Public DNS data · Checked August 26, 2026
10 of America's 100 biggest companies don't block email pretending to be them
We ran our free spoofing check against the primary domain of the 100 largest US companies. Most protect their name well. Some of the most familiar brands in the country do not.
90block or spam-folder fakes
9monitor but deliver fakes
1no DMARC protection at all
5earn an A grade
| Grade | Company | DMARC verdict | SPF | DKIM | DNSSEC | |
|---|---|---|---|---|---|---|
| F | Enterprise Productsenterpriseproducts.com | No DMARC at all | none | ? | ✗ | recheck |
| F | General Electricge.com | Delivers fakes | none | ✓ | ✗ | recheck |
| D | Intelintel.com | Delivers fakes | -all | ? | ✗ | recheck |
| D | Progressiveprogressive.com | Delivers fakes | -all | ? | ✗ | recheck |
| D | Tyson Foodstysonfoods.com | Blocks fakes | none | ? | ✗ | recheck |
| D | Prudentialprudential.com | Delivers fakes | ~all | ? | ✗ | recheck |
| D | Valero Energyvalero.com | Delivers fakes | -all | ? | ✗ | recheck |
| D | Albertsonsalbertsons.com | Delivers fakes | ~all | ✓ | ✗ | recheck |
| D | Performance Food Grouppfgc.com | Delivers fakes | ~all | ✓ | ✗ | recheck |
| D | Chevronchevron.com | Delivers fakes | -all | ✓ | ✗ | recheck |
| D | Disneydisney.com | Delivers fakes | -all | ✓ | ✗ | recheck |
| D | Metameta.com | Blocks fakes | no-all | ? | ✗ | recheck |
| C | ConocoPhillipsconocophillips.com | Blocks fakes | no-all | ✓ | ✗ | recheck |
| C | Amazonamazon.com | Spam-folders fakes | -all | ? | ✗ | recheck |
| C | Phillips 66phillips66.com | Blocks fakes | ~all | ? | ✗ | recheck |
| C | Ciscocisco.com | Blocks fakes | no-all | ✓ | ✗ | recheck |
| C | Citigroupciti.com | Blocks fakes | no-all | ✓ | ✗ | recheck |
| C | Goldman Sachsgoldmansachs.com | Blocks fakes | ~all | ? | ✗ | recheck |
| C | Morgan Stanleymorganstanley.com | Blocks fakes | ~all | ? | ✗ | recheck |
| C | Wells Fargowellsfargo.com | Blocks fakes | ~all | ? | ✗ | recheck |
| C | Marathon Petroleummarathonpetroleum.com | Spam-folders fakes | -all | ✓ | ✗ | recheck |
| C | AbbVieabbvie.com | Spam-folders fakes | ~all | ✓ | ✗ | recheck |
| C | Charter Communicationscharter.com | Spam-folders fakes | ~all | ✓ | ✗ | recheck |
| C | Uberuber.com | Spam-folders fakes | ~all | ✓ | ✗ | recheck |
| C | US Foodsusfoods.com | Spam-folders fakes | ~all | ✓ | ✗ | recheck |
| C | American Expressamericanexpress.com | Blocks fakes | -all | ? | ✗ | recheck |
| C | Berkshire Hathawayberkshirehathaway.com | Blocks fakes | -all | ? | ✗ | recheck |
| C | John Deeredeere.com | Blocks fakes | -all | ? | ✗ | recheck |
| C | State Farmstatefarm.com | Blocks fakes | ~all | ? | ✗ | recheck |
| B | Cignacigna.com | Spam-folders fakes | -all | ✓ | ✗ | recheck |
| B | Dowdow.com | Spam-folders fakes | -all | ✓ | ✗ | recheck |
| B | Energy Transferenergytransfer.com | Spam-folders fakes | -all | ✓ | ✗ | recheck |
| B | JPMorgan Chasejpmorganchase.com | Blocks fakes | -all | ? | ✗ | recheck |
| B | New York Lifenewyorklife.com | Spam-folders fakes | -all | ✓ | ✗ | recheck |
| B | Walgreenswalgreens.com | Spam-folders fakes | -all | ✓ | ✗ | recheck |
| B | Appleapple.com | Spam-folders fakes | ~all | ✓ | ✗ | recheck |
| B | HCA Healthcarehcahealthcare.com | Spam-folders fakes | ~all | ✓ | ✗ | recheck |
| B | American Airlinesaa.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Archer Daniels Midlandadm.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | AT&Tatt.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Best Buybestbuy.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Bristol Myers Squibbbms.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Cencoracencora.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Fordford.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | General Motorsgm.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Home Depothomedepot.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | HPhp.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Merckmerck.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | MetLifemetlife.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Nationwidenationwide.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Nikenike.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Nvidianvidia.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | PepsiCopepsico.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | TD Synnextdsynnex.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Travelerstravelers.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | United Airlinesunited.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Allstateallstate.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Alphabet (Google)google.com | Blocks fakes | ~all | ? | ✗ | recheck |
