Email-auth posture across 1,681,844 domains

Whether each domain is actually protected from being impersonated in email. The grade reflects DMARC enforcement and SPF strictness — it does not award points for just publishing records.

weak

531,060

31.6%

no-mx

529,908

31.5%

partial

371,789

22.1%

strong

249,087

14.8%

Method

Each domain's posture is scored from its SPF, DMARC and DKIM records on every crawl (see domain detail for the full breakdown). Strong = DMARC p=quarantine or p=reject with a healthy SPF. Partial = mid-range: enforcing policy but with caveats (pct<100, weak subdomain policy, missing all). Weak = published but unenforcing (p=none, multiple SPF records, or no DMARC). No-MX = the domain doesn't claim to send mail, so it isn't scored for spoofing protection.