← Check another domain

lemonde.fr

70/100

B

Scanned 2026-05-12

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	quarantine	15/25
SPF record	ok	10/10
DKIM selector	found	10/10
TLS certificate	ok	20/20
WHOIS integrity	whois rate limited	5/10
Subdomain takeover	ct logs busy	10/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	unsigned	0/5

Recommendations

Tighten _dmarc.lemonde.fr from p=quarantine to p=reject once RUA reports confirm low false positives
Publish MTA-STS: add _mta-sts.lemonde.fr TXT and host a policy at https://mta-sts.lemonde.fr/.well-known/mta-sts.txt
Enable DNSSEC on lemonde.fr — DS records must be published to the fr zone by your registrar

Details

Area	Detail
DMARC	v=DMARC1; p=quarantine; sp=quarantine; adkim=r; aspf=r; pct=100; rua=mailto:dmarc.report@lemonde.fr
SPF	v=spf1 include:spf1.lemonde.fr include:spf2.lemonde.fr include:_spf.salesforce.com ip4:79.99.32.203 ip4:79.99.32.185 ip4:79.99.32.186 ip4:217.74.103.211 ip4:195.154.80.82 ip4:163.172.55.8 ip4:35.181.3
DKIM selectors	google
TLS certificate	Ok (66 days remaining) — CN=R13,O=Let's Encrypt,C=US
WHOIS registrar	—
WHOIS expires	—
Subdomains	CT logs temporarily unavailable — retry shortly
DNSSEC	Unsigned