Email security of the top 1,000 domains

Week 2026-W40: 859 domains that handle mail, from the Tranco top 1,000.

83%
Publish DMARC
717 of 859
70%
Enforce DMARC
p=quarantine or p=reject
50%
SPF hard fail
SPF ending in -all
88%
Publish SPF
752 of 859
2%
MTA-STS enforce
14 more in testing
19%
BIMI
TLS-RPT: 5%

Grade distribution

  • A 29%
  • B 35%
  • C 12%
  • D 12%
  • F 12%

All measured domains

DomainGradeScore
aboutads.infoA100
addtoany.comA100
anthropic.comA100
archive.orgA100
baidu.comA100
caixa.gov.brA100
character.aiA100
cloudflare.netA100
cnbc.comA100
cnet.comA100
curseforge.comA100
deloitte.comA100
discordapp.comA100
docker.ioA100
dropcatch.comA100
erome.comA100
fidelity.comA100
firefox.comA100
flickr.comA100
grammarly.comA100
grammarly.ioA100
gravatar.comA100
jetbrains.comA100
kick.comA100
klaviyo.comA100
launchdarkly.comA100
mediatek.comA100
merriam-webster.comA100
mikrotik.comA100
nist.govA100
note.comA100
pexels.comA100
pixabay.comA100
playstation.comA100
plesk.comA100
prnewswire.comA100
ryanair.comA100
sberbank.ruA100
sciencedirect.comA100
sharepoint.comA100
shopee.com.brA100
skyhigh.cloudA100
spectrum.comA100
stripchat.comA100
substack.comA100
tailscale.comA100
teamviewer.comA100
techcrunch.comA100
theguardian.comA100
tp-link.comA100
trueconf.netA100
w3.orgA100
wpguardian.comA100
x.comA100
xhamster.comA100
yuga.comA100
zoom.comA100
accuweather.comA92
actify.nlA92
adjust.comA92
agoda.comA92
ailawandorder.comA92
airbnb.comA92
amazon.comA92
amazon.frA92
apnews.comA92
apple.comA92
atlassian.comA92
att.comA92
autodesk.comA92
bbc.comA92
behance.netA92
berkeley.eduA92
bestbuy.comA92
biblegateway.comA92
binance.comA92
blackberry.comA92
booking.comA92
brave.comA92
braze.comA92
bugsnag.comA92
businessinsider.comA92
buydomains.comA92
calendly.comA92
change.orgA92
chatgpt.comA92
chaturbate.comA92
chess.comA92
cnn.comA92
comcast.comA92
cookiedatabase.orgA92
cornell.eduA92
crashlytics.comA92
criteo.netA92
dailymail.co.ukA92
dailymail.comA92
dailymotion.comA92
dell.comA92
deviantart.comA92
digicert.comA92
digitalocean.comA92
discogs.comA92
discord.comA92
docker.comA92
doubleverify.comA92
drom.ruA92
dropbox.comA92
duolingo.comA92
dynatrace.comA92
dzen.ruA92
ea.comA92
elpais.comA92
epa.govA92
epicgames.comA92
eventbrite.comA92
f5.comA92
faphouse.comA92
fastly.netA92
fb.comA92
flightradar24.comA92
foxnews.comA92
frontiersin.orgA92
fwmrm.netA92
gafg.comA92
godaddy.comA92
gotinder.comA92
gumgum.comA92
hm.comA92
homedepot.comA92
huawei.comA92
hubspot.comA92
ibm.comA92
ieee.orgA92
ikea.comA92
intercom.ioA92
iso.orgA92
issuu.comA92
it.comA92
jotform.comA92
kaspersky.comA92
kleinanzeigen.deA92
lenovo.comA92
life360.comA92
lijit.comA92
linktr.eeA92
linode.comA92
lowes.comA92
mailchimp.comA92
marriott.comA92
mckinsey.comA92
media.netA92
mediafire.comA92
