lcl.fr email security: SPF, DKIM & DMARC

Is lcl.fr spoofable? See lcl.fr's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.

Last updated: August 8, 2026

73B
This domain is vulnerable to spoofing

SPF

OK
v=spf1 a:spf.credit-agricole.fr/24 a:smtp1.soprahronline.com a:smtp2.soprahronline.com ip4:5.39.8.116 ip4:5.39.8.122 ip4:5.39.8.123 ip4:20.74.37.146 ip4:20.74.97.162 ip4:20.74.99.62 include:iws-saas.fr include:em5058.lcl.fr include:mailgun.org -all

DKIM

OK
Selectors: mail, s2

DMARC

Warning
v=DMARC1; p=none; sp=none; rua=mailto:rua@dmarc.ca-gip.fr; adkim=r; aspf=r;
Read the guide

MX

OK
mercure.credit-agricole.fr

MTA-STS

Missing

No record found

Read the guide

Recommendations

  1. 1Change your DMARC policy from p=none to p=reject to block spoofing

    With p=none, your DMARC record only monitors — it doesn't actually block spoofed emails. Attackers can still send emails as your domain and they'll be delivered normally. Switching to p=reject instructs receiving servers to drop fraudulent messages before they reach the inbox.

  2. 2Add MTA-STS to enforce TLS encryption for incoming emails

    Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.

Need help securing your domain?

If you're not sure how to apply these fixes, get in touch and we'll help you out.

Contact us

Run a live analysis

The results above are updated daily. For an instant check of lcl.fr, run a live analysis.

Analyze lcl.fr live

Badge for your website

Display your email security score on your website.

SpoofCheck badge for lcl.fr
<a href="https://spoofchecker.online/en/email-security/lcl.fr" target="_blank" rel="noopener"><img src="https://spoofchecker.online/api/badge/lcl.fr?score=73&grade=B" alt="Email security score for lcl.fr" height="28"></a>

Frequently asked questions about lcl.fr

Is lcl.fr spoofable?

Yes. lcl.fr does not enforce a strong DMARC policy, so attackers may be able to send emails that appear to come from lcl.fr. Email security score: 73/100 (grade B).

Does lcl.fr have an SPF record?

Yes, lcl.fr publishes an SPF record (-all qualifier).

What is lcl.fr's DMARC record?

lcl.fr publishes a DMARC record (_dmarc.lcl.fr) with a p=none policy.

Does lcl.fr use DKIM?

Yes, DKIM signatures were detected for lcl.fr.

Want to test another domain? Run a free email spoofing test.

Guides to understand these results

Check other domains