CIEPP Caisse Inter-Entreprises de Prévoyance Professionnelle

ciepp.ch

0/100Grade D

Protection against forged senders: not protected

Points per criterion

✕No SPF record

Without SPF there is no list of servers allowed to send for the domain, so receivers cannot detect forged senders via SPF.
✕No DMARC record

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.
!No MX record

Without MX, senders fall back to the domain's A record. For an active mail domain this is a misconfiguration.
!No DKIM key found

No key was found under more than 100 common selectors. A custom selector is possible, but without DKIM there is no cryptographic sender check.
!DNSSEC not enabled

Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.
!No MTA-STS

Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.
!No TLS reporting (TLS-RPT)

Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Signals (1)

Domain verification	Google Workspace	`google-site-verification=ojk8dZ1kbeF36xB`

Pref	Host	IP	Network	Country	TLSA

No SPF record

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

No DKIM key found

Checked: 100 common selectors. Keys under custom selectors remain invisible.

From verification records in the domain TXT: services where the domain is verified.

Google

Raw data