16 of 195 well-known organisations do not ask receivers to act on mail forged in their name

What public records ask for forged mail, in 8 sectors. This is not a judgement of any organisation's overall security.

Checked on 4 November 2026

Of the others, 140 ask receivers to refuse it, 27 ask for the spam folder, and 12 depend on the receiver. For mail from a made-up subdomain, 136 ask receivers to refuse it. 1 organisation could not be read on the day, and is left out of these numbers.

Each name links to a live report, which may differ from this snapshot.

Check your own domain See the 16 not stopped

What forged mail meets, by sector

Sorted by share refused. Select a name to filter the table.

Refused
Spam folder
Depends
Not stopped

Banks
96%
96% refused, of 26 checked.
Software
88%13%
88% refused, of 24 checked.
Health
76%12%
76% refused, of 25 checked.
Retail
76%12%12%
76% refused, of 25 checked.
Airlines
71%13%13%
71% refused, of 24 checked.
Media
70%17%
70% refused, of 23 checked.
Telecoms
58%17%13%13%
58% refused, of 24 checked. 1 could not be read.
Universities
38%25%13%25%
38% refused, of 24 checked.

Show these numbers as a table

Forged mail outcome by sector
Sector	Refused	Spam folder	Depends	Not stopped	Could not be read
Banks	25 (96%)	1 (4%)	0 (0%)	0 (0%)	0
Software	21 (88%)	3 (13%)	0 (0%)	0 (0%)	0
Health	19 (76%)	3 (12%)	1 (4%)	2 (8%)	0
Retail	19 (76%)	3 (12%)	3 (12%)	0 (0%)	0
Airlines	17 (71%)	3 (13%)	1 (4%)	3 (13%)	0
Media	16 (70%)	4 (17%)	1 (4%)	2 (9%)	0
Telecoms	14 (58%)	4 (17%)	3 (13%)	3 (13%)	1
Universities	9 (38%)	6 (25%)	3 (13%)	6 (25%)	0

Percentages are rounded separately, so a row may not add up to 100.

Every organisation

By sector, Not stopped first, as of 4 November 2026.

