FTSE 350 email security 2026: DMARC, SPF and MTA-STS at FTSE 100 and FTSE 250 companies, checked against NCSC guidance
The public email-authentication records of FTSE 350 companies, as observed on 19 September 2026, checked against NCSC guidance. Each company is measured on the email domain it publishes, and every gap comes with the NCSC fix.
Updated 19 September 2026 · public DNS records as observed on 19 September 2026; yardstick: NCSC guidance and the RFCs · method and dataset below
What this study is, and is not
- All figures are observations of public DNS records as observed on 19 September 2026 (2026-09-19T12:32:34.338Z to 2026-09-19T15:47:25.616Z UTC), not a judgement of a company's security.
- Not investment advice. The study reports dated observations of public DNS records.
- Tiers are Servnet's grouping of NCSC recommendations; NCSC has not reviewed or endorsed this study. Contains public sector information licensed under the Open Government Licence v3.0. (https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/)
- Companies can ask for a correction or a re-measurement at webmaster@servnetuk.com. Corrections are shown with both the original and the new measurement date.
What the records show
Servnet checked the public email-authentication DNS records of the FTSE 350 on 19 September 2026, against NCSC guidance. For the 267 companies whose own email domain was identified from their published addresses, 198 (74.2%) had a DMARC policy of quarantine or reject for mail from that domain and 148 (55.4%) had p=reject for all failing mail from that domain (pct 100). 57 were at p=none and 7 had no DMARC record. Fewer protected email in transit: 12 domains had MTA-STS in enforce mode and 27 had TLS reporting. 10 companies met all of the study's DNS-visible controls (DKIM was not measured). Investment trusts that use their manager's domain are reported separately. Each gap is listed with the NCSC page that explains the fix, and the per-company data is open for download.
- As observed on 19 September 2026, 198 of the 267 FTSE 350 companies whose own email domain was identified (74.2%) had a DMARC policy of quarantine or reject for mail from that domain. 12 of those 198 records set sp=none, which leaves subdomains without a record of their own at "none".
- As observed on 19 September 2026, 148 of the 267 (55.4%) had p=reject for all failing mail from that domain (pct 100), the policy that NCSC says, used on all of an organisation's domains, is "the best way to prevent spoofing of your email"; 7 of these 148 set sp=none for subdomains. 57 of the 267 (21.3%) published p=none, which NCSC says will not "prevent illegitimate emails being sent from your domains", and 7 of the 267 (2.6%) published no DMARC record.
- As observed on 19 September 2026, FTSE 100: 73 of 96 (76.0%) had a DMARC policy of quarantine or reject for mail from their own domain, and 53 (55.2%) had p=reject for all failing mail from that domain (pct 100). FTSE 250: 125 of 171 (73.1%) and 95 (55.6%).
- As observed on 19 September 2026, 12 of the 267 (4.5%) own domains that receive mail had an MTA-STS policy in enforce mode, the goal NCSC sets, and 27 of the 266 whose record could be assessed (10.2%) published a TLS-RPT record. The MTA-STS enforce step was the most common gap (255 of 267).
- As observed on 19 September 2026, 10 of the 267 (3.7%) had an SPF record whose full evaluation needs more than 10 DNS lookups; RFC 7208 says a receiver must return a permanent error (permerror) once that limit is exceeded, so mail from senders listed beyond it cannot get an SPF pass. 1 more record had a syntax error, which gives permerror for all mail (11 of the 267, 4.1%, in total).
- As observed on 19 September 2026, 182 of the 267 (68.2%) met the Baseline (based on NCSC guidance) tier: an SPF record that ends in ~all or -all and stays within 10 DNS lookups, and DMARC at quarantine or reject with aggregate reports requested. 10 of the 267 (3.7%) met all of the study's DNS-visible controls (the Full set (based on NCSC guidance) tier); DKIM and other recommendations that cannot be seen in DNS were not measured. Tiers are Servnet's grouping of NCSC recommendations; NCSC has not reviewed or endorsed this study.
Results by index
As observed on 19 September 2026, 96 FTSE 100 companies were measured on their own email domain (the others' email domain could not be identified, or is their manager's). 73 (76.0%) had a DMARC policy of quarantine or reject for mail from that domain, 53 (55.2%) had p=reject for all failing mail from that domain (pct 100), 19 were at p=none and 1 had no DMARC record. 3 met all of the study's DNS-visible controls.
As observed on 19 September 2026, 171 FTSE 250 companies were measured on their own email domain; investment trusts whose published address is their manager's are reported separately below. 125 (73.1%) had a DMARC policy of quarantine or reject for mail from that domain, 95 (55.6%) had p=reject for all failing mail from that domain (pct 100), 38 were at p=none and 6 had no DMARC record.
| Companies on their own email domain | n | Quarantine or reject | Reject (pct 100) | p=none | No DMARC record |
|---|---|---|---|---|---|
| FTSE 250 | 171 | 125 (73.1%) | 95 (55.6%) | 38 | 6 |
| FTSE 100 | 96 | 73 (76.0%) | 53 (55.2%) | 19 | 1 |
| FTSE 350 (own domain) | 267 | 198 (74.2%) | 148 (55.4%) | 57 | 7 |
Scroll the table sideways to see every column →
Results by industry group
As observed on 19 September 2026, across both indices, the share of companies with a DMARC policy of quarantine or reject for mail from their own domain ranged from 52.6% (Real Estate, 10 of 19) to 83.1% (Financials, 49 of 59). Industry groups are Servnet's grouping of the sector labels on Wikipedia and are shown only where at least 10 companies were measured; 3 smaller groups are combined as "Other industries" (21 companies).
| Industry group | n | Quarantine or reject | Reject (pct 100) | p=none | No DMARC record |
|---|---|---|---|---|---|
| Financials | 59 | 49 (83.1%) | 40 (67.8%) | 7 | 3 |
| Technology | 11 | 9 (81.8%) | 7 (63.6%) | 2 | 0 |
| Industrials | 58 | 47 (81.0%) | 34 (58.6%) | 9 | 0 |
| Consumer Discretionary | 53 | 37 (69.8%) | 30 (56.6%) | 14 | 2 |
| Basic Materials | 13 | 9 (69.2%) | 3 (23.1%) | 2 | 1 |
| Health Care | 12 | 8 (66.7%) | 6 (50.0%) | 4 | 0 |
| Consumer Staples | 21 | 12 (57.1%) | 8 (38.1%) | 8 | 0 |
| Real Estate | 19 | 10 (52.6%) | 7 (36.8%) | 9 | 0 |
| Other industries | 21 | 17 (81.0%) | 13 (61.9%) | 2 | 1 |
Scroll the table sideways to see every column →
Industry group (Servnet grouping of the sector labels on Wikipedia). Not an official FTSE Russell or ICB classification. Industry groups with fewer than 10 own-domain companies each (Utilities 8, Energy 7, Telecommunications 6), combined. Not shown separately because the groups are too small.
MTA-STS and TLS-RPT
NCSC recommends MTA-STS, first in testing mode with TLS reporting and then in enforce mode, for every domain that receives email. As observed on 19 September 2026, of the 267 own domains with an MX record, 26 published an MTA-STS record, 23 (8.6%) had a retrievable policy in testing or enforce mode (the public-sector census rule, which also counts mode none, gives 24), and 12 of the 267 (4.5%) were in enforce mode. 27 of the 266 assessed domains (10.2%) published a TLS-RPT record; 1 could not be assessed because the lookup failed DNSSEC validation.
How to fix each gap (NCSC guidance)
Every gap in the data is paired with the free NCSC page that explains the fix, and with the NCSC email security check (https://checkcybersecurity.service.ncsc.gov.uk/email-security-check). NCSC retired Mail Check on 31 March 2026 (https://www.ncsc.gov.uk/blog-post/retiring-mail-check-web-check); several of its guidance pages still mention it, so send DMARC and TLS reports to your own mailbox or report-processing tool, not the Mail Check address.
