Sparkasse Zürcher Oberland

szo.ch

Industry: Banking
Headquarters: Wetzikon, Zurich
Type: private
Employees (approx.): 50
Checked on: 19 October 2026

42/100Grade C

Protection against forged senders: largely protected

Points per criterion

MX 10 / 10
SPF 13 / 15
DKIM 0 / 20
DMARC 19 / 25
DNSSEC 0 / 10
Transport (MTA-STS/DANE) 0 / 15
TLS-RPT 0 / 5

Industry avg.: 54.8 ▼ 12.8
Canton avg.: 53 ▼ 11
Overall avg.: 53.5 ▼ 11.5
Rank 72 of 98 in the industry

Findings

!DMARC without reporting (no rua)

Without aggregate reports it stays invisible who sends in the domain's name.
!No DKIM key found

No key was found under more than 100 common selectors. A custom selector is possible, but without DKIM there is no cryptographic sender check.
!DNSSEC not enabled

Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.
!No MTA-STS

Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.
!No TLS reporting (TLS-RPT)

Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.
iStrict DMARC alignment

adkim=s or aspf=s requires exact domain matches. Secure, but demanding when sending from subdomains.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider: Self-hosted / other
Provider jurisdiction: Switzerland · MX: CH
Detection confidence: 85 / 100

MX servers

Pref	Host	IP	Network	Country	TLSA
10	`mail.szo.ch`	`80.74.133.2`	AS21069 ASN-METANET - METANET AG	CH	–

SPF

v=spf1 include:_spf.sui-inter.net +mx +a ~all

all: ~all
DNS lookups: 3 / 10
Includes: _spf.sui-inter.net

DMARC

v=DMARC1; p=quarantine; adkim=s; aspf=s

Policy: p=quarantine
Subdomains (sp): inherits p=quarantine
Share (pct): 100 %
Alignment DKIM/SPF: strict / strict
Aggregate reports (rua): –

DKIM

No DKIM key found

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS: missing
DANE: missing
DNSSEC: missing
TLS-RPT: missing
BIMI: missing

History

19 October 2026 Score 42 · DMARC quarantine

All changes of this organisation in the change log →

Raw data

szo.ch. IN MX 10 mail.szo.ch.
szo.ch. IN TXT "v=spf1 include:_spf.sui-inter.net +mx +a ~all"
_dmarc.szo.ch. IN TXT "v=DMARC1; p=quarantine; adkim=s; aspf=s"

More from this industry

← Back to overview