Country

CR

139 domains tracked. 44.6% at DMARC enforcement (p=reject or p=quarantine), backed by 62 enforced domains.

Domains tracked
139
139
DMARC enforcement
44.6%
p=reject + p=quarantine
Avg posture score
41.4
of 100
A-grade domains
0
0 A+ · 0 A

Authentication posture

per protocol

DMARC

policy enforcement: 44.6%
reject
20.9%
quarantine
23.7%
none
19.4%
missing
36.0%

SPF

pass rate: 67.6%
0
pass
67.6%
warn
2.2%
fail
30.2%
not found
0.0%

DKIM

pass rate: 46.8%
00
pass
46.8%
warn
0.0%
fail
53.2%
not found
0.0%

MTA-STS

pass rate: 0.0%
000
pass
0.0%
warn
0.0%
fail
100.0%
not found
0.0%

TLS-RPT

pass rate: 1.4%
0
pass
1.4%
warn
0.7%
fail
97.8%
not found
0.0%

BIMI

pass rate: 0.7%
00
pass
0.7%
warn
0.0%
fail
99.3%
not found
0.0%

Top performers

20 of 139 tracked
#DomainScoreGrade
1davivienda.cr78B
2una.ac.cr78B
3racknation.cr76B
4csv.go.cr75B
5ice.go.cr75B
6bncr.fi.cr73B
7capris.cr73B
8claro.cr73B
9coopelesca.co.cr73B
10correos.go.cr73B
11credid.net73B
12equifax.cr73B
13novex.cr73B
14sitek.cr73B
15ccss.sa.cr72B
16controlpas.go.cr72B
17hacienda.go.cr72B
18imn.ac.cr72B
19nic.cr72B
20sicop.go.cr72B

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026