DMARC Census
Every month we look up the DMARC and SPF records of the Tranco top million, plus a US federal cohort, and ask two questions of each domain: do receivers act on its policy, and can anyone receive the reports it asks for? This page always points at the newest edition.
27.7%
of valid DMARC records send reports nowhere
47.2%
of measured domains publish a valid DMARC record
20.8%
of measured domains enforce without a weakening tag
34,749
send reports to an address that never opted in
Read the September 2026 edition
Check your own domain
This runs the same tier rules on your domain that the scan runs on a million. It reads live DNS and stores nothing.
Editions
- DMARC Census, September 2026: 1,000,767 domains scanned on 2026-09-01. 3,004 domains moved to a stronger policy since August 2026 and 1,059 to a weaker one.
- DMARC Census, August 2026: 1,000,766 domains scanned between 2026-08-20 and 2026-08-21. The first edition.
Using this
The aggregate data is published under CC BY 4.0. Reuse it, including commercially, with attribution. Suggested citation:
DomainCanary. DMARC Census, 2026-09. https://staging.domaincanary.com/research/dmarc-census. Data licensed CC BY 4.0.