New Hampshire K-12 Email Security Intelligence:
DNS Authentication Profiling of 320 School District LEAs

Lokentra Research Team
Lokentra U.S. Email Security Index (ESI) — State Intelligence Series
April 22, 2026
research@monitorworkspace.com • monitorworkspace.com/scorecard

Abstract

We present DNS email security profiling for 320 K-12 LEAs in New Hampshire, of which 59 have active domains (18.4% coverage). Domains were scored on the Lokentra 100-point Email Security Index (ESI) rubric (SPF 30 pts + DKIM 30 pts + DMARC 40 pts). New Hampshire K-12 districts achieve an average ESI score of 45.3/100, with 20.3% earning Grade A or B (strong posture) and 37.3% receiving Grade F (minimal authentication). Only 47.5% have any DMARC record, and just 15.3% have DMARC at an enforcement level (quarantine or reject) — leaving 52.5% of districts fully vulnerable to email domain spoofing. This report provides entity-level data for all 59 scored domains including provider classification, authentication status, and ESI score, sourced from NCES CCD 2024-2025 and live DNS resolution conducted April 22, 2026.

Keywords: New Hampshire, K-12 email security, DMARC, SPF, school district cybersecurity, DNS authentication, Google Workspace, education technology

1. Dataset Overview

Table 1. New Hampshire K-12 Dataset Summary
MetricValue
Total K-12 LEAs in state320
Regular school districts183
Charter LEAs31
Other LEA types (state-operated, regional, etc.)106
LEAs with active internet domain59 (18.4%)
Domains DNS-profiled59
Data freshness (NCES CCD)2024-2025 school year
DNS scan dateApril 22, 2026

2. The Human Impact: Populations at Risk

To estimate human exposure, NCES national averages are applied to CCD 2024-2025 operational school counts: 381 students per school, 51 staff per school, and 2 parents or guardians per student. New Hampshire K-12 districts collectively operate approximately 496 schools.

Table 2. Estimated Population Exposure from K-12 Email Security Gaps — New Hampshire
PopulationTotal in DatasetAt Risk (No DMARC, 52.5%)Critically Exposed (Grade F, 37.3%)
Students188,97699,21270,488
Parents and guardians377,952198,424140,976
Staff and educators25,29613,2809,435
Total people592,224310,917220,899

Estimates based on NCES national averages. Individual district enrollment data can be linked via NCES LEAID for precise counts.

3. Authentication Findings

3.1 Protocol Adoption

Table 3. Email Authentication Protocol Adoption — New Hampshire K-12
ProtocolNew HampshireNational K-12 (ESI)vs. National
SPF (any configuration)78.0%79.7%-1.7pp
DKIM (key published)52.5%59.6%-7.1pp
DMARC (any policy)47.5%55.5%-8.0pp
DMARC at enforcement (quarantine/reject)15.3%~21.0%-5.7pp
DMARC at reject (full enforcement)6.8%~12.2%-5.4pp
No MX records (not receiving email)10.2%~10.0%+0.2pp

3.2 ESI Grade Distribution

Table 4. ESI Score Grade Distribution — New Hampshire K-12
GradeScoreDistrictsShareInterpretation
A90–10046.8%Full enforcement
B70–89813.6%Strong posture
C50–691932.2%Partial protection
D30–49610.2%Weak configuration
F0–292237.3%Minimal/no authentication
Average score45.3 / 100

3.3 Email Provider Distribution

Table 5. Email Provider Distribution — New Hampshire K-12 (top providers)
ProviderDistrictsShare
Google Workspace4067.8%
Microsoft 36535.1%
GoDaddy23.4%
Barracuda11.7%
Fortinet11.7%

4. District-Level Data

4.1 Top Performing Districts (Best ESI Scores)

Table 6. Top 15 New Hampshire K-12 Districts by ESI Score
DistrictDomainCountyProviderSPFDKIMDMARC PolicyScoreGrade
Spark Academy of Advanced Technologies sparkacademynh.org Hillsborough County Google Workspace ✓ ✓ reject 100 A
Londonderry School District londonderry.org Rockingham County Microsoft 365 ✓ ✓ reject 100 A
Academy for Science and Design Charter School asdnh.org Hillsborough County Google Workspace ✓ ✓ reject 95 A
CSI Charter School csicharterschool.org Merrimack County Google Workspace ✓ ✓ quarantine 90 A
Tamworth School District sau13.org Carroll County — ✓ ✓ quarantine 85 B
Hampstead School District hampsteadschools.net Rockingham County Google Workspace ✓ ✓ quarantine 85 B
Windsor School District hdsd.org Hillsborough County Google Workspace ⚠ ✓ reject 85 B
Portsmouth School District cityofportsmouth.com Rockingham County Microsoft 365 ✓ ✓ quarantine 83 B
Timberlane Regional School District timberlane.net Rockingham County Microsoft 365 ⚠ ✓ quarantine 75 B
Fremont School District sau83.org Rockingham County Google Workspace ✓ ✓ none 70 B
Mountain Village Charter School mountainvillagecharterschool.org Grafton County — ✓ ✓ none 70 B
Lionheart Classical Academy Chartered Public School lionheartclassical.org Hillsborough County Barracuda ✓ ✓ none 70 B
Virtual Learning Academy Charter School vlacs.org Rockingham County Google Workspace ✓ ✓ none 68 C
Ledyard Charter School ledyardcharterschool.org Grafton County Google Workspace ✓ ✓ none 65 C
Great Bay Charter School gbecs.org Rockingham County Google Workspace ✓ ✓ none 65 C

