How are companies within an index scored?

Each company's primary domain is analyzed for SPF, DKIM, DMARC, BIMI, MTA-STS, DANE/TLSA and DNSSEC. Points are awarded for each standard based on its quality and strictness, totaling up to 100.

What does the grade distribution tell me?

The grade distribution shows the spread of scores across all companies in the index. If most companies score A or A+, the index has strong overall email security. A wide spread from A+ to F indicates significant variation.

Why might a well-known company score poorly?

Email security configuration is often managed independently from other cybersecurity controls. A company may have strong network security but still lack proper DMARC enforcement or MTA-STS deployment.

How often are scores updated?

All domains are rescanned weekly. Changes in DNS records are reflected in the next weekly scan.

CaptainDNS

DNS Lookup

Choose a DNS record type to search for.

Propagation & diagnostics

Compare resolvers worldwide and inspect returned answers.

Propagation testPublic resolvers, remaining TTLs, divergent responses.
Domain DNS auditParent/local NS, authority and response times.
DNSSEC CheckerValidate chain of trust, DS records and signing keys.
API & integrations
Keep history, monitor your zones and automate recurring checks.

Email authentication

Tools to verify and validate your email authentication setup.

Syntax validation

Record inspectors

Generators

Deliverability

Email deliverability audit

Audit MX, SPF, DKIM and DMARC to confirm a domain is ready to send.

Mail header analyzer

Decode participants, authentication results and routing from raw headers.

Email tester

Send a test email and get instant authentication and deliverability feedback.

IP Blacklist Checker

Check if your IP is on email blacklists

Domain Blacklist Checker

Check if your domain is on URI blacklists

SPF Flattener

Flatten SPF records to reduce DNS lookups below the 10-lookup limit.

DKIM Selector Finder

Auto-discover all DKIM selectors for a domain via DNS brute-force.

SMTP/MX Tester

Test SMTP connectivity of your MX servers: banner, STARTTLS, TLS certificate, open relay.

IP tools

Quickly inspect an IP address or your own connection.

Text

Transform and measure your content in seconds.

Text case converter

Convert any block of text to upper or lower case instantly.

Slug generator

Transform any sentence into an SEO-friendly slug in seconds.

Word & character counter

Measure the length of any text, with instant word and character counts.

Password generator

Generate strong random passwords and memorable passphrases instantly.

Developer

Encoding, hashing, regex and formatting for everyday dev work.

Base64 encoder / decoder

Encode or decode any content in Base64 without leaving the browser.

Hash Generator

Compute MD5, SHA-1, SHA-256 and SHA-512 hashes of any text.

URL encoder / decoder

Encode or decode text using percent-encoding (RFC 3986) right in your browser.

Regex Tester

Test a regular expression against text and visualize matches.

JSON / YAML Formatter

Format, validate and convert JSON and YAML in one click.

Web & Certificates

BIMI logos, VMC/CSR certificates and web page diagnostics.

BIMI logo lookup

Inspect a BIMI logo URL - format, metadata and live rendering - before rollout.

BIMI SVG converter

Convert any SVG to BIMI-compliant Tiny-PS format in seconds.

CSR parser

Inspect a CSR, extract subject details, fingerprints and requested SANs.

VMC inspector

Inspect a Verified Mark Certificate - issuer, validity and SAN coverage - before you publish BIMI.

Page size checker

Check if your page exceeds Google's 2 MB crawl limit.

Phishing URL Checker

Check if a URL is flagged as phishing or malware by 4 threat intelligence sources.

🇨🇳 SSE 50 Email Security

Weekly audit of email security across 50 companies in the SSE 50.

