TLD

.org

23,959 domains tracked. 25.5% at DMARC enforcement (p=reject or p=quarantine), backed by 6,116 enforced domains.

Domains tracked
23K+
23,959
DMARC enforcement
25.5%
p=reject + p=quarantine
Avg posture score
38.3
of 100
A-grade domains
100
0 A+ · 100 A

Authentication posture

per protocol

DMARC

policy enforcement: 25.6%
reject
12.4%
quarantine
13.2%
none
29.4%
missing
45.0%

SPF

pass rate: 70.1%
0
pass
70.1%
warn
1.4%
fail
28.5%
not found
0.0%

DKIM

pass rate: 49.6%
00
pass
49.6%
warn
0.0%
fail
50.4%
not found
0.0%

MTA-STS

pass rate: 0.7%
0
pass
0.7%
warn
0.4%
fail
98.8%
not found
0.0%

TLS-RPT

pass rate: 1.5%
0
pass
1.5%
warn
0.1%
fail
98.4%
not found
0.0%

BIMI

pass rate: 0.6%
0
pass
0.6%
warn
0.2%
fail
99.1%
not found
0.0%

No top performers available yet. The leaderboard refreshes nightly.

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen — 8 May 2026