Sector

Finance

2,671 domains tracked. 46.7% at DMARC enforcement (p=reject or p=quarantine), backed by 1,248 enforced domains.

Domains tracked
2K+
2,671
DMARC enforcement
46.7%
p=reject + p=quarantine
Avg posture score
44.0
of 100
A-grade domains
21
2 A+ · 19 A

Authentication posture

per protocol

DMARC

policy enforcement: 46.7%
reject
29.0%
quarantine
17.7%
none
20.1%
missing
33.2%

SPF

pass rate: 71.0%
pass
71.0%
warn
1.5%
fail
27.3%
not found
0.1%

DKIM

pass rate: 50.6%
pass
50.6%
warn
0.1%
fail
49.2%
not found
0.1%

MTA-STS

pass rate: 0.9%
pass
0.9%
warn
0.8%
fail
97.8%
not found
0.6%

TLS-RPT

pass rate: 2.5%
pass
2.5%
warn
17.1%
fail
79.9%
not found
0.6%

BIMI

pass rate: 3.6%
pass
3.6%
warn
0.3%
fail
95.5%
not found
0.6%

Top performers

20 of 2,671 tracked
#DomainScoreGrade
1ccu.com95A+
2hastingsdirect.com95A+
3column.com93A
4commerzbank.com93A
5commerzbank.de93A
6rcbbank.bank93A
7bluevine.com92A
8creativeplanning.com91A
9clydeco.com90A
10confluence.com89A
11dlagglobal.com89A
12getapril.com89A
13dzhyp.de88A
14guaranteedrate.com88A
15ifa.com88A
16acko.com87A
17creditplus.de87A
18deltadentalar.com86A
19belfius.be85A
20broadway.bank85A

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026