SecurityHacker Noonabout 9 hours ago
Two-Thirds of Top Million Domains Spoofable
9 min read
A July 17, 2026 measurement of the Tranco top-1M found 67.4% of 659,259 mail-receiving domains lack an enforced DMARC policy. Only 215,021 domains enforce quarantine or reject. The enforcement share fell 0.44 percentage points in 30 days. Bulk-sender mandates from Google and Microsoft drove DMARC adoption but at p=none, which offers no spoofing protection.
Level
Hype check
Tap to vote and see what everyone thinks.