- DMARC policy published (own record, or inherited from the organisational domain): NCSC: Implement a DMARC policy of 'none' (publish _dmarc with rua, then iterate)
- DMARC policy for mail from this domain is quarantine or reject: NCSC: 4. Mark spoof emails as spam (move to p=quarantine, raise to 100%)
- DMARC policy for mail from this domain is reject, for all failing mail (pct 100, t not y): NCSC: 5. Reject spoof emails (move to p=reject, raise to 100%)
- DMARC aggregate reports requested (rua): NCSC: 1. Choose an anti-spoofing management tool (a DMARC report processor), and add its address as rua
- SPF published and ends in soft fail or fail (~all or -all): NCSC: Create and iterate an SPF record (list every sending service; use sub-domains to stay within 10 lookups)
- SPF record valid: one record, 10 or fewer DNS-querying terms: NCSC: Create and iterate an SPF record (list every sending service; use sub-domains to stay within 10 lookups)
- MTA-STS policy published and retrievable, in testing or enforce mode: NCSC: Using MTA-STS to protect the privacy of your emails (steps 2-7: policy in testing mode, TLS-RPT, then enforce)
- MTA-STS policy in enforce mode: NCSC: Using MTA-STS to protect the privacy of your emails (steps 2-7: policy in testing mode, TLS-RPT, then enforce)
- TLS reporting (TLS-RPT) record published: NCSC: Using MTA-STS to protect the privacy of your emails (steps 2-7: policy in testing mode, TLS-RPT, then enforce)
NCSC retired Mail Check on 31 March 2026; send reports to your own mailbox or report-processing tool, not the Mail Check address. https://www.ncsc.gov.uk/blog-post/retiring-mail-check-web-check
Look up a company
The lookup shows, for each company, the email domain the study measured, how that domain was identified (a role address such as investor relations or the company secretary, with the page it was read from), how strong that evidence is, the records observed on 19 September 2026 and the NCSC fix for each gap. Evidence is high where a role address on the domain is visible on the cited page, and is marked medium where the address is only a contact-form routing value, is shown only behind a disclaimer or is on the manager's shared investment-trust contact page; where the page could be read only through a third-party fetch service or could not be re-opened on 19 September 2026; where only individuals' mailboxes are published; or where a trust's website is hosted on its manager's domain. Investment trusts appear on their manager's, adviser's or company secretary's domain, labelled as such. Figures describe DNS records on that date, not a company's wider security. The 10 companies whose email domain could not be identified are not scored and are not in the lookup. Companies can ask for a correction or a re-measurement at webmaster@servnetuk.com. Corrections are shown with both the original and the new measurement date.
340 of 340 · as observed on 19 September 2026 · select a row for details, evidence and fixes
| Company | Email domain measured | DMARC | SPF | MTA-STS | Controls met |
|---|---|---|---|---|---|
| 3i III · FTSE 100 · Financials | 3i.com | p=quarantine | ~all · 5 lookups | Enforce | 7 of 9 |
| 3i Infrastructure 3IN · FTSE 250 · Financials | 3i.com manager’s or secretary’s domain | p=quarantine | ~all · 5 lookups | Enforce | 7 of 9 |
| 4imprint FOUR · FTSE 250 · Consumer Discretionary | 4imprint.co.uk | p=reject | -all · 5 lookups | None | 5 of 9 |
| A.G. Barr BAG · FTSE 250 · Consumer Staples | agbarr.co.uk | p=quarantine | ~all · 10 lookups | None | 5 of 9 |
| Aberdeen Asia Focus AAS · FTSE 250 · Financials | aberdeenplc.com manager’s or secretary’s domain | p=none (monitor only) | -all · 10 lookups | None | 4 of 9 |
| Aberdeen Group ABDN · FTSE 100 · Financials | aberdeenplc.com | p=none (monitor only) | -all · 10 lookups | None | 4 of 9 |
| Aberforth Smaller Companies Trust ASL · FTSE 250 · Financials | aberforth.co.uk manager’s or secretary’s domain | p=quarantine | -all · 6 lookups | None | 5 of 9 |
| Admiral Group ADM · FTSE 100 · Financials | admiralgroup.co.uk | p=reject | -all · 1 lookup | None | 6 of 9 |
| AEP Plantations AEP · FTSE 250 · Consumer Staples | aepplantations.com | p=quarantine | -all · 1 lookup | None | 4 of 9 |
| Airtel Africa AAF · FTSE 100 · Telecommunications | africa.airtel.com | p=reject | -all · 4 lookups | None | 6 of 9 |
| AJ Bell AJB · FTSE 250 · Financials | ajbell.co.uk | p=none (monitor only) | -all · 7 lookups | None | 4 of 9 |
| Alfa Financial Software ALFA · FTSE 250 · Technology | alfasystems.com | p=none (monitor only) | ~all · 2 lookups | None | 4 of 9 |
| Alliance Witan ALW · FTSE 100 · Financials | alliancewitan.com | p=none (monitor only) | -all · 2 lookups | None | 3 of 9 |
| Allianz Technology Trust ATT · FTSE 250 · Financials | allianzgi.com manager’s or secretary’s domain | p=quarantine | ~all · 2 lookups | None | 5 of 9 |
| Anglo American plc AAL · FTSE 100 · Basic Materials | angloamerican.com | p=quarantine | -all · 10 lookups | None | 5 of 9 |
| Antofagasta plc ANTO · FTSE 100 · Basic Materials | antofagasta.co.uk | No DMARC record | -all · 10 lookups | None | 2 of 9 |
| AO World AO · FTSE 250 · Consumer Discretionary | ao.com | p=reject | ~all · 4 lookups | None | 6 of 9 |
| Applied Nutrition APN · FTSE 250 · Consumer Staples | appliednutrition.uk | p=none (monitor only) | -all · 3 lookups | None | 4 of 9 |
| Ashmore Group ASHM · FTSE 250 · Financials | ashmoregroup.com | p=reject | -all · 10 lookups | None | 6 of 9 |
| AstraZeneca AZN · FTSE 100 · Health Care | astrazeneca.com | p=none (monitor only) | ~all · 9 lookups | None | 4 of 9 |
| Atalaya Mining ATYM · FTSE 250 · Basic Materials | atalayamining.com | p=quarantine | -all · 2 lookups | None | 4 of 9 |
| Auction Technology Group ATG · FTSE 250 · Technology | auctiontechnologygroup.com | p=none (monitor only) | -all · 9 lookups | None | 4 of 9 |
| Autotrader Group AUTO · FTSE 100 · Consumer Discretionary | autotrader.co.uk | p=reject | -all · 9 lookups | None | 6 of 9 |
| AVI Global Trust AGT · FTSE 250 · Financials | assetvalueinvestors.com manager’s or secretary’s domain | p=reject | -all · 3 lookups | None | 6 of 9 |
| Aviva AV · FTSE 100 · Financials | aviva.com | p=reject | -all · 1 lookup | None | 6 of 9 |
| Avon Technologies AVON · FTSE 250 · Industrials | avon-technologiesplc.com | p=quarantine | -all · 6 lookups | None | 5 of 8 |
| B&M BME · FTSE 250 · Consumer Discretionary | bandmretail.com | p=none (monitor only) | -all · 3 lookups | None | 4 of 9 |
| Babcock International BAB · FTSE 100 · Industrials | babcockinternational.com | p=quarantine | ~all · 5 lookups | None | 5 of 9 |
| BAE Systems BA · FTSE 100 · Industrials | baesystems.com | p=quarantine | ~all · 10 lookups | None | 5 of 9 |
| Baillie Gifford Japan Trust BGFD · FTSE 250 · Financials | bailliegifford.com manager’s or secretary’s domain | p=reject | ~all · 1 lookup | Enforce | 9 of 9 |
| Baillie Gifford US Growth Trust USA · FTSE 250 · Financials | bailliegifford.com manager’s or secretary’s domain | p=reject | ~all · 1 lookup | Enforce | 9 of 9 |
| Balfour Beatty BBY · FTSE 250 · Industrials | balfourbeatty.com | p=reject | -all · 5 lookups | Testing | 8 of 9 |
