Provider

Sophos

259 domains tracked. 47.5% at DMARC enforcement (p=reject or p=quarantine), backed by 123 enforced domains.

Domains tracked
259
259
DMARC enforcement
47.5%
p=reject + p=quarantine
Avg posture score
55.0
of 100
A-grade domains
5
0 A+ · 5 A

Authentication posture

per protocol

DMARC

policy enforcement: 47.5%
reject
17.8%
quarantine
29.7%
none
35.5%
missing
17.0%

SPF

pass rate: 98.5%
0
pass
98.5%
warn
0.4%
fail
1.2%
not found
0.0%

DKIM

pass rate: 64.5%
00
pass
64.5%
warn
0.0%
fail
35.5%
not found
0.0%

MTA-STS

pass rate: 2.7%
0
pass
2.7%
warn
0.8%
fail
96.5%
not found
0.0%

TLS-RPT

pass rate: 6.9%
0
pass
6.9%
warn
1.5%
fail
91.5%
not found
0.0%

BIMI

pass rate: 0.0%
000
pass
0.0%
warn
0.0%
fail
100.0%
not found
0.0%

Top performers

20 of 259 tracked
#DomainScoreGrade
1handytick.de91A
2ipmcomputers.com90A
3denbypottery.com87A
4fluxlabs.net86A
5a1garage.com85A
6anm.it84B
7bps.org.uk78B
8belcando.de77B
9homesourcesystems.com76B
10cardnet.com.do75B
11denisonyachtsales.com75B
12dimoco.eu75B
13eands.com.au75B
14eshet.com75B
15eurotux.com75B
16genesishealthclubs.com75B
17hyperverge.co75B
18hwk-dresden.de74B
19charnwood.gov.uk73B
20csea.com73B

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026