Comune di Cureglia

cureglia.ch

Industry
Municipalities
Headquarters
Cureglia, Ticino
Type
public
Population
1,484
FSO no.
5180
Checked on
19 October 2026
45/100Grade C

Protection against forged senders: not protected

Points per criterion

  • MX 10 / 10
  • SPF 15 / 15
  • DKIM 20 / 20
  • DMARC 0 / 25
  • DNSSEC 0 / 10
  • Transport (MTA-STS/DANE) 0 / 15
  • TLS-RPT 0 / 5

Findings

  • ✕No DMARC record

    Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

  • !DNSSEC not enabled

    Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.

  • !No MTA-STS

    Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.

  • !No TLS reporting (TLS-RPT)

    Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider
Microsoft 365
Provider jurisdiction
USA · MX: US
Detection confidence
100 / 100
Microsoft tenant
Managed · Comune di Cureglia
Tenant region
EU
Signals (6)
MXMicrosoft 365cureglia-ch.mail.protection.outlook.com
SPFMicrosoft 365include:spf.protection.outlook.com
AutodiscoverMicrosoft 365autodiscover.outlook.com
Domain verificationMicrosoft 365MS=ms50060536
NetworkMicrosoft 365AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation
Entra IDMicrosoft 365Entra-ID-Tenant (Managed)

MX servers

PrefHostIPNetworkCountryTLSA
10 cureglia-ch.mail.protection.outlook.com 52.101.187.1 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation US –
52.101.185.14 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation US
52.101.185.13 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation US

SPF

v=spf1 include:spf.protection.outlook.com ip4:178.23.174.0/27 ip4:89.207.237.84  ip4:213.133.224.173 a:lin12.assolo.net -all
all
-all
DNS lookups
2 / 10
Includes
spf.protection.outlook.com
Detected sending services
Microsoft 365
IPv4
34 addresses authorised directly

DMARC

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

DKIM

SelectorKeydelegated to
k2 RSA 2048 dkim2.mcsv.net
k3 RSA 2048 dkim3.mcsv.net

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS
missing
DANE
missing
DNSSEC
missing
TLS-RPT
missing
BIMI
missing

Verified services

From verification records in the domain TXT: services where the domain is verified.

Microsoft 365

History

  • Score 45 · DMARC -

All changes of this organisation in the change log →

Raw data
cureglia.ch. IN MX 10 cureglia-ch.mail.protection.outlook.com.
cureglia.ch. IN TXT "v=spf1 include:spf.protection.outlook.com ip4:178.23.174.0/27 ip4:89.207.237.84  ip4:213.133.224.173 a:lin12.assolo.net -all"

More from this industry

← Back to overview