Save as PDF: Cmd/Ctrl + P
EFROS Research — Public Index
EFROS US Trucking Email Security Index, Q2 2026 Edition
Edition: Q2 2026 — Inaugural Edition · Published 2026-05-20 · 307,688 carrier domains measured via public DNS
© 2026 EFROS — Free to cite with attribution. Source: https://efros.com/research/us-trucking-email-security-index/
Methodology summary
Source: FMCSA Company Census File, downloaded 2026-05-20. 2,192,304 active carriers identified. Free-provider and ISP/telecom domains excluded (carrier does not control that DNS). Working set: 307,688 unique company-controlled business domains representing 393,312 active carriers.
Measurement: public DNS only — SPF, DMARC, MX, DNSSEC, MTA-STS, TLS-RPT, BIMI. No system accessed or logged into. DMARC is counted as enforced only at p=quarantine or p=reject; p=none is treated as unprotected. Domains returning no DNS records (dead) are excluded from configuration percentages and reported separately.
DKIM is not measured — valid selectors cannot be enumerated from outside a domain. All misconfiguration figures are therefore conservative; the true rate is likely higher.
National findings
| Metric | Value |
|---|---|
| Active carriers in scope (FMCSA) | 2,192,304 |
| Scanned company domains | 307,688 |
| Carriers represented by scanned domains | 393,312 |
| Dead / lapsed carrier domains | 21,132 |
| No enforced DMARC (p=none or absent) | 80.1% |
| DMARC p=reject (strongest protection) | 7.5% |
| SPF soft-fail only (~all) | 39.8% |
| No SPF record | 10.4% |
| On Microsoft 365 | 38.1% |
| On Google Workspace | 27.0% |
| Self-hosted / unidentified | 33.0% |
| Carriers on M365 with DMARC enforcement off | 92,822 |
| No MTA-STS | 96.7% |
| No DNSSEC | 93.9% |
| 10+ truck carriers with no enforced DMARC | 68.2% of 62,813 carriers |
Edition highlights
- 307,688 active US carrier business domains measured via public DNS
- 80.1% of resolving carrier domains have no enforced DMARC; only 7.5% use p=reject
- 91,800 carriers on Microsoft 365 with DMARC enforcement switched off
- 96.7% have no MTA-STS; 93.9% have no DNSSEC
- 21,132 active carriers list an email domain that no longer resolves
State-by-state breakdown — all 51 jurisdictions
Sorted by carrier count (descending). No enforced DMARC = p=none or absent. M365 = Microsoft 365 share. Dead = lapsed domains.
| # | State | Carriers | No DMARC | M365 % | Dead domains |
|---|---|---|---|---|---|
| 1 | California | 36,967 | 80.1% | 36.3% | 1,676 |
| 2 | Texas | 32,465 | 80.8% | 35.6% | 2,429 |
| 3 | New York | 22,356 | 80.6% | 37.8% | 1,308 |
| 4 | Florida | 17,917 | 79.3% | 37.5% | 1,523 |
| 5 | Pennsylvania | 17,184 | 78.3% | 38.9% | 731 |
| 6 | Georgia | 15,569 | 80.5% | 36.5% | 1,242 |
| 7 | Minnesota | 14,179 | 79.3% | 36.6% | 812 |
| 8 | Michigan | 13,943 | 78.1% | 40.3% | 968 |
| 9 | Wisconsin | 13,274 | 77.0% | 40.9% | 624 |
