Commune de Prévonloup
prevonloup.ch
- Industry
- Municipalities
- Headquarters
- Prévonloup, Vaud
- Type
- public
- Population
- 247
- FSO no.
- 5683
- Checked on
- 19 October 2026
Protection against forged senders: not protected
Points per criterion
- MX 10 / 10
- SPF 0 / 15
- DKIM 20 / 20
- DMARC 0 / 25
- DNSSEC 0 / 10
- Transport (MTA-STS/DANE) 0 / 15
- TLS-RPT 0 / 5
- Industry avg.: 50.9 ▼ 20.9
- Canton avg.: 58.5 ▼ 28.5
- Overall avg.: 53.5 ▼ 23.5
- Rank 1683 of 2077 in the industry
Findings
-
✕Multiple SPF records (permerror)
RFC 7208 allows exactly one SPF record. Several records cause a permanent error and SPF stops working.
-
✕No DMARC record
Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.
-
!SPF without a clear fail (?all or no all)
A neutral ending gives receivers no instruction on how to treat unknown servers.
-
!DKIM key below 2048 bits
RSA-1024 is considered too weak (RFC 8301, M3AAWG). Rotate to 2048-bit keys.
-
!DNSSEC not enabled
Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.
-
!No MTA-STS
Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.
-
!No TLS reporting (TLS-RPT)
Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.
Who runs the mail?
- Mailbox provider
- Google Workspace
- Provider jurisdiction
- USA · MX: US
- Detection confidence
- 82 / 100
- Microsoft tenant
- Managed · prevonloup.ch
- Tenant region
- EU
Signals (4)
| MX | Google Workspace | aspmx.l.google.com |
|---|---|---|
| DKIM | Google Workspace | google |
| Network | Google Workspace | AS15169 GOOGLE - Google LLC |
| Entra ID | Microsoft 365 | Entra-ID-Tenant (Managed) |
MX servers
| Pref | Host | IP | Network | Country | TLSA |
|---|---|---|---|---|---|
| 10 | aspmx.l.google.com | 142.251.127.26 | AS15169 GOOGLE - Google LLC | US | – |
| 20 | alt1.aspmx.l.google.com | 142.250.147.27 | AS15169 GOOGLE - Google LLC | US | – |
| 20 | alt2.aspmx.l.google.com | 172.253.152.26 | AS15169 GOOGLE - Google LLC | US | – |
| 30 | aspmx5.googlemail.com | 192.178.158.26 | AS15169 GOOGLE - Google LLC | US | – |
| 30 | aspmx3.googlemail.com | 172.253.152.27 | AS15169 GOOGLE - Google LLC | US | – |
| 30 | aspmx4.googlemail.com | 192.179.20.27 | AS15169 GOOGLE - Google LLC | US | – |
SPF
v=spf1 include:servers.mcsv.net ?all- all
?all- DNS lookups
- 1 / 10
- Includes
servers.mcsv.net- Detected sending services
- Mailchimp/Mandrill
DMARC
Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.
DKIM
| Selector | Key | delegated to |
|---|---|---|
google | RSA 1024 | – |
k1 | RSA 1024 | dkim.mcsv.net |
Checked: 100 common selectors. Keys under custom selectors remain invisible.
Transport encryption
- MTA-STS
- missing
- DANE
- missing
- DNSSEC
- missing
- TLS-RPT
- missing
- BIMI
- missing
History
- Score 30 · DMARC -
Raw data
prevonloup.ch. IN MX 10 aspmx.l.google.com.
prevonloup.ch. IN MX 20 alt1.aspmx.l.google.com.
prevonloup.ch. IN MX 20 alt2.aspmx.l.google.com.
prevonloup.ch. IN MX 30 aspmx5.googlemail.com.
prevonloup.ch. IN MX 30 aspmx3.googlemail.com.
prevonloup.ch. IN MX 30 aspmx4.googlemail.com.
prevonloup.ch. IN TXT "v=spf1 include:servers.mcsv.net ?all"