TRANSPARENTA Sammelstiftung

transparenta.ch

Industry
Pension funds
Headquarters
Aesch, Aargau
Type
foundation
Checked on
19 October 2026
33/100Grade D

Protection against forged senders: not protected

Points per criterion

  • MX 10 / 10
  • SPF 13 / 15
  • DKIM 0 / 20
  • DMARC 0 / 25
  • DNSSEC 10 / 10
  • Transport (MTA-STS/DANE) 0 / 15
  • TLS-RPT 0 / 5

Findings

  • ✕No DMARC record

    Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

  • !No DKIM key found

    No key was found under more than 100 common selectors. A custom selector is possible, but without DKIM there is no cryptographic sender check.

  • !No MTA-STS

    Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.

  • !No TLS reporting (TLS-RPT)

    Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider
Self-hosted / other
Upstream gateway
Proofpoint
Provider jurisdiction
unclear · MX: US, GB, CH
Detection confidence
85 / 100
Microsoft tenant
Managed · alters-vorsorge.ch
Tenant region
EU
Signals (3)
Domain verificationGoogle Workspacegoogle-site-verification=rC39kyBeIkA9HeX
NetworkSwisscomAS3303 SWISSCOM - Swisscom (Schweiz) AG
Entra IDMicrosoft 365Entra-ID-Tenant (Managed)

MX servers

PrefHostIPNetworkCountryTLSA
0 mx1-eu1.ppe-hosted.com 91.209.104.155 AS52129 PROOFPOINT-ASN-EU - Proofpoint, Inc. US –
185.132.181.16 AS52129 PROOFPOINT-ASN-EU - Proofpoint, Inc. GB
0 mx2-eu1.ppe-hosted.com 185.132.181.17 AS52129 PROOFPOINT-ASN-EU - Proofpoint, Inc. GB –
91.209.104.156 AS52129 PROOFPOINT-ASN-EU - Proofpoint, Inc. US
100 mail.alters-vorsorge.ch 213.180.179.82 AS3303 SWISSCOM - Swisscom (Schweiz) AG CH –

SPF

v=spf1 mx +mx:hin.ch a:transparenta.ch ip4:54.229.2.165 ip4:52.30.130.201 ip4:213.180.179.82 a:mail.alters-vorsorge.ch ~all
all
~all
DNS lookups
4 / 10
IPv4
3 addresses authorised directly

DMARC

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

DKIM

No DKIM key found

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS
missing
DANE
missing
DNSSEC
active
TLS-RPT
missing
BIMI
missing

Verified services

From verification records in the domain TXT: services where the domain is verified.

GoogleGlobalSignLinkedIn

History

  • Score 33 · DMARC -

All changes of this organisation in the change log →

Raw data
transparenta.ch. IN MX 0 mx1-eu1.ppe-hosted.com.
transparenta.ch. IN MX 0 mx2-eu1.ppe-hosted.com.
transparenta.ch. IN MX 100 mail.alters-vorsorge.ch.
transparenta.ch. IN TXT "v=spf1 mx +mx:hin.ch a:transparenta.ch ip4:54.229.2.165 ip4:52.30.130.201 ip4:213.180.179.82 a:mail.alters-vorsorge.ch ~all"

More from this industry

← Back to overview