Hôpital ophtalmique Jules-Gonin

ophtalmique.ch

25/100Grade D

Protection against forged senders: not protected

Points per criterion

✕No DMARC record

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.
!SPF close to the 10-lookup limit (8)

One more sending service can break the limit. Flattening or subdomains for third parties create headroom.
!No DKIM key found

No key was found under more than 100 common selectors. A custom selector is possible, but without DKIM there is no cryptographic sender check.
!DNSSEC not enabled

Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.
!No MTA-STS

Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.
!No TLS reporting (TLS-RPT)

Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Signals (1)

SPF	Microsoft 365	`include:spf.protection.outlook.com`

Pref	Host	IP	Network	Country	TLSA
10	`mail.adies.ch`	`145.232.230.36`	AS15675 Etat-de-Vaud - Direction generale du numerique et des systemes d_information (DGNSI) Etat de Vaud	CH	–

v=spf1 a mx include:spf.fhvi.ch -all

Without DMARC no receiver reliably rejects forged mail in the domain's name, and the organisation receives no abuse reports.

No DKIM key found

Checked: 100 common selectors. Keys under custom selectors remain invisible.

From verification records in the domain TXT: services where the domain is verified.

Atlassian

Raw data

ophtalmique.ch. IN MX 10 mail.adies.ch.
ophtalmique.ch. IN TXT "v=spf1 a mx include:spf.fhvi.ch -all"