Country

Hong Kong SAR China

1,340 domains tracked. 19.7% at DMARC enforcement (p=reject or p=quarantine), backed by 264 enforced domains.

Domains tracked
1K+
1,340
DMARC enforcement
19.7%
p=reject + p=quarantine
Avg posture score
23.2
of 100
A-grade domains
0
0 A+ · 0 A

Authentication posture

per protocol

DMARC

policy enforcement: 19.7%
reject
9.4%
quarantine
10.3%
none
12.8%
missing
67.5%

SPF

pass rate: 48.1%
0
pass
48.1%
warn
1.0%
fail
51.0%
not found
0.0%

DKIM

pass rate: 22.2%
00
pass
22.2%
warn
0.0%
fail
77.8%
not found
0.0%

MTA-STS

pass rate: 0.0%
00
pass
0.0%
warn
0.4%
fail
99.6%
not found
0.0%

TLS-RPT

pass rate: 0.7%
0
pass
0.7%
warn
0.2%
fail
99.1%
not found
0.0%

BIMI

pass rate: 0.4%
0
pass
0.4%
warn
0.1%
fail
99.4%
not found
0.0%

Top performers

20 of 1,340 tracked
#DomainScoreGrade
1elecboy.com.hk84B
2fortress.com.hk80B
3hklawsoc.org.hk78B
4hkpm.org.hk78B
5newbalance.com.hk78B
6chowsangsang.com77B
7fidelity.com.hk77B
8uniqlo.com.hk76B
9computerline.net75B
10cuhkmc.hk75B
11dataplugs.com75B
12dbpower.com.hk75B
13echemi.com75B
14hashkey.cloud75B
15hkjebn.com75B
16ia.org.hk75B
17ikea.com.hk75B
18levi.com.hk75B
19mcdonalds.com.hk75B
20shopback.com.hk75B

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026