SOCAR Energy Switzerland

socar.ch

Industry: Energy
Headquarters: Zürich, Zurich
Type: private
Employees (approx.): 800
Checked on: 19 October 2026

43/100Grade C

Protection against forged senders: not protected

Points per criterion

MX 10 / 10
SPF 13 / 15
DKIM 20 / 20
DMARC 0 / 25
DNSSEC 0 / 10
Transport (MTA-STS/DANE) 0 / 15
TLS-RPT 0 / 5

Industry avg.: 60.5 ▼ 17.5
Canton avg.: 53 ▼ 10
Overall avg.: 53.5 ▼ 10.5
Rank 42 of 43 in the industry

Findings

✕No DMARC record

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.
!DNSSEC not enabled

Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.
!No MTA-STS

Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.
!No TLS reporting (TLS-RPT)

Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider: Self-hosted / other
Upstream gateway: Proofpoint
Provider jurisdiction: unclear · MX: US, GB
Detection confidence: 85 / 100
Microsoft tenant: Managed · socar.ch
Tenant region: EU

Signals (1)

Entra ID	Microsoft 365	`Entra-ID-Tenant (Managed)`

MX servers

Pref	Host	IP	Network	Country	TLSA
10	`mx1-eu1.ppe-hosted.com`	`91.209.104.155`	AS52129 PROOFPOINT-ASN-EU - Proofpoint, Inc.	US	–
10	`mx1-eu1.ppe-hosted.com`	`185.132.181.16`	AS52129 PROOFPOINT-ASN-EU - Proofpoint, Inc.	GB	–
20	`mx2-eu1.ppe-hosted.com`	`185.132.181.17`	AS52129 PROOFPOINT-ASN-EU - Proofpoint, Inc.	GB	–
20	`mx2-eu1.ppe-hosted.com`	`91.209.104.156`	AS52129 PROOFPOINT-ASN-EU - Proofpoint, Inc.	US	–
100	`filtered.maildistiller.com`	`91.209.104.155`	AS52129 PROOFPOINT-ASN-EU - Proofpoint, Inc.	US	–
100	`filtered.maildistiller.com`	`185.132.181.16`	AS52129 PROOFPOINT-ASN-EU - Proofpoint, Inc.	GB	–

SPF

v=spf1 ip4:146.4.41.154 ip4:146.4.41.155 ip4:146.4.41.157 ~all

all: ~all
DNS lookups: 0 / 10
IPv4: 3 addresses authorised directly

DMARC

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

DKIM

Selector	Key	delegated to
`selector1`	RSA 2048	–
`selector2`	RSA 2048	–

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS: missing
DANE: missing
DNSSEC: missing
TLS-RPT: missing
BIMI: missing

History

18 October 2026 Score 43 · DMARC -

All changes of this organisation in the change log →

Raw data

socar.ch. IN MX 10 mx1-eu1.ppe-hosted.com.
socar.ch. IN MX 20 mx2-eu1.ppe-hosted.com.
socar.ch. IN MX 100 filtered.maildistiller.com.
socar.ch. IN TXT "v=spf1 ip4:146.4.41.154 ip4:146.4.41.155 ip4:146.4.41.157 ~all"

More from this industry

← Back to overview