Country

Germany

29,397 domains tracked. 23.8% at DMARC enforcement (p=reject or p=quarantine), backed by 7,003 enforced domains.

Domains tracked
29K+
29,397
DMARC enforcement
23.8%
p=reject + p=quarantine
Avg posture score
33.0
of 100
A-grade domains
112
7 A+ · 105 A

Authentication posture

per protocol

DMARC

policy enforcement: 23.8%
reject
12.7%
quarantine
11.1%
none
25.0%
missing
51.1%

SPF

pass rate: 65.6%
0
pass
65.6%
warn
0.7%
fail
33.7%
not found
0.0%

DKIM

pass rate: 35.2%
00
pass
35.2%
warn
0.0%
fail
64.8%
not found
0.0%

MTA-STS

pass rate: 1.1%
0
pass
1.1%
warn
0.4%
fail
98.4%
not found
0.0%

TLS-RPT

pass rate: 1.7%
0
pass
1.7%
warn
0.1%
fail
98.2%
not found
0.0%

BIMI

pass rate: 0.7%
0
pass
0.7%
warn
0.2%
fail
99.1%
not found
0.0%

Top performers

20 of 29,397 tracked
#DomainScoreGrade
1doctolib.de97A+
2delinea.com96A+
3helmtrophy.com96A+
4euronics.de95A+
5framery.com95A+
6iwoca.de95A+
7skr.de95A+
8adamhall.com93A
9commerzbank.com93A
10commerzbank.de93A
11engelmann.com93A
12greenpeace.de93A
13culturalcare.com92A
14doonails.com92A
15handytick.de91A
16kdo.de91A
17rntpts.de91A
18acalbfi.com90A
19afilio.de90A
20akxnet.de90A

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026