📨 Companies without SPF records

These domains lack an SPF record, meaning they have no protection against unauthorized email senders using their domain.

670
Companies affected
2378
Total scanned
28%
Prevalence
Domain
Score
Tier
SPF Status
30/100
Fail
Missing
38/100
Fail
Missing
38/100
Fail
Missing
38/100
Fail
Missing
38/100
Fail
Missing
+665 more companies
This dataset is available on request. Leave your work email and we'll send you the full list within 24 hours.
No spam — we only use this to send you the data
Request received
We'll send the full dataset to your inbox shortly. Keep an eye out for an email from the LynxRadar team.

Which companies are missing SPF records?

SPF (Sender Policy Framework) is a DNS record that specifies which mail servers are authorized to send email on behalf of a domain. Without SPF, anyone can send email that appears to come from the domain — a common technique in phishing and spam campaigns. The domains listed below were found by LynxRadar to have no SPF record published in their DNS.

LynxRadar scanned 2378 domains including Fortune 500 companies and Y Combinator startups. Of those, 670 (28%) were found to have this security gap. The data above is updated continuously as new domains are scanned. Scan any domain to check its status.

Frequently Asked Questions

What happens when a company has no SPF record?
Without SPF, receiving mail servers have no way to verify whether an email was sent by an authorized server. This means attackers can freely spoof the domain, and the emails are more likely to be delivered to victims' inboxes.
How many companies don't have SPF?
In LynxRadar's scan of 2378 domains, 670 (28%) were found without an SPF record, leaving them with no sender verification.