Data
The observed figures can be read on this page. You should not have to download anything to see what is in the data.
By standard
The denominator for every share is the number of domains observed, not the number measured. Putting domains that returned SERVFAIL, or nothing at all, into the denominator would count "could not be observed" as "not configured".
Counted by company
Stated versus effective
By sector
Month by month
Comparing across months needs care. If the population or a dictionary changes, the figures move even when nothing changed in the world. What changed is recorded in the change log.
Licence
Downloads
The same figures as the tables above, for working with locally.
Parquet files are kept per month. This site references them rather than copying, so that the same figures cannot go stale in one place and not the other.
What the columns mean
The main columns used in the tables above.
| Column | Meaning |
|---|---|
total_domains |
domains taken into measurement |
observed_domains |
of those, how many could be observed. This is the denominator for every share |
spf_adopted_domains |
domains publishing SPF |
spf_adopted_entities |
companies publishing SPF |
dmarc_enforced_domains |
quarantine or reject |
nominal_reject_domains |
the record says p=reject |
enforced_reject_domains |
no pct, t=n, rua present |
blind_reject_domains |
enforcing, but no rua |
dkim_detected_domains |
found among known selectors |
dkim_not_found_domains |
not found among known selectors. This is not the same as unset |
mta_sts_domains |
publishes MTA-STS |
tls_rpt_domains |
publishes TLS-RPT |
bimi_domains |
publishes BIMI |
dnssec_domains |
signed with DNSSEC |
dane_domains |
has a TLSA record |
dane_orphan |
has TLSA, but DNSSEC could not be confirmed |
maturity_stage_dist |
distribution across maturity stages 0–4 (JSON) |
parked_hardened |
Null MX + -all + p=reject |
parked_neglected |
none of MX, SPF or DMARC |
delta_prev_month |
difference from the previous month (JSON) |
Both company-based and domain-based counts are published. Counted by domain alone, companies holding many domains carry more weight.
About per-company detail
Detail naming individual companies is kept behind authentication only. It is not being published at present.