| Baltic Classifieds BCG · FTSE 250 · Consumer Discretionary | balticclassifieds.com | p=reject | ~all · 3 lookups | None | 6 of 9 |
| Bankers Investment Trust BNKR · FTSE 250 · Financials | janushenderson.com manager’s or secretary’s domain | p=none (monitor only) | ~all · 7 lookups | None | 4 of 9 |
| Barclays BARC · FTSE 100 · Financials | barclays.com | p=reject | -all · 1 lookup | None | 6 of 9 |
| Barratt Redrow BTRW · FTSE 100 · Consumer Discretionary | barrattredrow.co.uk | p=reject | ~all · 1 lookup | None | 6 of 9 |
| Beazley BEZ · FTSE 100 · Financials | beazley.com | p=reject | -all · 2 lookups | None | 6 of 9 |
| Bellway BWY · FTSE 250 · Consumer Discretionary | bellway.co.uk | p=reject | -all · 13 lookups (over 10) | None | 5 of 9 |
| Berkeley Group Holdings BKG · FTSE 250 · Consumer Discretionary | berkeleygroup.co.uk | p=reject | ~all · 6 lookups | None | 6 of 9 |
| Big Yellow Group BYG · FTSE 250 · Real Estate | bigyellow.co.uk | p=reject | -all · 5 lookups | None | 6 of 9 |
| Biopharma Credit BPCR · FTSE 250 · Financials | bpcruk.com | No DMARC record | -all · 1 lookup | None | 2 of 9 |
| BlackRock Greater Europe Investment Trust BRGE · FTSE 250 · Financials | blackrock.com manager’s or secretary’s domain | p=quarantine | ~all · 1 lookup | None | 5 of 9 |
| BlackRock Smaller Companies Trust BRSC · FTSE 250 · Financials | blackrock.com manager’s or secretary’s domain | p=quarantine | ~all · 1 lookup | None | 5 of 9 |
| BlackRock World Mining Trust BRWM · FTSE 250 · Financials | blackrock.com manager’s or secretary’s domain | p=quarantine | ~all · 1 lookup | None | 5 of 9 |
| Bodycote BOY · FTSE 250 · Industrials | bodycote.com | p=reject | ~all · 10 lookups | None | 6 of 9 |
| BP BP · FTSE 100 · Energy | bp.com | p=reject | -all · 10 lookups | Enforce | 9 of 9 |
| Breedon Group BREE · FTSE 250 · Industrials | breedongroup.com | p=none (monitor only) | -all · 3 lookups | None | 4 of 9 |
| Bridgepoint Group BPT · FTSE 250 · Financials | bridgepoint.eu | p=reject | -all · 5 lookups | None | 6 of 9 |
| British American Tobacco BATS · FTSE 100 · Consumer Staples | bat.com | p=quarantine (pct below 100) | ~all · 7 lookups | None | 4 of 9 |
| British Land BLND · FTSE 100 · Real Estate | britishland.com | p=none (monitor only) | ~all · 10 lookups | None | 4 of 9 |
| Brunner Investment Trust BUT · FTSE 250 · Financials | allianzgi.com manager’s or secretary’s domain | p=quarantine | ~all · 2 lookups | None | 5 of 9 |
| BT Group BT.A · FTSE 100 · Telecommunications | bt.com | p=reject | ~all · 3 lookups | Testing | 7 of 9 |
| Bunzl BNZL · FTSE 100 · Industrials | bunzl.com | p=reject | ~all · 2 lookups | None | 6 of 9 |
| Burberry Group BRBY · FTSE 100 · Consumer Discretionary | burberry.com | p=none (monitor only) | -all · 9 lookups | None | 4 of 9 |
| Bytes Technology Group BYIT · FTSE 250 · Industrials | bytesplc.com | p=reject | ~all · 1 lookup | None | 6 of 9 |
| Caledonia Investments CLDN · FTSE 250 · Financials | caledonia.com | p=reject | -all · 8 lookups | Testing | 8 of 9 |
| Capital Gearing Trust CGT · FTSE 250 · Financials | capitalgearingtrust.com | No DMARC record | -all · 6 lookups | None | 2 of 9 |
| Centrica CNA · FTSE 100 · Utilities | centrica.com | p=reject | ~all · 2 lookups | None | 6 of 9 |
| Ceres Power CWR · FTSE 250 · Energy | cerespower.com | p=none (monitor only) | ~all · 8 lookups | None | 4 of 9 |
| Chemring Group CHG · FTSE 250 · Industrials | chemring.co.uk | p=reject | -all · 11 lookups (over 10) | None | 5 of 9 |
| Chesnara CSN · FTSE 250 · Financials | chesnara.co.uk | p=none (monitor only) | ~all · 8 lookups | None | 4 of 9 |
| City of London Investment Trust CTY · FTSE 250 · Financials | janushenderson.com manager’s or secretary’s domain | p=none (monitor only) | ~all · 7 lookups | None | 4 of 9 |
| Clarkson CKN · FTSE 250 · Industrials | clarksons.com | p=none (monitor only) | -all · 10 lookups | None | 3 of 9 |
| Close Brothers Group CBG · FTSE 250 · Financials | closebrothers.com | p=reject | -all · 10 lookups | None | 6 of 9 |
| CMC Markets CMCX · FTSE 250 · Financials | cmcmarkets.com | p=reject | ~all · 1 lookup | None | 6 of 9 |
| Coats Group COA · FTSE 250 · Consumer Staples | coats.com | p=reject | ~all · 1 lookup | None | 6 of 9 |
| Coca-Cola Europacific Partners CCEP · FTSE 100 · Consumer Staples | ccep.com | p=quarantine | -all · 10 lookups | None | 5 of 9 |
| Coca-Cola HBC CCH · FTSE 100 · Consumer Staples | cchellenic.com | p=reject | -all · 9 lookups | None | 6 of 9 |
| Compass Group CPG · FTSE 100 · Industrials | compass-group.com | p=quarantine | -all · 8 lookups | None | 5 of 9 |
| Computacenter CCC · FTSE 100 · Technology | computacenter.com | p=reject | -all · 9 lookups | None | 6 of 9 |
| Convatec CTEC · FTSE 100 · Health Care | convatec.com | p=reject | -all · 10 lookups | None | 6 of 9 |
| Cordiant Digital Infrastructure CORD · FTSE 250 · Financials | cordiantcap.com manager’s or secretary’s domain | p=none (monitor only) | -all · 6 lookups | None | 4 of 9 |
| Costain Group COST · FTSE 250 · Industrials | costain.com | p=quarantine (pct below 100) | ~all · 6 lookups | None | 4 of 9 |
| Cranswick CWK · FTSE 250 · Consumer Staples | cranswick.co.uk | p=none (monitor only) | -all · 10 lookups | None | 4 of 9 |
| Croda International CRDA · FTSE 100 · Basic Materials | croda.com | p=reject | -all · 10 lookups | None | 6 of 9 |
| Currys CURY · FTSE 250 · Consumer Discretionary | currys.co.uk | p=reject | -all · 9 lookups | None | 6 of 9 |
| CVS Group CVSG · FTSE 250 · Health Care | cvsvets.com | p=quarantine | -all · 12 lookups (over 10) | None | 4 of 9 |
| DCC Energy DCC · FTSE 100 · Industrials | dcc.ie | p=reject | -all · 6 lookups | None | 6 of 9 |
| Derwent London DLN · FTSE 250 · Real Estate | derwentlondon.com | p=reject | ~all · 12 lookups (over 10) | None | 5 of 9 |
| Diageo DGE · FTSE 100 · Consumer Staples | diageo.com | p=reject | ~all · 3 lookups | None | 6 of 9 |
| Diploma DPLM · FTSE 100 · Industrials | diplomaplc.com | p=quarantine | -all · 11 lookups (over 10) | None | 4 of 9 |
| discoverIE DSCV · FTSE 250 · Industrials | discoverieplc.com | p=quarantine | -all · 1 lookup | None | 5 of 9 |
| Domino's Pizza DOM · FTSE 250 · Consumer Discretionary | dominos.co.uk | p=reject | ~all · 11 lookups (over 10) | None | 5 of 9 |
| Dr. Martens DOCS · FTSE 250 · Consumer Discretionary | drmartens.com | p=reject | -all · 5 lookups | Enforce | 9 of 9 |
| Drax Group DRX · FTSE 250 · Utilities | drax.com | p=reject | -all · 9 lookups | None | 6 of 9 |
| Dunelm Group DNLM · FTSE 250 · Consumer Discretionary | dunelm.com | p=reject | ~all · 7 lookups | None | 6 of 9 |
| EasyJet EZJ · FTSE 100 · Consumer Discretionary | easyjet.com | p=reject | ~all · 2 lookups | None | 6 of 9 |
| Edinburgh Investment Trust EDIN · FTSE 250 · Financials | edinburghinvestmenttrust.com | No DMARC record | -all · 1 lookup | None | 2 of 9 |
| Edinburgh Worldwide Investment Trust EWI · FTSE 250 · Financials | bailliegifford.com manager’s or secretary’s domain | p=reject | ~all · 1 lookup | Enforce | 9 of 9 |
| Elementis ELM · FTSE 250 · Basic Materials | elementis.com | p=quarantine | ~all · 1 lookup | None | 6 of 9 |
| Endeavour Mining EDV · FTSE 100 · Basic Materials | endeavourmining.com | p=none (monitor only) | ~all · 1 lookup | None | 3 of 9 |