| B | Cardinal Healthcardinalhealth.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Freddie Macfreddiemac.com | Spam-folders fakes | ~all | ✓ | ✓ | recheck |
| B | Procter & Gamblepg.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Publixpublix.com | Spam-folders fakes | -all | ✓ | ✗ | recheck |
| B | Boeingboeing.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Caterpillarcat.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Centenecentene.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Coca-Colacoca-cola.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Delta Air Linesdelta.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | ExxonMobilexxonmobil.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Humanahumana.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | IBMibm.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Johnson & Johnsonjnj.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Krogerkroger.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Liberty Mutuallibertymutual.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| A | Lockheed Martinlockheedmartin.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Pfizerpfizer.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Syscosysco.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Teslatesla.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Bank of Americabankofamerica.com | Blocks fakes | ~all | ? | ✓ | recheck |
| B | Capital Onecapitalone.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | CVS Healthcvshealth.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Dell Technologiesdell.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Lowe'slowes.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Oracleoracle.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Targettarget.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | TIAAtiaa.org | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Verizonverizon.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Walmartwalmart.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | Fannie Maefanniemae.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | TJXtjx.com | Blocks fakes | ~all | ✓ | ✗ | recheck |
| B | CHSchsinc.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Costcocostco.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Elevance Healthelevancehealth.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | FedExfedex.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | McKessonmckesson.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Netflixnetflix.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| B | Comcastcomcast.com | Blocks fakes | ~all | ✓ | ✓ | recheck |
| A | UnitedHealth Groupunitedhealthgroup.com | Blocks fakes | -all | ✓ | ✓ | recheck |
| A | Microsoftmicrosoft.com | Blocks fakes | -all | ✓ | ✗ | recheck |
| A | RTXrtx.com | Blocks fakes | -all | ✓ | ✓ | recheck |
| A | UPSups.com | Blocks fakes | -all | ✓ | ✓ | recheck |
Methodology and fair notes
All data comes from public DNS records, the same records every mail server on the internet reads before deciding whether to trust a message. Nothing was sent to any company or tested against any mail server. Checks were run on August 26, 2026 with the same engine as our free checker; grades weight DMARC enforcement most heavily, then SPF, DKIM, DNSSEC, and modern extras like MTA-STS and CAA. Records change: use the recheck link on any row for a live result.
We checked each company's primary web domain, since that is the name customers know and the one scammers imitate. Some companies send their real mail from other domains; that's fine, but the famous domain still needs to be locked down, and a domain that sends no mail can reach an A with three records. A "?" in the DKIM column means no key was found at 28 common locations, which is inconclusive rather than a failure.
If your company is listed and you've since fixed your records, the live check will show it immediately. Corrections: hello via Entori.
How does your domain compare?
Free, instant, and the check runs entirely in your browser.
Check my domain