Country

IS

309 domains tracked. 24.9% at DMARC enforcement (p=reject or p=quarantine), backed by 77 enforced domains.

Domains tracked
309
309
DMARC enforcement
24.9%
p=reject + p=quarantine
Avg posture score
34.8
of 100
A-grade domains
1
0 A+ · 1 A

Authentication posture

per protocol

DMARC

policy enforcement: 24.9%
reject
15.2%
quarantine
9.7%
none
25.2%
missing
49.8%

SPF

pass rate: 67.0%
0
pass
67.0%
warn
0.3%
fail
32.7%
not found
0.0%

DKIM

pass rate: 39.8%
00
pass
39.8%
warn
0.0%
fail
60.2%
not found
0.0%

MTA-STS

pass rate: 0.6%
0
pass
0.6%
warn
0.6%
fail
98.7%
not found
0.0%

TLS-RPT

pass rate: 1.0%
0
pass
1.0%
warn
0.3%
fail
98.7%
not found
0.0%

BIMI

pass rate: 0.3%
00
pass
0.3%
warn
0.0%
fail
99.7%
not found
0.0%

Top performers

20 of 309 tracked
#DomainScoreGrade
11h.is91A
2thekking.is81B
3ikea.is80B
4commonplace.is79B
5landsbanki.is77B
6essential.gg76B
7straeto.is76B
8time.is76B
9alfred.is75B
10infogral.is75B
11korta.is75B
12lkt.is75B
13posturinn.is75B
14kvika.is74B
15chunk.gg73B
16isavia.is73B
17kefairport.is73B
18workstream.is73B
19applicationforacquiring.com72B
20iceland.is72B

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026