Commune de Vandoeuvres

vandoeuvres.ch

Industry
Municipalities
Headquarters
Vandoeuvres, Geneva
Type
public
Population
3,087
FSO no.
6642
Checked on
19 October 2026
45/100Grade C

Protection against forged senders: not protected

Points per criterion

  • MX 10 / 10
  • SPF 15 / 15
  • DKIM 20 / 20
  • DMARC 0 / 25
  • DNSSEC 0 / 10
  • Transport (MTA-STS/DANE) 0 / 15
  • TLS-RPT 0 / 5

Findings

  • ✕No DMARC record

    Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

  • !DKIM key below 2048 bits

    RSA-1024 is considered too weak (RFC 8301, M3AAWG). Rotate to 2048-bit keys.

  • !DNSSEC not enabled

    Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.

  • !No MTA-STS

    Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.

  • !No TLS reporting (TLS-RPT)

    Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Check live in the Mail DNS Check →

Who runs the mail?

Mailbox provider
Self-hosted / other
Provider jurisdiction
Switzerland · MX: CH
Detection confidence
85 / 100
Microsoft tenant
Federated · SIACG - Service intercommunal d'informatique
Tenant region
EU
Federated via
adfs.siacg-ge.ch
Signals (2)
Domain verificationMicrosoft 365MS=ms53750848
Entra IDMicrosoft 365Entra-ID-Tenant (Federated)

MX servers

PrefHostIPNetworkCountryTLSA
10 mail.acg-geneve.ch 91.217.128.131 AS21449 ETATGE - Etat de Geneve CH –
91.217.128.130 AS21449 ETATGE - Etat de Geneve CH
91.217.128.31 AS21449 ETATGE - Etat de Geneve CH
20 mail2.acg-geneve.ch 91.217.128.132 AS21449 ETATGE - Etat de Geneve CH –

SPF

v=spf1 include:spf.mailjet.com include:spf.wellhosted.ch include:spf.acg-geneve.ch -all
all
-all
DNS lookups
3 / 10
Includes
spf.mailjet.comspf.wellhosted.chspf.acg-geneve.ch
Detected sending services
Mailjet

DMARC

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

DKIM

SelectorKeydelegated to
mailjet RSA 1024 –

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Transport encryption

MTA-STS
missing
DANE
missing
DNSSEC
missing
TLS-RPT
missing
BIMI
missing

Verified services

From verification records in the domain TXT: services where the domain is verified.

Microsoft 365

History

  • Score 45 · DMARC -

All changes of this organisation in the change log →

Raw data
vandoeuvres.ch. IN MX 10 mail.acg-geneve.ch.
vandoeuvres.ch. IN MX 20 mail2.acg-geneve.ch.
vandoeuvres.ch. IN TXT "v=spf1 include:spf.mailjet.com include:spf.wellhosted.ch include:spf.acg-geneve.ch -all"

More from this industry

← Back to overview