{"ok":true,"endpoint":"/api/open/observatory","answered":336,"as_of_date":"2026-10-31","baseline_snapshot":"October 2026 snapshot","change_vs_previous":null,"definitions":{"policy":{"missing":"No valid DMARC record","none":"p=none","quarantine":"p=quarantine","reject":"p=reject"},"reporting":{"external_hq_not_classified":"External address, headquarters not classified","external_uk_eu_hq":"External address, UK- or EU-headquartered organisation","external_us_hq":"External address, US-headquartered organisation","no_dmarc_record":"No valid DMARC record","no_report_address":"DMARC record with no report address","own_domain_reports":"Reports to the domain's own addresses"}},"disclaimer":"Observed routing, not a legal finding. A DMARC record shows where a domain asks for reports to be sent. It does not show contracts, transfer safeguards, where reports are stored, or whether any law applies to any organisation.","files":{"csv":"https://faultypacket.co.uk/assets/data/faultypacket-338-sample-aggregates-2026.csv","json":"https://faultypacket.co.uk/assets/data/faultypacket-338-sample-aggregates-2026.json","one_pager_pdf":"https://faultypacket.co.uk/assets/data/faultypacket-338-sample-one-pager.pdf"},"history":[{"as_of_date":"2026-10-31","label":"October 2026 snapshot","month":"2026-10","overall":{"external_collector":259,"external_collector_while_p_none":36,"n":336,"policy":{"missing":12,"none":50,"quarantine":66,"reject":208},"rua":{"external_hq_not_classified":104,"external_uk_eu_hq":46,"external_us_hq":109,"no_dmarc_record":12,"no_report_address":8,"own_domain_reports":57}}}],"licence":"CC BY 4.0, attribution: FaultyPacket 338-domain sample","method":"For every domain in the fixed list, the TXT record at _dmarc.<domain> was requested from two public DNS-over-HTTPS resolvers (1.1.1.1 via cloudflare-dns.com and 8.8.8.8 via dns.google) at no more than two queries per second. Where both answered with different text, the query was repeated once; where both answered, the 1.1.1.1 answer is the one counted. Policy is the p= tag of a single valid v=DMARC1 record; no record, more than one record, or an unrecognised p= value counts as no valid DMARC record. Report addresses are the mailto: hosts in rua= and ruf=. External means a host outside the domain and its subdomains. Collector headquarters come from the FaultyPacket provider list (version T0-T5-v2.2-2026-10-28+sha9d5155ea38); a host not on the list, or a company listed with more than one headquarters region, counts as headquarters not classified. No other records, web pages, contact details or personal data were collected.","next_refresh_due_on_or_after":"2026-11-28","not_assigned_to_a_sector":3,"observed_utc":{"from":"2026-10-31T08:03:47Z","to":"2026-10-31T08:10:41Z"},"overall":{"external_collector":259,"external_collector_pct":77.1,"external_collector_while_p_none":36,"external_collector_while_p_none_pct":10.7,"n":336,"policy":{"missing":12,"none":50,"quarantine":66,"reject":208},"policy_pct":{"missing":3.6,"none":14.9,"quarantine":19.6,"reject":61.9},"rua":{"external_hq_not_classified":104,"external_uk_eu_hq":46,"external_us_hq":109,"no_dmarc_record":12,"no_report_address":8,"own_domain_reports":57},"rua_pct":{"external_hq_not_classified":31,"external_uk_eu_hq":13.7,"external_us_hq":32.4,"no_dmarc_record":3.6,"no_report_address":2.4,"own_domain_reports":17}},"per_domain_detail":"Journalists and researchers can request domain-level detail with the methodology note; requests are reviewed individually. Contact security@faultypacket.co.uk.","provider_list_version":"T0-T5-v2.2-2026-10-28+sha9d5155ea38","resolvers":["Cloudflare