Country

United States

54,813 domains tracked. 30.8% at DMARC enforcement (p=reject or p=quarantine), backed by 16,876 enforced domains.

Domains tracked
54K+
54,813
DMARC enforcement
30.8%
p=reject + p=quarantine
Avg posture score
39.1
of 100
A-grade domains
285
10 A+ · 275 A

Authentication posture

per protocol

DMARC

policy enforcement: 30.7%
reject
17.1%
quarantine
13.6%
none
25.5%
missing
43.7%

SPF

pass rate: 70.0%
0
pass
70.0%
warn
1.3%
fail
28.8%
not found
0.0%

DKIM

pass rate: 48.9%
00
pass
48.9%
warn
0.0%
fail
51.1%
not found
0.0%

MTA-STS

pass rate: 0.7%
0
pass
0.7%
warn
0.5%
fail
98.9%
not found
0.0%

TLS-RPT

pass rate: 1.4%
0
pass
1.4%
warn
0.1%
fail
98.5%
not found
0.0%

BIMI

pass rate: 1.4%
0
pass
1.4%
warn
0.3%
fail
98.4%
not found
0.0%

Top performers

20 of 54,813 tracked
#DomainScoreGrade
1ag-grid.com96A+
2influencity.com96A+
3apify.com95A+
4cliffordchance.com95A+
5drinkag1.com95A+
6elmec.com95A+
7firstup.io95A+
8harri.com95A+
9hastingsdirect.com95A+
10hollandandbarrett.com95A+
11chalkbeat.org94A
12cookiepal.io94A
13agc.org93A
14and-charge.com93A
15asana.com93A
16aura.com93A
17column.com93A
18crateandbarrel.com93A
19ctrader.com93A
20dext.com93A

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026