Кто на чём шлёт и принимает почту: измеряем email-инфраструктуру 660 тысяч доменов из Tranco top-1M

Анализ DNS-снэпшота OpenINTEL за 2026-01-01 TL;DR. Используя ежедневные DNS-снэпшоты OpenINTEL поверх списка Tranco top-1M, мы собрали ландшафт email-инфраструктуры публичного веба на 1 января 2026 года. MX-записи опубликовали 660 114 доменов, SPF — 616 352, DMARC — 431 133. Дуополия Google Workspace (21.7%) + Microsoft 365 (16.3%) занимает суммарно ~38% receiving-стороны — заметно меньше, чем принято считать в популярных обзорах. На outbound-стороне Amazon SES вышел вперёд по числу авторизованных доменов (5.86%), обогнав SendGrid (4.66%). DMARC опубликован у двух третей SPF-доменов, но 19% всех DMARC-записей — это пустая v=DMARC1; p=none; без отчётов: формальная галочка, а не защита.

https://habr.com/ru/articles/1030770/

#email #DMARC #SPF #MX #OpenINTEL #Tranco #deliverability #emailаутентификация #DNSаналитика #ESP

A couple of weeks ago, a new domain name made it's appearance on the domain name ranking of #Cloudflare. Shortly later, the company redacted the name, to avoid promoting a #botnet. Recently, the domain name disappeared from Cloudflare's #Radar. A brief check shows that the domain still exists and is active. Is it simply not resolved by Cloudflare's #DNS resolvers? Or did the company prevent that this domain name makes it into their feeds?

#malware #DDoS #Tranco

TIL the Tranco domain ranking data is available as a public data source in BigQuery - so you can do e.g.:

```
select
domain,
rank
from `tranco.daily.daily`
where date = date_sub(current_date(), interval 1 day)
and domain in ("bbc.co.uk", "bbc.com")
order by rank asc
```
https://tranco-list.eu

#BigQuery #Tranco #DomainRanking

Possibly of interest to my followers: I created a #Perl interface to the #Tranco domain list:

https://metacpan.org/pod/Data::Tranco

Version 0.02 with some more features will be uploaded later today!

#Unit42 researchers have been tracking a widespread malicious #JavaScript (JS) injection campaign that redirects victims to malicious content such as adware & scam pages. This threat was active throughout 2022 & continued even in 2023.

They detected the injected JS code on more than 51,000 websites, including hundreds of websites in Tranco’s top 1 million website ranking list. The presence of affected websites in #Tranco indicates that this campaign could have impacted a large number of people.