Country

TO

363 domains tracked. 9.6% at DMARC enforcement (p=reject or p=quarantine), backed by 35 enforced domains.

Domains tracked
363
363
DMARC enforcement
9.6%
p=reject + p=quarantine
Avg posture score
17.7
of 100
A-grade domains
0
0 A+ · 0 A

Authentication posture

per protocol

DMARC

policy enforcement: 9.7%
reject
4.7%
quarantine
5.0%
none
15.2%
missing
75.2%

SPF

pass rate: 35.8%
0
pass
35.8%
warn
2.2%
fail
62.0%
not found
0.0%

DKIM

pass rate: 19.8%
00
pass
19.8%
warn
0.0%
fail
80.2%
not found
0.0%

MTA-STS

pass rate: 0.0%
000
pass
0.0%
warn
0.0%
fail
100.0%
not found
0.0%

TLS-RPT

pass rate: 0.3%
00
pass
0.3%
warn
0.0%
fail
99.7%
not found
0.0%

BIMI

pass rate: 0.0%
000
pass
0.0%
warn
0.0%
fail
100.0%
not found
0.0%

Top performers

20 of 363 tracked
#DomainScoreGrade
1tether.to76B
2osgear.to74B
3nnmclub.to73B
4onelink.to73B
5p24.to73B
6pledge.to73B
7takemeback.to71B
8inten.to70B
9omegleporn.to70B
10rewire.to70B
11testimonial.to70B
12mychat.to68C
13plasma.to68C
14popin.to68C
15scene.to67C
16sms.to66C
17speedapp.to66C
18unityhealth.to66C
19sndr.to65C
20imx.to64C

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026