Shanghai Stock Exchange · 50 companies analysed · Scan week: 2026-03-02

Average score

28/ 100

DMARC reject

BIMI configured

MTA-STS enforce

DNSSEC enabled

A+

Average

Median

Min

Max

Company

		Country		Grade	DMARC	SPF	BIMI	MTA-STS	DNSSEC
1	Jiangsu Hengrui Pharmaceuticalshengrui.com	🇨🇳 China	56	C	none	~all	✗	✗	✓
2	Agricultural Bank of Chinaabchina.com	🇨🇳 China	52	C	reject	-all	✗	✗	✗
3	LONGi Green Energylongi.com	🇨🇳 China	51	C	none	-all	✗	✗	✗
4	Foxconn Industrial Internetfii-foxconn.com	🇨🇳 China	50	C	none	-all	✗	✗	✗
5	Zijin Miningzijinmining.com	🇨🇳 China	50	C	quarantine	-all	✗	✗	✗
6	Sinopecsinopec.com	🇨🇳 China	47	D	reject	-all	✗	✗	✗
7	Wanhua Chemicalwhchem.com	🇨🇳 China	46	D	none	-all	✗	✗	✗
8	China Construction Bankccb.com	🇨🇳 China	46	D	none	-all	✗	✗	✗
9	China Merchants Bankcmbchina.com	🇨🇳 China	46	D	none	-all	✗	✗	✗
10	Nongfu Springnongfuspring.com	🇨🇳 China	45	D	none	-all	✗	✗	✗
11	WuXi AppTecwuxiapptec.com	🇨🇳 China	45	D	none	~all	✗	✗	✗
12	China Telecomchinatelecom-h.com	🇨🇳 China	43	D	quarantine	-all	✗	✗	✗
13	ICBCicbc.com.cn	🇨🇳 China	39	D	—	-all	✗	✗	✗
14	China Yangtze Powercypc.com.cn	🇨🇳 China	38	D	reject	-all	✗	✗	✗
15	CRRC Corporationcrrcgc.cc	🇨🇳 China	37	D	none	-all	✗	✗	✗
16	Inner Mongolia Yiliyili.com	🇨🇳 China	36	D	—	~all	✗	✗	✗
17	CMOC Groupcmoc.com	🇨🇳 China	33	D	none	-all	✗	✗	✗
18	Shanghai Pudong Development Bankspdb.com.cn	🇨🇳 China	33	D	—	-all	✗	✗	✗
19	East Money Informationeastmoney.com	🇨🇳 China	32	D	none	-all	✗	✗	✗
20	Haier Smart Homehaier.net	🇨🇳 China	29	F	—	-all	✗	✗	✗
21	China Unicom (China)chinaunicom.com.cn	🇨🇳 China	29	F	—	-all	✗	✗	✗
22	CNOOCcnooc.com.cn	🇨🇳 China	29	F	—	-all	✗	✗	✗
23	China Pacific Insurancecpic.com.cn	🇨🇳 China	29	F	—	-all	✗	✗	✗
24	COSCO Shippingcosco-shipping.cn	🇨🇳 China	29	F	—	-all	✗	✗	✗
25	Kweichow Moutaimoutai.com.cn	🇨🇳 China	29	F	—	-all	✗	✗	✗
26	China Life Insurancechinalife.com.cn	🇨🇳 China	29	F	—	-all	✗	✗	✗
27	Poly Developmentspolycn.com	🇨🇳 China	29	F	—	-all	✗	✗	✗
28	Ping An Insurance (China)pingan.com	🇨🇳 China	29	F	—	-all	✗	✗	✗
29	CITIC Securitiescitics.com	🇨🇳 China	26	F	—	~all	✗	✗	✗
30	SMICsmics.com	🇨🇳 China	26	F	—	~all	✗	✗	✗
31	Wuliangyewuliangye.com.cn	🇨🇳 China	26	F	—	~all	✗	✗	✗
32	PetroChinapetrochina.com.cn	🇨🇳 China	26	F	—	~all	✗	✗	✗
33	Bank of Chinaboc.cn	🇨🇳 China	25	F	quarantine	-all	✗	✗	✗
34	Industrial Bankcib.com.cn	🇨🇳 China	23	F	—	-all	✗	✗	✗
35	Chongqing Sokonsokon.com	🇨🇳 China	23	F	—	-all	✗	✗	✗
36	China State Shipbuildingcssc.net.cn	🇨🇳 China	23	F	—	-all	✗	✗	✗
37	Bank of Communicationsbankcomm.com	🇨🇳 China	23	F	—	-all	✗	✗	✗
38	Postal Savings Bank of Chinapsbc.com	🇨🇳 China	23	F	—	-all	✗	✗	✗
39	SANY Heavy Industrysany.com.cn	🇨🇳 China	20	F	—	~all	✗	✗	✗
40	Cambricon Technologiescambricon.com	🇨🇳 China	15	F	—	-all	✗	✗	✗
41	China State Constructioncscec.com	🇨🇳 China	15	F	—	-all	✗	✗	✗
42	China Railway Groupcrec.cn	🇨🇳 China	14	F	—	—	✗	✗	✗
43	Great Wall Motorgwm.com.cn	🇨🇳 China	14	F	—	—	✗	✗	✗
44	China Shenhua Energycsec.com	🇨🇳 China	8	F	—	—	✗	✗	✗
45	Nari Technologynaritech.cn	🇨🇳 China	8	F	—	—	✗	✗	✗
46	Will Semiconductorwillsemi.com	🇨🇳 China	0	F	—	—	✗	✗	✗
47	China Tourism Group Duty Freectgdutyfree.com	🇨🇳 China	0	F	—	—	✗	✗	✗
48	Foshan Haitian Flavouringhaitian-food.com	🇨🇳 China	0	F	—	—	✗	✗	✗
49	China Northern Rare Earthnfrare.com	🇨🇳 China	0	F	—	—	✗	✗	✗
50	Beijing-Shanghai High Speed Railwaycr-jh.cn	🇨🇳 China	0	F	—	—	✗	✗	✗

Understanding index-level analysis

A stock index groups the largest companies in a market. Analyzing their email security provides a representative snapshot of how a country's or region's corporate sector protects against email-based threats.

What this page shows:

Average score - The mean email security score across all constituent companies
Grade distribution - How many companies fall into each grade bracket (A+ through F)
Company table - Individual scores, grades and key indicator status for each company
Sector breakdown - How different industries within the index compare

Key standards tracked

Each company is evaluated on:

SPF - Is the sending policy properly configured? Does it use -all (hard fail)?
DKIM - Are signing keys published and strong enough (2048-bit minimum)?
DMARC - Is a policy in place? Is it set to quarantine or reject?
BIMI - Is the brand logo published for inbox display?
MTA-STS - Is inbound email transport encryption enforced?
DNSSEC - Is the DNS zone signed to prevent spoofing?

FAQ - Frequently asked questions

Q: How are companies scored?

A: Each domain is analyzed for email authentication standards and awarded up to 100 points across three pillars.

Q: What does the grade distribution show?

A: The spread of scores from A+ to F, indicating overall index maturity.

Q: Can I compare indices?

A: Yes, via the Statistics page.

Page	Purpose
Observatory Dashboard	Overall overview with key metrics
Statistics	Cross-index and cross-sector comparison
Email Domain Check	Audit your own domain

🇨🇳 SSE 50 Email Security

Company

Understanding index-level analysis

Key standards tracked

FAQ - Frequently asked questions

Related pages