# Two-Thirds of the Top Million Domains Can Still Be Spoofed

Page: https://stenobird.com/podcast/cybersecurity-tech-brief-by-hackernoon-6365646/two-thirds-of-the-top-million-domains-can-still-be-spoofed
Text version: https://stenobird.com/podcast/cybersecurity-tech-brief-by-hackernoon-6365646/two-thirds-of-the-top-million-domains-can-still-be-spoofed.md
Podcast: [Cybersecurity Tech Brief By HackerNoon](https://stenobird.com/podcast/cybersecurity-tech-brief-by-hackernoon-6365646)
Published: 2026-07-22T16:01:17+00:00
Episode link: https://share.transistor.fm/s/25ec4370
Audio file: https://media.transistor.fm/25ec4370/dc23f777.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/cybersecurity-tech-brief-by-hackernoon-6365646/episodes/two-thirds-of-the-top-million-domains-can-still-be-spoofed
Duration seconds: 763

## Resource

This story was originally published on HackerNoon at: https://hackernoon.com/two-thirds-of-the-top-million-domains-can-still-be-spoofed . Daily DNS scans of the Tranco top-1M show 67% of mail-receiving domains have no enforced DMARC policy — and the enforcement share keeps falling. Check more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity . You can also check exclusive content about #email-security , #dmarc , #cybersecurity , #dns , #data-analysis , #email-spoofing , #dns-security , #cybersecurity-research , and more. This story was written by: @artem-berezin . Learn more about this writer by checking @artem-berezin's about page, and for more stories, please visit hackernoon.com . We analysed daily DNS snapshots of the Tranco top-1M. Of 659,259 mail-receiving domains, 67.4% publish no enforced DMARC policy, ~96,000 run "monitoring mode" that reports to no one, and the enforcement share is declining — a side effect of the 2024–2025 bulk-sender mandates that made p=none the ceiling.

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/cybersecurity-tech-brief-by-hackernoon-6365646/episodes/two-thirds-of-the-top-million-domains-can-still-be-spoofed/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/cybersecurity-tech-brief-by-hackernoon-6365646/two-thirds-of-the-top-million-domains-can-still-be-spoofed.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.