DNS-over-HTTPS (cloudflare-dns.com, 1.1.1.1)","Google Public DNS JSON API (dns.google, 8.8.8.8)"],"sample_definition":"A fixed, pre-declared list of 338 organisation domains (249 UK, 86 EU, 3 without a sector label), defined by the domain list of the FaultyPacket 338-domain DMARC study file published on 28 October 2026. The list is frozen: no domain is added, removed or swapped, and the run stops if the list changes. Sector and region tags come from the label each domain carries in the FaultyPacket 1,611-domain study file of 29 October 2026; the 3 domains without a label count in the overall figures and in no sector.","sample_n":338,"sectors":[{"external_collector":69,"external_collector_pct":76.7,"external_collector_while_p_none":13,"external_collector_while_p_none_pct":14.4,"label":"Listed companies and retail","n":90,"n_defined":90,"policy":{"missing":5,"none":19,"quarantine":15,"reject":51},"policy_pct":{"missing":5.6,"none":21.1,"quarantine":16.7,"reject":56.7},"region":"UK","rua":{"external_hq_not_classified":26,"external_uk_eu_hq":12,"external_us_hq":31,"no_dmarc_record":5,"no_report_address":4,"own_domain_reports":12},"rua_pct":{"external_hq_not_classified":28.9,"external_uk_eu_hq":13.3,"external_us_hq":34.4,"no_dmarc_record":5.6,"no_report_address":4.4,"own_domain_reports":13.3},"slug":"uk-listed-and-retail","tag":"Listed and retail"},{"external_collector":42,"external_collector_pct":85.7,"external_collector_while_p_none":2,"external_collector_while_p_none_pct":4.1,"label":"Accountancy, fintech, insurance and wealth","n":49,"n_defined":49,"policy":{"missing":0,"none":3,"quarantine":6,"reject":40},"policy_pct":{"missing":0,"none":6.1,"quarantine":12.2,"reject":81.6},"region":"UK","rua":{"external_hq_not_classified":16,"external_uk_eu_hq":10,"external_us_hq":16,"no_dmarc_record":0,"no_report_address":0,"own_domain_reports":7},"rua_pct":{"external_hq_not_classified":32.7,"external_uk_eu_hq":20.4,"external_us_hq":32.7,"no_dmarc_record":0,"no_report_address":0,"own_domain_reports":14.3},"slug":"uk-finance","tag":"Finance"},{"external_collector":33,"external_collector_pct":68.8,"external_collector_while_p_none":7,"external_collector_while_p_none_pct":14.6,"label":"Managed IT, hosting and security suppliers","n":48,"n_defined":48,"policy":{"missing":3,"none":12,"quarantine":15,"reject":18},"policy_pct":{"missing":6.2,"none":25,"quarantine":31.2,"reject":37.5},"region":"UK","rua":{"external_hq_not_classified":12,"external_uk_eu_hq":5,"external_us_hq":16,"no_dmarc_record":3,"no_report_address":1,"own_domain_reports":11},"rua_pct":{"external_hq_not_classified":25,"external_uk_eu_hq":10.4,"external_us_hq":33.3,"no_dmarc_record":6.2,"no_report_address":2.1,"own_domain_reports":22.9},"slug":"uk-it-hosting-security","tag":"IT suppliers"},{"external_collector":30,"external_collector_pct":88.2,"external_collector_while_p_none":3,"external_collector_while_p_none_pct":8.8,"label":"Housing, utilities, transport and infrastructure","n":34,"n_defined":34,"policy":{"missing":0,"none":4,"quarantine":7,"reject":23},"policy_pct":{"missing":0,"none":11.8,"quarantine":20.6,"reject":67.6},"region":"UK","rua":{"external_hq_not_classified":8,"external_uk_eu_hq":5,"external_us_hq":17,"no_dmarc_record":0,"no_report_address":2,"own_domain_reports":2},"rua_pct":{"external_hq_not_classified":23.5,"external_uk_eu_hq":14.7,"external_us_hq":50,"no_dmarc_record":0,"no_report_address":5.9,"own_domain_reports":5.9},"slug":"uk-housing-utilities-transport","tag":"Infrastructure"},{"external_collector":23,"external_collector_pct":82.1,"external_collector_while_p_none":4,"external_collector_while_p_none_pct":14.3,"label":"Law