Sauter

sauter-controls.com

Industry
Machinery & electrical
Headquarters
Basel, Basel-City
Type
private
Employees (approx.)
800
Checked on
19 October 2026
50/100Grade C

Protection against forged senders: protected

Points per criterion

  • MX 10 / 10
  • SPF 15 / 15
  • DKIM 0 / 20
  • DMARC 25 / 25
  • DNSSEC 0 / 10
  • Transport (MTA-STS/DANE) 0 / 15
  • TLS-RPT 0 / 5

Findings

  • !External report receiver not authorised

    The authorisation record for an external rua domain is missing (RFC 7489 §7.1); many receivers then send no reports.

  • !No DKIM key found

    No key was found under more than 100 common selectors. A custom selector is possible, but without DKIM there is no cryptographic sender check.

  • !DNSSEC not enabled

    Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.

  • !No MTA-STS

    Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.

  • !No TLS reporting (TLS-RPT)

    Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider
Europäischer Hoster
Provider jurisdiction
Europe · MX: FR
Detection confidence
80 / 100
Signals (1)
MXEuropean hosterspool.mail.gandi.net

MX servers

PrefHostIPNetworkCountryTLSA
10 spool.mail.gandi.net 217.70.178.1 AS29169 GANDI-AS - GANDI SAS FR –
50 fb.mail.gandi.net 217.70.178.215 AS29169 GANDI-AS - GANDI SAS FR –
217.70.178.217 AS29169 GANDI-AS - GANDI SAS FR
217.70.178.216 AS29169 GANDI-AS - GANDI SAS FR

SPF

v=spf1 mx ip4:194.40.245.0/24 ip4:185.8.208.0/22 include:_spf-bc-sauter.badencloud.de -all
all
-all
DNS lookups
2 / 10
Includes
_spf-bc-sauter.badencloud.de
IPv4
1,280 addresses authorised directly

DMARC

v=DMARC1; p=reject; rua=mailto:soc@sautergroup.com; fo=1
Policy
p=reject
Subdomains (sp)
inherits p=reject
Share (pct)
100 %
Alignment DKIM/SPF
relaxed / relaxed
Aggregate reports (rua)
soc@sautergroup.com

DKIM

No DKIM key found

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS
missing
DANE
missing
DNSSEC
missing
TLS-RPT
missing
BIMI
missing

History

  • Score 50 · DMARC reject

All changes of this organisation in the change log →

Raw data
sauter-controls.com. IN MX 10 spool.mail.gandi.net.
sauter-controls.com. IN MX 50 fb.mail.gandi.net.
sauter-controls.com. IN TXT "v=spf1 mx ip4:194.40.245.0/24 ip4:185.8.208.0/22 include:_spf-bc-sauter.badencloud.de -all"
_dmarc.sauter-controls.com. IN TXT "v=DMARC1; p=reject; rua=mailto:soc@sautergroup.com; fo=1"

More from this industry

← Back to overview