Email-auth posture across 3,283,102 domains

Whether each domain is actually protected from being impersonated in email. The grade reflects DMARC enforcement and SPF strictness — it does not award points for just publishing records.

no-mx

1,051,354

32.0%

weak

1,033,496

31.5%

partial

729,101

22.2%

strong

469,151

14.3%

Method

Each domain's posture is scored from its SPF, DMARC and DKIM records on every crawl. Strong = DMARC p=quarantine or p=reject with a healthy SPF. Partial = mid-range: enforcing policy but with caveats (pct<100, weak subdomain policy, missing all). Weak = published but unenforcing (p=none, multiple SPF records, or no DMARC). No-MX = the domain doesn't claim to send mail, so it isn't scored for spoofing protection.