This story was originally published on HackerNoon at:
https://hackernoon.com/two-thirds-of-the-top-million-domains-can-still-be-spoofed.
Daily DNS scans of the Tranco top-1M show 67% of mail-receiving domains have no enforced DMARC policy — and the enforcement share keeps falling.
Check more stories related to cybersecurity at:
https://hackernoon.com/c/cybersecurity.
You can also check exclusive content about
#email-security,
#dmarc,
#cybersecurity,
#dns,
#data-analysis,
#email-spoofing,
#dns-security,
#cybersecurity-research, and more.
This story was written by:
@artem-berezin. Learn more about this writer by checking
@artem-berezin's about page,
and for more stories, please visit
hackernoon.com.
We analysed daily DNS snapshots of the Tranco top-1M. Of 659,259 mail-receiving domains, 67.4% publish no enforced DMARC policy, ~96,000 run "monitoring mode" that reports to no one, and the enforcement share is declining — a side effect of the 2024–2025 bulk-sender mandates that made p=none the ceiling.