Provider

Amazon SES

1,802 domains tracked. 40.0% at DMARC enforcement (p=reject or p=quarantine), backed by 721 enforced domains.

Domains tracked
1K+
1,802
DMARC enforcement
40.0%
p=reject + p=quarantine
Avg posture score
32.1
of 100
A-grade domains
1
0 A+ · 1 A

Authentication posture

per protocol

DMARC

policy enforcement: 40.0%
reject
10.3%
quarantine
29.7%
none
26.0%
missing
34.0%

SPF

pass rate: 57.5%
pass
57.5%
warn
2.4%
fail
39.6%
not found
0.4%

DKIM

pass rate: 20.1%
pass
20.1%
warn
0.1%
fail
78.8%
not found
1.0%

MTA-STS

pass rate: 0.3%
0
pass
0.3%
warn
0.0%
fail
98.5%
not found
1.2%

TLS-RPT

pass rate: 0.3%
pass
0.3%
warn
11.9%
fail
86.6%
not found
1.2%

BIMI

pass rate: 0.5%
pass
0.5%
warn
0.3%
fail
98.0%
not found
1.2%

Top performers

20 of 1,802 tracked
#DomainScoreGrade
1easi.live85A
2ad-italia.it80B
3the-star.co.ke76B
4balj.in75B
5bellomyonline.com75B
6brightdata.com75B
7brightvpn.com75B
8clickhouse.cloud75B
9earnapp.com75B
10energyrating.gov.au75B
11engie-deutschland.de75B
12fotor.com75B
13handycomic.jp75B
14evrensel.net74B
15automobile.it73B
16bigmountainmail.com73B
17bissafety.app73B
18bright-sdk.com73B
19closetfactory.com73B
20ctmers.io73B

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026