firms","n":28,"n_defined":28,"policy":{"missing":2,"none":4,"quarantine":1,"reject":21},"policy_pct":{"missing":7.1,"none":14.3,"quarantine":3.6,"reject":75},"region":"UK","rua":{"external_hq_not_classified":14,"external_uk_eu_hq":7,"external_us_hq":2,"no_dmarc_record":2,"no_report_address":0,"own_domain_reports":3},"rua_pct":{"external_hq_not_classified":50,"external_uk_eu_hq":25,"external_us_hq":7.1,"no_dmarc_record":7.1,"no_report_address":0,"own_domain_reports":10.7},"slug":"uk-law-firms","tag":"Legal"},{"external_collector":21,"external_collector_pct":72.4,"external_collector_while_p_none":4,"external_collector_while_p_none_pct":13.8,"label":"Germany (mixed sectors)","n":29,"n_defined":29,"policy":{"missing":1,"none":4,"quarantine":6,"reject":18},"policy_pct":{"missing":3.4,"none":13.8,"quarantine":20.7,"reject":62.1},"region":"EU","rua":{"external_hq_not_classified":15,"external_uk_eu_hq":2,"external_us_hq":4,"no_dmarc_record":1,"no_report_address":0,"own_domain_reports":7},"rua_pct":{"external_hq_not_classified":51.7,"external_uk_eu_hq":6.9,"external_us_hq":13.8,"no_dmarc_record":3.4,"no_report_address":0,"own_domain_reports":24.1},"slug":"eu-germany","tag":"Germany"},{"external_collector":17,"external_collector_pct":70.8,"external_collector_while_p_none":2,"external_collector_while_p_none_pct":8.3,"label":"Nordics, Ireland and eastern Europe (mixed sectors)","n":24,"n_defined":24,"policy":{"missing":1,"none":2,"quarantine":5,"reject":16},"policy_pct":{"missing":4.2,"none":8.3,"quarantine":20.8,"reject":66.7},"region":"EU","rua":{"external_hq_not_classified":4,"external_uk_eu_hq":1,"external_us_hq":12,"no_dmarc_record":1,"no_report_address":1,"own_domain_reports":5},"rua_pct":{"external_hq_not_classified":16.7,"external_uk_eu_hq":4.2,"external_us_hq":50,"no_dmarc_record":4.2,"no_report_address":4.2,"own_domain_reports":20.8},"slug":"eu-nordics-ireland-eastern","tag":"Nordics, Ireland, east"},{"external_collector":14,"external_collector_pct":73.7,"external_collector_while_p_none":1,"external_collector_while_p_none_pct":5.3,"label":"France (mixed sectors)","n":19,"n_defined":19,"policy":{"missing":0,"none":2,"quarantine":7,"reject":10},"policy_pct":{"missing":0,"none":10.5,"quarantine":36.8,"reject":52.6},"region":"EU","rua":{"external_hq_not_classified":7,"external_uk_eu_hq":0,"external_us_hq":7,"no_dmarc_record":0,"no_report_address":0,"own_domain_reports":5},"rua_pct":{"external_hq_not_classified":36.8,"external_uk_eu_hq":0,"external_us_hq":36.8,"no_dmarc_record":0,"no_report_address":0,"own_domain_reports":26.3},"slug":"eu-france","tag":"France"},{"external_collector":10,"external_collector_pct":71.4,"external_collector_while_p_none":0,"external_collector_while_p_none_pct":0,"label":"Benelux, Switzerland, Austria, Italy and Spain (mixed sectors)","n":14,"n_defined":14,"policy":{"missing":0,"none":0,"quarantine":4,"reject":10},"policy_pct":{"missing":0,"none":0,"quarantine":28.6,"reject":71.4},"region":"EU","rua":{"external_hq_not_classified":2,"external_uk_eu_hq":4,"external_us_hq":4,"no_dmarc_record":0,"no_report_address":0,"own_domain_reports":4},"rua_pct":{"external_hq_not_classified":14.3,"external_uk_eu_hq":28.6,"external_us_hq":28.6,"no_dmarc_record":0,"no_report_address":0,"own_domain_reports":28.6},"slug":"eu-benelux-alpine-southern","tag":"Benelux, Alpine, south"}],"snapshot":"October 2026 snapshot","title":"FaultyPacket 338-domain sample: DMARC policy and report routing, aggregate statistics"}