Updated

Top 100 Domains by DMARC Compliance

Live ranking of email authentication among the world's most popular websites. Updated daily from public DNS records.

Read the announcement to learn why we built this index and what it means for email security.

Source: Cloudflare Radar

This ranking tracks DMARC adoption across the 100 most visited websites globally, based on Cloudflare Radar traffic data. We scan each domain's DNS records daily to check for DMARC, SPF, and BIMI configurations. Domains are scored on their email authentication setup, with p=reject (full enforcement) as the gold standard.

100%
DMARC Adoption
100 of 100 domains
66%
Full Protection (p=reject)
66 domains
11
Recent Improvements
Last 90 days
99
Valid SPF Records
41 with BIMI

Policy Distribution

How the top 100 domains configure their DMARC enforcement level.

p=reject Full protection
66 (66%)
p=quarantine Partial protection
23 (23%)
p=none Monitor only
11 (11%)
No DMARC Not configured
0 (0%)

Recent Activity

Policy upgrades and new DMARC adoptions in the last 90 days.

github.com upgraded
p=quarantine\ → p=quarantine
March 24, 2026
nhs.uk added DMARC
Started with p=reject
April 06, 2026
stanford.edu added DMARC
Started with p=quarantine
April 06, 2026
protonmail.com added DMARC
Started with p=quarantine
April 06, 2026
godaddy.com added DMARC
Started with p=reject
April 06, 2026
namecheap.com added DMARC
Started with p=reject
April 06, 2026
chase.com added DMARC
Started with p=reject
April 06, 2026
outlook.com added DMARC
Started with p=none
April 06, 2026
mit.edu added DMARC
Started with p=none
April 06, 2026
doe.gov added DMARC
Started with p=reject
April 06, 2026
figma.com added DMARC
Started with p=quarantine
April 06, 2026

All 100 Domains

Complete list of monitored domains with their current email authentication status.

# Domain DMARC Policy SPF BIMI Score
1 craigslist.org Valid p=quarantine Valid Yes 102
2 linkedin.com Valid p=reject Valid Yes 101
3 godaddy.com Valid p=reject Valid Yes 100
4 namecheap.com Valid p=reject Valid Yes 100
5 openai.com Valid p=reject Valid Yes 100
6 chase.com Valid p=reject Valid Yes 100
7 booking.com Valid p=reject Valid Yes 100
8 roblox.com Valid p=reject Valid Yes 100
9 adobe.com Valid p=reject Valid Yes 100
10 alibaba.com Valid p=reject Valid Yes 100
11 aliexpress.com Valid p=reject Valid Yes 100
12 ebay.com Valid p=reject Valid Yes 96
13 mercadolibre.com Valid p=reject Valid Yes 96
14 cnn.com Valid p=reject Valid Yes 96
15 paypal.com Valid p=reject Valid Yes 96
16 bankofamerica.com Valid p=reject Valid Yes 96
17 bestbuy.com Valid p=reject Valid Yes 96
18 shopify.com Valid p=reject Valid Yes 96
19 forbes.com Valid p=reject Valid Yes 95
20 chatgpt.com Valid p=reject Valid Yes 95
21 cloudflare.com Valid p=reject Valid Yes 95
22 snapchat.com Valid p=reject Valid Yes 95
23 ikea.com Valid p=reject Valid No 95
24 airbnb.com Valid p=reject Valid Yes 95
25 imdb.com Valid p=quarantine Valid Yes 92
26 disneyplus.com Valid p=quarantine Valid Yes 92
27 amazon.com Valid p=quarantine Valid Yes 92
28 primevideo.com Valid p=quarantine Valid Yes 92
29 lowes.com Valid p=reject Valid Yes 91
30 salesforce.com Valid p=reject Valid Yes 91
31 reddit.com Valid p=reject Valid Yes 91
32 tripadvisor.com Valid p=reject Valid Yes 91
33 rakuten.co.jp Valid p=reject Valid Yes 91
34 microsoft.com Valid p=reject Valid No 90
35 apple.com Valid p=quarantine Valid Yes 88
36 facebook.com Valid p=reject Valid No 87
37 bbc.co.uk Valid p=reject Valid Yes 86
38 mail.ru Valid p=reject Valid No 86
39 spotify.com Valid p=reject Valid Yes 86
40 netflix.com Valid p=reject Valid No 85
41 doe.gov Valid p=reject Valid No 85
42 tiktok.com Valid p=reject Valid Yes 85
43 theguardian.com Valid p=reject Valid No 85
44 slack.com Valid p=reject Valid No 85
45 etsy.com Valid p=reject Valid No 85
46 expedia.com Valid p=reject Valid No 85
47 notion.so Valid p=quarantine Valid Yes 83
48 flipkart.com Valid p=quarantine Valid Yes 83
49 google.com Valid p=reject Valid No 81
50 steamcommunity.com Valid p=reject Valid No 80
51 indeed.com Valid p=reject Valid No 80
52 olx.com Valid p=reject Valid No 80
53 sharepoint.com Valid p=reject Valid No 80
54 duckduckgo.com Valid p=reject Valid No 80
55 telegram.org Valid p=reject Valid No 80
56 foxnews.com Valid p=reject Valid No 80
57 discord.com Valid p=reject Valid Yes 80
58 canva.com Valid p=reject Valid No 80
59 allegro.pl Valid p=quarantine Valid Yes 77
60 fandom.com Valid p=quarantine Valid No 77
61 messenger.com Valid p=reject Valid No 77
62 force.com Valid p=reject Valid No 76
63 medium.com Valid p=reject Valid No 76
64 pinterest.com Valid p=reject Valid No 76
65 target.com Valid p=reject Valid No 76
66 homedepot.com Valid p=reject Valid No 76
67 stripe.com Valid p=reject Valid No 76
68 bilibili.com Valid p=reject Valid No 75
69 nhs.uk Valid p=reject Valid No 75
70 hotmail.com Valid p=none Valid No 74
71 outlook.com Valid p=none Valid No 74
72 figma.com Valid p=quarantine Valid Yes 72
73 hulu.com Valid p=quarantine Valid No 72
74 instagram.com Valid p=reject Valid No 72
75 baidu.com Valid p=quarantine Valid No 72
76 bing.com Valid p=reject Valid No 72
77 slideshare.net Valid p=reject Valid No 71
78 quora.com Valid p=reject Valid No 71
79 nytimes.com Valid p=reject Valid No 71
80 cnet.com Valid p=reject Valid No 71
81 live.com Valid p=none Valid No 70
82 protonmail.com Valid p=quarantine Valid No 68
83 github.com Valid p=quarantine Valid No 68
84 max.com Valid p=quarantine Valid No 68
85 scribd.com Valid p=quarantine Valid No 68
86 qq.com Valid p=quarantine Valid No 67
87 bbc.com Valid p=reject Valid No 66
88 gmail.com Valid p=none Valid No 65
89 stanford.edu Valid p=quarantine Valid No 64
90 taobao.com Valid p=quarantine Valid No 64
91 dailymotion.com Valid p=quarantine Valid No 63
92 harvard.edu Valid p=quarantine Valid No 63
93 samsung.com Valid p=none Valid No 60
94 jd.com Valid p=none Valid No 59
95 globo.com Valid p=none Valid No 59
96 mit.edu Valid p=none Valid No 59
97 msn.com Valid p=none Valid No 55
98 espn.com Valid p=none Valid No 55
99 naver.com Valid p=none Valid No 55
100 office.com Valid p=quarantine N/A No 47

