carrefour.fr email security: SPF, DKIM & DMARC
Is carrefour.fr spoofable? See carrefour.fr's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.
Last updated: June 3, 2026
SPF
OKv=spf1 mx include:_spf.carrefour.com -allDKIM
OKSelectors: selector1DMARC
Warningv=DMARC1; p=none; rua=mailto:9de51f5108e9388@rep.dmarcanalyzer.com,mailto:dmarc_reports_dct@carrefour.com,mailto:39c07c5c-cb29-402c-9cf7-a8bea43f5fed@rep.de.mimecastdmarcanalyzer.com; ruf=mailto:9de51f5108e9388@for.dmarcanalyzer.com,mailto:dmarc_reports_dct@carrefour.com,mailto:39c07c5c-cb29-402c-9cf7-a8bea43f5fed@for.de.mimecastdmarcanalyzer.comMX
OKde-smtp-inbound-1.mimecast.com, de-smtp-inbound-2.mimecast.comRecommendations
1Change your DMARC policy from p=none to p=reject to block spoofing
With p=none, your DMARC record only monitors — it doesn't actually block spoofed emails. Attackers can still send emails as your domain and they'll be delivered normally. Switching to p=reject instructs receiving servers to drop fraudulent messages before they reach the inbox.
2Add MTA-STS to enforce TLS encryption for incoming emails
Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.
Need help securing your domain?
If you're not sure how to apply these fixes, get in touch and we'll help you out.
Contact usRun a live analysis
The results above are updated daily. For an instant check of carrefour.fr, run a live analysis.
Analyze carrefour.fr liveFrequently asked questions about carrefour.fr
Is carrefour.fr spoofable?
Yes. carrefour.fr does not enforce a strong DMARC policy, so attackers may be able to send emails that appear to come from carrefour.fr. Email security score: 73/100 (grade B).
Does carrefour.fr have an SPF record?
Yes, carrefour.fr publishes an SPF record (-all qualifier).
What is carrefour.fr's DMARC record?
carrefour.fr publishes a DMARC record (_dmarc.carrefour.fr) with a p=none policy.
Does carrefour.fr use DKIM?
Yes, DKIM signatures were detected for carrefour.fr.
Want to test another domain? Run a free email spoofing test.
Guides to understand these results
SPF Guide
Understand how SPF defines which servers are authorized to send emails for a domain.
DKIM Guide
Discover how DKIM cryptographically signs your emails to guarantee their authenticity.
DMARC Guide
Learn how DMARC orchestrates SPF and DKIM to protect your domain.
MTA-STS Guide
Learn how MTA-STS enforces TLS encryption to protect your emails in transit.
SPF vs DKIM vs DMARC
Compare the three protocols and understand how they work together.