Ultra-Brag

Points per criterion

• MX 10 / 10
• SPF 15 / 15
• DKIM 20 / 20
• DMARC 0 / 25
• DNSSEC 0 / 10
• Transport (MTA-STS/DANE) 0 / 15
• TLS-RPT 0 / 5

• Industry avg.: 59.9 ▼ 14.9
• Canton avg.: 57.4 ▼ 12.4
• Overall avg.: 53.5 ▼ 8.5
• Rank 57 of 67 in the industry

Findings

• ✕No DMARC record

  Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

• !DNSSEC not enabled

  Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.

• !No MTA-STS

  Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.

• !No TLS reporting (TLS-RPT)

  Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider

Self-hosted / other

Provider jurisdiction

Switzerland · MX: CH

Detection confidence

85 / 100

MX servers

SPF

v=spf1 +a +mx +ip4:194.126.200.0/24 +ip4:149.126.0.0/21 include:_spf.web-solutions.io include:spf.nextron.ch -all

all

-all

DNS lookups

4 / 10

Includes

_spf.web-solutions.iospf.nextron.ch

IPv4

2,304 addresses authorised directly

DMARC

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

DKIM

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS

missing

DANE

missing

DNSSEC

missing

TLS-RPT

missing

BIMI

missing

History

• 19 October 2026 Score 45 · DMARC -

All changes of this organisation in the change log →

More from this industry

• Welti-Furrer 95
• Verkehrsbetriebe Biel 91
• SBB 87
• SBB Cargo 87
• Aargau Verkehr 80
• Baselland Transport (BLT) 80
• Schweizerische Südostbahn (SOB) 80
• Travys 80