medium.comA92
meraki.comA92
microsoft.comA92
mlb.comA92
moloco.comA92
mozilla.comA92
mozilla.orgA92
my.comA92
name.comA92
namecheaphosting.comA92
netflix.comA92
nginx.comA92
nih.govA92
nike.comA92
nintendo.comA92
noaa.govA92
ntp.orgA92
nvidia.comA92
nytimes.comA92
ok.ruA92
okta.comA92
onetrust.comA92
openai.comA92
opera.comA92
optimizely.comA92
oracle.comA92
oxylabs.ioA92
paloaltonetworks.comA92
paytmfirstgames.comA92
pendo.ioA92
people.comA92
perplexity.aiA92
pinterest.comA92
princeton.eduA92
publicnode.comA92
rakuten.comA92
reddit.comA92
researchgate.netA92
reuters.comA92
ring.comA92
roblox.comA92
roku.comA92
sagepub.comA92
scorecardresearch.comA92
selectel.ruA92
sentry.ioA92
sharethrough.comA92
shein.comA92
shopee.co.idA92
shopeemobile.comA92
shopify.comA92
slack.comA92
snapchat.comA92
sophos.comA92
soundcloud.comA92
spotify.comA92
squarespace.comA92
stackadapt.comA92
starlink.comA92
state.govA92
steampowered.comA92
stripe.comA92
surveymonkey.comA92
synology.comA92
taboola.comA92
target.comA92
telegram.orgA92
telegraph.co.ukA92
theverge.comA92
timeweb.ruA92
trendmicro.comA92
tripadvisor.comA92
trustpilot.comA92
tumblr.comA92
twitter.comA92
uber.comA92
un.orgA92
unity3d.comA92
ups.comA92
viber.comA92
vimeo.comA92
vk.comA92
vk.ruA92
vkontakte.ruA92
walmart.comA92
washingtonpost.comA92
wikimedia.orgA92
wiley.comA92
wired.comA92
wix.comA92
wordpress.orgA92
worldbank.orgA92
wsj.comA92
xbox.comA92
xiaomi.comA92
xnxx.comA92
xvideos.comA92
yelp.comA92
yieldmo.comA92
youtube.comA92
zoom.usA92
a2z.comB88
alibaba.comB88
amazon.caB88
amazon.co.jpB88
amazon.co.ukB88
amazon.co.zaB88
amazon.com.auB88
amazon.com.brB88
amazon.deB88
amazon.esB88
amazon.inB88
amazon.itB88
ampproject.orgB88
android.comB88
arcgis.comB88
arubanetworks.comB88
att.netB88
bankofamerica.comB88
blogger.comB88
bloomberg.comB88
cloudsink.netB88
comcast.netB88
consultant.ruB88
cookielaw.orgB88
craigslist.orgB88
dellemc.comB88
discord.ggB88
doctolib.frB88
doi.orgB88
fda.govB88
force.comB88
google.cnB88
google.co.ukB88
google.comB88
google.com.brB88
google.com.hkB88
google.deB88
googleadservices.comB88
highwebmedia.comB88
hosting24.comB88
hugedomains.comB88
imdb.comB88
livejournal.comB88
macromedia.comB88
mail.ruB88
microsoftonline.comB88
mzstatic.comB88
onet.plB88
ozon.ruB88
pccc.comB88
pki.googB88
primevideo.comB88
rakuten.co.jpB88
recaptcha.netB88
rt.ruB88
shop.appB88
skype.comB88
speedtest.netB88
spotifycdn.comB88
telekom.netB88
temu.comB88
userapi.comB88
usps.comB88
vkuserphoto.ruB88
wikipedia.orgB88
windows.comB88
wp.comB88
yahoo.co.jpB88
youtu.beB88
youtube-nocookie.comB88
ytimg.comB88
zoho.comB88
ad-tech.ruB85
arxiv.orgB85
cbsnews.comB85
cursor.shB85
disqus.comB85
dotomi.comB85
expireddomains.comB85
live.comB85
msn.comB85
otto.deB85
outlook.comB85
php.netB85
repubblica.itB85
ripn.netB85
samsung.comB85
