Oregon K-12 Email Security Intelligence:
DNS Authentication Profiling of 223 School District LEAs

Lokentra Research Team

Lokentra U.S. Email Security Index (ESI) — State Intelligence Series

April 22, 2026

research@monitorworkspace.com • monitorworkspace.com/scorecard

Abstract

We present DNS email security profiling for 223 K-12 LEAs in Oregon, of which 207 have active domains (92.8% coverage). Domains were scored on the Lokentra 100-point Email Security Index (ESI) rubric (SPF 30 pts + DKIM 30 pts + DMARC 40 pts). Oregon K-12 districts achieve an average ESI score of 60.7/100, with 44.9% earning Grade A or B (strong posture) and 19.8% receiving Grade F (minimal authentication). Only 67.6% have any DMARC record, and just 44.9% have DMARC at an enforcement level (quarantine or reject) — leaving 32.4% of districts fully vulnerable to email domain spoofing. This report provides entity-level data for all 207 scored domains including provider classification, authentication status, and ESI score, sourced from NCES CCD 2024-2025 and live DNS resolution conducted April 22, 2026.

Keywords: Oregon, K-12 email security, DMARC, SPF, school district cybersecurity, DNS authentication, Google Workspace, education technology

1. Dataset Overview

Table 1. Oregon K-12 Dataset Summary
Metric	Value
Total K-12 LEAs in state	223
Regular school districts	174
Charter LEAs	25
Other LEA types (state-operated, regional, etc.)	24
LEAs with active internet domain	207 (92.8%)
Domains DNS-profiled	207
Data freshness (NCES CCD)	2024-2025 school year
DNS scan date	April 22, 2026

2. The Human Impact: Populations at Risk

To estimate human exposure, NCES national averages are applied to CCD 2024-2025 operational school counts: 381 students per school, 51 staff per school, and 2 parents or guardians per student. Oregon K-12 districts collectively operate approximately 1,286 schools.

Table 2. Estimated Population Exposure from K-12 Email Security Gaps — Oregon
Population	Total in Dataset	At Risk (No DMARC, 32.4%)	Critically Exposed (Grade F, 19.8%)
Students	489,966	158,748	97,013
Parents and guardians	979,932	317,497	194,026
Staff and educators	65,586	21,249	12,986
Total people	1,535,484	497,496	304,025

Estimates based on NCES national averages. Individual district enrollment data can be linked via NCES LEAID for precise counts.

3. Authentication Findings

3.1 Protocol Adoption

Table 3. Email Authentication Protocol Adoption — Oregon K-12
Protocol	Oregon	National K-12 (ESI)	vs. National
SPF (any configuration)	88.9%	79.7%	+9.2pp
DKIM (key published)	57.5%	59.6%	-2.1pp
DMARC (any policy)	67.6%	55.5%	+12.1pp
DMARC at enforcement (quarantine/reject)	44.9%	~21.0%	+23.9pp
DMARC at reject (full enforcement)	26.6%	~12.2%	+14.4pp
No MX records (not receiving email)	6.3%	~10.0%	-3.7pp

3.2 ESI Grade Distribution

Table 4. ESI Score Grade Distribution — Oregon K-12
Grade	Score	Districts	Share	Interpretation
A	90–100	39	18.8%	Full enforcement
B	70–89	54	26.1%	Strong posture
C	50–69	55	26.6%	Partial protection
D	30–49	18	8.7%	Weak configuration
F	0–29	41	19.8%	Minimal/no authentication
Average score		60.7 / 100

3.3 Email Provider Distribution

Table 5. Email Provider Distribution — Oregon K-12 (top providers)
Provider	Districts	Share
Google Workspace	147	71.0%
Microsoft 365	27	13.0%
Barracuda	9	4.3%
Mimecast	1	0.5%
Proofpoint	1	0.5%
GoDaddy	1	0.5%

4. District-Level Data

4.1 Top Performing Districts (Best ESI Scores)

Table 6. Top 15 Oregon K-12 Districts by ESI Score
District	Domain	County	Provider	SPF	DKIM	DMARC Policy	Score	Grade
Gervais SD 1	`gervais.k12.or.us`	Marion County	—	✓	✓	reject	100	A
Douglas ESD	`douglasesd.k12.or.us`	Douglas County	Microsoft 365	✓	✓	reject	100	A
InterMountain ESD	`imesd.k12.or.us`	Umatilla County	Microsoft 365	✓	✓	reject	100	A
Burnt River SD 30J	`burntriver.k12.or.us`	Baker County	Google Workspace	✓	✓	reject	100	A
Central Point SD 6	`district6.org`	Jackson County	Google Workspace	✓	✓	reject	100	A
Camas Valley SD 21J	`camasvalley.k12.or.us`	Douglas County	Microsoft 365	✓	✓	reject	100	A
Elgin SD 23	`elgin.k12.or.us`	Union County	Google Workspace	✓	✓	reject	100	A
Elkton SD 34	`elkton.k12.or.us`	Douglas County	Microsoft 365	✓	✓	reject	100	A
Gresham-Barlow SD 10J	`gresham.k12.or.us`	Multnomah County	Google Workspace	✓	✓	reject	100	A
Glendale SD 77	`glendale.k12.or.us`	Douglas County	Microsoft 365	✓	✓	reject	100	A
Hermiston SD 8	`hermiston.k12.or.us`	Umatilla County	Google Workspace	✓	✓	reject	100	A
Glide SD 12	`glide.k12.or.us`	Douglas County	Microsoft 365	✓	✓	reject	100	A
La Grande SD 1	`lagrandesd.org`	Union County	Google Workspace	✓	✓	reject	100	A
Morrow SD 1	`morrow.k12.or.us`	Morrow County	Google Workspace	✓	✓	reject	100	A
North Powder SD 8J	`npowder.k12.or.us`	Union County	Google Workspace	✓	✓	reject	100	A

