Domain Security Board

Live observatory of internet security hygiene

Powered by DefendFlow Radar
Start monitoring

Search Historical Scans

Next Security Scan Batch

Scheduled: 12:00 UTC

Next batch starts in --:--:--

Visitor requests are limited to 5 domains per batch.

Domains to be scanned:

fonts.google.com cloudinary.com imgix.net imagekit.io akamai.com fastly.com netlify.com vercel.com heroku.com aws.amazon.com
Internet Security Hygiene — Current Hour
Sampling from top domains + visitor requests · Updated hourly
Updated at 11:00 UTC
Full findings are retained here for the current hour; Radar keeps the last 24 hours.
This hour's snapshot (10 domains scanned)
  • Severity mix critical 5, high 10, medium 22, low 10
  • DMARC enforced 4/10
  • Missing CAA 7/10
  • OAuth risk present 1/10
  • Most common findings missing_mta_sts, missing_caa, missing_dkim
Trend (last 7 days vs prior 7 days, scanned sample)
  • Avg score 66.2 (+1.1)
  • DMARC enforced 57% (+2%)
  • MTA-STS adoption 13% (+3%)
  • CAA adoption 21% (+3%)
  • OAuth risk rate 63% (+1%)
  • Avg high severity 1.16 (-0.01)
Based on domains scanned in each window (top domains + requests).
Movers / Newly observed
  • Most increased dns_config (+5%), missing_bimi (+3%), phishing_risks (+1%)
  • Most decreased missing_mta_sts (-3%), weak_dmarc_quarantine (-3%), missing_caa (-3%)
  • New in 24h none yet
Based on our observations across the scanned sample.
nuget.org
88/100
Grade A
Good posture, but avoidable high-risk gaps
  • DMARC: reject (pct 100) · SPF yes · DKIM no
  • CAA: present · DNSSEC: disabled
  • Phishing risks: 1 high · 0 medium
Scanned: 2026-09-20 11:01 UTC
maven.org
73/100
Grade B
High-risk findings detected
  • DMARC: reject (pct 100) · SPF yes · DKIM yes
  • CAA: missing · DNSSEC: disabled
  • Phishing risks: 1 high · 1 medium
Scanned: 2026-09-20 11:00 UTC
cocoapods.org
70/100
Grade B
High-risk findings detected
  • DMARC: none (pct 100) · SPF yes · DKIM no
  • CAA: missing · DNSSEC: disabled
  • MTA-STS: missing · BIMI: missing
Scanned: 2026-09-20 11:01 UTC
fontawesome.com
64/100
Grade C+
High-risk findings detected
  • DMARC: quarantine (pct 100) · SPF yes · DKIM no
  • CAA: missing · DNSSEC: disabled
  • Phishing risks: 1 high · 0 medium
Scanned: 2026-09-20 11:01 UTC
cdnjs.com
63/100
Grade C+
Critical risks detected
  • DMARC: missing · SPF yes · DKIM yes
  • CAA: present · DNSSEC: enabled
  • Phishing risks: 1 high · 0 medium
Scanned: 2026-09-20 11:01 UTC
crates.io
60/100
Grade C+
High-risk findings detected
  • DMARC: none (pct 100) · SPF yes · DKIM no
  • CAA: missing · DNSSEC: disabled
  • MTA-STS: missing · BIMI: missing
Scanned: 2026-09-20 11:01 UTC
unpkg.com
55/100
Grade C
Critical risks detected
  • DMARC: missing · SPF yes · DKIM yes
  • CAA: missing · DNSSEC: disabled
  • MTA-STS: missing · BIMI: missing
Scanned: 2026-09-20 11:01 UTC
pub.dev
38/100
Grade D
Critical risks detected
  • DMARC: reject (pct 100) · SPF yes · DKIM no
  • CAA: present · DNSSEC: disabled
  • Phishing risks: 1 high · 0 medium
Scanned: 2026-09-20 11:01 UTC
bootstrapcdn.com
20/100
Grade D
Critical risks detected
  • DMARC: missing · SPF no · DKIM no
  • CAA: missing · DNSSEC: disabled
  • MTA-STS: missing · BIMI: missing
Scanned: 2026-09-20 11:01 UTC
jsdelivr.net
14/100
Grade D
Critical risks detected
  • DMARC: missing · SPF no · DKIM no
  • CAA: missing · DNSSEC: disabled
  • Phishing risks: 1 high · 1 medium
Scanned: 2026-09-20 11:01 UTC