Organisations by sector, then the order chosen above. Each name links to a live report.
Organisation	Forged mail	Made-up subdomain	DMARC policy	Addresses allowed to send	Grade
Airlines
All Nippon Airwaysana.co.jp	Forged mail: Not stopped	Not stopped	none	101,329	B	ana.co.jpMore about All Nippon Airways Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 101,329 Grade B
Etihad Airwaysetihad.ae	Forged mail: Not stopped	Not stopped	none	162,146	B	etihad.aeMore about Etihad Airways Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 162,146 Grade B
Japan Airlinesjal.com	Forged mail: Not stopped	Not stopped	none	123,603	B	jal.comMore about Japan Airlines Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 123,603 Grade B
Alaska Airlinesalaskaair.com	Forged mail: Spam folder	Spam folder	quarantine	658,574	A	alaskaair.comMore about Alaska Airlines Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 658,574 Grade A
Emiratesemirates.com	Forged mail: Spam folder	Spam folder	quarantine	534,932	A	emirates.comMore about Emirates Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 534,932 Grade A
Turkish Airlinesthy.com	Forged mail: Spam folder	Spam folder	quarantine	462,593	A	thy.comMore about Turkish Airlines Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 462,593 Grade A
Cathay Pacificcathaypacific.com	Forged mail: Depends	Not stopped	none	Not known	B	cathaypacific.comMore about Cathay Pacific Made-up subdomain Not stopped DMARC policy none Addresses allowed to send Not known Grade B
Air Canadaaircanada.ca	Forged mail: Refused	Refused	reject	731,210	A	aircanada.caMore about Air Canada Made-up subdomain Refused DMARC policy reject Addresses allowed to send 731,210 Grade A
Air Franceairfrance.fr	Forged mail: Refused	Refused	reject	Not known	A	airfrance.frMore about Air France Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Air Indiaairindia.com	Forged mail: Refused	Refused	reject	656,530	A	airindia.comMore about Air India Made-up subdomain Refused DMARC policy reject Addresses allowed to send 656,530 Grade A
American Airlinesaa.com	Forged mail: Refused	Refused	reject	737,852	A	aa.comMore about American Airlines Made-up subdomain Refused DMARC policy reject Addresses allowed to send 737,852 Grade A
British Airwaysbritishairways.com	Forged mail: Refused	Refused	reject	Not known	A	britishairways.comMore about British Airways Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Delta Air Linesdelta.com	Forged mail: Refused	Refused	reject	Not known	A	delta.comMore about Delta Air Lines Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
easyJeteasyjet.com	Forged mail: Refused	Refused	reject	2	A	easyjet.comMore about easyJet Made-up subdomain Refused DMARC policy reject Addresses allowed to send 2 Grade A
IndiGogoindigo.in	Forged mail: Refused	Refused	reject	734,897	A	goindigo.inMore about IndiGo Made-up subdomain Refused DMARC policy reject Addresses allowed to send 734,897 Grade A
JetBluejetblue.com	Forged mail: Refused	Refused	reject	86,016	A	jetblue.comMore about JetBlue Made-up subdomain Refused DMARC policy reject Addresses allowed to send 86,016 Grade A
KLMklm.com	Forged mail: Refused	Refused	reject	Not known	A	klm.comMore about KLM Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Lufthansalufthansa.com	Forged mail: Refused	Refused	reject	159,875	A	lufthansa.comMore about Lufthansa Made-up subdomain Refused DMARC policy reject Addresses allowed to send 159,875 Grade A
Qantasqantas.com.au	Forged mail: Refused	Refused	reject	Not known	A	qantas.com.auMore about Qantas Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Qatar Airwaysqatarairways.com	Forged mail: Refused	Refused	reject	505,934	A	qatarairways.comMore about Qatar Airways Made-up subdomain Refused DMARC policy reject Addresses allowed to send 505,934 Grade A
Ryanairryanair.com	Forged mail: Refused	Refused	reject	Not known	A	ryanair.comMore about Ryanair Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Singapore Airlinessingaporeair.com	Forged mail: Refused	Refused	reject	Not known	A	singaporeair.comMore about Singapore Airlines Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Southwest Airlinessouthwest.com	Forged mail: Refused	Refused	reject	480,049	B	southwest.comMore about Southwest Airlines Made-up subdomain Refused DMARC policy reject Addresses allowed to send 480,049 Grade B
United Airlinesunited.com	Forged mail: Refused	Refused	reject	Not known	A	united.comMore about United Airlines Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Banks
DBSdbs.com	Forged mail: Spam folder	Spam folder	quarantine	33	A	dbs.comMore about DBS Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 33 Grade A
American Expressamericanexpress.com	Forged mail: Refused	Refused	reject	900	A	americanexpress.comMore about American Express Made-up subdomain Refused DMARC policy reject Addresses allowed to send 900 Grade A
ANZanz.com	Forged mail: Refused	Refused	reject	462,467	A	anz.comMore about ANZ Made-up subdomain Refused DMARC policy reject Addresses allowed to send 462,467 Grade A
Bank of Americabankofamerica.com	Forged mail: Refused	Refused	reject	5	A	bankofamerica.comMore about Bank of America Made-up subdomain Refused DMARC policy reject Addresses allowed to send 5 Grade A
Barclaysbarclays.com	Forged mail: Refused	Refused	reject	Not known	A	barclays.comMore about Barclays Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
BNP Paribasbnpparibas.com	Forged mail: Refused	Refused	reject	879	A	bnpparibas.comMore about BNP Paribas Made-up subdomain Refused DMARC policy reject Addresses allowed to send 879 Grade A
Capital Onecapitalone.com	Forged mail: Refused	Refused	reject	368,227	A	capitalone.comMore about Capital One Made-up subdomain Refused DMARC policy reject Addresses allowed to send 368,227 Grade A
Chasechase.com	Forged mail: Refused	Refused	reject	515	A	chase.comMore about Chase Made-up subdomain Refused DMARC policy reject Addresses allowed to send 515 Grade A
