{
  "id": "spoofable-domains",
  "url": "https://defaults.exposed/stats/how-many-domains-can-be-email-spoofed",
  "question": "How many domains can be email-spoofed?",
  "answer": "As of July 28, 2026, 243,029,017 domains — 88.2% of the 276 million graded in the Defaults.Exposed census — lack an enforcing DMARC policy, leaving their domain name open to email spoofing.",
  "value": 243029017,
  "formatted": "243,029,017",
  "unit": "count",
  "values": {
    "COUNT": {
      "value": 243029017,
      "formatted": "243,029,017"
    },
    "PCT": {
      "value": 88.16059091740549,
      "formatted": "88.2"
    },
    "TOTALM": {
      "value": 275666275,
      "formatted": "276 million"
    }
  },
  "asOf": "2026-07-28",
  "note": "Spoofable = no DMARC policy of p=quarantine or p=reject. Receivers may still filter on other signals, but the domain itself asserts no enforcement.",
  "alternates": [
    {
      "lang": "de",
      "url": "https://defaults.exposed/de/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "es",
      "url": "https://defaults.exposed/es/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "nl",
      "url": "https://defaults.exposed/nl/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "pt",
      "url": "https://defaults.exposed/pt/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "ru",
      "url": "https://defaults.exposed/ru/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "fr",
      "url": "https://defaults.exposed/fr/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "zh",
      "url": "https://defaults.exposed/zh/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "it",
      "url": "https://defaults.exposed/it/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "pl",
      "url": "https://defaults.exposed/pl/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "ja",
      "url": "https://defaults.exposed/ja/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "ar",
      "url": "https://defaults.exposed/ar/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "sv",
      "url": "https://defaults.exposed/sv/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "cs",
      "url": "https://defaults.exposed/cs/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "id",
      "url": "https://defaults.exposed/id/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "da",
      "url": "https://defaults.exposed/da/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "hu",
      "url": "https://defaults.exposed/hu/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "tr",
      "url": "https://defaults.exposed/tr/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "ro",
      "url": "https://defaults.exposed/ro/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "no",
      "url": "https://defaults.exposed/no/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "fa",
      "url": "https://defaults.exposed/fa/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "ko",
      "url": "https://defaults.exposed/ko/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "el",
      "url": "https://defaults.exposed/el/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "fi",
      "url": "https://defaults.exposed/fi/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "vi",
      "url": "https://defaults.exposed/vi/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "ms",
      "url": "https://defaults.exposed/ms/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "uk",
      "url": "https://defaults.exposed/uk/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "sk",
      "url": "https://defaults.exposed/sk/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "he",
      "url": "https://defaults.exposed/he/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "lt",
      "url": "https://defaults.exposed/lt/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "et",
      "url": "https://defaults.exposed/et/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "sr",
      "url": "https://defaults.exposed/sr/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "sl",
      "url": "https://defaults.exposed/sl/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "hr",
      "url": "https://defaults.exposed/hr/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "hi",
      "url": "https://defaults.exposed/hi/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "bn",
      "url": "https://defaults.exposed/bn/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "th",
      "url": "https://defaults.exposed/th/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "bg",
      "url": "https://defaults.exposed/bg/stats/how-many-domains-can-be-email-spoofed"
    },
    {
      "lang": "zht",
      "url": "https://defaults.exposed/zht/stats/how-many-domains-can-be-email-spoofed"
    }
  ],
  "source": "Defaults.Exposed census",
  "dataset": "https://defaults.exposed/data",
  "methodology": "https://defaults.exposed/en/methodology",
  "license": "https://defaults.exposed/license",
  "citation": "Defaults.Exposed, \"How many domains can be email-spoofed?\" (as of July 28, 2026). https://defaults.exposed/stats/how-many-domains-can-be-email-spoofed"
}