Country

Japan

11,563 domains tracked. 12.3% at DMARC enforcement (p=reject or p=quarantine), backed by 1,428 enforced domains.

Domains tracked
11K+
11,563
DMARC enforcement
12.3%
p=reject + p=quarantine
Avg posture score
34.9
of 100
A-grade domains
11
0 A+ · 11 A

Authentication posture

per protocol

DMARC

policy enforcement: 12.4%
reject
5.3%
quarantine
7.1%
none
42.9%
missing
44.8%

SPF

pass rate: 76.9%
0
pass
76.9%
warn
0.8%
fail
22.3%
not found
0.0%

DKIM

pass rate: 32.8%
00
pass
32.8%
warn
0.0%
fail
67.2%
not found
0.0%

MTA-STS

pass rate: 0.1%
0
pass
0.1%
warn
0.2%
fail
99.7%
not found
0.0%

TLS-RPT

pass rate: 0.3%
00
pass
0.3%
warn
0.0%
fail
99.7%
not found
0.0%

BIMI

pass rate: 1.6%
0
pass
1.6%
warn
0.1%
fail
98.3%
not found
0.0%

Top performers

20 of 11,563 tracked
#DomainScoreGrade
1classi.jp94A
2iibc-global.org90A
3sigma-photo.co.jp90A
4fastcopy.jp89A
5volks.co.jp89A
6topcard.co.jp88A
7wadax.ne.jp87A
8octopusenergy.co.jp86A
9rhe.jp86A
10diamond.co.jp85A
11nikkei-r.co.jp85A
12ebook5.net84B
13kinto.co.jp84B
14sun-denshi.co.jp84B
15ask-corp.jp82B
16soumu.go.jp81B
17bitbank.cc80B
18classnk.or.jp80B
19creema.jp80B
20fsa.go.jp80B

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026