I am presently tracking 28 domains with wrong TLSA records that show no sign that they are likely to be fixed soon. Of these 19 are the same as last time:

1post.de 3nw.de allispdv.com.br auxio.org bebidaliberada.com.br bels.cz castleturing.net comseo.com.br f2h.at lastsip.com linlab.net nevodnet.com planissimo.fr prodnsbr.com.br simplesestudio.com.br solucoesglobais.com.br twsolutions.net.br www.co.tt zx.com

the good news is that 5 of the previus 25 have been addressed, but on the other hand 9 new ones have been added:

101host.de barbarassecret.com conjur.com.br lojabrum.com.br netlig.com.br nonoserver.info reich-trade.ch stric.se ticketmt.com.br

Don't let your own domains linger with incorrect TLSA RRs.

The stats at present:

~11500 passed 29 failed

On the DNS front, still waiting for isphuset.no to upgrade PowerDNS, and the mail.mil nameservers are still blocking TLSA record lookups.