# Method

MX and TXT records for every domain in each list were resolved through 1.1.1.1, 8.8.8.8 and 9.9.9.9 on 21 October 2026 with `scrapers/dns_detect.py`; the raw answers are in `data/archive/<group>_dns.jsonl.gz`.

- Sales or Service Cloud: the `v=spf1` record includes `_spf.salesforce.com`.
- Marketing Cloud: the SPF record includes an `exacttarget.com` host.
- Pardot: `pi.pardot.com/pd.js` loads on the homepage, or the SPF record names a Pardot host.
- Web-to-Lead, Personalization (Evergage), Lightning and Commerce Cloud: homepage fingerprints in `scrapers/fingerprints.py`, from the rendered crawl of September and October 2026.

The base for each list is the domains that returned a DNS answer. A company that uses Salesforce without sending mail from it, or sends through another service, is not counted, so every number is a floor. Segments under 100 companies (industry) or 20 (size band, YC status) are not published.