| Energean ENOG · FTSE 250 · Energy | energean.com | No DMARC record | -all · 3 lookups | None | 2 of 9 |
| Entain ENT · FTSE 250 · Consumer Discretionary | entaingroup.com | No DMARC record | -all · 6 lookups | None | 2 of 9 |
| European Smaller Companies Trust ESCT · FTSE 250 · Financials | janushenderson.com manager’s or secretary’s domain | p=none (monitor only) | ~all · 7 lookups | None | 4 of 9 |
| Eurowag EWG · FTSE 250 · Financials | eurowag.com | p=quarantine | -all · 9 lookups | Testing | 7 of 9 |
| Experian EXPN · FTSE 100 · Industrials | experian.com | p=reject | ~all · 1 lookup | None | 6 of 9 |
| F & C Investment Trust FCIT · FTSE 100 · Financials | columbiathreadneedle.com manager’s or secretary’s domain | p=reject | -all · 7 lookups | None | 6 of 9 |
| Fidelity China Special Situations FCSS · FTSE 250 · Financials | fil.com manager’s or secretary’s domain | p=reject | -all · 1 lookup | None | 6 of 9 |
| Fidelity Emerging Markets FEML · FTSE 250 · Financials | fil.com manager’s or secretary’s domain | p=reject | -all · 1 lookup | None | 6 of 9 |
| Fidelity European Trust FEV · FTSE 250 · Financials | fil.com manager’s or secretary’s domain | p=reject | -all · 1 lookup | None | 6 of 9 |
| Fidelity Special Values FSV · FTSE 250 · Financials | fil.com manager’s or secretary’s domain | p=reject | -all · 1 lookup | None | 6 of 9 |
| Finsbury Growth & Income Trust FGT · FTSE 250 · Financials | frostrow.com manager’s or secretary’s domain | p=none (monitor only) | -all · 2 lookups | None | 4 of 9 |
| FirstGroup FGP · FTSE 250 · Consumer Discretionary | firstgroup.co.uk | p=none (monitor only) | -all · 3 lookups | None | 4 of 9 |
| Foresight Environmental Infrastructure FGEN · FTSE 250 · Financials | foresightgroup.eu manager’s or secretary’s domain | p=reject | -all · 9 lookups | None | 6 of 9 |
| Foresight Group FSG · FTSE 250 · Financials | foresightgroup.eu | p=reject | -all · 9 lookups | None | 6 of 9 |
| Frasers Group FRAS · FTSE 250 · Consumer Discretionary | frasers.group | p=quarantine | -all · 4 lookups | None | 5 of 9 |
| Fresnillo plc FRES · FTSE 100 · Basic Materials | fresnilloplc.com | p=quarantine (pct below 100) | -all · 6 lookups | None | 4 of 9 |
| Funding Circle FCH · FTSE 250 · Financials | fundingcircle.com | p=reject | ~all · 6 lookups | None | 6 of 9 |
| Galliford Try GFRD · FTSE 250 · Industrials | gallifordtry.co.uk | p=reject | -all · 10 lookups | None | 6 of 9 |
| Games Workshop GAW · FTSE 100 · Consumer Discretionary | gwplc.com | p=quarantine | ~all · 10 lookups | None | 5 of 9 |
| Gamma Communications GAMA · FTSE 250 · Telecommunications | gamma.co.uk | p=quarantine | -all · 8 lookups | None | 5 of 9 |
| GCP Infrastructure Investments GCP · FTSE 250 · Financials | graviscapital.com manager’s or secretary’s domain | p=none (monitor only) | ~all · 8 lookups | None | 4 of 9 |
| Genuit Group GEN · FTSE 250 · Industrials | genuitgroup.com | p=reject | -all · 6 lookups | None | 6 of 9 |
| Genus GNS · FTSE 250 · Health Care | genusplc.com | p=none (monitor only) | ~all · 10 lookups | None | 4 of 9 |
| Glencore GLEN · FTSE 100 · Basic Materials | glencore.com | p=reject | -all · 1 lookup | None | 6 of 9 |
| Global Smaller Companies Trust GSCT · FTSE 250 · Financials | columbiathreadneedle.com manager’s or secretary’s domain | p=reject | -all · 7 lookups | None | 6 of 9 |
| GlobalData DATA · FTSE 250 · Industrials | globaldata.com | p=quarantine | -all · 10 lookups | None | 5 of 9 |
| Goodwin GDWN · FTSE 250 · Industrials | goodwinplc.com | p=quarantine | -all · 4 lookups | None | 5 of 9 |
| Grafton Group GFTU · FTSE 250 · Industrials | graftonplc.com | p=reject | -all · 6 lookups | None | 6 of 9 |
| Grainger GRI · FTSE 250 · Real Estate | graingerplc.co.uk | p=quarantine | -all · 6 lookups | None | 5 of 9 |
| Great Portland Estates GPE · FTSE 250 · Real Estate | gpe.co.uk | p=reject | ~all · 8 lookups | None | 6 of 9 |
| Greencoat UK Wind UKW · FTSE 250 · Utilities | schrodersgreencoat.com manager’s or secretary’s domain | p=none (monitor only) | -all · 9 lookups | None | 4 of 9 |
| Greencore GNC · FTSE 250 · Consumer Staples | greencore.com | p=reject | -all · 1 lookup | None | 6 of 9 |
| Greggs GRG · FTSE 250 · Consumer Staples | greggs.co.uk | p=none (monitor only) | -all · 3 lookups | None | 3 of 9 |
| GSK plc GSK · FTSE 100 · Health Care | gsk.com | p=reject | ~all · 1 lookup | None | 6 of 9 |
| Haleon HLN · FTSE 100 · Health Care | haleon.com | p=reject | -all · 1 lookup | None | 6 of 9 |
| Halfords HFD · FTSE 250 · Consumer Discretionary | halfords.co.uk | p=none (monitor only) | ~all · 8 lookups | None | 4 of 9 |
| Halma plc HLMA · FTSE 100 · Industrials | halma.com | p=reject | -all · 6 lookups | None | 6 of 9 |
| Hammerson HMSO · FTSE 250 · Real Estate | hammerson.com | p=reject | ~all · 9 lookups | None | 6 of 9 |
| Hansa Investment Company HANA · FTSE 250 · Financials | hansacap.com manager’s or secretary’s domain | p=quarantine | -all · 1 lookup | None | 5 of 9 |
| Harbour Energy HBR · FTSE 250 · Energy | harbourenergy.com | p=reject | -all · 10 lookups | None | 6 of 9 |
| Harworth Group HWG · FTSE 250 · Real Estate | harworthgroup.com | p=none (monitor only) | -all · 6 lookups | None | 3 of 9 |
| Hays HAS · FTSE 250 · Industrials | hays.com | p=reject | -all · 9 lookups | None | 6 of 9 |
| Helios Towers HTWS · FTSE 250 · Telecommunications | heliostowers.com | p=reject | -all · 4 lookups | Policy mode none | 7 of 9 |
| Henderson Far East Income HFEL · FTSE 250 · Financials | janushenderson.com manager’s or secretary’s domain | p=none (monitor only) | ~all · 7 lookups | None | 4 of 9 |
| Henderson Smaller Companies Investment Trust HSL · FTSE 250 · Financials | janushenderson.com manager’s or secretary’s domain | p=none (monitor only) | ~all · 7 lookups | None | 4 of 9 |
| Herald Investment Trust HRI · FTSE 250 · Financials | aberdeenplc.com manager’s or secretary’s domain | p=none (monitor only) | -all · 10 lookups | None | 4 of 9 |
| Hg Capital Trust HGT · FTSE 250 · Financials | hgcapital.com manager’s or secretary’s domain | p=reject | -all · 7 lookups | None | 6 of 9 |
| HICL Infrastructure Company HICL · FTSE 250 · Financials | hicl.com | p=reject | -all · 5 lookups | None | 6 of 9 |
| Hikma Pharmaceuticals HIK · FTSE 250 · Health Care | hikma.com | p=reject | -all · 5 lookups | None | 6 of 9 |
| Hill & Smith HILS · FTSE 250 · Industrials | hillandsmith.com | p=reject | -all · 1 lookup | Enforce | 9 of 9 |
| Hilton Food Group HFG · FTSE 250 · Consumer Staples | hiltonfoodgroup.com | p=quarantine | -all · 6 lookups | None | 5 of 9 |
| Hiscox HSX · FTSE 100 · Financials | hiscox.com | p=none (monitor only) | ~all · 6 lookups | None | 4 of 9 |
| Hochschild Mining HOC · FTSE 250 · Basic Materials | hocplc.com | p=quarantine | -all · 2 lookups | None | 5 of 9 |
| Hollywood Bowl Group BOWL · FTSE 250 · Consumer Discretionary | hollywoodbowl.co.uk | p=reject | ~all · 10 lookups | None | 6 of 9 |
| Howdens Joinery HWDN · FTSE 100 · Consumer Discretionary | howdens.com | p=none (monitor only) | ~all · 3 lookups | None | 4 of 9 |
| HSBC HSBA · FTSE 100 · Financials | hsbc.com | p=reject | ~all · 6 lookups | None | 6 of 9 |
| Hunting HTG · FTSE 250 · Energy | hunting-intl.com | p=reject | ~all · 10 lookups | None | 6 of 9 |
