Data

Centralized dataset releases and download links from our measurement studies.

DNS

Dataset family for DNS measurement releases and protocol-specific artifacts.

Dataset Entry

DNS NSEC/NSEC3 Records

Raw NSEC/NSEC3 scan data for the Umbrella, Tranco, Radar, and Majestic popularity lists.

📊

Dataset

This dataset contains the raw data from our NSEC/NSEC3 scans for four popularity lists: Umbrella, Tranco, Radar, Majestic. The scans were performed on April 6, 2026. New scan results may be released in the future.

Included Data

  • OpenINTEL with Auxiliary Scan: combined data from OpenINTEL and our additional scan to fill in missing data (e.g., apex domain with DNSKEY but no NSEC/NSEC3). For original OpenINTEL data without our auxiliary scan, please refer to the OpenINTEL page.
  • WWW: our scans for www.{apex} on all apex domains with DNSKEY.
  • Wildcard: a subset of the WWW scans, for domains with a wildcard configured at the apex level (*.{apex}).

What Is Not Included (Publicly)

Raw data from scans for com/net/org domains. Since zone data is closed access, we will only share it privately if you demonstrate that you have zone file access (e.g., show proof of an ICANN CZDS agreement). We follow a procedure similar to OpenINTEL's in handling and sharing data involving zone data.

More Information

Please check our paper and our repo for analysis scripts, intermediate data, and instructions to reproduce the results in our paper.

Citation

If you are using this dataset, then please cite our paper:

Dissecting NSEC and NSEC3 Deployment in the Wild
Paper → GitHub Repo →