{
  "metrics": [
    {
      "category": "emerging",
      "caveat": "A BIMI TXT record does not demonstrate logo eligibility or validation.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.08",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive BIMI TXT-record query.",
      "metric_id": "bimi.record_present",
      "numerator": 1312,
      "percentage": "0.077169752280389707249015968021607530638509118029724",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "emerging",
      "caveat": "CAA is an X.509 issuance-control signal, not an email-security deployment result.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "1.50",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive CAA record query.",
      "metric_id": "caa.record_present",
      "numerator": 25491,
      "percentage": "1.4993400574538216672901417994198152160870700668412",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dkim",
      "caveat": "No observed selector is not evidence that the domain does not use DKIM.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "79.85",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Provider-aware DKIM selector probes.",
      "metric_id": "dkim.selector_not_observed",
      "numerator": 1357640,
      "percentage": "79.854224455753263833501553982359182847610913873380",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dkim",
      "caveat": "This is a selector lower bound: a domain can use valid selectors that were not probed.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "20.15",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Provider-aware DKIM selector probes.",
      "metric_id": "dkim.selector_observed",
      "numerator": 342508,
      "percentage": "20.145775544246736166498446017640817152389086126620",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dkim",
      "caveat": "Only a found selector is assessed; unprobed selectors can differ.",
      "denominator": 342508,
      "denominator_metric_id": "dkim.selector_observed",
      "display_percentage": "7.44",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Observed provider-aware DKIM selector probes.",
      "metric_id": "dkim.testing_mode",
      "numerator": 25488,
      "percentage": "7.4415780069370642437548903967206605393158699942775",
      "population": "analyzable MX rows with an observed DKIM selector",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dkim",
      "caveat": "This is not a cryptographic key-size measurement or a conclusion about effective key strength.",
      "denominator": 342508,
      "denominator_metric_id": "dkim.selector_observed",
      "display_percentage": "31.65",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Observed DKIM public-key-value length heuristic.",
      "metric_id": "dkim.weak_key_heuristic",
      "numerator": 108393,
      "percentage": "31.646852044331811227766942669952234692328354374204",
      "population": "analyzable MX rows with an observed DKIM selector",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "Detection does not imply that a supported effective policy is present.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "42.93",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive DNS observation by the documented scanner and resolver configuration.",
      "metric_id": "dmarc.detected",
      "numerator": 729929,
      "percentage": "42.933262280695562974517512593021313438594757632865",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "This includes records on rows with and without MX.",
      "denominator": 2316512,
      "denominator_metric_id": "population.analyzable",
      "display_percentage": "39.05",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive DNS observation by the documented scanner and resolver configuration.",
      "metric_id": "dmarc.detected_all",
      "numerator": 904516,
      "percentage": "39.046462958102526557168708817394427484079512646600",
      "population": "all analyzable rows with a detected DMARC record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "No record means no DMARC record was detected by the scan; it is not a broad security-quality judgment.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "57.07",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "DMARC TXT-record detection.",
      "metric_id": "dmarc.genuine_no_record",
      "numerator": 970219,
      "percentage": "57.066737719304437025482487406978686561405242367135",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "This reports malformed published record content; it is not classified as relaxed or strict alignment.",
      "denominator": 904516,
      "denominator_metric_id": "dmarc.detected_all",
      "display_percentage": "0.01",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Detected DMARC record with an adkim= or aspf= value outside the supported r/s values.",
      "metric_id": "dmarc.invalid_alignment",
      "numerator": 59,
      "percentage": "0.0065228254668795245191903736362872519667977128099448",
      "population": "all analyzable rows with a detected DMARC record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "This reports malformed published record content; it is not treated as a partial or effective enforcement setting.",
      "denominator": 904516,
      "denominator_metric_id": "dmarc.detected_all",
      "display_percentage": "0.00",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Detected DMARC record with a numeric pct= value outside the RFC range 0–100.",
      "metric_id": "dmarc.invalid_pct",
      "numerator": 2,
      "percentage": "0.00022111272769083133963357198767075430395924450203203",
