TLD

.go.ke

890 domains tracked. 26.9% at DMARC enforcement (p=reject or p=quarantine), backed by 239 enforced domains.

Domains tracked
890
890
DMARC enforcement
26.9%
p=reject + p=quarantine
Avg posture score
25.3
of 100
A-grade domains
0
0 A+ · 0 A

Authentication posture

per protocol

DMARC

policy enforcement: 26.8%
reject
1.3%
quarantine
25.5%
none
8.8%
missing
64.4%

SPF

pass rate: 51.1%
pass
51.1%
warn
1.6%
fail
0.7%
not found
46.6%

DKIM

pass rate: 23.6%
pass
23.6%
warn
0.1%
fail
1.6%
not found
74.7%

MTA-STS

pass rate: 0.0%
0
pass
0.0%
warn
0.1%
fail
2.4%
not found
97.5%

TLS-RPT

pass rate: 0.1%
0
pass
0.1%
warn
0.0%
fail
2.4%
not found
97.5%

BIMI

pass rate: 0.0%
0
pass
0.0%
warn
0.1%
fail
2.4%
not found
97.5%

No top performers available yet. The leaderboard refreshes nightly.

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen — 8 May 2026