Key takeaways

As of May 2026, 100% of the top 100 domains have a DMARC record, and 66% enforce the strictest policy (p=reject). In the last 90 days, 11 domains either adopted DMARC or strengthened their policy. Domains without DMARC remain vulnerable to email spoofing and phishing attacks targeting their brand.

Want to see how your domain compares? Use our free DMARC checker or generate a DMARC record to get started.

Related tools

DMARC checker DMARC record generator MX lookup SPF record generator BIMI record generator Email DNS documentation

Methodology

This report analyzes the DMARC configuration of the top 100 most popular websites based on Cloudflare Radar's domain rankings. Cloudflare Radar aggregates data from Cloudflare's global network, which handles over 20% of all web traffic.

Data Collection

  • DNS records are queried directly from authoritative nameservers
  • DMARC records are parsed from _dmarc.domain.com TXT records
  • Data is refreshed daily, with individual domain checks occurring every 24 hours
  • Historical changes are tracked and stored for trend analysis

What We Track

  • Policy upgrades: When a domain strengthens its DMARC policy (none → quarantine → reject)
  • New adoptions: When a domain adds a DMARC record for the first time
  • Protocol coverage: DMARC, SPF, and BIMI record presence and validity

About this data: All information displayed on this page is extracted from publicly available DNS records. We do not create, modify, or control this data. We simply query and display what domain owners have published in the global Domain Name System.

This page is updated once per day. There may be a delay between when a domain owner changes their DNS configuration and when that change appears here. For more current information about a specific domain, click on its name to view its dedicated page, which queries DNS records in real-time.

Please note that DNS changes can take time to propagate across the internet. Even after a domain owner updates their configuration, it may take several hours before the new records are visible from all DNS resolvers worldwide.

DMARCTrust provides this information for educational and informational purposes only. We make no guarantees about the accuracy, completeness, or timeliness of this data. For authoritative information about any domain's email authentication configuration, please consult the domain owner directly.

Monitor Your Own Domain

Get real-time DMARC monitoring, detailed reports, and actionable insights for your domains.

Check Your Domain Free View Monitoring Plans