      "population": "all analyzable rows with a detected DMARC record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "This bucket is distinct from no detected record and means the detected record has no supported p= value.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.02",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Detected DMARC record with parsed policy state.",
      "metric_id": "dmarc.missing_policy",
      "numerator": 308,
      "percentage": "0.018116069895091486152970212005072499570625616122832",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "No detected enforcement is not a determination of actual receiving-mail behaviour.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "70.01",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Reconciliation of non-enforcing or unsupported DMARC policy observations.",
      "metric_id": "dmarc.no_detected_enforcement",
      "numerator": 1190194,
      "percentage": "70.005317184151026851779962685601488811562287518498",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "This is deliberately reported independently of MX routing.",
      "denominator": 616364,
      "denominator_metric_id": "mx.absent",
      "display_percentage": "28.33",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive DNS observation by the documented scanner and resolver configuration.",
      "metric_id": "dmarc.no_mx_detected",
      "numerator": 174587,
      "percentage": "28.325307772679780129923227183936764639076909099169",
      "population": "analyzable rows without a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "This is a DNS-observation bucket, not an assessment of actual message handling.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "57.10",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Reconciliation of no record, missing policy, and unsupported policy observations.",
      "metric_id": "dmarc.no_supported_effective_policy",
      "numerator": 970700,
      "percentage": "57.095029373913329898338262315986608224695732371535",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "p=none is a monitoring policy, not a detected enforcement policy.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "12.91",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Parsed DMARC p= tag.",
      "metric_id": "dmarc.none",
      "numerator": 219494,
      "percentage": "12.910287810237696953441700369614880586866555146964",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "The p= tag's pct setting is a published value; it does not demonstrate message-level enforcement. Out-of-range pct values are reported separately.",
      "denominator": 904516,
      "denominator_metric_id": "dmarc.detected_all",
      "display_percentage": "0.49",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Parsed valid DMARC pct= tag (0–99) across all detected DMARC records.",
      "metric_id": "dmarc.partial_pct",
      "numerator": 4429,
      "percentage": "0.48965413547134600161854516669688540611774694974992",
      "population": "all analyzable rows with a detected DMARC record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "A published p=quarantine tag alone does not demonstrate operational enforcement or alignment outcomes.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "16.65",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Parsed DMARC p= tag.",
      "metric_id": "dmarc.quarantine",
      "numerator": 282997,
      "percentage": "16.645433221107809437766594437660721301910186642575",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "A published p=reject tag alone does not demonstrate operational enforcement or alignment outcomes.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "13.35",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Parsed DMARC p= tag.",
      "metric_id": "dmarc.reject",
      "numerator": 226957,
      "percentage": "13.349249594741163710453442876737789886527525838927",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "Strict alignment tags do not demonstrate that mail flows or aligned identifiers were validated.",
      "denominator": 904516,
      "denominator_metric_id": "dmarc.detected_all",
      "display_percentage": "12.06",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Parsed DMARC adkim= and aspf= tags across all detected DMARC records.",
      "metric_id": "dmarc.strict_alignment",
      "numerator": 109125,
      "percentage": "12.064463204630984968756771577285531709776278142122",
      "population": "all analyzable rows with a detected DMARC record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dmarc",
      "caveat": "This bucket records an unsupported parsed policy value; it makes no claim about the organisation's security posture.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.01",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Detected DMARC record with parsed policy state.",
      "metric_id": "dmarc.unsupported_policy",
      "numerator": 173,
      "percentage": "0.010175584713801386702804697002849163719864388276785",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "population",
      "caveat": "This is the scanner's DNS existence observation, not a registry-status determination.",
      "denominator": 2316512,
      "denominator_metric_id": "population.analyzable",
      "display_percentage": "96.50",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive DNS observation by the documented scanner and resolver configuration.",
      "metric_id": "domain.exists",
      "numerator": 2235478,
      "percentage": "96.501895953916923374452625326352723404843143484687",
