Running your DNS diagnostic…
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Scanned Jul 27, 2026 02:09 UTC · 7 checks · public report
One finding blocks deliverability.
carrefour.fr has no enforceable DMARC policy, so mail that forges its domain is not blocked at the recipient.
v=DMARC1; p=none; rua=mailto:[email protected],mailto:[email protected],mailto:39c07c5c-cb29-402c-9cf7-a8bea43f5fed@rep.de.mimecastdmarcanalyzer.com; ruf=mailto:[email protected],mailto:[email protected],mailto:39c07c5c-cb29-402c-9cf7-a8bea43f5fed@for.de.mimecastdmarcanalyzer.com_dmarc · Record type: TXT · TTL: 3600This means your email signature key is smaller than recommended, so it is easier to break than a modern one. If an attacker can forge that signature, your messages may be more likely to be spoofed or tampered with. The fix is to replace this DKIM selector with a stronger, modern key size and then update the DNS entry for that selector.
Publish your DKIM record at Cloudflare — step-by-step guide.
One send: the full report — every finding and fix — lands in your inbox, with a free account waiting. Opening it signs you in and starts a 14-day Monitor trial. No card, and you can unsubscribe in one click.
Domain owner? Re-scan any time — or email [email protected] to have this page removed.
v=DMARC1; p=reject; rua=mailto:[email protected],mailto:[email protected],mailto:39c07c5c-cb29-402c-9cf7-a8bea43f5fed@rep.de.mimecastdmarcanalyzer.com; ruf=mailto:[email protected],mailto:[email protected],mailto:39c07c5c-cb29-402c-9cf7-a8bea43f5fed@for.de.mimecastdmarcanalyzer.comApply this at Cloudflare — step-by-step guide.