Gemeinde Laax

laax-gr.ch

Industry
Municipalities
Headquarters
Laax, Grisons
Type
public
Population
2,104
FSO no.
3575
Checked on
19 October 2026
25/100Grade D

Protection against forged senders: not protected

Points per criterion

  • MX 10 / 10
  • SPF 15 / 15
  • DKIM 0 / 20
  • DMARC 0 / 25
  • DNSSEC 0 / 10
  • Transport (MTA-STS/DANE) 0 / 15
  • TLS-RPT 0 / 5

Findings

  • ✕No DMARC record

    Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

  • !No DKIM key found

    No key was found under more than 100 common selectors. A custom selector is possible, but without DKIM there is no cryptographic sender check.

  • !DNSSEC not enabled

    Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.

  • !No MTA-STS

    Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.

  • !No TLS reporting (TLS-RPT)

    Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider
Microsoft 365
Provider jurisdiction
USA · MX: US
Detection confidence
100 / 100
Microsoft tenant
Managed · Vischnaunca Laax
Tenant region
EU
Signals (6)
MXMicrosoft 365laaxgr-ch01b.mail.protection.outlook.com
SPFMicrosoft 365include:spf.protection.outlook.com
AutodiscoverMicrosoft 365autodiscover.outlook.com
Domain verificationMicrosoft 365MS=ms63049627
NetworkMicrosoft 365AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation
Entra IDMicrosoft 365Entra-ID-Tenant (Managed)

MX servers

PrefHostIPNetworkCountryTLSA
1 laaxgr-ch01b.mail.protection.outlook.com 52.101.185.14 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation US –
52.101.185.12 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation US
52.101.185.13 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation US

SPF

v=spf1 include:spf.protection.outlook.com -all
all
-all
DNS lookups
1 / 10
Includes
spf.protection.outlook.com
Detected sending services
Microsoft 365

DMARC

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

DKIM

No DKIM key found

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS
missing
DANE
missing
DNSSEC
missing
TLS-RPT
missing
BIMI
missing

Verified services

From verification records in the domain TXT: services where the domain is verified.

Microsoft 365

History

  • Score 25 · DMARC -

All changes of this organisation in the change log →

Raw data
laax-gr.ch. IN MX 1 laaxgr-ch01b.mail.protection.outlook.com.
laax-gr.ch. IN TXT "v=spf1 include:spf.protection.outlook.com -all"

More from this industry

← Back to overview