Episode
Two-Thirds of the Top Million Domains Can Still Be Spoofed
- Published
- Jul 22, 2026
- Duration seconds
- 763
- Processing state
not_requested- Canonical source
- https://share.transistor.fm/s/25ec4370
Actions
POST https://stenobird.com/v1/public/podcasts/cybersecurity-tech-brief-by-hackernoon-6365646/episodes/two-thirds-of-the-top-million-domains-can-still-be-spoofed/transcription-requests
Idempotently request low-priority transcript generation for this episode.GET https://stenobird.com/podcast/cybersecurity-tech-brief-by-hackernoon-6365646/two-thirds-of-the-top-million-domains-can-still-be-spoofed.md
Read the agent-friendly Markdown representation of this episode resource.
Summary
This story was originally published on HackerNoon at: https://hackernoon.com/two-thirds-of-the-top-million-domains-can-still-be-spoofed . Daily DNS scans of the Tranco top-1M show 67% of mail-receiving domains have no enforced DMARC policy — and the enforcement share keeps falling. Check more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity . You can also check exclusive content about #email-security , #dmarc , #cybersecurity , #dns , #data-analysis , #email-spoofing , #dns-security , #cybersecurity-research , and more. This story was written by: @artem-berezin . Learn more about this writer by checking @artem-berezin's about page, and for more stories, please visit hackernoon.com . We analysed daily DNS snapshots of the Tranco top-1M. Of 659,259 mail-receiving domains, 67.4% publish no enforced DMARC policy, ~96,000 run "monitoring mode" that reports to no one, and the enforcement share is declining — a side effect of the 2024–2025 bulk-sender mandates that made p=none the ceiling.