Statistics

Who runs the DNS and mail of .ch domains, and how well email authentication is set up.

Figures from 00:00 UTC, next update around 05:50 UTC. They are refreshed every 6 hours and after each daily zone import.

2'657'074

domains in the zone

53.6%

signed with DNSSEC

15'977

DNS hosting providers

100.0%

analysed in depth (2'656'952 domains, of which 160'905 do not resolve)

DNS hosting market share

Name servers in the zone delegation, grouped by provider. Whole zone.

100% = all 2'657'074 domains

All other providers together: 1'040'295 domains (39.2%)

Mail hosting market share

Provider of the highest-priority MX host. Analysed domains only.

100% = 2'496'047 resolved domains

All other providers together: 334'846 domains (13.4%)

SPF

Sender policy published in the apex TXT record

valid 74.3%>10 direct lookups 0.0%+all 0.0%bad syntax 0.1%2+ records 0.2%none 25.4%

DMARC

Policy published at _dmarc

reject 18.2%quarantine 15.1%p=none 10.2%invalid 0.0%2+ records 0.1%lookup fails 0.4%none 55.9%

Who runs the name servers named after the domain itself

4'260 domains point their NS at hosts under their own domain name (ns1., ns., ns01., dns.<domain>…). The name says nothing about the operator, so it is inferred from the network of their addresses, which the zone file lists: 4'237 of them could be attributed. Whole zone.

100% = 4'260 domains with self-named name servers

Who runs the mail servers named after the domain itself

456'840 resolved domains point their MX at a host under their own domain name (mail., mx., smtp.<domain>…). The name says nothing about the operator, so it is inferred from other evidence: 419'660 of them could be attributed.

100% = 456'840 domains with a self-named mail server

How we know

100% = 456'840 domains with a self-named mail server

Only the address of the mail server itself is exact. The other sources are hints. Domains without any evidence stay unattributed.

Delegation: registry vs the domain itself

Name servers in the registry zone file compared with the NS records each domain publishes. Select a row to list the domains.

100% = 2'496'047 resolved domains

Misconfigurations

Findings per domain; a domain can have several. Select one to list the domains.

100% = 2'496'047 resolved domains

Domains that do not resolve

Our resolver and the public resolvers 1.1.1.1 and 8.8.8.8 get no answer for them. Left out of every other figure on this page. Select a row to list the domains.

100% = 2'656'952 analysed domains

Interesting TXT records

Services that leave a verification or policy record in the apex TXT. Select one to list the domains.

100% = 2'496'047 resolved domains

Over time

One snapshot per day since 2026-10-15. Mail figures are shares of the domains analysed by then, a sample that grows as the harvester runs.

Domains in the zone

Active .ch domains per day

Show as table

Day	Domains
2026-10-15	2'642'550
2026-10-16	2'643'322
2026-10-17	2'644'232
2026-10-18	2'644'690
2026-10-19	2'645'155
2026-10-20	2'645'976
2026-10-21	2'646'844
2026-10-22	2'647'597
2026-10-23	2'648'455
2026-10-24	2'649'259
2026-10-25	2'649'756
2026-10-26	2'650'341
2026-10-27	2'650'341
2026-10-28	2'651'294
2026-10-29	2'652'626
2026-10-30	2'653'104
2026-10-31	2'653'375
2026-11-01	2'652'688
2026-11-02	2'652'983
2026-11-03	2'653'532
2026-11-04	2'654'546
2026-11-05	2'655'525
2026-11-06	2'656'254
2026-11-07	2'656'986
2026-11-08	2'657'294
2026-11-09	2'657'074

DNSSEC

Share of all domains with a DS record

Show as table

Day	Signed
2026-10-15	53%
2026-10-16	53%
2026-10-17	53%
2026-10-18	53%
2026-10-19	53%
2026-10-20	53%
2026-10-21	53%
2026-10-22	53%
2026-10-23	53%
2026-10-24	53%
2026-10-25	53%
2026-10-26	53%
2026-10-27	53%
2026-10-28	53%
2026-10-29	53%
2026-10-30	54%
2026-10-31	54%
2026-11-01	54%
2026-11-02	54%
2026-11-03	54%
2026-11-04	54%
2026-11-05	54%
2026-11-06	54%
2026-11-07	54%
2026-11-08	54%
2026-11-09	54%

