By Cargo / Grain / Feed
Grain / Feed Carriers — Email Security
79.1% of active grain / feed carrier domains have no enforced DMARC — leaving this segment open to email impersonation, payment-redirect fraud, and cargo theft via phishing.
No enforced DMARC
79.1%
national: 80.1%
p=reject
8.9%
national: 7.5%
Microsoft 365
33.8%
national: 38.1%
M365 + no DMARC (carriers)
4,333
national: 92,822
MTA-STS
4.4%
national: 3.3%
DNSSEC
6.3%
national: 6.1%
Dead domains
974
of 16,082 scanned
Total carriers
26,271
974 with dead domain
Risk bands — Grain / Feed carriers
Carrier counts by risk band (composite email-security pain score). Critical = score 70+; Minimal = score <15.
| Risk band | Score range | Carriers | Domains |
|---|---|---|---|
| Critical | score 70+ | 1,993 | 1,500 |
| High | score 50–69 | 8,119 | 4,948 |
| Medium | score 30–49 | 10,181 | 6,195 |
| Low | score 15–29 | 4,796 | 2,319 |
| Minimal | score <15 | 208 | 146 |
Grain / Feed vs. national average
See where your own domain stands
The research is free and self-serve. Run the same public checks on your own domain in about a minute — SPF, DKIM, DMARC, MTA-STS, DNSSEC, and more — and get a scored report by email. No agents, no credentials.
Data as of 2026-05-20 from public DNS measurements. Statistics are domain-weighted unless noted. Cargo segment membership is based on FMCSA Company Census cargo flags. Methodology: read the full index.