      "population": "all analyzable scan rows",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "population",
      "caveat": "This is the scanner's DNS existence observation, not a registry-status determination.",
      "denominator": 2316512,
      "denominator_metric_id": "population.analyzable",
      "display_percentage": "3.50",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive DNS observation by the documented scanner and resolver configuration.",
      "metric_id": "domain.not_exists",
      "numerator": 81034,
      "percentage": "3.4981040460830766255473746736472765951568565153127",
      "population": "all analyzable scan rows",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dns",
      "caveat": "A DS record is not proof that DNSSEC validation succeeded.",
      "denominator": 2316512,
      "denominator_metric_id": "population.analyzable",
      "display_percentage": "53.84",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive DNS DS-record query.",
      "metric_id": "ds.record_present",
      "numerator": 1247313,
      "percentage": "53.844443715378983575306322609164122611926896989957",
      "population": "all analyzable scan rows",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "emerging",
      "caveat": "The scanner does not retrieve or validate the HTTPS MTA-STS policy file.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.15",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive _mta-sts TXT-record query.",
      "metric_id": "mta_sts.txt_present",
      "numerator": 2534,
      "percentage": "0.14904584777325268153125492604173283737651075082875",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx",
      "caveat": "This includes domains without a non-null MX answer; it does not establish that they never send mail.",
      "denominator": 2316512,
      "denominator_metric_id": "population.analyzable",
      "display_percentage": "26.61",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive DNS observation by the documented scanner and resolver configuration.",
      "metric_id": "mx.absent",
      "numerator": 616364,
      "percentage": "26.607416667817822657512674227459214543244325952121",
      "population": "all analyzable scan rows",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx",
      "caveat": "A non-null MX answer indicates published mail routing, not successful mail delivery.",
      "denominator": 2316512,
      "denominator_metric_id": "population.analyzable",
      "display_percentage": "73.39",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive DNS observation by the documented scanner and resolver configuration.",
      "metric_id": "mx.present",
      "numerator": 1700148,
      "percentage": "73.392583332182177342487325772540785456755674047879",
      "population": "all analyzable scan rows",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.06",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.barracuda",
      "numerator": 1035,
      "percentage": "0.060877053056557429117935615017045574855836080153022",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.07",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.cyon",
      "numerator": 1120,
      "percentage": "0.065876617800332676919891680018445452984093149537570",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.00",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.gmx",
      "numerator": 69,
      "percentage": "0.0040584702037704952745290410011363716570557386768681",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "3.51",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.google_workspace",
      "numerator": 59683,
      "percentage": "3.5104590894439778184016920879829285450443137891525",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.00",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.greench",
      "numerator": 3,
      "percentage": "0.00017645522625089109889256700004940746335024950768992",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "20.49",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.hostpoint",
      "numerator": 348340,
      "percentage": "20.488804504078468462745596265736865261141971169569",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "2.76",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.hosttech",
      "numerator": 46879,
      "percentage": "2.7573481838051746083282161317720574914654488903319",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "10.47",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.infomaniak",
      "numerator": 178072,
      "percentage": "10.473911682982893253999063610932695271235210111120",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.00",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.init7",
      "numerator": 17,
      "percentage": "0.00099991294875504956039121300027997562565141387690954",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.24",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.iway",
      "numerator": 4090,
      "percentage": "0.24056729178871486482353301006735884170084016215059",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.04",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.mailbox_org",
      "numerator": 632,
      "percentage": "0.037173234330187724833367448010408505612452562953343",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.02",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.metanet",
      "numerator": 408,
      "percentage": "0.023997910770121189449389112006719415015633933045829",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "9.42",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.microsoft365",
      "numerator": 160129,