Largest DNS providers

Share of all domains, the four largest today

HostpointInfomaniakCyonCloudflare

Show as table

Day	Hostpoint	Infomaniak	Cyon	Cloudflare
2026-10-15	16%	14%	4.4%	3.6%
2026-10-16	16%	14%	4.4%	3.6%
2026-10-17	16%	14%	4.4%	3.6%
2026-10-18	16%	14%	4.4%	3.6%
2026-10-19	16%	14%	4.4%	3.6%
2026-10-20	16%	14%	4.4%	3.7%
2026-10-21	16%	14%	4.4%	3.7%
2026-10-22	16%	14%	4.3%	3.7%
2026-10-23	16%	14%	4.3%	3.7%
2026-10-24	16%	14%	4.3%	3.7%
2026-10-25	16%	14%	4.3%	3.7%
2026-10-26	16%	14%	4.3%	3.7%
2026-10-27	16%	14%	4.3%	3.7%
2026-10-28	16%	14%	4.3%	3.7%
2026-10-29	16%	14%	4.3%	3.7%
2026-10-30	16%	14%	4.3%	3.7%
2026-10-31	16%	14%	4.3%	3.7%
2026-11-01	16%	14%	4.3%	3.7%
2026-11-02	16%	14%	4.3%	3.7%
2026-11-03	16%	14%	4.3%	3.7%
2026-11-04	16%	14%	4.3%	3.8%
2026-11-05	16%	14%	4.3%	3.8%
2026-11-06	16%	14%	4.3%	3.8%
2026-11-07	16%	14%	4.3%	3.8%
2026-11-08	16%	14%	4.3%	3.8%
2026-11-09	16%	14%	4.3%	3.8%

Mail security and IPv6

Share of analysed domains

SPF validDMARC enforcedIPv6

Show as table

Day	SPF valid	DMARC enforced	IPv6
2026-10-15	74%	33%	39%
2026-10-16	74%	33%	38%
2026-10-17	74%	32%	38%
2026-10-18	74%	32%	38%
2026-10-19	74%	32%	38%
2026-10-20	74%	33%	38%
2026-10-21	74%	33%	38%
2026-10-22	74%	33%	38%
2026-10-23	74%	33%	38%
2026-10-24	74%	33%	39%
2026-10-25	74%	33%	39%
2026-10-26	74%	33%	39%
2026-10-27	74%	33%	39%
2026-10-28	74%	33%	39%
2026-10-29	74%	33%	39%
2026-10-30	74%	33%	39%
2026-10-31	74%	33%	39%
2026-11-01	74%	33%	39%
2026-11-02	74%	33%	39%
2026-11-03	74%	33%	39%
2026-11-04	74%	33%	39%
2026-11-05	74%	33%	39%
2026-11-06	74%	33%	39%
2026-11-07	74%	33%	39%
2026-11-08	74%	33%	39%
2026-11-09	74%	33%	39%

Hostpoint	433'200	16.3%
Infomaniak	364'568	13.7%
Cyon	115'359	4.3%
Cloudflare	100'718	3.8%
Wix	78'883	3.0%
pro.io	75'524	2.8%
GoDaddy	72'589	2.7%
Hoststar	69'750	2.6%
Hosttech	69'343	2.6%
Swizzonic	67'051	2.5%
namesrv.ch	38'233	1.4%
Jimdo	35'930	1.4%
Metanet	34'096	1.3%
Kreativmedia	32'136	1.2%
IONOS	29'399	1.1%

None (no MX)	614'672	24.6%
Own mail host	456'840	18.3%
Hostpoint	397'832	15.9%
Infomaniak	216'716	8.7%
Microsoft 365	170'156	6.8%
Google	65'293	2.6%
Hosttech	53'842	2.2%
servicehoster.ch	28'689	1.1%
Swizzonic	26'751	1.1%
IONOS	25'642	1.0%
Jimdo	24'005	1.0%
OVH	21'157	0.8%
kasserver.com	21'083	0.8%
Tophost	19'633	0.8%
Gandi	18'890	0.8%

Hetzner	689	16.2%
Metanet	330	7.7%
Leaseweb	290	6.8%
OVH	237	5.6%
Netcup	231	5.4%
Swisscom / bluewin	177	4.2%
Sunrise	163	3.8%
NOVATREND-AS	120	2.8%
VTX-NETWORK	119	2.8%
Green	92	2.2%
Contabo	82	1.9%
Cloud DNS Ltd.	76	1.8%
Infomaniak	70	1.6%
INIT7	69	1.6%
Switch, Swiss Academic and Research Network	64	1.5%
Amazon	62	1.5%
IWAY	52	1.2%
IONOS	45	1.1%
Hosttech	42	1.0%
GoDaddy	39	0.9%