| ICG ICG · FTSE 100 · Financials | icgam.com | p=quarantine | ~all · 4 lookups | None | 5 of 9 |
| ICG Enterprise Trust ICGT · FTSE 250 · Financials | icgam.com manager’s or secretary’s domain | p=quarantine | ~all · 4 lookups | None | 5 of 9 |
| IG Group IGG · FTSE 100 · Financials | iggroup.com | p=quarantine | -all · 4 lookups | None | 5 of 9 |
| IHG Hotels & Resorts IHG · FTSE 100 · Consumer Discretionary | ihg.com | p=none (monitor only) | -all · 7 lookups | None | 4 of 9 |
| IMI IMI · FTSE 100 · Industrials | imiplc.com | p=quarantine | -all · 10 lookups | None | 5 of 9 |
| Imperial Brands IMB · FTSE 100 · Consumer Staples | impbrands.com | p=none (monitor only) | ~all · 5 lookups | None | 4 of 9 |
| Inchcape INCH · FTSE 250 · Consumer Discretionary | inchcape.com | p=reject | ~all · 1 lookup | None | 6 of 9 |
| Informa INF · FTSE 100 · Consumer Discretionary | informa.com | p=quarantine | ~all · 10 lookups | None | 5 of 9 |
| IntegraFin Holdings IHP · FTSE 250 · Financials | integrafin.co.uk | p=reject | -all · 7 lookups | None | 6 of 9 |
| International Airlines Group IAG · FTSE 100 · Consumer Discretionary | iairgroup.com | p=reject | -all · 1 lookup | None | 6 of 9 |
| International Public Partnerships INPP · FTSE 250 · Financials | amberinfrastructure.com manager’s or secretary’s domain | p=quarantine | ~all · 2 lookups | None | 5 of 8 |
| International Workplace Group IWG · FTSE 250 · Industrials | iwgplc.com | p=reject | -all · 6 lookups | None | 6 of 9 |
| Intertek ITRK · FTSE 100 · Industrials | intertek.com | p=reject | -all · 6 lookups | None | 7 of 9 |
| Invesco Asia Dragon Trust IAD · FTSE 250 · Financials | invesco.com manager’s or secretary’s domain | p=reject | ~all · 1 lookup | None | 6 of 9 |
| Investec INVP · FTSE 100 · Financials | investec.com | p=reject | -all · 8 lookups | None | 6 of 9 |
| IP Group IPO · FTSE 250 · Financials | ipgroupplc.com | p=reject | -all · 8 lookups | None | 6 of 9 |
| Ithaca Energy ITH · FTSE 100 · Energy | ithacaenergy.com | p=quarantine | -all · 8 lookups | None | 5 of 9 |
| ITV ITV · FTSE 250 · Consumer Discretionary | itv.com | p=reject | ~all · 9 lookups | None | 6 of 9 |
| JD Sports JD · FTSE 100 · Consumer Discretionary | jdplc.com | p=none (monitor only) | ~all · 7 lookups | None | 4 of 9 |
| Johnson Matthey JMAT · FTSE 250 · Basic Materials | matthey.com | p=quarantine | -all · 7 lookups | None | 5 of 9 |
| Johnson Service Group JSG · FTSE 250 · Industrials | jsg.com | p=reject | ~all · 12 lookups (over 10) | None | 5 of 9 |
| JPMorgan American Investment Trust JAM · FTSE 250 · Financials | jpmorgan.com manager’s or secretary’s domain | p=reject | -all · 4 lookups | None | 6 of 9 |
| JPMorgan Claverhouse Investment Trust JCH · FTSE 250 · Financials | jpmorgan.com manager’s or secretary’s domain | p=reject | -all · 4 lookups | None | 6 of 9 |
| JPMorgan Emerging Markets Dividend Income JEMI · FTSE 250 · Financials | jpmorgan.com manager’s or secretary’s domain | p=reject | -all · 4 lookups | None | 6 of 9 |
| JPMorgan Emerging Markets Growth & Income JMGI · FTSE 250 · Financials | jpmorgan.com manager’s or secretary’s domain | p=reject | -all · 4 lookups | None | 6 of 9 |
| JPMorgan European Discovery JEDT · FTSE 250 · Financials | jpmorgan.com manager’s or secretary’s domain | p=reject | -all · 4 lookups | None | 6 of 9 |
| JPMorgan European Growth & Income JEGI · FTSE 250 · Financials | jpmorgan.com manager’s or secretary’s domain | p=reject | -all · 4 lookups | None | 6 of 9 |
| JPMorgan Global Growth & Income JGGI · FTSE 250 · Financials | jpmorgan.com manager’s or secretary’s domain | p=reject | -all · 4 lookups | None | 6 of 9 |
| JPMorgan Japanese Investment Trust JFJ · FTSE 250 · Financials | jpmorgan.com manager’s or secretary’s domain | p=reject | -all · 4 lookups | None | 6 of 9 |
| Jupiter Fund Management JUP · FTSE 250 · Financials | jupiteram.com | p=reject | -all · 3 lookups | None | 6 of 9 |
| Kainos KNOS · FTSE 250 · Technology | kainos.com | p=reject | -all · 1 lookup | Testing | 8 of 9 |
| Keller Group KLR · FTSE 250 · Industrials | keller.com | p=reject | -all · 5 lookups | None | 6 of 9 |
| Kier Group KIE · FTSE 250 · Industrials | kier.co.uk | p=none (monitor only) | ~all · 1 lookup | None | 4 of 9 |
| Kingfisher plc KGF · FTSE 100 · Consumer Discretionary | kingfisher.com | p=reject | -all · 8 lookups | None | 6 of 9 |
| Lancashire Holdings LRE · FTSE 250 · Financials | lancashiregroup.com | p=reject | ~all · 10 lookups | None | 6 of 9 |
| Land Securities LAND · FTSE 100 · Real Estate | landsec.com | p=reject | -all · 4 lookups | None | 6 of 9 |
| Law Debenture LWDB · FTSE 250 · Financials | lawdeb.com | p=quarantine | ~all · 7 lookups | None | 5 of 9 |
| Legal & General LGEN · FTSE 100 · Financials | group.landg.com | p=reject | -all · 4 lookups | None | 6 of 9 |
| Lion Finance Group BGEO · FTSE 100 · Financials | lfg.uk | p=reject | -all · 2 lookups | None | 6 of 9 |
| Lloyds Banking Group LLOY · FTSE 100 · Financials | lloydsbanking.com | p=reject | -all · 7 lookups | None | 6 of 9 |
| London Stock Exchange Group LSEG · FTSE 100 · Financials | lseg.com | p=reject | -all · 7 lookups | None | 6 of 9 |
| LondonMetric Property LMP · FTSE 100 · Real Estate | londonmetric.com | p=quarantine | ~all · 7 lookups | None | 5 of 9 |
| M&G MNG · FTSE 100 · Financials | mandg.com | p=quarantine | ~all · 4 lookups | None | 5 of 9 |
| Man Group EMG · FTSE 250 · Financials | man.com | p=reject | -all · 8 lookups | Enforce | 9 of 9 |
| Marks & Spencer MKS · FTSE 100 · Consumer Staples | marks-and-spencer.com | p=reject | -all · 8 lookups | None | 6 of 9 |
| ME Group International MEGP · FTSE 250 · Consumer Discretionary | me-group.com | p=none (monitor only) | -all · 6 lookups | None | 4 of 9 |
| Melrose Industries MRO · FTSE 100 · Industrials | melroseplc.net | p=none (monitor only) | -all · 10 lookups | None | 4 of 9 |
| Mercantile Investment Trust MRC · FTSE 250 · Financials | jpmorgan.com manager’s or secretary’s domain | p=reject | -all · 4 lookups | None | 6 of 9 |
| Merchants Trust MRCH · FTSE 250 · Financials | allianzgi.com manager’s or secretary’s domain | p=quarantine | ~all · 2 lookups | None | 5 of 9 |
| Metlen Energy & Metals MTLN · FTSE 100 · Utilities | metlen.com | p=quarantine | ~all · 5 lookups | None | 5 of 9 |
| Metro Bank MTRO · FTSE 250 · Financials | metrobank.plc.uk | p=reject | -all · 12 lookups (over 10) | None | 5 of 9 |
| Michael Page PAGE · FTSE 250 · Industrials | michaelpage.com | p=reject | ~all · 10 lookups | None | 6 of 9 |
| Mitchells & Butlers MAB · FTSE 250 · Consumer Discretionary | mbplc.com | p=quarantine | ~all · 3 lookups | Testing | 7 of 9 |
| Mitie MTO · FTSE 250 · Industrials | mitie.com | p=reject | ~all · 1 lookup | Testing | 8 of 9 |
| Molten Ventures GROW · FTSE 250 · Financials | molten.vc | p=reject | ~all · 5 lookups | None | 6 of 9 |
| Mondi MNDI · FTSE 250 · Industrials | mondigroup.com | p=reject | -all · 1 lookup | None | 6 of 9 |
| Monks Investment Trust MNKS · FTSE 250 · Financials | bailliegifford.com manager’s or secretary’s domain | p=reject | ~all · 1 lookup | Enforce | 9 of 9 |
| MONY Group MONY · FTSE 250 · Consumer Discretionary | monygroup.com | p=reject | -all · 3 lookups | None | 6 of 9 |