Citiciti.com	Forged mail: Refused	Refused	reject	1,583	A	citi.comMore about Citi Made-up subdomain Refused DMARC policy reject Addresses allowed to send 1,583 Grade A
Commonwealth Bankcba.com.au	Forged mail: Refused	Refused	reject	460,874	A	cba.com.auMore about Commonwealth Bank Made-up subdomain Refused DMARC policy reject Addresses allowed to send 460,874 Grade A
Deutsche Bankdb.com	Forged mail: Refused	Refused	reject	65,536	A	db.comMore about Deutsche Bank Made-up subdomain Refused DMARC policy reject Addresses allowed to send 65,536 Grade A
Goldman Sachsgs.com	Forged mail: Refused	Refused	reject	149	A	gs.comMore about Goldman Sachs Made-up subdomain Refused DMARC policy reject Addresses allowed to send 149 Grade A
HDFC Bankhdfcbank.com	Forged mail: Refused	Refused	reject	461,324	A	hdfcbank.comMore about HDFC Bank Made-up subdomain Refused DMARC policy reject Addresses allowed to send 461,324 Grade A
HSBChsbc.com	Forged mail: Refused	Refused	reject	550	A	hsbc.comMore about HSBC Made-up subdomain Refused DMARC policy reject Addresses allowed to send 550 Grade A
ICICI Bankicicibank.com	Forged mail: Refused	Refused	reject	574,503	A	icicibank.comMore about ICICI Bank Made-up subdomain Refused DMARC policy reject Addresses allowed to send 574,503 Grade A
INGing.com	Forged mail: Refused	Refused	reject	466,351	A	ing.comMore about ING Made-up subdomain Refused DMARC policy reject Addresses allowed to send 466,351 Grade A
Lloyds Banking Grouplloydsbanking.com	Forged mail: Refused	Refused	reject	482,640	A	lloydsbanking.comMore about Lloyds Banking Group Made-up subdomain Refused DMARC policy reject Addresses allowed to send 482,640 Grade A
Morgan Stanleymorganstanley.com	Forged mail: Refused	Refused	reject	213,296	A	morganstanley.comMore about Morgan Stanley Made-up subdomain Refused DMARC policy reject Addresses allowed to send 213,296 Grade A
NatWestnatwest.com	Forged mail: Refused	Refused	reject	521	A	natwest.comMore about NatWest Made-up subdomain Refused DMARC policy reject Addresses allowed to send 521 Grade A
RBCrbc.com	Forged mail: Refused	Refused	reject	458,784	A	rbc.comMore about RBC Made-up subdomain Refused DMARC policy reject Addresses allowed to send 458,784 Grade A
Santandersantander.com	Forged mail: Refused	Refused	reject	629,760	A	santander.comMore about Santander Made-up subdomain Refused DMARC policy reject Addresses allowed to send 629,760 Grade A
Standard Charteredsc.com	Forged mail: Refused	Refused	reject	463,940	A	sc.comMore about Standard Chartered Made-up subdomain Refused DMARC policy reject Addresses allowed to send 463,940 Grade A
TD Banktd.com	Forged mail: Refused	Refused	reject	625,208	A	td.comMore about TD Bank Made-up subdomain Refused DMARC policy reject Addresses allowed to send 625,208 Grade A
U.S. Bankusbank.com	Forged mail: Refused	Refused	reject	458,980	A	usbank.comMore about U.S. Bank Made-up subdomain Refused DMARC policy reject Addresses allowed to send 458,980 Grade A
UBSubs.com	Forged mail: Refused	Refused	reject	463,473	A	ubs.comMore about UBS Made-up subdomain Refused DMARC policy reject Addresses allowed to send 463,473 Grade A
Wells Fargowellsfargo.com	Forged mail: Refused	Refused	reject	Not known	A	wellsfargo.comMore about Wells Fargo Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Health
AstraZenecaastrazeneca.com	Forged mail: Not stopped	Not stopped	none	47,886	C	astrazeneca.comMore about AstraZeneca Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 47,886 Grade C
Kaiser Permanentekp.org	Forged mail: Not stopped	Not stopped	none	Not known	B	kp.orgMore about Kaiser Permanente Made-up subdomain Not stopped DMARC policy none Addresses allowed to send Not known Grade B
Cignacigna.com	Forged mail: Spam folder	Refused	quarantine	18,441	A	cigna.comMore about Cigna Made-up subdomain Refused DMARC policy quarantine Addresses allowed to send 18,441 Grade A
Cleveland Clinicccf.org	Forged mail: Spam folder	Spam folder	quarantine	693,627	A	ccf.orgMore about Cleveland Clinic Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 693,627 Grade A
Sanofisanofi.com	Forged mail: Spam folder	Spam folder	quarantine	463,735	A	sanofi.comMore about Sanofi Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 463,735 Grade A
Bayerbayer.com	Forged mail: Depends	Not stopped	none	458,784	C	bayer.comMore about Bayer Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 458,784 Grade C
Abbottabbott.com	Forged mail: Refused	Refused	reject	Not known	A	abbott.comMore about Abbott Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Aetnaaetna.com	Forged mail: Refused	Refused	reject	Not known	A	aetna.comMore about Aetna Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Bupabupa.com	Forged mail: Refused	Refused	reject	641,927	A	bupa.comMore about Bupa Made-up subdomain Refused DMARC policy reject Addresses allowed to send 641,927 Grade A
CVS Healthcvshealth.com	Forged mail: Refused	Refused	reject	Not known	A	cvshealth.comMore about CVS Health Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Elevance Healthelevancehealth.com	Forged mail: Refused	Refused	reject	Not known	A	elevancehealth.comMore about Elevance Health Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Eli Lillylilly.com	Forged mail: Refused	Refused	reject	806,023	B	lilly.comMore about Eli Lilly Made-up subdomain Refused DMARC policy reject Addresses allowed to send 806,023 Grade B
GSKgsk.com	Forged mail: Refused	Refused	reject	Not known	A	gsk.comMore about GSK Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Humanahumana.com	Forged mail: Refused	Refused	reject	Not known	A	humana.comMore about Humana Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Johns Hopkins Medicinejhmi.edu	Forged mail: Refused	Refused	reject	459,526	A	jhmi.eduMore about Johns Hopkins Medicine Made-up subdomain Refused DMARC policy reject Addresses allowed to send 459,526 Grade A