Metanet	125'528	27.5%
Cyon	76'723	16.8%
Hetzner	76'172	16.7%
CH-4142 Muenchenstein	23'130	5.1%
Hosttech	13'580	3.0%
ONE-NETWORK	9'152	2.0%
IONOS	4'131	0.9%
SOLNET	3'946	0.9%
Netcup	3'399	0.7%
GD-EMEA-DC-CGN1	3'197	0.7%
DATAWIRE-AS	3'156	0.7%
Sunrise	3'031	0.7%
OVH	2'866	0.6%
TIZOO	2'828	0.6%
Swisscom / bluewin	2'815	0.6%
Key-Systems GmbH PartnerGate	2'111	0.5%
Amazon	1'758	0.4%
LWS	1'709	0.4%
O2SWITCH	1'597	0.3%
XIRRA	1'581	0.3%

address of the mail server	388'276	85.0%
network of the website (SPF a)	20'516	4.5%
SPF address list	5'456	1.2%
SPF include	5'412	1.2%

Registry and zone agree	2'383'122	95.5%
Different operators entirely	50'892	2.0%
Zone has extra servers	35'467	1.4%
Registry has extra servers	8'793	0.4%
Other server names, same operator	7'414	0.3%
Overlapping, both have extras	6'154	0.2%
Zone publishes no NS	4'205	0.2%

Mail domain without DMARC	999'985	40.1%
DMARC without rua reports	929'176	37.2%
No-mail domain without SPF	400'440	16.0%
www does not resolve	281'156	11.3%
DMARC p=none only	253'963	10.2%
Mail domain without SPF	233'701	9.4%
SPF ends in ?all	90'593	3.6%
NSEC3 with salt	90'463	3.6%
NSEC3 extra iterations	87'973	3.5%
Delegation: totally different NS	50'892	2.0%
Delegation: zone has extra NS	35'467	1.4%
SOA expire under a week	29'466	1.2%
Signed but no DS	17'921	0.7%
MX is localhost	13'937	0.6%
Delegation: registry has extra NS	8'793	0.4%
SOA timers inconsistent	7'630	0.3%
DMARC lookup fails	6'505	0.3%
Delegation: NS sets differ	6'154	0.2%
DMARC pct below 100 (obsolete)	4'702	0.2%
Several SPF records	4'466	0.2%
Delegation: zone has no NS	4'205	0.2%
SPF without all/redirect	3'975	0.2%
Several DMARC records	3'588	0.1%
CNAME at apex	2'781	0.1%
SPF uses ptr	2'637	0.1%
DS but no DNSKEY	2'050	0.1%
SPF syntax error	2'003	0.1%
MX is an IP address	395	0.0%
DMARC policy tag missing or invalid	352	0.0%
DS does not match DNSKEY	340	0.0%
SPF allows everyone (+all)	321	0.0%
DNSSEC algorithm no longer accepted	260	0.0%
Deprecated DNSSEC algorithm in use	259	0.0%
BIMI without DMARC enforcement	173	0.0%
Invalid DMARC	119	0.0%
MTA-STS policy host missing	113	0.0%
Malformed TLS-RPT record	60	0.0%
SPF over 10 lookups	41	0.0%
Malformed BIMI record	40	0.0%
Null MX next to other MX	38	0.0%

The name servers refuse to answer for it (lame delegation)	103'301	3.9%
None of its name servers answers	41'317	1.6%
DNSSEC validation fails	15'315	0.6%
It cannot be resolved	742	0.0%
The name servers have no working zone for it	230	0.0%

DNSSEC with NSEC (walkable)	784'635	31.4%
DNSSEC with NSEC3	630'213	25.2%
CDS/CDNSKEY automation	370'254	14.8%
Google verification	216'619	8.7%
Microsoft 365 (MS=)	128'616	5.2%
HTTPS record	73'011	2.9%
Wildcard TXT (answers every name)	67'009	2.7%
CAA published	53'885	2.2%
Null MX (accepts no mail)	53'584	2.1%
Brevo	17'669	0.7%
Other verification token	15'227	0.6%
Proton	12'194	0.5%
Apple	7'975	0.3%
Facebook	7'582	0.3%
TLS-RPT	3'640	0.1%
Zoho	3'416	0.1%
Atlassian	3'176	0.1%
MTA-STS	3'153	0.1%
Sophos	2'285	0.1%
DKIM key at apex	1'934	0.1%
OpenAI	1'829	0.1%
BIMI	1'529	0.1%
Adobe	1'011	0.0%
Mailchimp	833	0.0%
Have I Been Pwned	782	0.0%
Pinterest	754	0.0%
Empty TXT record	729	0.0%
Stripe	644	0.0%
Miro	550	0.0%
DocuSign	496	0.0%
Yandex	437	0.0%
GlobalSign	383	0.0%
Ahrefs	356	0.0%
Amazon SES	291	0.0%
Zoom	274	0.0%
Keybase	243	0.0%
BIMI with certificate	150	0.0%
OneTrust	139	0.0%
Slack	119	0.0%
Wildcard DKIM key	88	0.0%