| Moonpig MOON · FTSE 250 · Consumer Discretionary | moonpig.com | p=reject | -all · 6 lookups | None | 6 of 9 |
| Morgan Advanced Materials MGAM · FTSE 250 · Industrials | morganplc.com | p=none (monitor only) | ~all · 4 lookups | None | 4 of 9 |
| Morgan Sindall Group MGNS · FTSE 250 · Industrials | morgansindall.com | p=reject | ~all · 7 lookups | None | 6 of 9 |
| Murray Income Trust MUT · FTSE 250 · Financials | nsm.group manager’s or secretary’s domain | p=reject | -all · 1 lookup | None | 6 of 9 |
| Murray International Trust MYI · FTSE 250 · Financials | aberdeenplc.com manager’s or secretary’s domain | p=none (monitor only) | -all · 10 lookups | None | 4 of 9 |
| National Grid plc NG · FTSE 100 · Utilities | nationalgrid.com | p=reject | -all · 2 lookups | None | 6 of 9 |
| NatWest Group NWG · FTSE 100 · Financials | natwest.com | p=reject | -all · 0 lookups | None | 6 of 9 |
| NCC Group NCC · FTSE 250 · Technology | nccgroup.com | p=reject | -all · 8 lookups | None | 6 of 9 |
| Neuberger Private Equity Partners NBPE · FTSE 250 · Financials | nb.com manager’s or secretary’s domain | p=reject | ~all · 7 lookups | None | 6 of 9 |
| Next plc NXT · FTSE 100 · Consumer Discretionary | next.co.uk | p=reject | -all · 7 lookups | None | 6 of 9 |
| Ninety One N91 · FTSE 250 · Financials | ninetyone.com | p=reject | ~all · 7 lookups | Testing | 8 of 9 |
| North American Income Trust NAIT · FTSE 250 · Financials | janushenderson.com manager’s or secretary’s domain | p=none (monitor only) | ~all · 7 lookups | None | 4 of 9 |
| North Atlantic Smaller Companies Investment Trust NAS · FTSE 250 · Financials | harwoodcapital.co.uk manager’s or secretary’s domain | p=none (monitor only) | -all · 2 lookups | None | 3 of 9 |
| Oakley Capital Investments OCI · FTSE 250 · Financials | oakleycapital.com manager’s or secretary’s domain | p=none (monitor only) | ~all · 14 lookups (over 10) | None | 3 of 9 |
| Ocado Group OCDO · FTSE 250 · Consumer Staples | ocado.com | p=none (monitor only) | -all · 6 lookups | None | 4 of 9 |
| OSB Group OSB · FTSE 250 · Financials | osb.co.uk | p=reject | -all · 10 lookups | None | 6 of 9 |
| Oxford Biomedica OXB · FTSE 250 · Health Care | oxb.com | p=none (monitor only) | ~all · 9 lookups | None | 4 of 9 |
| Oxford Instruments OXIG · FTSE 250 · Industrials | oxinst.com | p=none (monitor only) | -all · 2 lookups | None | 4 of 9 |
| Oxford Nanopore Technologies ONT · FTSE 250 · Health Care | nanoporetech.com | p=reject | ~all · 9 lookups | None | 6 of 9 |
| Pacific Horizon Investment Trust PHI · FTSE 250 · Financials | bailliegifford.com manager’s or secretary’s domain | p=reject | ~all · 1 lookup | Enforce | 9 of 9 |
| Pan African Resources PAF · FTSE 250 · Basic Materials | paf.co.za | p=none (monitor only) | noneall · 1 lookup · syntax error | None | 2 of 9 |
| Pantheon Infrastructure PINT · FTSE 250 · Financials | pantheon.com manager’s or secretary’s domain | p=quarantine | -all · 8 lookups | None | 4 of 9 |
| Pantheon International PIN · FTSE 250 · Financials | piplc.com | p=quarantine | -all · 1 lookup | None | 4 of 9 |
| Paragon Banking Group PAG · FTSE 250 · Financials | paragonbank.co.uk | p=reject | ~all · 6 lookups | None | 6 of 9 |
| Patria Private Equity Trust PPET · FTSE 250 · Financials | patria.com manager’s or secretary’s domain | p=quarantine | -all · 9 lookups | None | 5 of 9 |
| Pearson plc PSON · FTSE 100 · Consumer Discretionary | pearson.com | p=reject | ~all · 9 lookups | Enforce | 9 of 9 |
| Pennon Group PNN · FTSE 250 · Utilities | pennon-group.co.uk | p=reject | ~all · 6 lookups | None | 6 of 9 |
| Pershing Square Holdings PSH · FTSE 100 · Financials | pershingsquareholdings.com | p=none (monitor only) | ~all · 2 lookups | None | 3 of 9 |
| Persimmon PSN · FTSE 250 · Consumer Discretionary | persimmonhomes.com | p=none (monitor only) | -all · 6 lookups | None | 4 of 9 |
| Personal Assets Trust PNL · FTSE 250 · Financials | junipartners.com manager’s or secretary’s domain | p=none (monitor only) | -all · 3 lookups | None | 3 of 9 |
| Pets at Home PETS · FTSE 250 · Consumer Discretionary | petsathome.co.uk | p=reject | ~all · 1 lookup | None | 6 of 9 |
| Pinewood Technologies PINE · FTSE 250 · Technology | pinewoodtech.com | p=reject | -all · 1 lookup | None | 6 of 9 |
| Playtech PTEC · FTSE 250 · Technology | playtech.com | p=reject | -all · 10 lookups | None | 6 of 9 |
| Plus500 PLUS · FTSE 250 · Financials | plus500.com | p=reject | -all · 2 lookups | Record only (no valid policy) | 7 of 9 |
| Polar Capital Global Healthcare Trust PCGH · FTSE 250 · Financials | polarcapital.co.uk manager’s or secretary’s domain | p=reject | -all · 5 lookups | None | 6 of 9 |
| Polar Capital Technology Trust PCT · FTSE 100 · Financials | polarcapital.co.uk manager’s or secretary’s domain | p=reject | -all · 5 lookups | None | 6 of 9 |
| Pollen Street Group POLN · FTSE 250 · Financials | pollencap.com | p=reject | -all · 2 lookups | None | 6 of 9 |
| PPHE Hotel Group PPH · FTSE 250 · Consumer Discretionary | pphe.com | p=reject | -all · 6 lookups | None | 6 of 9 |
| Premier Foods PFD · FTSE 250 · Consumer Staples | premierfoods.co.uk | p=reject | -all · 1 lookup | None | 6 of 9 |
| Primary Health Properties PHP · FTSE 250 · Real Estate | phpgroup.co.uk | p=none (monitor only) | -all · 2 lookups | None | 4 of 9 |
| Princes Group PRN · FTSE 250 · Consumer Staples | princes.co.uk | p=none (monitor only) | ~all · 5 lookups | None | 3 of 9 |
| Prudential plc PRU · FTSE 100 · Financials | prudentialplc.com | p=reject | -all · 2 lookups | None | 6 of 9 |
| Qinetiq QQ · FTSE 250 · Industrials | qinetiq.com | p=reject | ~all · 1 lookup | None | 6 of 9 |
| Quilter QLT · FTSE 250 · Financials | quilter.com | p=reject | -all · 1 lookup | None | 6 of 9 |
| Rank Group RNK · FTSE 250 · Consumer Discretionary | rank.com | No DMARC record | -all · 10 lookups | None | 2 of 9 |
| Raspberry Pi Holdings RPI · FTSE 250 · Technology | raspberrypi.com | p=reject | -all · 4 lookups | None | 6 of 9 |
| Rathbones RAT · FTSE 250 · Financials | rathbones.com | p=reject | -all · 8 lookups | None | 6 of 9 |
| Reckitt RKT · FTSE 100 · Consumer Discretionary | reckitt.com | p=none (monitor only) | ~all · 1 lookup | Testing | 6 of 9 |
| RELX REL · FTSE 100 · Consumer Discretionary | relx.com | p=reject | -all · 2 lookups | None | 6 of 9 |
| Renishaw RSW · FTSE 250 · Industrials | renishaw.com | p=reject | -all · 6 lookups | Enforce | 9 of 9 |
| Rentokil Initial RTO · FTSE 100 · Industrials | rentokil-initial.com | p=reject | ~all · 10 lookups | Testing | 8 of 9 |
| RHI Magnesita RHIM · FTSE 250 · Industrials | rhimagnesita.com | p=reject | -all · 5 lookups | None | 6 of 9 |
| Rightmove RMV · FTSE 250 · Consumer Discretionary | rightmove.co.uk | p=reject | ~all · 1 lookup | None | 6 of 9 |
| Rio Tinto RIO · FTSE 100 · Basic Materials | riotinto.com | p=reject | -all · 10 lookups | None | 6 of 9 |
| RIT Capital Partners RCP · FTSE 250 · Financials | ritcap.co.uk | p=reject | -all · 2 lookups | None | 6 of 9 |
| Rolls-Royce Holdings RR · FTSE 100 · Industrials | rolls-royce.com | p=quarantine | ~all · 9 lookups | None | 5 of 9 |
| Rosebank Industries ROSE · FTSE 250 · Industrials | rosebankindustries.com | p=quarantine | ~all · 2 lookups | None | 5 of 9 |
