Rafael Pfister
+41 58 510 22 08 Consulting

Randstad Schweiz

randstad.ch

Industry
Staffing & facility services
Headquarters
Wallisellen, Zurich
Type
private
Employees (approx.)
400
Checked on
19 October 2026
78/100Grade B

Protection against forged senders: protected

Points per criterion

  • MX 10 / 10
  • SPF 13 / 15
  • DKIM 20 / 20
  • DMARC 25 / 25
  • DNSSEC 10 / 10
  • Transport (MTA-STS/DANE) 0 / 15
  • TLS-RPT 0 / 5

Findings

  • !DKIM key below 2048 bits

    RSA-1024 is considered too weak (RFC 8301, M3AAWG). Rotate to 2048-bit keys.

  • !No MTA-STS

    Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.

  • !No TLS reporting (TLS-RPT)

    Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider
Google Workspace
Provider jurisdiction
USA · MX: US
Detection confidence
96 / 100
Microsoft tenant
Managed · Randstad Global IT Solutions BV
Tenant region
EU
Signals (8)
Domain verificationMicrosoft 365MS=ms91816863
MXGoogle Workspaceaspmx.l.google.com
SPFGoogle Workspaceinclude:_spf.google.com
DKIMGoogle Workspacegoogle
Domain verificationGoogle Workspacegoogle-site-verification=noFInTBMsxO9rh-
NetworkGoogle WorkspaceAS15169 GOOGLE - Google LLC
Domain verificationAmazonamazonses:2ljPeFNDiJEZOFZxUolU8iVvQiFjQP
Entra IDMicrosoft 365Entra-ID-Tenant (Managed)

MX servers

PrefHostIPNetworkCountryTLSA
1 aspmx.l.google.com 142.251.127.26 AS15169 GOOGLE - Google LLC US –
5 alt1.aspmx.l.google.com 142.250.147.27 AS15169 GOOGLE - Google LLC US –
5 alt2.aspmx.l.google.com 172.253.152.26 AS15169 GOOGLE - Google LLC US –
10 alt3.aspmx.l.google.com 192.179.20.27 AS15169 GOOGLE - Google LLC US –
10 alt4.aspmx.l.google.com 192.178.158.27 AS15169 GOOGLE - Google LLC US –

SPF

v=spf1 include:spf1.randstad.ch include:144893465.spf04.hubspotemail.net include:spf2.randstad.ch include:_spf.google.com include:spf.smtp2go.com ip4:62.2.117.170 ip4:77.59.194.201 ip4:185.134.240.6 ip4:185.134.242.26 ~all
all
~all
DNS lookups
7 / 10
Includes
spf1.randstad.ch144893465.spf04.hubspotemail.netspf2.randstad.ch_spf.google.comspf.smtp2go.com
Detected sending services
HubSpot, Google
IPv4
4 addresses authorised directly

DMARC

v=DMARC1;p=reject;pct=100;rua=mailto:dmarc.reports@randstad.ch;ruf=mailto:dmarc.reports@randstad.ch
Policy
p=reject
Subdomains (sp)
inherits p=reject
Share (pct)
100 %
Alignment DKIM/SPF
relaxed / relaxed
Aggregate reports (rua)
dmarc.reports@randstad.ch
Forensic reports (ruf)
dmarc.reports@randstad.ch

DKIM

SelectorKeydelegated to
google RSA 2048 –
hs1 RSA 2048 randstad-ch.hs01a.dkim.hubspotemail.net
hs2 RSA 2048 randstad-ch.hs01b.dkim.hubspotemail.net
mail RSA 1024 –
s1 RSA 2048 s1.domainkey.u6391489.wl240.sendgrid.net
s2 RSA 1024 s2.domainkey.u6391489.wl240.sendgrid.net
sfdc RSA 2048 sfdc.gqvgw2.custdkim.salesforce.com
smtpapi RSA 1024 –

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS
missing
DANE
missing
DNSSEC
active
TLS-RPT
missing
BIMI
missing

Verified services

From verification records in the domain TXT: services where the domain is verified.

Microsoft 365GoogleAmazon SESOneTrustTeamViewer

History

  • Score 78 · DMARC reject

All changes of this organisation in the change log →

Raw data 
randstad.ch. IN MX 1 aspmx.l.google.com.
randstad.ch. IN MX 5 alt1.aspmx.l.google.com.
randstad.ch. IN MX 5 alt2.aspmx.l.google.com.
randstad.ch. IN MX 10 alt3.aspmx.l.google.com.
randstad.ch. IN MX 10 alt4.aspmx.l.google.com.
randstad.ch. IN TXT "v=spf1 include:spf1.randstad.ch include:144893465.spf04.hubspotemail.net include:spf2.randstad.ch include:_spf.google.com include:spf.smtp2go.com ip4:62.2.117.170 ip4:77.59.194.201 ip4:185.134.240.6 ip4:185.134.242.26 ~all"
_dmarc.randstad.ch. IN TXT "v=DMARC1;p=reject;pct=100;rua=mailto:dmarc.reports@randstad.ch;ruf=mailto:dmarc.reports@randstad.ch"

More from this industry

← Back to overview