The State of DMARC 2026: Enforcement Across the Top 100,000 Domains

Aggregate public-DNS measurements of DMARC, SPF, BIMI and MX deployment across a pinned Tranco top-100,000 corpus (list PYGVJ). The release includes rank-band results with Wilson 95% confidence intervals, policy and reporting maturity states, exact record failure categories, aggregate CSV and JSON, reusable CC BY 4.0 charts, scanner source, reproduction commands and SHA-256 checksums. Of 99,310 domains successfully observed on 13 August 2026, 58.1% published a valid DMARC record; 64.0% of those enforced with quarantine or reject, and 20.5% published no aggregate-reporting address. Per-domain raw results are intentionally excluded; all published aggregates can be re-derived from the permanent Tranco snapshot and public DNS.