| Rotork ROR · FTSE 250 · Industrials | rotork.com | p=reject | ~all · 3 lookups | None | 6 of 9 |
| RS Group RS1 · FTSE 250 · Industrials | rsgroup.com | p=reject | -all · 11 lookups (over 10) | None | 5 of 9 |
| RTW Biotech Opportunities RTW · FTSE 250 · Financials | rtwfunds.com manager’s or secretary’s domain | p=reject | -all · 6 lookups | None | 5 of 9 |
| Ruffer Investment Company RICA · FTSE 250 · Financials | apexgroup.com manager’s or secretary’s domain | p=quarantine | -all · 8 lookups | None | 5 of 9 |
| Safestore SAFE · FTSE 250 · Real Estate | safestore.co.uk | p=reject | ~all · 3 lookups | None | 6 of 9 |
| Saga SAGA · FTSE 250 · Consumer Discretionary | saga.co.uk | p=reject | noneall · 0 lookups | None | 5 of 9 |
| Sage Group SGE · FTSE 100 · Technology | sage.com | p=quarantine | -all · 5 lookups | None | 5 of 9 |
| Sainsbury's SBRY · FTSE 100 · Consumer Staples | sainsburys.co.uk | p=reject | ~all · 9 lookups | Record only (no valid policy) | 6 of 9 |
| Savills SVS · FTSE 250 · Real Estate | savills.com | p=none (monitor only) | -all · 8 lookups | None | 4 of 9 |
| Schiehallion Fund MNTN · FTSE 250 · Financials | bailliegifford.com manager’s or secretary’s domain | p=reject | ~all · 1 lookup | Enforce | 9 of 9 |
| Schroder Asian Total Return Investment Company ATR · FTSE 250 · Financials | schroders.com manager’s or secretary’s domain | p=reject | -all · 10 lookups | None | 6 of 9 |
| Schroder AsiaPacific Fund SDP · FTSE 250 · Financials | schroders.com manager’s or secretary’s domain | p=reject | -all · 10 lookups | None | 6 of 9 |
| Schroder Oriental Income Fund SOI · FTSE 250 · Financials | schroders.com manager’s or secretary’s domain | p=reject | -all · 10 lookups | None | 6 of 9 |
| Schroders SDR · FTSE 100 · Financials | schroders.com | p=reject | -all · 10 lookups | None | 6 of 9 |
| Scottish American Investment Company SAIN · FTSE 250 · Financials | bailliegifford.com manager’s or secretary’s domain | p=reject | ~all · 1 lookup | Enforce | 9 of 9 |
| Scottish Mortgage Investment Trust SMT · FTSE 100 · Financials | bailliegifford.com manager’s or secretary’s domain | p=reject | ~all · 1 lookup | Enforce | 9 of 9 |
| SDCL Efficiency Income Trust SEIT · FTSE 250 · Energy | sdclgroup.com manager’s or secretary’s domain | p=quarantine | ~all · 3 lookups | None | 5 of 9 |
| Segro SGRO · FTSE 100 · Real Estate | segro.com | p=quarantine | ~all · 10 lookups | None | 5 of 9 |
| Senior SNR · FTSE 250 · Industrials | seniorplc.com | p=none (monitor only) | -all · 10 lookups | None | 4 of 9 |
| Seraphim Space Investment Trust SSIT · FTSE 250 · Financials | ocorian.com manager’s or secretary’s domain | p=reject | ~all · 1 lookup | None | 6 of 9 |
| Serco SRP · FTSE 250 · Industrials | serco.com | p=reject | -all · 9 lookups | Enforce | 9 of 9 |
| Severn Trent SVT · FTSE 100 · Utilities | severntrent.co.uk | p=quarantine (pct below 100) | ~all · 6 lookups | None | 4 of 9 |
| Shaftesbury Capital SHC · FTSE 250 · Real Estate | shaftesburycapital.com | p=reject | ~all · 8 lookups | None | 6 of 9 |
| Shawbrook Bank SHAW · FTSE 250 · Financials | shawbrook.co.uk | p=quarantine | ~all · 7 lookups | None | 5 of 9 |
| Shell plc SHEL · FTSE 100 · Energy | shell.com | p=quarantine | -all · 7 lookups | Enforce | 8 of 9 |
| Sirius Real Estate SRE · FTSE 250 · Real Estate | sirius-real-estate.com | p=none (monitor only) | -all · 2 lookups | None | 4 of 9 |
| Smith & Nephew SN · FTSE 100 · Health Care | smith-nephew.com | p=none (monitor only) | ~all · 1 lookup | None | 4 of 9 |
| Smiths Group SMIN · FTSE 100 · Industrials | smiths.com | p=reject | -all · 1 lookup | None | 5 of 9 |
| Softcat SCT · FTSE 250 · Technology | softcat.com | p=quarantine | -all · 6 lookups | Testing | 7 of 9 |
| Spirax Group SPX · FTSE 100 · Industrials | spiraxgroup.com | p=reject | -all · 2 lookups | None | 6 of 9 |
| Spire Healthcare SPI · FTSE 250 · Health Care | spirehealthcare.com | p=reject | -all · 9 lookups | Enforce | 9 of 9 |
| SSE plc SSE · FTSE 100 · Utilities | sse.com | p=reject | -all · 1 lookup | None | 6 of 9 |
| SSP Group SSPG · FTSE 250 · Consumer Discretionary | ssp-intl.com | p=none (monitor only) | ~all · 8 lookups | None | 4 of 9 |
| St. James's Place STJ · FTSE 100 · Financials | sjp.co.uk | p=reject | -all · 9 lookups | None | 6 of 9 |
| Standard Chartered STAN · FTSE 100 · Financials | sc.com | p=reject | ~all · 7 lookups | None | 6 of 9 |
| Standard Life SDLF · FTSE 100 · Financials | standardlife.com | p=reject | ~all · 10 lookups | None | 6 of 9 |
| Supermarket Income REIT SUPR · FTSE 250 · Real Estate | suprplc.com | p=none (monitor only) | -all · 2 lookups | None | 4 of 9 |
| Syncona SYNC · FTSE 250 · Health Care | synconaltd.com | p=reject (pct below 100) | ~all · 3 lookups | None | 5 of 9 |
| Target Healthcare REIT THRL · FTSE 250 · Real Estate | targetfundmanagers.com manager’s or secretary’s domain | p=reject | -all · 9 lookups | None | 6 of 9 |
| Tate & Lyle TATE · FTSE 250 · Consumer Staples | tateandlyle.com | p=none (monitor only) | ~all · 12 lookups (over 10) | None | 3 of 9 |
| Taylor Wimpey TW · FTSE 250 · Consumer Discretionary | taylorwimpey.com | p=none (monitor only) | -all · 6 lookups | None | 4 of 9 |
| TBC Bank TBCG · FTSE 250 · Financials | tbcbank.com.ge | p=quarantine | -all · 0 lookups | None | 5 of 9 |
| Telecom Plus TEP · FTSE 250 · Telecommunications | telecomplus.co.uk | p=reject | -all · 0 lookups | None | 6 of 9 |
| Temple Bar Investment Trust TMPL · FTSE 250 · Financials | rwcpartners.com manager’s or secretary’s domain | p=reject | ~all · 11 lookups (over 10) | None | 5 of 9 |
| Tesco TSCO · FTSE 100 · Consumer Staples | tesco.com | p=reject | -all · 6 lookups | None | 6 of 9 |
| The Renewables Infrastructure Group TRIG · FTSE 250 · Financials | ircp.com manager’s or secretary’s domain | No DMARC record | -all · 11 lookups (over 10) | None | 1 of 9 |
| THG THG · FTSE 250 · Consumer Staples | thg.com | p=none (monitor only) | -all · 1 lookup | None | 4 of 9 |
| TP ICAP TCAP · FTSE 250 · Industrials | tpicap.com | p=quarantine (pct below 100) | ~all · 6 lookups | None | 4 of 9 |
| TR Property Investment Trust TRY · FTSE 250 · Financials | trproperty.co.uk | p=none (monitor only) | -all · 8 lookups | None | 4 of 9 |
| Trainline TRN · FTSE 250 · Industrials | trainline.com | p=reject | -all · 2 lookups | None | 6 of 9 |
| Travis Perkins TPK · FTSE 250 · Industrials | travisperkins.co.uk | p=reject | -all · 7 lookups | None | 6 of 9 |
| Tritax Big Box REIT BBOX · FTSE 100 · Real Estate | tritaxbigbox.co.uk | p=none (monitor only) | -all · 4 lookups | None | 4 of 9 |
| Trustpilot TRST · FTSE 250 · Technology | trustpilot.com | p=reject | -all · 7 lookups | None | 6 of 9 |
| Unilever ULVR · FTSE 100 · Consumer Discretionary | unilever.com | p=reject | -all · 5 lookups | Enforce | 9 of 9 |
| Unite Group UTG · FTSE 250 · Real Estate | unitestudents.com | p=none (monitor only) | ~all · 7 lookups | None | 4 of 9 |
| United Utilities UU · FTSE 100 · Utilities | uuplc.co.uk | p=none (monitor only) | -all · 2 lookups | None | 4 of 9 |
| Utilico Emerging Markets UEM · FTSE 250 · Financials | icm.limited manager’s or secretary’s domain | p=none (monitor only) | ~all · 22 lookups (over 10) | None | 3 of 9 |
