Rafael Pfister
+41 58 510 22 08 Consulting

PSP Swiss Property

psp.info

Industry
Construction & real estate
Headquarters
Zug, Zug
Type
listed
Employees (approx.)
100
Checked on
19 October 2026
49/100Grade C

Protection against forged senders: not protected (monitoring only)

Points per criterion

  • MX 10 / 10
  • SPF 13 / 15
  • DKIM 20 / 20
  • DMARC 6 / 25
  • DNSSEC 0 / 10
  • Transport (MTA-STS/DANE) 0 / 15
  • TLS-RPT 0 / 5

Findings

  • ✕DMARC in monitoring mode only (p=none)

    p=none provides reports but does not reject a single forgery. The goal is p=reject.

  • !SPF close to the 10-lookup limit (9)

    One more sending service can break the limit. Flattening or subdomains for third parties create headroom.

  • !DKIM key below 2048 bits

    RSA-1024 is considered too weak (RFC 8301, M3AAWG). Rotate to 2048-bit keys.

  • !DNSSEC not enabled

    Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.

  • !No MTA-STS

    Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.

  • !No TLS reporting (TLS-RPT)

    Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider
Swisscom
Upstream gateway
Swisscom Mail Security
Provider jurisdiction
Switzerland · MX: CH
Detection confidence
92 / 100
Microsoft tenant
Managed · PSP Management AG
Tenant region
EU
Signals (7)
SPFMicrosoft 365include:spf.protection.outlook.com
Domain verificationMicrosoft 365MS=ms65839298
SPFAmazoninclude:amazonses.com
MXSwisscommail.swisscom.com
SPFSwisscominclude:spf.swisscom.com
NetworkSwisscomAS3303 SWISSCOM - Swisscom (Schweiz) AG
Entra IDMicrosoft 365Entra-ID-Tenant (Managed)

MX servers

PrefHostIPNetworkCountryTLSA
10 mail.swisscom.com 138.188.184.33 AS3303 SWISSCOM - Swisscom (Schweiz) AG CH –
138.188.176.225 AS3303 SWISSCOM - Swisscom (Schweiz) AG CH
20 mail10.swisscom.com 138.188.176.225 AS3303 SWISSCOM - Swisscom (Schweiz) AG CH –
20 mail20.swisscom.com 138.188.184.33 AS3303 SWISSCOM - Swisscom (Schweiz) AG CH –

SPF

v=spf1 a include:spf.swisscom.com include:spf.protection.outlook.com include:mailing.eqs.com include:servers.mcsv.net include:amazonses.com include:_spf.psm.knowbe4.com include:che.pb-dynmktge.com ip4:46.231.204.45 ip4:81.18.19.26 ip4:195.134.137.234 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.8.0/21 ~all
all
~all
DNS lookups
9 / 10
Includes
spf.swisscom.comspf.protection.outlook.commailing.eqs.comservers.mcsv.netamazonses.com_spf.psm.knowbe4.comche.pb-dynmktge.com
Detected sending services
Swisscom, Microsoft 365, Mailjet, Mailchimp/Mandrill, Amazon SES
IPv4
22,531 addresses authorised directly

DMARC

v=DMARC1;p=none;pct=100;rua=mailto:informatik@psp.info;ri=86400;fo=1
Policy
p=none
Subdomains (sp)
inherits p=none
Share (pct)
100 %
Alignment DKIM/SPF
relaxed / relaxed
Aggregate reports (rua)
informatik@psp.info

DKIM

SelectorKeydelegated to
k2 RSA 2048 dkim2.mcsv.net
k3 RSA 2048 dkim3.mcsv.net
mailjet RSA 1024 –

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS
missing
DANE
missing
DNSSEC
missing
TLS-RPT
missing
BIMI
missing

Verified services

From verification records in the domain TXT: services where the domain is verified.

Microsoft 365DocuSign

History

  • Score 49 · DMARC none

All changes of this organisation in the change log →

Raw data 
psp.info. IN MX 10 mail.swisscom.com.
psp.info. IN MX 20 mail10.swisscom.com.
psp.info. IN MX 20 mail20.swisscom.com.
psp.info. IN TXT "v=spf1 a include:spf.swisscom.com include:spf.protection.outlook.com include:mailing.eqs.com include:servers.mcsv.net include:amazonses.com include:_spf.psm.knowbe4.com include:che.pb-dynmktge.com ip4:46.231.204.45 ip4:81.18.19.26 ip4:195.134.137.234 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.8.0/21 ~all"
_dmarc.psp.info. IN TXT "v=DMARC1;p=none;pct=100;rua=mailto:informatik@psp.info;ri=86400;fo=1"

More from this industry

← Back to overview