Johnson & Johnsonjnj.com	Forged mail: Refused	Refused	reject	909,825	A	jnj.comMore about Johnson & Johnson Made-up subdomain Refused DMARC policy reject Addresses allowed to send 909,825 Grade A
Mayo Clinicmayo.edu	Forged mail: Refused	Refused	reject	20	A	mayo.eduMore about Mayo Clinic Made-up subdomain Refused DMARC policy reject Addresses allowed to send 20 Grade A
Medtronicmedtronic.com	Forged mail: Refused	Refused	reject	458,752	A	medtronic.comMore about Medtronic Made-up subdomain Refused DMARC policy reject Addresses allowed to send 458,752 Grade A
Merckmerck.com	Forged mail: Refused	Refused	reject	656,859	B	merck.comMore about Merck Made-up subdomain Refused DMARC policy reject Addresses allowed to send 656,859 Grade B
NHS mailnhs.net	Forged mail: Refused	Refused	reject	459,018	A	nhs.netMore about NHS mail Made-up subdomain Refused DMARC policy reject Addresses allowed to send 459,018 Grade A
Novartisnovartis.com	Forged mail: Refused	Refused	reject	Not known	A	novartis.comMore about Novartis Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Novo Nordisknovonordisk.com	Forged mail: Refused	Depends	reject	Not known	A	novonordisk.comMore about Novo Nordisk Made-up subdomain Depends DMARC policy reject Addresses allowed to send Not known Grade A
Pfizerpfizer.com	Forged mail: Refused	Refused	reject	206,226	A	pfizer.comMore about Pfizer Made-up subdomain Refused DMARC policy reject Addresses allowed to send 206,226 Grade A
Rocheroche.com	Forged mail: Refused	Refused	reject	103,084	A	roche.comMore about Roche Made-up subdomain Refused DMARC policy reject Addresses allowed to send 103,084 Grade A
UnitedHealthcareuhc.com	Forged mail: Refused	Refused	reject	Not known	A	uhc.comMore about UnitedHealthcare Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Media
NHKnhk.or.jp	Forged mail: Not stopped	Not stopped	none	617,016	C	nhk.or.jpMore about NHK Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 617,016 Grade C
Paramountparamount.com	Forged mail: Not stopped	Not stopped	none	671,756	B	paramount.comMore about Paramount Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 671,756 Grade B
Der Spiegelspiegel.de	Forged mail: Spam folder	Refused	quarantine	616,451	A	spiegel.deMore about Der Spiegel Made-up subdomain Refused DMARC policy quarantine Addresses allowed to send 616,451 Grade A
Le Mondelemonde.fr	Forged mail: Spam folder	Spam folder	quarantine	191,900	A	lemonde.frMore about Le Monde Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 191,900 Grade A
The Economisteconomist.com	Forged mail: Spam folder	Spam folder	quarantine	457,407	A	economist.comMore about The Economist Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 457,407 Grade A
The Wall Street Journalwsj.com	Forged mail: Spam folder	Spam folder	quarantine	6	A	wsj.comMore about The Wall Street Journal Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 6 Grade A
Disneydisney.com	Forged mail: Depends	Not stopped	none	458,778	B	disney.comMore about Disney Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 458,778 Grade B
Associated Pressap.org	Forged mail: Refused	Refused	reject	458,752	A	ap.orgMore about Associated Press Made-up subdomain Refused DMARC policy reject Addresses allowed to send 458,752 Grade A
BBCbbc.co.uk	Forged mail: Refused	Refused	reject	92,678	A	bbc.co.ukMore about BBC Made-up subdomain Refused DMARC policy reject Addresses allowed to send 92,678 Grade A
Bloombergbloomberg.com	Forged mail: Refused	Refused	reject	524,800	A	bloomberg.comMore about Bloomberg Made-up subdomain Refused DMARC policy reject Addresses allowed to send 524,800 Grade A
CNNcnn.com	Forged mail: Refused	Refused	reject	26,112	A	cnn.comMore about CNN Made-up subdomain Refused DMARC policy reject Addresses allowed to send 26,112 Grade A
Financial Timesft.com	Forged mail: Refused	Refused	reject	176,643	A	ft.comMore about Financial Times Made-up subdomain Refused DMARC policy reject Addresses allowed to send 176,643 Grade A
Foxfox.com	Forged mail: Refused	Refused	reject	866,873	A	fox.comMore about Fox Made-up subdomain Refused DMARC policy reject Addresses allowed to send 866,873 Grade A
Netflixnetflix.com	Forged mail: Refused	Refused	reject	344,327	A	netflix.comMore about Netflix Made-up subdomain Refused DMARC policy reject Addresses allowed to send 344,327 Grade A
NPRnpr.org	Forged mail: Refused	Refused	reject	612,915	B	npr.orgMore about NPR Made-up subdomain Refused DMARC policy reject Addresses allowed to send 612,915 Grade B
Reutersreuters.com	Forged mail: Refused	Refused	reject	Not known	A	reuters.comMore about Reuters Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Skysky.uk	Forged mail: Refused	Refused	reject	460,065	A	sky.ukMore about Sky Made-up subdomain Refused DMARC policy reject Addresses allowed to send 460,065 Grade A
Spotifyspotify.com	Forged mail: Refused	Refused	reject	207,687	A	spotify.comMore about Spotify Made-up subdomain Refused DMARC policy reject Addresses allowed to send 207,687 Grade A
The Guardiantheguardian.com	Forged mail: Refused	Refused	reject	283,180	A	theguardian.comMore about The Guardian Made-up subdomain Refused DMARC policy reject Addresses allowed to send 283,180 Grade A
The New York Timesnytimes.com	Forged mail: Refused	Refused	reject	157,696	A	nytimes.comMore about The New York Times Made-up subdomain Refused DMARC policy reject Addresses allowed to send 157,696 Grade A
The Times of Indiatimesofindia.com	Forged mail: Refused	Not stopped	reject	458,762	A	timesofindia.comMore about The Times of India Made-up subdomain Not stopped DMARC policy reject Addresses allowed to send 458,762 Grade A
The Washington Postwashingtonpost.com	Forged mail: Refused	Refused	reject	617,271	A	washingtonpost.comMore about The Washington Post Made-up subdomain Refused DMARC policy reject Addresses allowed to send 617,271 Grade A
Warner Bros. Discoverywbd.com	Forged mail: Refused	Refused	reject	Not known	A	wbd.comMore about Warner Bros. Discovery Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Retail
