Pensionskasse Profaro

profaro.ch

13/100Grade D

Protection against forged senders: not protected

Points per criterion

✕No DMARC record

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.
!No MX record

Without MX, senders fall back to the domain's A record. For an active mail domain this is a misconfiguration.
!SPF uses the deprecated ptr mechanism

RFC 7208 discourages ptr: slow, unreliable and partly ignored by large receivers.
!No DKIM key found

No key was found under more than 100 common selectors. A custom selector is possible, but without DKIM there is no cryptographic sender check.
!DNSSEC not enabled

Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.
!No MTA-STS

Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.
!No TLS reporting (TLS-RPT)

Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Pref	Host	IP	Network	Country	TLSA

v=spf1 ip4:84.253.12.171 ip4:46.14.238.75 mx ptr a:mail.tellco.ch a:smtp.tellco.ch ~all

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

No DKIM key found

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Raw data

profaro.ch. IN TXT "v=spf1 ip4:84.253.12.171 ip4:46.14.238.75 mx ptr a:mail.tellco.ch a:smtp.tellco.ch ~all"