TLD

.or.ke

1,316 domains tracked. 8.9% at DMARC enforcement (p=reject or p=quarantine), backed by 117 enforced domains.

Domains tracked
1K+
1,316
DMARC enforcement
8.9%
p=reject + p=quarantine
Avg posture score
21.8
of 100
A-grade domains
0
0 A+ · 0 A

Authentication posture

per protocol

DMARC

policy enforcement: 8.8%
reject
1.7%
quarantine
7.1%
none
13.4%
missing
77.7%

SPF

pass rate: 44.0%
0
pass
44.0%
warn
1.7%
fail
0.0%
not found
54.3%

DKIM

pass rate: 36.9%
0
pass
36.9%
warn
0.0%
fail
0.2%
not found
63.0%

MTA-STS

pass rate: 0.0%
0
pass
0.0%
warn
0.2%
fail
0.4%
not found
99.5%

TLS-RPT

pass rate: 0.2%
0
pass
0.2%
warn
0.0%
fail
0.4%
not found
99.4%

BIMI

pass rate: 0.0%
00
pass
0.0%
warn
0.0%
fail
0.4%
not found
99.6%

No top performers available yet. The leaderboard refreshes nightly.

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen — 8 May 2026