Two-Thirds of the Top Million Domains Can Still Be Spoofed — Cybersecurity Tech Brief By HackerNoon

Listen in the Podli app 🎧

Follow your favourite podcasts, listen offline and in the car with CarPlay and Android Auto, and always pick up where you left off. Free to try.

This story was originally published on HackerNoon at: https://hackernoon.com/two-thirds-of-the-top-million-domains-can-still-be-spoofed.
Daily DNS scans of the Tranco top-1M show 67% of mail-receiving domains have no enforced DMARC policy — and the enforcement share keeps falling.
Check more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity. You can also check exclusive content about #email-security, #dmarc, #cybersecurity, #dns, #data-analysis, #email-spoofing, #dns-security, #cybersecurity-research, and more.

This story was written by: @artem-berezin. Learn more about this writer by checking @artem-berezin's about page, and for more stories, please visit hackernoon.com.

We analysed daily DNS snapshots of the Tranco top-1M. Of 659,259 mail-receiving domains, 67.4% publish no enforced DMARC policy, ~96,000 run "monitoring mode" that reports to no one, and the enforcement share is declining — a side effect of the 2024–2025 bulk-sender mandates that made p=none the ceiling.