.203.73.38 ip4:185.226.224.140 ip4:213.158.152.249 ~all- all
~all- DNS lookups
- 6 / 10
- Includes
spf.hugy.chspf.swisscom.com_spf4.xcampaign.de_spf6.xcampaign.de- Detected sending services
- Swisscom
- IPv4
- 5 addresses authorised directly
DMARC
v=DMARC1;p=none; pct=100;rua=mailto:reports-rua@lienhardt.ch; ruf=mailto:reports-ruf@lienhardt.ch;- Policy
- p=none
- Subdomains (sp)
- inherits p=none
- Share (pct)
- 100 %
- Alignment DKIM/SPF
- relaxed / relaxed
- Aggregate reports (rua)
reports-rua@lienhardt.ch- Forensic reports (ruf)
reports-ruf@lienhardt.ch
DKIM
No DKIM key found
Checked: 100 common selectors. Keys under custom selectors remain invisible.
Transport encryption
- MTA-STS
- missing
- DANE
- missing
- DNSSEC
- missing
- TLS-RPT
- missing
- BIMI
- missing
Verified services
From verification records in the domain TXT: services where the domain is verified.
Microsoft 365GoogleAtlassian
History
- Score 29 · DMARC none
Raw data
lienhardt.ch. IN MX 10 smtp3.hugy.ch.
lienhardt.ch. IN MX 10 smtp2.hugy.ch.
lienhardt.ch. IN MX 10 smtp1.hugy.ch.
lienhardt.ch. IN MX 20 smtp4.hugy.ch.
lienhardt.ch. IN MX 30 smtp5.hugy.ch.
lienhardt.ch. IN TXT "v=spf1 include:spf.hugy.ch include:spf.swisscom.com include:_spf4.xcampaign.de include:_spf6.xcampaign.de ip4:217.71.90.199/32 ip4:62.12.176.199 ip4:212.203.73.38 ip4:185.226.224.140 ip4:213.158.152.249 ~all"
_dmarc.lienhardt.ch. IN TXT "v=DMARC1;p=none; pct=100;rua=mailto:reports-rua@lienhardt.ch; ruf=mailto:reports-ruf@lienhardt.ch;"