academia.eduB84
adriver.ruB84
agora.ioB84
aliexpress.comB84
allegro.plB84
amazontrust.comB84
amazonvideo.comB84
amplitude.comB84
ancestry.comB84
anydesk.comB84
atlassian.netB84
auvik.comB84
avast.comB84
bidswitch.netB84
bilibili.comB84
box.comB84
canva.comB84
checkpoint.comB84
cisco.comB84
claude.aiB84
cloudinary.comB84
coupang.comB84
criteo.comB84
datadoghq.comB84
deepl.comB84
dreamhost.comB84
ebay.comB84
ebay.deB84
expedia.comB84
ezvizlife.comB84
facebook.comB84
fandom.comB84
figma.comB84
fiverr.comB84
fontawesome.comB84
forbes.comB84
forter.comB84
ft.comB84
github.comB84
globalsign.comB84
goodreads.comB84
gosuslugi.ruB84
harvard.eduB84
hbr.orgB84
hcaptcha.comB84
hotjar.comB84
hp.comB84
imgur.comB84
indeed.comB84
independent.co.ukB84
instagram.comB84
intuit.comB84
ipinfo.ioB84
kwai.comB84
latimes.comB84
lemonde.frB84
linkedin.comB84
lwsdns.comB84
mcafee.comB84
mdpi.comB84
mercadolivre.com.brB84
mixpanel.comB84
namecheap.comB84
nasa.govB84
netangels.ruB84
networkadvertising.orgB84
newrelic.comB84
odoo.comB84
onlyfans.comB84
patreon.comB84
paypal.comB84
pixiv.netB84
qualtrics.comB84
quora.comB84
redhat.comB84
reg.ruB84
salesforce.comB84
scribd.comB84
sedo.comB84
singular.netB84
smartthings.comB84
sofascore.comB84
sohu.comB84
stackoverflow.comB84
stanford.eduB84
statista.comB84
tandfonline.comB84
taobao.comB84
tencent.comB84
time.comB84
tinyurl.comB84
tradingview.comB84
ubi.comB84
ui.comB84
usda.govB84
vungle.comB84
wattpad.comB84
wb.ruB84
webmd.comB84
welt.deB84
whatsapp.comB84
wildberries.ruB84
wps.comB84
wyzecam.comB84
zendesk.comB84
zillow.comB84
app-ads-services.comB80
app-measurement.comB80
appcenter.msB80
azure.comB80
bbc.co.ukB80
bing.comB80
bitdefender.netB80
bitrix24.ruB80
britannica.comB80
bsky.appB80
discord.mediaB80
disneyplus.comB80
dns.googleB80
eporner.comB80
fast.comB80
g.coB80
goo.glB80
google-analytics.comB80
googleapis.comB80
googleblog.comB80
googletagmanager.comB80
immedia-semi.comB80
ip-api.comB80
ipify.orgB80
ivi.ruB80
jquery.comB80
lencr.orgB80
meta.comB80
mobile.deB80
myshopify.comB80
nflxvideo.netB80
office365.comB80
qq.comB80
run.appB80
sentinelone.netB80
service.gov.ukB80
share.googleB80
slideshare.netB80
sourceforge.netB80
steamserver.netB80
tbank.ruB80
telephony.googB80
translate.googB80
typekit.netB80
usercontent.googB80
vivo.com.cnB80
vkuser.netB80
webex.comB80
weibo.comB80
windows.netB80
zpath.netB80
afternic.comB77
apache.orgB77
bandcamp.comB77
beget.ruB77
bit.lyB77
ca.govB77
cambridge.orgB77
chinamobile.comB77
cloudns.netB77
corriere.itB77
creativecommons.orgB77
endpoints.newsB77
genius.comB77
intel.comB77
loc.govB77
pornhub.comB77
presage.ioB77
smartadserver.comB77
unpkg.comB77
uol.com.brB77
yandex.ruB77
2gis.comB76
adobe.ioB76
appsflyer.comB76
asus.comB76
avito.ruB76
bild.deB76
cloud.microsoftB76
cloudflare.comB76
