Two-Thirds of the Top Million Domains Can Still Be Spoofed

This story was originally published on HackerNoon at: https://hackernoon.com/two-thirds-of-the-top-million-domains-can-still-be-spoofed. Daily DNS scans of the Tranco top-1M show 67% of mail-receiving domains have no enforced DMARC policy — and the enforcement share keeps falling. Check more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity. You can also check exclusive content about #email-security, #dmarc, #cybersecurity, #dns, #data-analysis, #email-spoofing, #dns-security, #cybersecurity-research, and more. This story was written by: @artem-berezin. Learn more about this writer by checking @artem-berezin's about page, and for more stories, please visit hackernoon.com. We analysed daily DNS snapshots of the Tranco top-1M. Of 659,259 mail-receiving domains, 67.4% publish no enforced DMARC policy, ~96,000 run "monitoring mode" that reports to no one, and the enforcement share is declining — a side effect of the 2024–2025 bulk-sender mandates that made p=none the ceiling.