We present DNS email security profiling for 105 K-12 LEAs in South Carolina, of which 82 have active domains (78.1% coverage). Domains were scored on the Lokentra 100-point Email Security Index (ESI) rubric (SPF 30 pts + DKIM 30 pts + DMARC 40 pts). South Carolina K-12 districts achieve an average ESI score of 63.1/100, with 50.0% earning Grade A or B (strong posture) and 13.4% receiving Grade F (minimal authentication). Only 65.9% have any DMARC record, and just 48.8% have DMARC at an enforcement level (quarantine or reject) — leaving 34.1% of districts fully vulnerable to email domain spoofing. This report provides entity-level data for all 82 scored domains including provider classification, authentication status, and ESI score, sourced from NCES CCD 2024-2025 and live DNS resolution conducted April 22, 2026.
| Metric | Value |
|---|---|
| Total K-12 LEAs in state | 105 |
| Regular school districts | 83 |
| Charter LEAs | 3 |
| Other LEA types (state-operated, regional, etc.) | 19 |
| LEAs with active internet domain | 82 (78.1%) |
| Domains DNS-profiled | 82 |
| Data freshness (NCES CCD) | 2024-2025 school year |
| DNS scan date | April 22, 2026 |
To estimate human exposure, NCES national averages are applied to CCD 2024-2025 operational school counts: 381 students per school, 51 staff per school, and 2 parents or guardians per student. South Carolina K-12 districts collectively operate approximately 1,277 schools.
| Population | Total in Dataset | At Risk (No DMARC, 34.1%) | Critically Exposed (Grade F, 13.4%) |
|---|---|---|---|
| Students | 486,537 | 165,909 | 65,195 |
| Parents and guardians | 973,074 | 331,818 | 130,391 |
| Staff and educators | 65,127 | 22,208 | 8,727 |
| Total people | 1,524,738 | 519,935 | 204,314 |
Estimates based on NCES national averages. Individual district enrollment data can be linked via NCES LEAID for precise counts.
| Protocol | South Carolina | National K-12 (ESI) | vs. National |
|---|---|---|---|
| SPF (any configuration) | 89.0% | 79.7% | +9.3pp |
| DKIM (key published) | 68.3% | 59.6% | +8.7pp |
| DMARC (any policy) | 65.9% | 55.5% | +10.4pp |
| DMARC at enforcement (quarantine/reject) | 48.8% | ~21.0% | +27.8pp |
| DMARC at reject (full enforcement) | 13.4% | ~12.2% | +1.2pp |
| No MX records (not receiving email) | 3.7% | ~10.0% | -6.3pp |
| Grade | Score | Districts | Share | Interpretation |
|---|---|---|---|---|
| A | 90–100 | 19 | 23.2% | Full enforcement |
| B | 70–89 | 22 | 26.8% | Strong posture |
| C | 50–69 | 17 | 20.7% | Partial protection |
| D | 30–49 | 13 | 15.9% | Weak configuration |
| F | 0–29 | 11 | 13.4% | Minimal/no authentication |
| Average score | 63.1 / 100 | |||
| Provider | Districts | Share |
|---|---|---|
| Microsoft 365 | 32 | 39.0% |
| Google Workspace | 31 | 37.8% |
| Proofpoint | 4 | 4.9% |
| Barracuda | 4 | 4.9% |
| Sophos | 2 | 2.4% |
| Fortinet | 1 | 1.2% |
| District | Domain | County | Provider | SPF | DKIM | DMARC Policy | Score | Grade |
|---|---|---|---|---|---|---|---|---|
f1s.org |
Florence County | Google Workspace | ✓ | ✓ | reject | 100 | A | |
lcsd56.org |
Laurens County | Google Workspace | ✓ | ✓ | reject | 100 | A | |
oconee.k12.sc.us |
Oconee County | Google Workspace | ✓ | ✓ | reject | 100 | A | |
spart1.org |
Spartanburg County | Google Workspace | ✓ | ✓ | reject | 100 | A | |
spart5.net |
Spartanburg County | Google Workspace | ✓ | ✓ | reject | 100 | A | |
spart6.org |
Spartanburg County | Google Workspace | ✓ | ✓ | reject | 100 | A | |
clarendoncsd.org |
Clarendon County | Google Workspace | ✓ | ✓ | reject | 100 | A | |
acsd3.org |
Anderson County | Proofpoint | ✓ | ✓ | reject | 98 | A | |
scgsah.org |
Greenville County | Proofpoint | ✓ | ✓ | reject | 95 | A | |
doc.sc.gov |
York County | Microsoft 365 | ✓ | ✓ | quarantine | 90 | A | |
