Sector

Travel

2,286 domains tracked. 24.5% at DMARC enforcement (p=reject or p=quarantine), backed by 560 enforced domains.

Domains tracked
2K+
2,286
DMARC enforcement
24.5%
p=reject + p=quarantine
Avg posture score
33.9
of 100
A-grade domains
10
0 A+ · 10 A

Authentication posture

per protocol

DMARC

policy enforcement: 24.5%
reject
10.6%
quarantine
13.9%
none
27.6%
missing
47.9%

SPF

pass rate: 61.2%
0
pass
61.2%
warn
1.0%
fail
37.8%
not found
0.0%

DKIM

pass rate: 40.4%
pass
40.4%
warn
0.3%
fail
59.3%
not found
0.1%

MTA-STS

pass rate: 0.6%
pass
0.6%
warn
0.2%
fail
98.5%
not found
0.7%

TLS-RPT

pass rate: 0.7%
pass
0.7%
warn
23.8%
fail
74.8%
not found
0.7%

BIMI

pass rate: 1.4%
pass
1.4%
warn
0.2%
fail
97.7%
not found
0.7%

Top performers

20 of 2,286 tracked
#DomainScoreGrade
1colorline.no90A
2costaricantrails.com90A
3eventbookings.com90A
4awardwallet.com89A
5experiencescottsdale.com89A
6bcdtravel.com88A
7dyreparken.no88A
8helloworld.com.au88A
9colorline.com87A
10gulfair.com87A
11gansevoorthotelgroup.com82B
12engine.com81B
13call.com80B
14check24.at80B
15check24.es80B
16cntraveller.in80B
17costcotravel.ca80B
18costcotravel.com80B
19dailydrop.com80B
20ferryhopper.com80B

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026