Amazonamazon.com	Forged mail: Spam folder	Spam folder	quarantine	177,136	A	amazon.comMore about Amazon Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 177,136 Grade A
Flipkartflipkart.com	Forged mail: Spam folder	Spam folder	quarantine	633,410	A	flipkart.comMore about Flipkart Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 633,410 Grade A
Walgreenswalgreens.com	Forged mail: Spam folder	Not stopped	quarantine	1,042	B	walgreens.comMore about Walgreens Made-up subdomain Not stopped DMARC policy quarantine Addresses allowed to send 1,042 Grade B
Aldialdi.com	Forged mail: Depends	Not stopped	No record	0	C	aldi.comMore about Aldi Made-up subdomain Not stopped DMARC policy No record Addresses allowed to send 0 Grade C
Carrefourcarrefour.com	Forged mail: Depends	Not stopped	none	99,619	B	carrefour.comMore about Carrefour Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 99,619 Grade B
Lidllidl.com	Forged mail: Depends	Not stopped	none	4	B	lidl.comMore about Lidl Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 4 Grade B
Adidasadidas.com	Forged mail: Refused	Refused	reject	458,769	A	adidas.comMore about Adidas Made-up subdomain Refused DMARC policy reject Addresses allowed to send 458,769 Grade A
Best Buybestbuy.com	Forged mail: Refused	Refused	reject	459,270	A	bestbuy.comMore about Best Buy Made-up subdomain Refused DMARC policy reject Addresses allowed to send 459,270 Grade A
Costcocostco.com	Forged mail: Refused	Refused	reject	Not known	A	costco.comMore about Costco Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
eBayebay.com	Forged mail: Refused	Refused	reject	271,328	A	ebay.comMore about eBay Made-up subdomain Refused DMARC policy reject Addresses allowed to send 271,328 Grade A
Etsyetsy.com	Forged mail: Refused	Refused	reject	372,026	B	etsy.comMore about Etsy Made-up subdomain Refused DMARC policy reject Addresses allowed to send 372,026 Grade B
H&Mhm.com	Forged mail: Refused	Refused	reject	458,752	A	hm.comMore about H&M Made-up subdomain Refused DMARC policy reject Addresses allowed to send 458,752 Grade A
IKEAikea.com	Forged mail: Refused	Refused	reject	458,766	A	ikea.comMore about IKEA Made-up subdomain Refused DMARC policy reject Addresses allowed to send 458,766 Grade A
Krogerkroger.com	Forged mail: Refused	Refused	reject	459,923	A	kroger.comMore about Kroger Made-up subdomain Refused DMARC policy reject Addresses allowed to send 459,923 Grade A
Lowe'slowes.com	Forged mail: Refused	Refused	reject	Not known	A	lowes.comMore about Lowe's Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Macy'smacys.com	Forged mail: Refused	Refused	reject	Not known	A	macys.comMore about Macy's Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Marks & Spencermarksandspencer.com	Forged mail: Refused	Refused	reject	706,724	A	marksandspencer.comMore about Marks & Spencer Made-up subdomain Refused DMARC policy reject Addresses allowed to send 706,724 Grade A
Nikenike.com	Forged mail: Refused	Refused	reject	Not known	A	nike.comMore about Nike Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Sainsbury'ssainsburys.co.uk	Forged mail: Refused	Refused	reject	28,916	B	sainsburys.co.ukMore about Sainsbury's Made-up subdomain Refused DMARC policy reject Addresses allowed to send 28,916 Grade B
Sephorasephora.com	Forged mail: Refused	Refused	reject	470,738	B	sephora.comMore about Sephora Made-up subdomain Refused DMARC policy reject Addresses allowed to send 470,738 Grade B
Targettarget.com	Forged mail: Refused	Refused	reject	66,816	A	target.comMore about Target Made-up subdomain Refused DMARC policy reject Addresses allowed to send 66,816 Grade A
Tescotesco.com	Forged mail: Refused	Refused	reject	572,079	A	tesco.comMore about Tesco Made-up subdomain Refused DMARC policy reject Addresses allowed to send 572,079 Grade A
The Home Depothomedepot.com	Forged mail: Refused	Refused	reject	26,116	A	homedepot.comMore about The Home Depot Made-up subdomain Refused DMARC policy reject Addresses allowed to send 26,116 Grade A
Walmartwalmart.com	Forged mail: Refused	Refused	reject	91,545	A	walmart.comMore about Walmart Made-up subdomain Refused DMARC policy reject Addresses allowed to send 91,545 Grade A
Zarazara.com	Forged mail: Refused	Refused	reject	Not known	A	zara.comMore about Zara Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Software
Appleapple.com	Forged mail: Spam folder	Refused	quarantine	1,581	A	apple.comMore about Apple Made-up subdomain Refused DMARC policy quarantine Addresses allowed to send 1,581 Grade A
Figmafigma.com	Forged mail: Spam folder	Spam folder	quarantine	124,439	B	figma.comMore about Figma Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 124,439 Grade B
GitHubgithub.com	Forged mail: Spam folder	Refused	quarantine	932,421	A	github.comMore about GitHub Made-up subdomain Refused DMARC policy quarantine Addresses allowed to send 932,421 Grade A
Adobeadobe.com	Forged mail: Refused	Refused	reject	300	A	adobe.comMore about Adobe Made-up subdomain Refused DMARC policy reject Addresses allowed to send 300 Grade A
Atlassianatlassian.com	Forged mail: Refused	Refused	reject	424,040	A	atlassian.comMore about Atlassian Made-up subdomain Refused DMARC policy reject Addresses allowed to send 424,040 Grade A
Canvacanva.com	Forged mail: Refused	Refused	reject	391,518	A	canva.comMore about Canva Made-up subdomain Refused DMARC policy reject Addresses allowed to send 391,518 Grade A
Cloudflarecloudflare.com	Forged mail: Refused	Refused	reject	150,046	A	cloudflare.comMore about Cloudflare Made-up subdomain Refused DMARC policy reject Addresses allowed to send 150,046 Grade A
Dropboxdropbox.com	Forged mail: Refused	Refused	reject	386,012	A	dropbox.comMore about Dropbox Made-up subdomain Refused DMARC policy reject Addresses allowed to send 386,012 Grade A
Googlegoogle.com	Forged mail: Refused	Refused	reject	98,304	A	google.comMore about Google Made-up subdomain Refused DMARC policy reject Addresses allowed to send 98,304 Grade A