conviva.comB76
cpanel.netB76
crpt.ruB76
duckduckgo.comB76
eeroup.comB76
elasticbeanstalk.comB76
etsy.comB76
example.comB76
firetvcaptiveportal.comB76
flashtalking.comB76
libp2p.directB76
mercadolibre.com.arB76
mts.ruB76
myspace.comB76
nic.ruB76
playrix.comB76
porkbun.comB76
rubiconproject.comB76
springer.comB76
supercell.comB76
tiktok.comB76
triplinkintl.comB76
twitch.tvB76
unesco.orgB76
base.orgC80
debian.orgC73
gandi.netC73
gmail.comC73
hicloudcam.comC73
line.meC73
naver.comC73
nbcnews.comC73
nintendo.netC73
openstreetmap.orgC73
scdn.coC73
t-online.deC73
wp.plC73
adsrvr.orgC72
aliyun.comC72
aliyuncs.comC72
amazon-adsystem.comC72
amazonalexa.comC72
amzn.toC72
aol.comC72
eset.comC72
free.frC72
icloud.comC72
indiatimes.comC72
me.comC72
mega.co.nzC72
oraclecloud.comC72
pinimg.comC72
steamcommunity.comC72
steamstatic.comC72
t.coC72
verisign.comC72
warnerbros.comC72
yahoo.comC72
grab.coC70
33across.comC69
360.cnC69
cdnvideo.ruC69
dnsmadeeasy.comC69
elmundo.esC69
itch.ioC69
jd.comC69
lg.comC69
liftoff.ioC69
mit.eduC69
name-services.comC69
nationalgeographic.comC69
oup.comC69
python.orgC69
thenai.orgC69
trendyol.comC69
usatoday.comC69
weebly.comC69
ya.ruC69
yandex.comC69
chatgpt.siteC68
doctolib.netC68
nature.comC68
netflix.netC68
nflximg.comC68
npr.orgC68
omtrdc.netC68
t.meC68
telegram.meC68
xerox.comC68
markmonitor.comC67
teads.tvC67
163.comC65
ameblo.jpC65
crwdcntrl.netC65
daum.netC65
doubleclick.netC65
gnu.orgC65
googledomains.comC65
googlesyndication.comC65
kaspersky-labs.comC65
launchpad.netC65
seznam.czC65
transsion-os.comC65
ubuntu.comC65
washington.eduC65
xboxlive.comC65
myfritz.netC64
parklogic.comC64
adobe.comC62
cdc.govC62
ddnss.deC62
no-ip.comC62
registrar-servers.comC62
weather.comC62
espn.comC61
ietf.orgC61
lefigaro.frC61
mayoclinic.orgC61
opendns.comC61
rfc-editor.orgC61
ted.comC61
youku.comC61
icloud-content.comC60
applovin.comD59
ebay.co.ukD59
gitlab.comD59
inmobi.comD59
ngenix.netD59
outbrain.comD59
pikabu.ruD59
unsplash.comD59
who.intD59
1rx.ioD58
3gppnetwork.orgD58
abovedomains.comD58
adform.netD58
akadns.netD58
casalemedia.comD58
cdn-apple.comD58
dnspod.netD58
domaincontrol.comD58
europa.euD58
focus.deD58
liadm.comD58
miit.gov.cnD58
miui.comD58
netease.comD58
pushy.ioD58
samsungacr.comD58
samsungosp.comD58
sina.com.cnD58
tplinkcloud.comD58
turn.comD58
twc.comD58
vivoglobal.comD58
webempresa.euD58
yandex.netD58
adtrafficquality.googleD57
fbcdn.netD57
g.pageD57
googleusercontent.comD57
googlevideo.comD57
gstatic.comD57
investopedia.comD57
ovh.netD57
uk.comD57
withgoogle.comD57
wpguardian.ioD57
adobe.netD56
nikkei.comD54
licdn.comD52
nexusmods.comD52
branch.ioD51
seedtag.comD51
360safe.comD50
alicdn.comD50
cdngslb.comD50
clarity.msD50
cloudflareinsights.comD50
ezviz7.comD50
fbsbx.comD50
gamepass.comD50
gcdn.coD50
go.comD50
inner-active.mobiD50
