Country

WS

152 domains tracked. 9.9% at DMARC enforcement (p=reject or p=quarantine), backed by 15 enforced domains.

Domains tracked
152
152
DMARC enforcement
9.9%
p=reject + p=quarantine
Avg posture score
18.1
of 100
A-grade domains
1
0 A+ · 1 A

Authentication posture

per protocol

DMARC

policy enforcement: 9.8%
reject
3.9%
quarantine
5.9%
none
14.5%
missing
75.7%

SPF

pass rate: 44.1%
0
pass
44.1%
warn
0.7%
fail
55.3%
not found
0.0%

DKIM

pass rate: 17.1%
00
pass
17.1%
warn
0.0%
fail
82.9%
not found
0.0%

MTA-STS

pass rate: 0.7%
00
pass
0.7%
warn
0.0%
fail
99.3%
not found
0.0%

TLS-RPT

pass rate: 0.7%
00
pass
0.7%
warn
0.0%
fail
99.3%
not found
0.0%

BIMI

pass rate: 0.0%
000
pass
0.0%
warn
0.0%
fail
100.0%
not found
0.0%

Top performers

20 of 152 tracked
#DomainScoreGrade
1sudo.ws85A
2nwps.ws68C
3officeshoes.ws68C
4wildcard.ws68C
5sysadmins.ws67C
6photoshoptutorials.ws66C
7tatoo.ws66C
8tilda.ws63C
9nzbfinder.ws62C
10runtime.ws60C
11reinsurancene.ws59C
12longisland.ws58C
13mobirise.ws58C
14rosasidan.ws58C
15srvx.ws58C
16inet.ws55C
17magical.ws55C
18netjobs.ws55C
19se7en.ws55C
20sexvid.ws55C

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026