4.2 Districts Most in Need of Improvement (Lowest ESI Scores)

Table 7. Bottom 15 Oregon K-12 Districts by ESI Score
District	Domain	County	Provider	SPF	DKIM	DMARC Policy	Grade
Yamhill Carlton SD 1	`ycsd.k12.or.us`	Yamhill County	—	✗	✗	—	F
Douglas County SD 15	`dayscreekschools.com`	Douglas County	—	✗	✗	—	F
Drewsey SD 13	`sites.google.com`	Harney County	—	✗	✗	—	F
Forest Grove SD 15	`fgsdk12.org`	Washington County	—	✗	✗	—	F
Frenchglen SD 16	`frenchglen.school`	Harney County	—	✗	✗	—	F
Fossil SD 21J	`fossilschools.com`	Wheeler County	Google Workspace	✗	✗	—	F
Harney County SD 4	`harneyuh.k12.or.us`	Harney County	—	✗	✗	—	F
John Day SD 3	`grantsd3.schoolinsites.com`	Grant County	—	✗	✗	—	F
Lake Oswego SD 7J	`losdschools.org`	Clackamas County	Google Workspace	✗	✗	—	F
Monument SD 8	`monumentschool.com`	Grant County	—	✗	✗	—	F
Paisley SD 11	`paisleyschooldistrict.com`	Lake County	Google Workspace	✗	✗	—	F
Port Orford-Langlois SD 2CJ	`2cj.com`	Curry County	Google Workspace	✗	✗	—	F
Riddle SD 70	`riddleschooldistrict.com`	Douglas County	—	✗	✗	—	F
Oregon Trail SD 46	`oregontrailschools.com`	Clackamas County	GoDaddy	✗	✗	—	F
Tigard-Tualatin SD 23J	`ttsdschools.org`	Washington County	Google Workspace	✗	✗	—	F

4.3 County-Level Summary (Top 10 Counties by District Count)

Table 8. Oregon County Distribution
County	Districts	Website Coverage
Marion County	18	66.7%
Lane County	17	100.0%
Douglas County	15	100.0%
Malheur County	11	90.9%
Harney County	11	72.7%
Jackson County	11	100.0%
Umatilla County	11	100.0%
Clackamas County	11	100.0%
Multnomah County	9	100.0%
Linn County	8	100.0%

5. Policy Implications

These findings identify specific, actionable gaps in Oregon's K-12 email security posture. The 32.4% DMARC gap represents districts that can be impersonated by any sender, enabling phishing campaigns targeting parents, students, and educators with no authentication failure. Key observations:

Immediate risk: 41 districts (19.8%) have Grade F scores, indicating minimal or no email authentication. These represent the highest-priority remediation targets.
Mid-tier stagnation: 55 districts (26.6%) are in the C range — typically have SPF but no DMARC or weak DMARC (p=none). Upgrading to p=quarantine would move them to B without infrastructure changes.
Provider leverage: Google Workspace (used by 71.0% of scored districts) provides automated SPF/DKIM configuration. Districts on Google Workspace with Grade F scores have misconfigured or missing DMARC — a free and simple fix.

6. Data Availability

The full Oregon K-12 dataset — 223 entities with NCES CCD enrichment (phone, address, grade span, school count, LEAID) and DNS authentication profiles — is available as part of the Lokentra ESI State Pack.

Table 9. Licensing Tiers
Tier	Scope	Suggested Use
State Pack: Oregon	All 223 K-12 LEAs, full DNS profile + CCD enrichment	Regional studies, state policy, outreach
K-12 National	All 50 states, 20,021+ K-12 LEAs	National K-12 cybersecurity research
Full Registry	801,359+ entities across all sectors	Comprehensive multi-sector research
API + Updates	Quarterly re-scan, REST API	Longitudinal studies, live dashboards

Contact: research@monitorworkspace.com — Free demo at monitorworkspace.com/scorecard

Citation: Lokentra Research Team (2026). Oregon K-12 Email Security Intelligence: DNS Authentication Profiling of 223 School District LEAs. Lokentra U.S. Email Security Index (ESI) — State Intelligence Series. https://lokentra-site.web.app/research/states/or-k12-paper.html

Data sources: NCES Common Core of Data (CCD) 2024-2025; DNS records resolved via Google Public DNS (8.8.8.8) and Cloudflare (1.1.1.1). All entity data derived from publicly accessible government registries.

National baseline figures from Lokentra U.S. Education Sector Email Security Intelligence Dataset (March 2026). See education-dataset-paper.html for full methodology.

Oregon K-12 Email Security Intelligence:DNS Authentication Profiling of 223 School District LEAs