kunluncan.comD50
mi.comD50
nease.netD50
office.comD50
onelink.meD50
quantserve.comD50
stbid.ruD50
threads.comD50
tiktokv.comD50
visualstudio.comD50
wa.meD50
whatsapp.netD50
www.gov.brD50
globo.comD49
2mdn.netD48
aaplimg.comD48
adobedc.netD48
adobedtm.comD48
demdex.netD48
ggpht.comD48
googletagservices.comD48
googlezip.netD48
gvt1.comD48
gvt2.comD48
nr-data.netD48
dyndns.orgD47
awsglobalaccelerator.comD44
awswaf.comD44
bluehost.comD44
hostgator.comD44
hostgator.com.brD44
pv-cdn.netD44
static.microsoftD44
mysql.comD43
okcdn.ruD42
onetag-sys.comD42
e2ro.comD40
nexthink.cloudD40
readthedocs.ioD40
sc-cdn.netD40
ssl-images-amazon.comD40
ttvnw.netD40
wixsite.comD40
hichina.comF38
xiaomi.netF38
allaboutcookies.orgF36
pubmatic.comF36
amagi.tvF35
capcut.comF35
samsungcloud.comF34
live.netF33
amazon.devF32
aws.devF32
zenecn.netF32
nstld.comF30
a-mo.netF28
akamai.netF28
akamaiedge.netF28
akamaihd.netF28
akamaitech.netF28
avcdn.netF28
b-cdn.netF28
bamgrid.comF28
beian.gov.cnF28
bidr.ioF28
bunnyinfra.netF28
cdn77.orgF28
creativecdn.comF28
dnsowl.comF28
duckdns.orgF28
eye4.cnF28
id5-sync.comF28
imgsmail.ruF28
leiniao.comF28
mangosip.ruF28
myhuaweicloud.comF28
online-metrix.netF28
openx.netF28
orderbox-dns.comF28
ozone.ruF28
playstation.netF28
samsungcloudsolution.comF28
samsungqbe.comF28
shifen.comF28
worldnic.comF28
yellowblue.ioF28
amon.techF24
px-cloud.netF24
wbx2.comF24
adsafeprotected.comF22
360yield.comF20
3lift.comF20
adnxs.comF20
alidns.comF20
alipaydns.comF20
app-analytics-services.comF20
appsflyersdk.comF20
avsxappcaptiveportal.comF20
browser-intake-datadoghq.comF20
btloader.comF20
cloudflare-dns.comF20
dv.techF20
edgecdn.ruF20
eu-1-id5-sync.comF20
firefox-portal-detection.comF20
forms.gleF20
heytapmobi.comF20
hihonorcloud.comF20
hstgr.netF20
icanhazip.comF20
imcmdb.netF20
ipv4only.arpaF20
jsdelivr.netF20
kwai.netF20
live-video.netF20
lsrelayaccess.comF20
mhverifier.ruF20
miwifi.comF20
msedge.netF20
myqcloud.comF20
nginx.orgF20
one.oneF20
palmplaystore.comF20
prodregistryv2.orgF20
quickconnect.toF20
samsungapps.comF20
shalltry.comF20
skybridge.clickF20
spaceweb.proF20
statsigapi.netF20
tbcache.comF20
telecid.ruF20
tencent-cloud.netF20
trbcdn.netF20
www.gov.ukF20
xhamster46.desiF20
ys7.comF20
agkn.comF18
akam.netF18
cdninstagram.comF18
facebook.netF18
fastly-edge.comF18
githubusercontent.comF18
nflxso.netF18
alibabadns.comF17
iiko.itF17
edgesuite.netF8
supertms.comF8

Methodology

Every Monday we check each domain in the Tranco list 94GG2 (2026-10-02) top 1,000 using public DNS only. Domains that do not handle mail (no working MX and no SPF record) and shared-hosting suffixes such as github.io are excluded; "measured" counts the rest. Tranco: Le Pochat et al., "Tranco: A Research-Oriented Top Sites Ranking Hardened Against Manipulation", NDSS 2019.