      "percentage": "9.4185329747763135915226203836371892329373678056263",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.03",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.mimecast",
      "numerator": 479,
      "percentage": "0.028174017791392278789846531007888724981589838061157",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.27",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.netzone",
      "numerator": 4509,
      "percentage": "0.26521220505508932163552820107425941741542501005795",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "23.84",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.other",
      "numerator": 405385,
      "percentage": "23.844100631239162708187757771676348176746965558293",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.00",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.ovh",
      "numerator": 0,
      "percentage": "0",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.05",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.proofpoint",
      "numerator": 912,
      "percentage": "0.053642388780270894063340368015019868858475850337735",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.56",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.protonmail",
      "numerator": 9549,
      "percentage": "0.56165698515658636777504076115726395584384418297701",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "25.44",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.self_hosted",
      "numerator": 432455,
      "percentage": "25.436314956109703390528354002122168187710716949348",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.00",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.swisscom",
      "numerator": 29,
      "percentage": "0.0017057338537586139559614810004776054790524119076692",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "1.32",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.swizzonic",
      "numerator": 22370,
      "percentage": "1.3157678037441446274089079303684149850483604956745",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "1.09",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.tophost",
      "numerator": 18539,
      "percentage": "1.0904344798217566941230998713053216543500918743545",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.00",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.unknown",
      "numerator": 0,
      "percentage": "0",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx_provider",
      "caveat": "Provider classification is a hostname fingerprint, not evidence of a commercial relationship or complete mail infrastructure.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.32",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "MX hostname fingerprinting using the documented provider patterns.",
      "metric_id": "mx.provider.vtx",
      "numerator": 5444,
      "percentage": "0.32020741723661704745704491608965807682625277328797",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "mx",
      "caveat": "A flag means an MX host had no affirmative A or AAAA answer under the scanner rules; resolver errors are not counted as unresolvable.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "2.21",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "A/AAAA follow-up for scanned MX hosts.",
      "metric_id": "mx.unresolvable",
      "numerator": 37638,
      "percentage": "2.2138072685436797267061455826198660351922303234777",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "dns",
      "caveat": "An NS answer is not a delegation or DNSSEC-validation quality assessment.",
      "denominator": 2316512,
      "denominator_metric_id": "population.analyzable",
      "display_percentage": "96.38",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive DNS NS-answer observation.",
      "metric_id": "ns.answer_present",
      "numerator": 2232562,
      "percentage": "96.376017046317912447679960216048956361978699009545",
      "population": "all analyzable scan rows",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "population",
      "caveat": "An empty error field is not proof that every DNS protocol was validated.",
      "denominator": 2459127,
      "denominator_metric_id": "population.total",
      "display_percentage": "94.20",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Rows with an empty recorded error field.",
      "metric_id": "population.analyzable",
      "numerator": 2316512,
      "percentage": "94.200584191056419615579024588807328779684823109990",
      "population": "all analyzable scan rows",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "population",
      "caveat": "Errors are excluded from descriptive measurement denominators.",
      "denominator": 2459127,
      "denominator_metric_id": "population.total",
      "display_percentage": "5.80",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Rows with a recorded scanner error.",
      "metric_id": "population.error",
      "numerator": 142615,
      "percentage": "5.7994158089435803844209754111926712203151768900102",
      "population": "all scanned rows",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "population",
      "caveat": "The released metric contains only an aggregate count; no domains or record values are exported.",
      "denominator": 2459127,
      "denominator_metric_id": null,
      "display_percentage": "100.00",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Count of rows in the private scanner results database.",
      "metric_id": "population.total",
      "numerator": 2459127,
      "percentage": "100",