4.2 Districts Most in Need of Improvement (Lowest ESI Scores)

Table 7. Bottom 15 New Hampshire K-12 Districts by ESI Score
DistrictDomainCountyProviderSPFDKIMDMARC PolicyScoreGrade
Strong Foundations Charter School strongfoundationsnh.org Merrimack County — ✗ ✗ — 0 F
Contoocook Valley School District convalsd.net Hillsborough County GoDaddy ✗ ✗ — 0 F
Gilmanton School District gilmantonschool.org Belknap County GoDaddy ✗ ✗ — 0 F
Making Community Connections Charter School mc2school.org Cheshire County Google Workspace ✗ ✗ — 0 F
Gate City Charter School For the Arts gatecitycharterschool.org Hillsborough County — ✗ ✗ — 0 F
The Founders Academy Charter School thefoundersacademy.org Hillsborough County — ✗ ✗ — 0 F
Windham Academy Public Charter School windhamacademy.net Rockingham County Google Workspace ✗ ✗ — 0 F
Strafford School District sites.google.com Strafford County — ✗ ✗ — 0 F
Nottingham School District nottingham.k12.nh.us Rockingham County Google Workspace ✗ ✗ — 0 F
Mascoma Valley Regional School District mascomaschools.org Grafton County — ✗ ✗ — 0 F
North Country Charter Academy northcountrycharteracademy.com Grafton County — ✓ ✗ — 25 F
Surry Village Charter School surryvillagecharterschool.org Cheshire County Google Workspace ✓ ✗ — 25 F
Seacoast Charter School seacoastcharterschool.org Strafford County Google Workspace ✓ ✗ — 25 F
Hooksett School District sau15.net Merrimack County Google Workspace ✓ ✗ — 25 F
Milton School District sau64.org Strafford County Google Workspace ✓ ✗ — 25 F

4.3 County-Level Summary (Top 10 Counties by District Count)

Table 8. New Hampshire County Distribution
CountyDistrictsWebsite Coverage
Rockingham County5925.4%
Hillsborough County4827.1%
Grafton County4723.4%
Merrimack County3622.2%
Cheshire County2412.5%
Carroll County2450.0%
Coos County2222.7%
Sullivan County214.8%
Strafford County2025.0%
Belknap County1926.3%

5. Policy Implications

These findings identify specific, actionable gaps in New Hampshire's K-12 email security posture. The 52.5% DMARC gap represents districts that can be impersonated by any sender, enabling phishing campaigns targeting parents, students, and educators with no authentication failure. Key observations:

6. Data Availability

The full New Hampshire K-12 dataset — 320 entities with NCES CCD enrichment (phone, address, grade span, school count, LEAID) and DNS authentication profiles — is available as part of the Lokentra ESI State Pack.

Table 9. Licensing Tiers
TierScopeSuggested Use
State Pack: New HampshireAll 320 K-12 LEAs, full DNS profile + CCD enrichmentRegional studies, state policy, outreach
K-12 NationalAll 50 states, 20,021+ K-12 LEAsNational K-12 cybersecurity research
Full Registry801,359+ entities across all sectorsComprehensive multi-sector research
API + UpdatesQuarterly re-scan, REST APILongitudinal studies, live dashboards

Contact: research@monitorworkspace.com — Free demo at monitorworkspace.com/scorecard

Citation: Lokentra Research Team (2026). New Hampshire K-12 Email Security Intelligence: DNS Authentication Profiling of 320 School District LEAs. Lokentra U.S. Email Security Index (ESI) — State Intelligence Series. https://lokentra-site.web.app/research/states/nh-k12-paper.html

Data sources: NCES Common Core of Data (CCD) 2024-2025; DNS records resolved via Google Public DNS (8.8.8.8) and Cloudflare (1.1.1.1). All entity data derived from publicly accessible government registries.

National baseline figures from Lokentra U.S. Education Sector Email Security Intelligence Dataset (March 2026). See education-dataset-paper.html for full methodology.