HubSpothubspot.com	Forged mail: Refused	Refused	reject	403,923	A	hubspot.comMore about HubSpot Made-up subdomain Refused DMARC policy reject Addresses allowed to send 403,923 Grade A
IBMibm.com	Forged mail: Refused	Not stopped	reject	Not known	A	ibm.comMore about IBM Made-up subdomain Not stopped DMARC policy reject Addresses allowed to send Not known Grade A
Intuitintuit.com	Forged mail: Refused	Refused	reject	509,346	A	intuit.comMore about Intuit Made-up subdomain Refused DMARC policy reject Addresses allowed to send 509,346 Grade A
Metameta.com	Forged mail: Refused	Refused	reject	557,072	A	meta.comMore about Meta Made-up subdomain Refused DMARC policy reject Addresses allowed to send 557,072 Grade A
Microsoftmicrosoft.com	Forged mail: Refused	Refused	reject	476,648	A	microsoft.comMore about Microsoft Made-up subdomain Refused DMARC policy reject Addresses allowed to send 476,648 Grade A
Notionmakenotion.com	Forged mail: Refused	Refused	reject	370,241	A	makenotion.comMore about Notion Made-up subdomain Refused DMARC policy reject Addresses allowed to send 370,241 Grade A
Oracleoracle.com	Forged mail: Refused	Refused	reject	9,289	A	oracle.comMore about Oracle Made-up subdomain Refused DMARC policy reject Addresses allowed to send 9,289 Grade A
Salesforcesalesforce.com	Forged mail: Refused	Refused	reject	98,304	A	salesforce.comMore about Salesforce Made-up subdomain Refused DMARC policy reject Addresses allowed to send 98,304 Grade A
SAPsap.com	Forged mail: Refused	Refused	reject	458,848	A	sap.comMore about SAP Made-up subdomain Refused DMARC policy reject Addresses allowed to send 458,848 Grade A
ServiceNowservicenow.com	Forged mail: Refused	Refused	reject	516,005	A	servicenow.comMore about ServiceNow Made-up subdomain Refused DMARC policy reject Addresses allowed to send 516,005 Grade A
Shopifyshopify.com	Forged mail: Refused	Refused	reject	365,568	B	shopify.comMore about Shopify Made-up subdomain Refused DMARC policy reject Addresses allowed to send 365,568 Grade B
Slackslack.com	Forged mail: Refused	Refused	reject	30,520	A	slack.comMore about Slack Made-up subdomain Refused DMARC policy reject Addresses allowed to send 30,520 Grade A
Stripestripe.com	Forged mail: Refused	Refused	reject	286,493	A	stripe.comMore about Stripe Made-up subdomain Refused DMARC policy reject Addresses allowed to send 286,493 Grade A
Workdayworkday.com	Forged mail: Refused	Refused	reject	Not known	A	workday.comMore about Workday Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Zoomzoom.us	Forged mail: Refused	Refused	reject	342,273	A	zoom.usMore about Zoom Made-up subdomain Refused DMARC policy reject Addresses allowed to send 342,273 Grade A
Telecoms
Rogersrogers.com	Forged mail: Not stopped	Not stopped	none	30,735	B	rogers.comMore about Rogers Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 30,735 Grade B
SoftBanksoftbank.co.jp	Forged mail: Not stopped	Not stopped	none	528,006	B	softbank.co.jpMore about SoftBank Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 528,006 Grade B
Swisscomswisscom.com	Forged mail: Not stopped	Not stopped	none	208	B	swisscom.comMore about Swisscom Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 208 Grade B
Airtelairtel.com	Forged mail: Spam folder	Spam folder	quarantine	458,863	A	airtel.comMore about Airtel Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 458,863 Grade A
Deutsche Telekomtelekom.de	Forged mail: Spam folder	Spam folder	quarantine	714,885	A	telekom.deMore about Deutsche Telekom Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 714,885 Grade A
KDDIkddi.com	Forged mail: Spam folder	Spam folder	quarantine	135	A	kddi.comMore about KDDI Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 135 Grade A
NTTntt.com	Forged mail: Spam folder	Not stopped	quarantine	458,921	A	ntt.comMore about NTT Made-up subdomain Not stopped DMARC policy quarantine Addresses allowed to send 458,921 Grade A
O2o2.co.uk	Forged mail: Depends	Not stopped	No record	13,068	D	o2.co.ukMore about O2 Made-up subdomain Not stopped DMARC policy No record Addresses allowed to send 13,068 Grade D
Orangeorange.com	Forged mail: Depends	Not stopped	none	311	B	orange.comMore about Orange Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 311 Grade B
Telefonicatelefonica.com	Forged mail: Depends	Not stopped	none	459,080	B	telefonica.comMore about Telefonica Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 459,080 Grade B
AT&Tatt.com	Forged mail: Refused	Refused	reject	Not known	A	att.comMore about AT&T Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
Bellbell.ca	Forged mail: Refused	Refused	reject	650	A	bell.caMore about Bell Made-up subdomain Refused DMARC policy reject Addresses allowed to send 650 Grade A
BTbt.com	Forged mail: Refused	Refused	reject	458,786	A	bt.comMore about BT Made-up subdomain Refused DMARC policy reject Addresses allowed to send 458,786 Grade A
Comcastcomcast.com	Forged mail: Refused	Refused	reject	215	A	comcast.comMore about Comcast Made-up subdomain Refused DMARC policy reject Addresses allowed to send 215 Grade A
EEee.co.uk	Forged mail: Refused	Refused	reject	481,764	A	ee.co.ukMore about EE Made-up subdomain Refused DMARC policy reject Addresses allowed to send 481,764 Grade A
Jiojio.com	Forged mail: Refused	Refused	reject	241,547	A	jio.comMore about Jio Made-up subdomain Refused DMARC policy reject Addresses allowed to send 241,547 Grade A
Optusoptus.com.au	Forged mail: Refused	Refused	reject	23,653	A	optus.com.auMore about Optus Made-up subdomain Refused DMARC policy reject Addresses allowed to send 23,653 Grade A
Singtelsingtel.com	Forged mail: Refused	Refused	reject	622,788	A	singtel.comMore about Singtel Made-up subdomain Refused DMARC policy reject Addresses allowed to send 622,788 Grade A
T-Mobilet-mobile.com	Forged mail: Refused	Refused	reject	625,209	A	t-mobile.comMore about T-Mobile Made-up subdomain Refused DMARC policy reject Addresses allowed to send 625,209 Grade A