acpsd.net |
Aiken County | Microsoft 365 | ✓ | ✓ | quarantine | 90 | A | |
anderson5.net |
Anderson County | Barracuda | ✓ | ✓ | quarantine | 90 | A | |
greenville.k12.sc.us |
Greenville County | Google Workspace | ✓ | ✓ | quarantine | 90 | A | |
newberry.k12.sc.us |
Newberry County | Microsoft 365 | ✓ | ✓ | quarantine | 90 | A | |
lexington4.net |
Lexington County | Microsoft 365 | ✓ | ✓ | quarantine | 90 | A |
| District | Domain | County | Provider | SPF | DKIM | DMARC Policy | Score | Grade |
|---|---|---|---|---|---|---|---|---|
dorchester4.k12.sc.us |
Dorchester County | — | ✗ | ✗ | — | 0 | F | |
barnwell45.org |
Barnwell County | — | ✗ | ✗ | — | 0 | F | |
ccpsonline.net |
Calhoun County | Google Workspace | ✗ | ✗ | — | 0 | F | |
leeschooldistrictsc.org |
Lee County | — | ✗ | ✗ | — | 0 | F | |
rock-hill.k12.sc.us |
York County | Microsoft 365 | ✗ | ✗ | — | 0 | F | |
spartanburg7.org |
Spartanburg County | GoDaddy | ✗ | ✗ | — | 0 | F | |
anderson2.org |
Anderson County | Google Workspace | ✓ | ✗ | — | 25 | F | |
ccsdschools.com |
Charleston County | Google Workspace | ✓ | ✗ | — | 25 | F | |
beaufortschools.net |
Beaufort County | — | ✓ | ✗ | — | 25 | F | |
chester.k12.sc.us |
Chester County | Microsoft 365 | ✓ | ✗ | — | 25 | F | |
ecsd.edgefield.k12.sc.us |
Edgefield County | — | ✓ | ✗ | — | 25 | F | |
scsdb.org |
Spartanburg County | Microsoft 365 | ✓ | ✗ | — | 30 | D | |
chesterfieldschools.org |
Chesterfield County | Microsoft 365 | ✓ | ✗ | — | 30 | D | |
flo5.k12.sc.us |
Florence County | Microsoft 365 | ✓ | ✗ | — | 30 | D | |
dillon3.k12.sc.us |
Dillon County | Microsoft 365 | ✓ | ✗ | — | 30 | D |
| County | Districts | Website Coverage |
|---|---|---|
| Spartanburg County | 11 | 72.7% |
| Anderson County | 7 | 71.4% |
| Richland County | 7 | 85.7% |
| Lexington County | 6 | 83.3% |
| York County | 5 | 100.0% |
| Barnwell County | 5 | 40.0% |
| Florence County | 5 | 80.0% |
| Greenwood County | 4 | 75.0% |
| Orangeburg County | 4 | 25.0% |
| Clarendon County | 4 | 25.0% |
These findings identify specific, actionable gaps in South Carolina's K-12 email security posture. The 34.1% DMARC gap represents districts that can be impersonated by any sender, enabling phishing campaigns targeting parents, students, and educators with no authentication failure. Key observations:
p=none). Upgrading to p=quarantine would move them to B without infrastructure changes.The full South Carolina K-12 dataset — 105 entities with NCES CCD enrichment (phone, address, grade span, school count, LEAID) and DNS authentication profiles — is available as part of the Lokentra ESI State Pack.
| Tier | Scope | Suggested Use |
|---|---|---|
| State Pack: South Carolina | All 105 K-12 LEAs, full DNS profile + CCD enrichment | Regional studies, state policy, outreach |
| K-12 National | All 50 states, 20,021+ K-12 LEAs | National K-12 cybersecurity research |
| Full Registry | 801,359+ entities across all sectors | Comprehensive multi-sector research |
| API + Updates | Quarterly re-scan, REST API | Longitudinal studies, live dashboards |
Contact: research@monitorworkspace.com — Free demo at monitorworkspace.com/scorecard
Citation: Lokentra Research Team (2026). South Carolina K-12 Email Security Intelligence: DNS Authentication Profiling of 105 School District LEAs. Lokentra U.S. Email Security Index (ESI) — State Intelligence Series. https://lokentra-site.web.app/research/states/sc-k12-paper.html
Data sources: NCES Common Core of Data (CCD) 2024-2025; DNS records resolved via Google Public DNS (8.8.8.8) and Cloudflare (1.1.1.1). All entity data derived from publicly accessible government registries.
National baseline figures from Lokentra U.S. Education Sector Email Security Intelligence Dataset (March 2026). See education-dataset-paper.html for full methodology.