DE EN IT

~/home / e-mail ranking

E-mail ranking.

Can someone send mail in the name of these domains without it landing in spam? We read SPF, DMARC and MTA-STS of 102 domains from public DNS, as of 6 November 2026.

AllGermanyItalyBanks

102domains checked
59with DMARC p=reject
42 %without an effective DMARC block
83median score

42% of the domains do not reject forged mail (no DMARC, p=none or p=quarantine).

Grade distribution

RankDomainScoreSPFSPF -allDMARCPolicyReportsMTA-STS
1Acloudflare.com100SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: yesCheck live
2Acommerzbank.de100SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: yesCheck live
3Amicrosoft.com100SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: yesCheck live
4Agoogle.com93SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: yesCheck live
5Aagenziaentrate.gov.it90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
6Aaruba.it90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
7Abancobpm.it90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
8Abper.it90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
9Abund.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
10Abundesregierung.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
11Acomdirect.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
12Adeutsche-bank.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
13Adigitalocean.com90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
14Agov.uk90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
15Ahetzner.com90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
16Aing.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
17Ainps.it90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
18Ainstagram.com90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
19Aintesasanpaolo.com90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
20Akaufland.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
21Amediamarkt.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
22Amediaworld.it90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
23Anetflix.com90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
24Aopenai.com90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
25Arai.it90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
26Areddit.com90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
27Arewe.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
28Asubito.it90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
29Atagesschau.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
30Atelegram.org90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
31Asky.it90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
32Avodafone.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: yesCheck live
33Awhatsapp.com90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
34Ax.com90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
35Ayoutube.com90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
36Azalando.de90SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
37Bfacebook.com85SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: yesCheck live
38Btiktok.com85SPF: yesSPF -all: yesDMARC: yesDMARC policy: rejectReports: noMTA-STS: noCheck live
39Banthropic.com83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
40Bbbc.com83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
41Bconsorsbank.de83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
42Bdhl.de83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
43Bdropbox.com83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
44Bebay.de83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
45Bfastweb.it83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
46Bfineco.it83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
47Blinkedin.com83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
48Bmozilla.org83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
49Bn26.com83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
50Bnytimes.com83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
51Bpaypal.com83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
52Bspotify.com83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
53Bstrato.de83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
54Bstripe.com83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
55Busa.gov83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
56Bvodafone.it83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
57Bwelt.de83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
58Bwikipedia.org83SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
59B1und1.de80SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
60Bamazon.de80SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
61Bansa.it80SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
62Bhypovereinsbank.de80SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
63Bnextcloud.com80SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
64Bovhcloud.com80SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
65Bspiegel.de80SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
66Bunicredit.it80SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
67Bwindtre.it80SPF: yesSPF -all: yesDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
68Bbild.de75SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
69Bgmx.net75SPF: yesSPF -all: noDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: yesCheck live
70Bionos.de75SPF: yesSPF -all: noDMARC: yesDMARC policy: rejectReports: yesMTA-STS: noCheck live
71Bweb.de75SPF: yesSPF -all: noDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: yesCheck live
72Capple.com73SPF: yesSPF -all: noDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
73Cgithub.com73SPF: yesSPF -all: noDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
74Ctargobank.de73SPF: yesSPF -all: noDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
75Ctelekom.de73SPF: yesSPF -all: noDMARC: yesDMARC policy: quarantineReports: yesMTA-STS: noCheck live
76Cdeutschebahn.com70SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: yesCheck live
77Ct-online.de63SPF: yesSPF -all: noDMARC: yesDMARC policy: noneReports: yesMTA-STS: yesCheck live
78Cagid.gov.it60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
79Cbancaditalia.it60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
80Ccorriere.it60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
81Cdkb.de60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
82Ciliad.it60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
83Clidl.de60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
84Cmps.it60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
85Cotto.de60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
86Cpostbank.de60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
87Cposte.it60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
88Crepubblica.it60SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
89Csparkasse.de55SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: noMTA-STS: noCheck live
90Csueddeutsche.de55SPF: yesSPF -all: yesDMARC: yesDMARC policy: noneReports: noMTA-STS: noCheck live
91Dheise.de53SPF: yesSPF -all: noDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
92Dilsole24ore.com53SPF: yesSPF -all: noDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
93Dlastampa.it53SPF: yesSPF -all: noDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
94Dregister.it53SPF: yesSPF -all: noDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
95Dtrenitalia.com53SPF: yesSPF -all: noDMARC: yesDMARC policy: noneReports: yesMTA-STS: noCheck live
96Dzeit.de48SPF: yesSPF -all: noDMARC: yesDMARC policy: noneReports: noMTA-STS: noCheck live
97Deuropa.eu35SPF: yesSPF -all: yesDMARC: noDMARC policy: –Reports: noMTA-STS: noCheck live
98Dfaz.net35SPF: yesSPF -all: yesDMARC: noDMARC policy: –Reports: noMTA-STS: noCheck live
99Dmediolanum.com35SPF: yesSPF -all: yesDMARC: noDMARC policy: –Reports: noMTA-STS: noCheck live
100Ftim.it28SPF: yesSPF -all: noDMARC: noDMARC policy: –Reports: noMTA-STS: noCheck live
101Fgov.it0SPF: noSPF -all: noDMARC: noDMARC policy: –Reports: noMTA-STS: noCheck live
102Fvolksbank.de0SPF: noSPF -all: noDMARC: noDMARC policy: –Reports: noMTA-STS: noCheck live

And your domain?

Check SPF, DMARC and MX in ten seconds.

Create a DMARC record →

Why it matters

Without DMARC at p=reject, scammers can send mail with exactly this sender address and many mailboxes will deliver it. That is how a lot of phishing in the name of banks, parcel services and authorities works. SPF says which servers may send; DMARC tells the receiver what to do with forgeries.

How we measured

Public DNS queries only; nothing is sent to the domains. Points: SPF present 20, SPF with -all 15 (~all 8), DMARC present 20, p=reject 30 (quarantine 20), reports (rua) 5, MTA-STS 10. Grade A from 90, B from 75, C from 55, D from 35, otherwise F. The main domain is measured (the organisational domain for subdomains).

Reading it fairly

DKIM cannot be checked from outside without the selector, so it is left out. p=quarantine is better than nothing but protects less than reject. A low grade does not mean the provider's mail is insecure, only that forgeries get through more easily.

Also: header ranking (HSTS, CSP & co) →