Teliatelia.com	Forged mail: Refused	Spam folder	reject	656	A	telia.comMore about Telia Made-up subdomain Spam folder DMARC policy reject Addresses allowed to send 656 Grade A
Telstratelstra.com.au	Forged mail: Refused	Refused	reject	512	A	telstra.com.auMore about Telstra Made-up subdomain Refused DMARC policy reject Addresses allowed to send 512 Grade A
Telustelus.com	Forged mail: Refused	Refused	reject	69,632	B	telus.comMore about Telus Made-up subdomain Refused DMARC policy reject Addresses allowed to send 69,632 Grade B
Verizonverizon.com	Forged mail: Refused	Spam folder	reject	131,334	A	verizon.comMore about Verizon Made-up subdomain Spam folder DMARC policy reject Addresses allowed to send 131,334 Grade A
Vodafonevodafone.com	Forged mail: Refused	Not stopped	reject	475,779	A	vodafone.comMore about Vodafone Made-up subdomain Not stopped DMARC policy reject Addresses allowed to send 475,779 Grade A
Chartercharter.com	Forged mail: Not known	Not known	Not known	Not known	No grade	charter.comMore about Charter Made-up subdomain Not known DMARC policy Not known Addresses allowed to send Not known Grade No grade
Universities
Columbia Universitycolumbia.edu	Forged mail: Not stopped	Not stopped	none	Not known	B	columbia.eduMore about Columbia University Made-up subdomain Not stopped DMARC policy none Addresses allowed to send Not known Grade B
Imperial College Londonimperial.ac.uk	Forged mail: Not stopped	Not stopped	none	458,800	B	imperial.ac.ukMore about Imperial College London Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 458,800 Grade B
McGill Universitymcgill.ca	Forged mail: Not stopped	Not stopped	none	458,761	B	mcgill.caMore about McGill University Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 458,761 Grade B
University of Edinburghed.ac.uk	Forged mail: Not stopped	Not stopped	none	458,769	B	ed.ac.ukMore about University of Edinburgh Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 458,769 Grade B
University of Michiganumich.edu	Forged mail: Not stopped	Not stopped	none	99,665	B	umich.eduMore about University of Michigan Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 99,665 Grade B
University of Pennsylvaniaupenn.edu	Forged mail: Not stopped	Not stopped	none	458,771	B	upenn.eduMore about University of Pennsylvania Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 458,771 Grade B
Harvard Universityharvard.edu	Forged mail: Spam folder	Not stopped	quarantine	6,144	A	harvard.eduMore about Harvard University Made-up subdomain Not stopped DMARC policy quarantine Addresses allowed to send 6,144 Grade A
Stanford Universitystanford.edu	Forged mail: Spam folder	Spam folder	quarantine	562,640	B	stanford.eduMore about Stanford University Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 562,640 Grade B
Tsinghua Universitytsinghua.edu.cn	Forged mail: Spam folder	Spam folder	quarantine	1,986	A	tsinghua.edu.cnMore about Tsinghua University Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 1,986 Grade A
UCLucl.ac.uk	Forged mail: Spam folder	Spam folder	quarantine	992,241	A	ucl.ac.ukMore about UCL Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 992,241 Grade A
University of Oxfordox.ac.uk	Forged mail: Spam folder	Spam folder	quarantine	138,752	B	ox.ac.ukMore about University of Oxford Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send 138,752 Grade B
Yale Universityyale.edu	Forged mail: Spam folder	Spam folder	quarantine	Not known	A	yale.eduMore about Yale University Made-up subdomain Spam folder DMARC policy quarantine Addresses allowed to send Not known Grade A
ETH Zurichethz.ch	Forged mail: Depends	Not stopped	none	799,532	B	ethz.chMore about ETH Zurich Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 799,532 Grade B
MITmit.edu	Forged mail: Depends	Not stopped	none	910,122	B	mit.eduMore about MIT Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 910,122 Grade B
National University of Singaporenus.edu.sg	Forged mail: Depends	Not stopped	none	460,423	B	nus.edu.sgMore about National University of Singapore Made-up subdomain Not stopped DMARC policy none Addresses allowed to send 460,423 Grade B
Australian National Universityanu.edu.au	Forged mail: Refused	Refused	reject	458,752	A	anu.edu.auMore about Australian National University Made-up subdomain Refused DMARC policy reject Addresses allowed to send 458,752 Grade A
Cornell Universitycornell.edu	Forged mail: Refused	Refused	reject	561,426	A	cornell.eduMore about Cornell University Made-up subdomain Refused DMARC policy reject Addresses allowed to send 561,426 Grade A
IIT Bombayiitb.ac.in	Forged mail: Refused	Refused	reject	557,076	A	iitb.ac.inMore about IIT Bombay Made-up subdomain Refused DMARC policy reject Addresses allowed to send 557,076 Grade A
Princeton Universityprinceton.edu	Forged mail: Refused	Refused	reject	Not known	A	princeton.eduMore about Princeton University Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
UC Berkeleyberkeley.edu	Forged mail: Refused	Refused	reject	197,152	A	berkeley.eduMore about UC Berkeley Made-up subdomain Refused DMARC policy reject Addresses allowed to send 197,152 Grade A
University of Cambridgecam.ac.uk	Forged mail: Refused	Refused	reject	759,046	A	cam.ac.ukMore about University of Cambridge Made-up subdomain Refused DMARC policy reject Addresses allowed to send 759,046 Grade A
University of Melbourneunimelb.edu.au	Forged mail: Refused	Refused	reject	Not known	A	unimelb.edu.auMore about University of Melbourne Made-up subdomain Refused DMARC policy reject Addresses allowed to send Not known Grade A
University of Tokyou-tokyo.ac.jp	Forged mail: Refused	Depends	reject	64	A	u-tokyo.ac.jpMore about University of Tokyo Made-up subdomain Depends DMARC policy reject Addresses allowed to send 64 Grade A
University of Torontoutoronto.ca	Forged mail: Refused	Not stopped	reject	459,784	A	utoronto.caMore about University of Toronto Made-up subdomain Not stopped DMARC policy reject Addresses allowed to send 459,784 Grade A

