Commune de Daillens

daillens.ch

Industry
Municipalities
Headquarters
Daillens, Vaud
Type
public
Population
1,113
FSO no.
5480
Checked on
19 October 2026
45/100Grade C

Protection against forged senders: not protected

Points per criterion

  • MX 10 / 10
  • SPF 15 / 15
  • DKIM 20 / 20
  • DMARC 0 / 25
  • DNSSEC 0 / 10
  • Transport (MTA-STS/DANE) 0 / 15
  • TLS-RPT 0 / 5

Findings

  • ✕No DMARC record

    Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

  • !DKIM key below 2048 bits

    RSA-1024 is considered too weak (RFC 8301, M3AAWG). Rotate to 2048-bit keys.

  • !DNSSEC not enabled

    Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.

  • !No MTA-STS

    Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.

  • !No TLS reporting (TLS-RPT)

    Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider
Microsoft 365
Provider jurisdiction
USA · MX: US
Detection confidence
100 / 100
Microsoft tenant
Managed · Administration communale de Daillens
Tenant region
EU
Signals (9)
MXMicrosoft 365daillens-ch.mail.protection.outlook.com
SPFMicrosoft 365include:spf.protection.outlook.com
DKIMMicrosoft 365selector1 → selector1-daillens-ch._domainkey.daillens.onmicrosoft.com
AutodiscoverMicrosoft 365autodiscover.outlook.com
Domain verificationMicrosoft 365MS=ms40600660
NetworkMicrosoft 365AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation
SPFAmazoninclude:amazonses.com
SPFInfomaniakinclude:spf.infomaniak.ch
Entra IDMicrosoft 365Entra-ID-Tenant (Managed)

MX servers

PrefHostIPNetworkCountryTLSA
5 daillens-ch.mail.protection.outlook.com 52.101.103.39 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation US –
52.101.103.36 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation US
52.101.181.153 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation US

SPF

v=spf1 include:spf.protection.outlook.com include:spf.infomaniak.ch -all
all
-all
DNS lookups
4 / 10
Includes
spf.protection.outlook.comspf.infomaniak.ch
Detected sending services
Microsoft 365, Infomaniak, Amazon SES

DMARC

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

DKIM

SelectorKeydelegated to
s1 RSA 2048 s1.domainkey.u26053475.wl226.sendgrid.net
s2 RSA 2048 s2.domainkey.u26053475.wl226.sendgrid.net
selector1 RSA 1024 selector1-daillens-ch._domainkey.daillens.onmicrosoft.com

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS
missing
DANE
missing
DNSSEC
missing
TLS-RPT
missing
BIMI
missing

Verified services

From verification records in the domain TXT: services where the domain is verified.

Microsoft 365

History

  • Score 45 · DMARC -

All changes of this organisation in the change log →

Raw data
daillens.ch. IN MX 5 daillens-ch.mail.protection.outlook.com.
daillens.ch. IN TXT "v=spf1 include:spf.protection.outlook.com include:spf.infomaniak.ch -all"

More from this industry

← Back to overview