Sector

Legal

594 domains tracked. 30.3% at DMARC enforcement (p=reject or p=quarantine), backed by 180 enforced domains.

Domains tracked
594
594
DMARC enforcement
30.3%
p=reject + p=quarantine
Avg posture score
35.3
of 100
A-grade domains
3
1 A+ · 2 A

Authentication posture

per protocol

DMARC

policy enforcement: 30.3%
reject
13.3%
quarantine
17.0%
none
24.6%
missing
45.1%

SPF

pass rate: 64.1%
pass
64.1%
warn
1.2%
fail
34.5%
not found
0.2%

DKIM

pass rate: 39.2%
pass
39.2%
warn
0.3%
fail
60.1%
not found
0.3%

MTA-STS

pass rate: 0.2%
pass
0.2%
warn
0.5%
fail
98.1%
not found
1.2%

TLS-RPT

pass rate: 0.8%
pass
0.8%
warn
48.3%
fail
49.7%
not found
1.2%

BIMI

pass rate: 0.8%
pass
0.8%
warn
0.2%
fail
97.8%
not found
1.2%

Top performers

20 of 594 tracked
#DomainScoreGrade
1cliffordchance.com95A+
2class.com.au86A
3closinglock.com85A
4car.org78B
5fanduel.com77B
6bunnyranch.com76B
7irwinmitchell.com76B
8allenovery.com75B
9bakermckenzie.com75B
10bestlawyers.com75B
11boloforms.com75B
12brownejacobson.com75B
13claytonutz.com75B
14cordellcordell.com75B
15elxis.com75B
16formswift.com75B
17gtlaw.com75B
18hbsslaw.com75B
19hodgsonruss.com75B
20hselaw.com75B

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026