The internet's top million domains have consolidated around two major email providers, Google Workspace and Microsoft 365, with a long tail of smaller infrastructure defying easy classification. A decade-long DNS measurement project has revealed that only about half of these domains enforce DMARC policies to protect against spam and phishing.