DEV Community

live-direct-marketing
live-direct-marketing

Posted on

666,750 domains scanned on 2026-07-27: SPF at 94.46%, DMARC enforced at 47.17%

#email #dns #security #data

Fresh numbers from the daily scan of 666,750 domains with MX records, measured on 2026-07-27. Raw counts first, commentary second.

The numbers, 2026-07-27

Metric Value
Domains with MX 666,750
Publish SPF 94.46%
Publish DMARC 69.88%
DMARC enforced (quarantine/reject) 47.17%
DMARC on p=none 237,967
No rua= reporting address 164,493 (35.30%)
Self-hosted MX 22.76%
MX we could not attribute 11.24%

47.17% of DMARC records are actually enforced (p=quarantine or p=reject). 164,493 domains (35.30% of those with DMARC) publish no rua= address, so nobody reads the reports.

Movement 

DMARC enforced %, last 30 snapshots
█▆▆▆▆▆▄▄▃▄▃▃▃▃▃▃▂▂▂▂▂▁▁▂▂▂▄▃▅▆
day    +0.06 pp
week   +0.38 pp
month  −0.20 pp
Enter fullscreen mode Exit fullscreen mode

Day over day the enforcement rate moved +0.06 pp. The scanned population changed by −1137 domains, which is list churn, not adoption.

Who runs the mailboxes 

Self-Hosted                 │██████████████████████│ 22.76%
Google Workspace            │█████████████████████ │ 21.84%
Microsoft 365               │████████████████      │ 16.93%
Unknown / Other             │███████               │ 6.77%
Generic / unmatched (mx*.*) │██                    │ 2.54%
Proofpoint                  │██                    │ 1.92%
Enter fullscreen mode Exit fullscreen mode

Top ESPs by sending infrastructure found in SPF: Amazon SES (6.18%), SendGrid (Twilio) (4.76%), Mailgun (4.11%), Zendesk (3.83%), Mailchimp (3.70%).

Top 1,000 domains vs everyone else

Among the top 1k domains, 93.66% publish SPF and 73.05% enforce DMARC. Across the full population: 94.46% and 47.17%. SPF adoption is effectively the same in both groups, while enforcement differs by +25.9 pp — publishing a record is the easy half, and it is the second number that separates the head of the list from the tail.

Check your own domain 

dig +short TXT example.com | grep spf1
dig +short TXT _dmarc.example.com
dig +short MX example.com
Enter fullscreen mode Exit fullscreen mode

If the DMARC record comes back with p=none and no rua=, you are in the 35.30% group above: publishing a policy that enforces nothing and reports to no one.

Method

Daily scan of the tranco list, 666,750 domains with MX on 2026-07-27; methodology version 2026.07.26. Percentages are shares of domains with MX unless stated otherwise. The full dataset, per-provider breakdowns and 210 historical snapshots back to 2016-01-22 are published here:

https://check.live-direct-marketing.online/email-stats/

New snapshot every day; this post is generated straight from that dataset.

Top comments (0)