Measured 2026-06-19 · public DNS

Is firstcitizens.com protected against email spoofing?

Yes — firstcitizens.com enforces DMARC (p=reject).

A

DMARC

p=reject

SPF

~all

DKIM

5 selector(s)

Published record

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;

What this means

  • Politique p=reject : protection maximale contre l’usurpation.
  • SPF se termine par ~all (softfail) : acceptable en phase d’observation, viser -all à terme.
  • Au moins une clé DKIM valide publiée.

How to fix it

Marc, the DMARC copilot, finds every sender, writes the exact DNS, and walks your domain safely from p=none to p=reject.

See the sector barometer