Passive DNS only — MX, TXT, CAA. No scanning, no probing, no service enumeration. Every record parsed per RR and confirmed against at least two independent resolvers. 286 of these domains (41%) publish no DMARC record at all.
| Check | Result | Share |
|---|---|---|
| No DMARC record at all | 286 / 700 | 41% |
| DMARC p=none (detect, deliver anyway) | 156 | 22% |
| DMARC p=quarantine | 161 | 23% |
| DMARC p=reject (blocking) | 97 | 14% |
| No SPF record | 115 | 16% |
| SPF soft-fail (~all) | 227 | 32% |
| SPF hard-fail (-all) | 312 | 45% |
| No CAA record | 690 | 99% |
p=none asks receiving servers to watch and report. It does not ask them to refuse anything. Spoofed mail claiming your domain is still delivered to the inbox — it is just marked, and users have been trained to click through that mark. p=reject is what turns "detect" into "do not deliver".
The path that works, and the order matters: start at p=quarantine with a rua= address, read the aggregate reports until the only senders listed are ones you recognise, then move to p=reject. Only after that tighten SPF from ~all to -all. Deploying -all before the reports are clean is the single most common way a DMARC rollout gets rolled back.
_dmarc.yourdomain.org. IN TXT "v=DMARC1; p=quarantine; rua=mailto:[email protected]"An earlier pass resolved each RR set into one concatenated string and tested for a v=spf1 prefix, so any leading verification record broke the match and the domain came back as "no SPF". A second pass used a 3-second resolver timeout under 48-way concurrency and wrote those timeouts down as "record absent". Between them, 22 of the first 82 contact emails carried a finding that was not true.
All 22 were corrected by email the same day, and this page is generated from the corrected pass: parse per record, confirm with two or more resolvers, and if the answer is not confirmed, publish nothing rather than guess. A number in a report that gets forwarded to an auditor should survive dig.
| Domain | Organization | State | Finding |
|---|---|---|---|
| 211dupage.gov | DuPage County | IL | no DMARC |
| acwdca.gov | Alameda County Water District - ACWD | CA | no DMARC |
| adacountyelections.gov | Ada County Information Technology | ID | no DMARC |
| adamscosheriffms.gov | Adams County Sheriff's Office | MS | no DMARC |
| adamscountyiowa.gov | Adams County Iowa | IA | no DMARC |
| alachuacountyfl.gov | Alachua County BOCC | FL | no DMARC |
| alachuacountyfla.gov | Alachua County BOCC | FL | no DMARC |
| alachuacountyflorida.gov | Alachua County BOCC | FL | no DMARC |
| alamedacountylibraryca.gov | Alameda County Library | CA | no DMARC |
| alertoc.gov | Orange County Sheriff-Coroner Department | CA | no DMARC |
| alleganycountysheriff-ny.gov | Allegany County Sheriff's Office | NY | no DMARC |
| allencountykentucky.gov | Allen County Fiscal Court | KY | no DMARC |
| allencountyohiocsb.gov | Allen County Children Services | OH | no DMARC |
| amherstcountyva.gov | Amherst County VA | VA | no DMARC |
| anokacountybuys.gov | Anoka County | MN | no DMARC |
| anokacountymnservices.gov | Anoka County | MN | no DMARC |
| applingcounty.gov | Appling County Board of Commissioners | GA | no DMARC |
| arapahoedrives.gov | Arapahoe County Clerk Recorder | CO | no DMARC |
| arapahoerecords.gov | Arapahoe County Clerk Recorder | CO | no DMARC |
| arapahoesheriff.gov | Arapahoe Conty | CO | no DMARC |
| bakercosheriffor.gov | baker county | OR | no DMARC |
| bakercounty911or.gov | Baker County | OR | no DMARC |
| bakercountysheriffor.gov | Baker County | OR | no DMARC |
| barrycountymo.gov | Barry County Missouri | MO | no DMARC |
| bartonsheriffks.gov | Barton County Sheriff's Office | KS | no DMARC |
| bastropcounty.gov | Bastrop County | TX | no DMARC |
| bastropcountyhistorical.gov | Bastrop County | TX | no DMARC |
| baxtercountyjsar.gov | Baxter County Juvenile Services | AR | no DMARC |
| baycounty911-mi.gov | Bay County Central Dispatch | MI | no DMARC |
| baysidetx.gov | Town of Bayside | TX | no DMARC |
| bciltransit.gov | County of Boone | IL | no DMARC |
| beaverutahsheriff.gov | Beaver County Sheriffs office | UT | no DMARC |
| bedfordcountyvaes.gov | Bedford County, Virginia | VA | no DMARC |
| bencosoar.gov | Benton County Sheriff's Office | AR | no DMARC |
| bergencountyclerk.gov | Office of the Bergen County Clerk | NJ | no DMARC |
| bibbassessorsga.gov | Macon Bibb County Board of Tax Assessors | GA | no DMARC |
| bibbcosheriffga.gov | Macon-Bibb County Sheriff's Office | GA | no DMARC |
| bouldercountyassessor.gov | Boulder County | CO | no DMARC |
| bouldercountyhhs.gov | Boulder County | CO | no DMARC |
| bouldercountynavigatingdisaster.gov | Boulder County | CO | no DMARC |
Largest concentration of audited domains by state: GA 41, TX 36, MO 33, FL 32, KY 31, TN 31, NC 27, VA 27.
If you run one of these domains, mail us and you get the exact SPF, DMARC, CAA and MX records as they resolve today — free, as text, with no call and no pitch. Enough to hand to whoever holds your DNS.
Don't want to hand your findings to someone else? The same audit for your own domain, with the exact records to paste and a re-check after your provider applies them: **$49**, delivered by email within 24h. Rollout by us: $199.