69% of city halls in France are not protected against email spoofing

Public DMARC posture of 130 city halls. Edition of June 2026.

Protected

Enforcing

Monitoring only

No DMARC

How it has evolved

Methodology

We read each organization's public DNS — the DMARC record on its consumer-facing domain — and classify the published policy (none / quarantine / reject). "Protected" means an enforced p=reject policy. Only public data is used; figures reflect the edition date and can change as records are updated.

Previous editions

An extract, status by status

90 of the 130 city halls, up to 25 per status, in alphabetical order. The full list — with search, filters and sorting — lives in the Rankings.

The full list of city halls lives in the Rankings, with search, filters and sorting. Open the Rankings →

Protected (p=reject)17 organisations

Protected (p=reject): 17 organisations out of 17, in alphabetical order
Organization	Grade
Argenteuilargenteuil.fr	A
Asnières-sur-Seineasnieres-sur-seine.fr	A
Bordeauxbordeaux.fr	A
Chelleschelles.fr	A
Colmarcolmar.fr	A
Fort-de-Francefortdefrance.fr	A
Gennevilliersville-gennevilliers.fr	A
La Rochellelarochelle.fr	A
Le Manslemans.fr	A
Levallois-Perretville-levallois.fr	A
Mérignacmerignac.com	A
Montreuilmontreuil.fr	B
Noisy-le-Grandnoisylegrand.fr	A
Rouenrouen.fr	A
Saint-Laurent-du-Maronisaintlaurentdumaroni.fr	A
Saint-Quentinsaint-quentin.fr	A
Villeneuve-d'Ascqvilleneuvedascq.fr	A

Enforcing (p=quarantine)23 organisations

Enforcing (p=quarantine): 23 organisations out of 23, in alphabetical order
Organization	Grade
Aix-en-Provenceaixenprovence.fr	B
Angersangers.fr	B
Annecyannecy.fr	B
Aubervilliersaubervilliers.fr	B
Avignonavignon.fr	C
Béziersville-beziers.fr	B
Boulogne-Billancourtboulognebillancourt.com	B
Créteilville-creteil.fr	B
Épinay-sur-Seineepinay-sur-seine.fr	B
Évry-Courcouronnesevrycourcouronnes.fr	C
Le Havrelehavre.fr	B
Maisons-Alfortmaisons-alfort.fr	D
Montpelliermontpellier.fr	B
Mulhousemulhouse.fr	B
Niortvivre-a-niort.com	B
Orléansorleans.fr	B
Paupau.fr	B
Perpignanmairie-perpignan.fr	B
Reimsreims.fr	B
Saint-Ouen-sur-Seinesaint-ouen.fr	D
Saint-Pierresaintpierre.re	B
Troyesville-troyes.fr	B
Versaillesversailles.fr	C

Monitoring only (p=none)50 organisations

Monitoring only (p=none): 25 organisations out of 50, in alphabetical order
Organization	Grade
Antibesantibes-juanlespins.com	D
Antonyville-antony.fr	D
Arlesarles.fr	D
Aulnay-sous-Boisaulnay-sous-bois.fr	D
Bayonnebayonne.fr	D
Beauvaisbeauvais.fr	D
Besançonbesancon.fr	D
Bourgesville-bourges.fr	D
Caencaen.fr	D
Cergycergy.fr	D
Chambérychambery.fr	F
Clamartclamart.fr	D
Clichyville-clichy.fr	D
Courbevoieville-courbevoie.fr	D
Dunkerqueville-dunkerque.fr	D
Fréjusville-frejus.fr	F
Grasseville-grasse.fr	D
Grenoblegrenoble.fr	D
Issy-les-Moulineauxissy.com(corporate domain : ville-issy.fr)	D
Ivry-sur-Seineivry94.fr	D
La Roche-sur-Yonlarochesuryon.fr	D
La Seyne-sur-Merla-seyne.fr	D
Le Blanc-Mesnilblancmesnil.fr	D
Le Tamponletampon.fr	D
Limogeslimoges.fr	D

Monitoring only (p=none): see the full list in the Rankings →

No DMARC40 organisations

No DMARC: 25 organisations out of 40, in alphabetical order
Organization	Grade
Ajaccioajaccio.corsica(corporate domain : ajaccio.fr)	F
Albialbi.fr	F
Amiensamiens.fr	F
Bobignybobigny.fr	F
Bondyville-bondy.fr	F
Brestbrest.fr	F
Cagnes-sur-Mercagnes-sur-mer.fr(corporate domain : ville.cagnes.fr)	F
Calaiscalais.fr	F
Cannescannes.com(corporate domain : cannes.fr)	F
Cayenneville-cayenne.fr	F
Champigny-sur-Marnechampignysurmarne.fr	F
Cherbourg-en-Cotentincherbourg.fr	F
Choletcholet.fr	F
Clermont-Ferrandclermont-ferrand.fr	F
Colombescolombes.fr	F
Corbeil-Essonnescorbeil-essonnes.fr	F
Dijondijon.fr	F
Drancydrancy.fr	F
Fontenay-sous-Boisfontenay.fr	F
Hyèreshyeres.fr	F
Les Abymesabymes.fr	F
Lillelille.fr	F
Mamoudzoumamoudzou.yt	F
Massyville-massy.fr	F
Meauxville-meaux.fr	F

No DMARC: see the full list in the Rankings →