Email Security Index / Big tech
Can apple.com be impersonated by email?
Mostly no: forged email “from” apple.com goes to spam.
apple.com asks receiving mail servers to treat messages that fail its authentication as suspicious (DMARC p=quarantine), so a forged email claiming to be from apple.com lands in spam rather than being refused outright.
- Grade
- B 76/100
- Rank
- 20 of 48
- In big tech
- 5 of 8
- DMARC
- quarantine
Measured 2026-11-07. Full live report card · Signed proof
Beyond impersonation
- OffMTA-STS Makes mail sent to the domain travel encrypted, so delivery can’t be silently downgraded to plain text.
- OffDNSSEC Signs the domain’s DNS answers, so the records above can’t be forged in transit.
- OnBIMI logo Shows the brand’s verified logo next to its messages in supporting inboxes.
Big tech
The daily score is recorded from the next measurement.
No confirmed change yet. A change is listed once two checks six hours apart agree.
About this page
Measured from public DNS with the same checks anyone can run on their own domain, as part of the Email Security Index of 48 well-known brands. It describes what public DNS shows about email impersonation and delivery, not apple.com’s security overall. Spotted something wrong? Tell us and it’s re-checked.