How this was made

What it shows

What each domain’s records asked receivers to do on 4 November 2026. A policy is a request; receivers may do more or less. No mail was sent: Stamp applies the DMARC rule on paper. It says nothing about overall security or lookalike domains.

The rule

Forged mail means an outside server using this domain in the From line; a made-up subdomain uses a name never created, so the subdomain policy applies. It follows RFC 7489, using the live report’s engine. Where np= and the subdomain policy disagree, that column reads Depends, since only newer receivers apply np=.

Refused: DMARC asks receivers to refuse all mail that fails.
Spam folder: DMARC asks for the spam folder, or refuses only part and sends the rest to spam.
Depends: The policy covers only part of the mail, or SPF ends in -all with no enforcing DMARC. Nothing requires a receiver to act on SPF alone.
Not stopped: DMARC is missing or report-only and SPF does not end in -all, or SPF approves every server.
Not known: No answer on the day. Not a bad result: left out of every percentage.

Sources

Public DNS via 1.1.1.1 and 8.8.8.8 (SPF, DMARC, MX, DKIM on common selectors, MTA-STS, TLS reporting, BIMI, blocklists) and the MTA-STS policy file. RDAP only for names that do not resolve.

Hand-picked, so percentages describe these organisations only, not whole sectors. Each has MX or SPF on its main mail domain. Large organisations may send from other domains too.

Grades and DKIM

Grades match live reports and cover more than forged mail. DKIM can read not confirmed because DNS cannot list selectors; with DMARC enforced that costs no points. One real email’s headers would settle it.

Addresses allowed to send

IPv4 addresses SPF allows, including via other domains. IPv6 and send-time lookups are not counted, so it is a guide, not a limit; shared mail services make it large. It reads “Not known” when part of the record could not be read or it names no addresses.

What is not published

Outside domains these records trust were checked for lapses. Totals only, never which organisation. Across the list, every trusted name that got an answer resolved.

Date

Run once on 4 November 2026, three at a time. Failed checks were retried once.