Country

Australia

5,097 domains tracked. 40.6% at DMARC enforcement (p=reject or p=quarantine), backed by 2,071 enforced domains.

Domains tracked
5K+
5,097
DMARC enforcement
40.6%
p=reject + p=quarantine
Avg posture score
49.7
of 100
A-grade domains
41
2 A+ · 39 A

Authentication posture

per protocol

DMARC

policy enforcement: 40.6%
reject
25.7%
quarantine
14.9%
none
30.5%
missing
28.8%

SPF

pass rate: 84.3%
0
pass
84.3%
warn
1.3%
fail
14.5%
not found
0.0%

DKIM

pass rate: 64.7%
00
pass
64.7%
warn
0.0%
fail
35.2%
not found
0.0%

MTA-STS

pass rate: 1.1%
0
pass
1.1%
warn
1.0%
fail
97.9%
not found
0.0%

TLS-RPT

pass rate: 2.6%
00
pass
2.6%
warn
0.0%
fail
97.4%
not found
0.0%

BIMI

pass rate: 2.2%
0
pass
2.2%
warn
0.2%
fail
97.6%
not found
0.0%

Top performers

20 of 5,097 tracked
#DomainScoreGrade
1dreamtilt.com.au95A+
2unicef.org.au95A+
3shine.com.au92A
4raizinvest.com.au91A
5abcb.gov.au90A
6anu.edu.au90A
7deakin.edu.au90A
8eventbookings.com90A
9treasury.gov.au90A
10asd.gov.au89A
11csiro.au89A
12curvy.com.au89A
13esafety.gov.au89A
14helloworld.com.au88A
15hota.com.au88A
16tripadeal.com.au88A
17aifs.gov.au87A
18atu.net.au87A
19dreamworld.com.au87A
20hub24.com.au87A

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026