Country

Indonesia

3,610 domains tracked. 23.5% at DMARC enforcement (p=reject or p=quarantine), backed by 848 enforced domains.

Domains tracked
3K+
3,610
DMARC enforcement
23.5%
p=reject + p=quarantine
Avg posture score
34.6
of 100
A-grade domains
6
0 A+ · 6 A

Authentication posture

per protocol

DMARC

policy enforcement: 23.5%
reject
9.9%
quarantine
13.6%
none
27.2%
missing
49.3%

SPF

pass rate: 65.4%
0
pass
65.4%
warn
2.3%
fail
32.3%
not found
0.0%

DKIM

pass rate: 40.2%
00
pass
40.2%
warn
0.0%
fail
59.8%
not found
0.0%

MTA-STS

pass rate: 0.4%
0
pass
0.4%
warn
0.2%
fail
99.4%
not found
0.0%

TLS-RPT

pass rate: 0.6%
0
pass
0.6%
warn
0.1%
fail
99.4%
not found
0.0%

BIMI

pass rate: 0.1%
00
pass
0.1%
warn
0.0%
fail
99.8%
not found
0.0%

Top performers

20 of 3,610 tracked
#DomainScoreGrade
1tirto.id89A
2bpk.go.id88A
3ub.ac.id87A
4akupintar.id86A
5sentinel.id85A
6watsons.co.id85A
7ums.ac.id84B
8bri.co.id82B
9lps.go.id82B
10del.ac.id80B
11banananina.co.id78B
12emporioarchitect.com78B
13ikea.co.id78B
14kaltimprov.go.id78B
15nabatisnack.co.id78B
16ocbc.id78B
17rstnet.id78B
18brilife.co.id77B
19cuponation.co.id77B
20domain.id77B

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026