| 10 | Illinois | 12,352 | 77.9% | 31.8% | 468 |
| 11 | Washington | 11,961 | 78.0% | 41.3% | 692 |
| 12 | Massachusetts | 9,925 | 80.3% | 38.2% | 302 |
| 13 | Ohio | 11,310 | 75.9% | 38.8% | 446 |
| 14 | Colorado | 10,031 | 79.0% | 37.1% | 850 |
| 15 | New Jersey | 9,844 | 78.8% | 38.1% | 361 |
| 16 | North Carolina | 9,256 | 78.2% | 36.2% | 470 |
| 17 | Indiana | 9,012 | 76.3% | 40.0% | 375 |
| 18 | Maryland | 7,970 | 78.9% | 40.6% | 380 |
| 19 | Kentucky | 6,201 | 77.1% | 38.0% | 294 |
| 20 | Alabama | 5,925 | 79.6% | 36.2% | 401 |
| 21 | Oregon | 5,752 | 77.5% | 37.1% | 255 |
| 22 | Arizona | 6,280 | 79.5% | 38.0% | 537 |
| 23 | Iowa | 5,584 | 73.0% | 42.5% | 172 |
| 24 | Utah | 5,271 | 78.9% | 33.7% | 286 |
| 25 | Missouri | 6,074 | 74.5% | 39.4% | 230 |
| 26 | Oklahoma | 4,697 | 78.5% | 38.5% | 283 |
| 27 | Tennessee | 5,568 | 75.9% | 38.3% | 274 |
| 28 | Virginia | 5,112 | 76.2% | 39.3% | 249 |
| 29 | Kansas | 4,768 | 75.6% | 40.8% | 227 |
| 30 | South Carolina | 4,191 | 79.2% | 37.3% | 242 |
| 31 | Connecticut | 4,450 | 79.2% | 39.0% | 183 |
| 32 | Nebraska | 4,402 | 76.7% | 38.7% | 185 |
| 33 | Alaska | 2,305 | 78.2% | 40.6% | 113 |
| 34 | Maine | 2,664 | 81.0% | 35.2% | 125 |
| 35 | Idaho | 2,891 | 78.6% | 36.0% | 124 |
| 36 | New Hampshire | 1,970 | 80.3% | 40.6% | 51 |
| 37 | Louisiana | 2,593 | 72.9% | 44.9% | 140 |
| 38 | Montana | 2,247 | 76.0% | 38.7% | 74 |
| 39 | Mississippi | 1,898 | 77.6% | 34.8% | 86 |
| 40 | West Virginia | 1,799 | 78.6% | 36.4% | 73 |
| 41 | Nevada | 2,231 | 74.0% | 39.4% | 124 |
| 42 | Arkansas | 1,871 | 77.4% | 38.9% | 86 |
| 43 | Hawaii | 1,736 | 77.3% | 37.0% | 43 |
| 44 | New Mexico | 1,737 | 79.1% | 34.9% | 67 |
| 45 | Wyoming | 1,663 | 78.6% | 32.6% | 77 |
| 46 | North Dakota | 2,035 | 77.6% | 40.5% | 64 |
| 47 | South Dakota | 1,945 | 72.2% | 43.1% | 27 |
| 48 | Delaware | 1,159 | 78.5% | 39.1% | 47 |
| 49 | Rhode Island | 1,069 | 74.9% | 41.2% | 45 |
| 50 | Vermont | 736 | 77.9% | 36.1% | 16 |
| 51 | District of Columbia | 212 | 71.7% | 48.2% | 10 |
Cargo-segment breakdown — all 14 segments
Carriers classified by FMCSA cargo indicator. Segments are not mutually exclusive — a carrier may carry multiple cargo types.
| # | Cargo segment | Carriers | No enforced DMARC |
|---|---|---|---|
| 1 | General Freight | 169,977 | 80.6% |
| 2 | Building Materials | 87,015 | 79.6% |
| 3 | Large Machinery | 70,561 | 78.1% |
| 4 | Hazardous Materials | 45,574 | 74.6% |
| 5 | Grain / Feed | 26,271 | 79.1% |
| 6 | Motor Vehicles | 22,079 | 80.2% |
| 7 | Household Goods | 17,343 | 81.6% |
| 8 | Liquids / Gas (Tanker) | 16,694 | 70.9% |
| 9 | Refrigerated / Cold Chain | 16,211 | 78.1% |
| 10 | Chemicals | 9,577 | 68.8% |
| 11 | Intermodal Containers | 9,463 | 79.5% |
| 12 | Oilfield Equipment | 8,085 | 77.1% |
| 13 | Livestock | 7,958 | 76.9% |
| 14 | Passengers | 6,508 | 63.6% |