      "population": "all scanned rows",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "spf",
      "caveat": "Absence is limited to the scanner's TXT observation.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "13.25",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive DNS observation by the documented scanner and resolver configuration.",
      "metric_id": "spf.absent",
      "numerator": 225242,
      "percentage": "13.248376023734404298919858741709545286645633203698",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "spf",
      "caveat": "The scanner does not recursively evaluate include or redirect chains; this is not RFC 7208 policy validation.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "33.64",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Top-level SPF terminal-mechanism parsing.",
      "metric_id": "spf.hardfail",
      "numerator": 571967,
      "percentage": "33.642188797681143053428289772419812863350720054960",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "spf",
      "caveat": "This is a record-type observation only; it does not assess SPF correctness.",
      "denominator": 2316512,
      "denominator_metric_id": "population.analyzable",
      "display_percentage": "0.43",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive query for the obsolete SPF DNS RR type 99.",
      "metric_id": "spf.legacy_rrtype99",
      "numerator": 9941,
      "percentage": "0.42913656393750604356895194153969416087635203271125",
      "population": "all analyzable scan rows",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "spf",
      "caveat": "The scanner does not recursively evaluate include or redirect chains; this is not RFC 7208 policy validation.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "5.15",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Top-level SPF terminal-mechanism parsing.",
      "metric_id": "spf.neutral",
      "numerator": 87550,
      "percentage": "5.1495516860885052360147469514418744721047814660841",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "spf",
      "caveat": "This is deliberately reported independently of MX routing.",
      "denominator": 616364,
      "denominator_metric_id": "mx.absent",
      "display_percentage": "29.24",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive DNS observation by the documented scanner and resolver configuration.",
      "metric_id": "spf.no_mx_present",
      "numerator": 180216,
      "percentage": "29.238566820904530439805050262507219759752354128405",
      "population": "analyzable rows without a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "spf",
      "caveat": "A published SPF record without a parsed terminal all mechanism is not a security-quality verdict.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "19.33",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Top-level SPF terminal-mechanism parsing.",
      "metric_id": "spf.no_terminal_mechanism",
      "numerator": 328576,
      "percentage": "19.326317473537597903241364869411368892590527412908",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "spf",
      "caveat": "The scanner does not recursively evaluate include or redirect chains; this is not RFC 7208 policy validation.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.02",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Top-level SPF terminal-mechanism parsing.",
      "metric_id": "spf.pass",
      "numerator": 354,
      "percentage": "0.020821716697605149669322906005830080675329441907410",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "spf",
      "caveat": "SPF presence is a TXT-record observation, not end-to-end SPF evaluation.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "86.75",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive DNS observation by the documented scanner and resolver configuration.",
      "metric_id": "spf.present",
      "numerator": 1474906,
      "percentage": "86.751623976265595701080141258290454713354366796302",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "spf",
      "caveat": "The scanner does not recursively evaluate include or redirect chains; this is not RFC 7208 policy validation.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "28.61",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Top-level SPF terminal-mechanism parsing.",
      "metric_id": "spf.softfail",
      "numerator": 486459,
      "percentage": "28.612744302260744358726416759011568404633008420443",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "emerging",
      "caveat": "Record presence does not demonstrate reporting delivery or policy effectiveness.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "0.16",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive TLS-RPT TXT-record query.",
      "metric_id": "tls_rpt.record_present",
      "numerator": 2728,
      "percentage": "0.16045661907081030592630759204492785333982688565937",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    },
    {
      "category": "tlsa",
      "caveat": "TLSA presence is not validated DANE deployment or proof of mail-transport security.",
      "denominator": 1700148,
      "denominator_metric_id": "mx.present",
      "display_percentage": "38.41",
      "measurement_period": "2026-08-21T21:05:22.017897Z/2026-08-23T18:02:41.508091Z",
      "method": "Passive TLSA record query for scanned SMTP MX hosts.",
      "metric_id": "tlsa.record_present",
      "numerator": 652997,
      "percentage": "38.408244458717711634516524443754308448440959257665",
      "population": "analyzable rows with a non-null MX record",
      "precision": 2,
      "unit": "domains"
    }
  ]
}