Country

New Zealand

1,004 domains tracked. 35.1% at DMARC enforcement (p=reject or p=quarantine), backed by 352 enforced domains.

Domains tracked
1K+
1,004
DMARC enforcement
35.1%
p=reject + p=quarantine
Avg posture score
44.1
of 100
A-grade domains
16
0 A+ · 16 A

Authentication posture

per protocol

DMARC

policy enforcement: 35.0%
reject
21.6%
quarantine
13.4%
none
29.7%
missing
35.3%

SPF

pass rate: 74.1%
0
pass
74.1%
warn
0.6%
fail
25.3%
not found
0.0%

DKIM

pass rate: 57.0%
00
pass
57.0%
warn
0.0%
fail
43.0%
not found
0.0%

MTA-STS

pass rate: 1.6%
0
pass
1.6%
warn
1.6%
fail
96.8%
not found
0.0%

TLS-RPT

pass rate: 4.0%
0
pass
4.0%
warn
0.1%
fail
95.9%
not found
0.0%

BIMI

pass rate: 2.1%
00
pass
2.1%
warn
0.0%
fail
97.9%
not found
0.0%

Top performers

20 of 1,004 tracked
#DomainScoreGrade
1doc.govt.nz94A
2legislation.govt.nz93A
3spark.co.nz93A
4auckland.ac.nz90A
5education.govt.nz90A
6fireandemergency.nz90A
7parliament.govt.nz90A
8acc.co.nz89A
9linz.govt.nz89A
10nzqa.govt.nz88A
11recollect.co.nz88A
12ird.govt.nz86A
13msd.govt.nz86A
14octopusenergy.nz86A
15otago.ac.nz86A
16studylink.govt.nz86A
17bayleys.co.nz84B
18canterbury.ac.nz84B
19nzta.govt.nz84B
20massey.ac.nz83B

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026