Country

Malaysia

965 domains tracked. 28.3% at DMARC enforcement (p=reject or p=quarantine), backed by 273 enforced domains.

Domains tracked
965
965
DMARC enforcement
28.3%
p=reject + p=quarantine
Avg posture score
34.1
of 100
A-grade domains
1
0 A+ · 1 A

Authentication posture

per protocol

DMARC

policy enforcement: 28.3%
reject
11.4%
quarantine
16.9%
none
20.9%
missing
50.8%

SPF

pass rate: 62.4%
0
pass
62.4%
warn
1.0%
fail
36.6%
not found
0.0%

DKIM

pass rate: 41.1%
00
pass
41.1%
warn
0.0%
fail
58.9%
not found
0.0%

MTA-STS

pass rate: 0.4%
0
pass
0.4%
warn
0.1%
fail
99.5%
not found
0.0%

TLS-RPT

pass rate: 0.5%
0
pass
0.5%
warn
0.3%
fail
99.2%
not found
0.0%

BIMI

pass rate: 0.4%
0
pass
0.4%
warn
0.2%
fail
99.4%
not found
0.0%

Top performers

20 of 965 tracked
#DomainScoreGrade
1perkeso.gov.my92A
2watsons.com.my83B
3dominos.com.my80B
4tngdigital.com.my79B
5shopee.com.my78B
6simplenet.com.my78B
7urbanrepublic.com.my78B
8allianz.com.my75B
9bmw.com.my75B
10cloud-zero.net75B
11hawkdns.net75B
12huskydns.com75B
13ipstates.net75B
14levi.com.my75B
15mini.my75B
16mod.gov.my75B
17monash.edu.my75B
18popularonline.com.my75B
19principal.com.my75B
20shopback.my75B

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026