| Vesuvius VSVS · FTSE 250 · Industrials | vesuvius.com | p=quarantine | ~all · 1 lookup | None | 5 of 9 |
| Victrex VCT · FTSE 250 · Basic Materials | victrex.com | p=quarantine | ~all · 7 lookups | None | 5 of 9 |
| VinaCapital Vietnam Opportunity Fund VOF · FTSE 250 · Financials | vinacapital.com manager’s or secretary’s domain | p=reject | ~all · 5 lookups | None | 5 of 9 |
| Vistry Group VTY · FTSE 250 · Consumer Discretionary | vistrygroup.co.uk | p=quarantine | -all · 5 lookups | None | 5 of 9 |
| Vodafone Group VOD · FTSE 100 · Telecommunications | vodafone.com | p=reject | ~all · 5 lookups | None | 7 of 9 |
| Volex VLX · FTSE 250 · Industrials | volex.com | p=reject (pct below 100) | ~all · 6 lookups | None | 5 of 9 |
| Volution Group FAN · FTSE 250 · Industrials | volutiongroupplc.com | p=reject | ~all · 3 lookups | None | 6 of 9 |
| Watches of Switzerland WOSG · FTSE 250 · Consumer Discretionary | thewosgroup.com | p=reject | -all · 7 lookups | None | 6 of 9 |
| Weir WEIR · FTSE 100 · Industrials | mail.weir | p=none (monitor only) | -all · 7 lookups | None | 5 of 9 |
| Wetherspoons JDW · FTSE 250 · Consumer Discretionary | jdwetherspoon.co.uk | p=quarantine | ~all · 10 lookups | None | 5 of 9 |
| Whitbread WTB · FTSE 100 · Consumer Discretionary | whitbread.com | p=none (monitor only) | ~all · 6 lookups | None | 4 of 9 |
| WHSmith SMWH · FTSE 250 · Consumer Discretionary | whsmith.co.uk | p=quarantine | -all · 10 lookups | None | 5 of 9 |
| Wickes WIX · FTSE 250 · Consumer Discretionary | wickes.co.uk | p=none (monitor only) | -all · 7 lookups | None | 4 of 9 |
| Wizz Air WIZZ · FTSE 250 · Consumer Discretionary | wizzair.com | p=reject | ~all · 8 lookups | None | 6 of 9 |
| Workspace Group WKP · FTSE 250 · Real Estate | workspace.co.uk | p=none (monitor only) | ~all · 7 lookups | None | 4 of 9 |
| Worldwide Healthcare Trust WWH · FTSE 250 · Financials | frostrow.com manager’s or secretary’s domain | p=none (monitor only) | -all · 2 lookups | None | 4 of 9 |
| WPP WPP · FTSE 250 · Consumer Discretionary | wpp.com | p=reject | ~all · 2 lookups | None | 6 of 9 |
| XP Power XPP · FTSE 250 · Industrials | xppower.com | p=reject | -all · 8 lookups | None | 5 of 9 |
| XPS Pensions XPS · FTSE 250 · Financials | xpsgroup.com | p=reject | ~all · 6 lookups | Enforce | 9 of 9 |
| Zigup ZIG · FTSE 250 · Industrials | zigup.com | p=none (monitor only) | -all · 5 lookups | None | 4 of 9 |
Companies can ask for a correction or a re-measurement at webmaster@servnetuk.com. Corrections are shown with both the original and the new measurement date.
Investment trusts on manager domains
73 investment trusts publish a contact address on the domain of their investment manager, adviser or company secretary, or have their website on their manager's domain, not on a domain of their own. Those 39 domains are measured once each. 5 of them are also the own email domain of a FTSE 350 company (3i, Aberdeen Group, Foresight Group, ICG and Schroders) and count in the headline only as that company's domain. As observed on 19 September 2026, 28 of the 39 domains (71.8%) had a DMARC policy of quarantine or reject; without those 5, 24 of 34 (70.6%). Every managed row is labelled as the manager's or secretary's domain: the records describe that domain, not the trust's own.
Compared with the UK public sector
Servnet's UK public sector DMARC census was measured on the same day with the same code, and only measures defined identically in both are compared here (the public-sector yardstick differs). Using the census rules (the domain's own record only, and pct below 100 counted as not enforcing), as observed on 19 September 2026: DMARC at quarantine or reject applied to all failing mail from the domain (pct 100), on domains that send mail, 195 of 267 FTSE companies (73.0%) and 649 of 821 public-sector domains (79.0%); across all 907 public-sector domains, including 86 that send no mail, 653 (72.0%). MTA-STS in enforce mode: 12 of 267 FTSE companies (4.5%) and 219 of 907 public-sector domains (24.1%). A TLS-RPT record: 27 of 267 FTSE companies (10.1%; census rule, where a lookup that failed DNSSEC validation counts as no record) and 416 of 907 public-sector domains (45.9%), although 284 of the 416 public-sector TLS-RPT records still include the retired NCSC Mail Check address.
See the UK public sector DMARC census.
Previous studies of FTSE email authentication
Email authentication at FTSE companies has been measured before. This study builds on that work; the main differences are listed after the table.
| Publisher | Date | Companies | What was measured | Per-company data |
|---|---|---|---|---|
| Agari (reported by SecurityWeek) | August 2017 | FTSE 100 (with the Fortune 500) | DMARC adoption and policy level (none, quarantine, reject) | No |
| Agari | 2019 | FTSE 100 among several national indices | DMARC adoption and p=reject | No |
| Rapid7, Industry Cyber-Exposure Report | April 2021 | FTSE 350 | Internet-facing exposure, including valid DMARC policies | No |
| Rapid7, The FTSE 350 Cyber Attack Surface | April 2023 | FTSE 350 | Valid DMARC policies and DNSSEC, alongside open ports and web-server software | No |
| Proofpoint (ASX 200 analysis) | June 2023 | FTSE 100 as a comparator | DMARC adoption rate | No |
| Red Sift | January 2024; guide with January 2026 data | FTSE 100 and FTSE 250 among listed companies worldwide | DMARC records against the Google and Yahoo sender rules (2024); share at quarantine or reject (2026) | No |
| Hornetsecurity (Infosecurity Europe; reported by IT Pro) | June 2025 | FTSE 100 | DMARC configuration (method not published) | No |
| CaptainDNS Observatory | Weekly (latest scan week shown: 23 March 2026, as seen on 19 September 2026) | FTSE 100 among 16 indices | SPF, DKIM, DMARC, BIMI, MTA-STS, DANE and DNSSEC, with a composite score and letter grade | Yes (company rankings with scores and grades) |
| PowerDMARC, UK DMARC & MTA-STS Adoption Report | 2026 | UK domains by sector (not FTSE) | DMARC, SPF, MTA-STS and DNSSEC | No |
Scroll the table sideways to see every column →
- All 350 constituents checked at company level: 340 measured on the email domain evidenced by an address the company or trust publishes (or its manager's or secretary's domain), 10 not measured because no email domain could be identified.
- Every control sourced to NCSC guidance with a quoted basis, and the NCSC fix for each gap. No composite score, grade or league table.
- DMARC read under the new standard, RFC 9989 (May 2026), alongside RFC 7489: pct and t tags, organisational-domain inheritance and multiple records.
- MTA-STS policy files fetched and read, and TLS-RPT measured, for FTSE 250 companies as well as the FTSE 100, with the effect of the Mail Check retirement shown.
- Investment trusts that use their manager's domain counted once per domain and kept out of the company headline.
- An open, reproducible per-company dataset, comparable with the UK public sector census on the measures defined identically in both, measured the same day with the same code.
Method, yardstick and licence
The FTSE 100 and FTSE 250 constituents effective from 21 September 2026 were taken from Wikipedia and checked against LSEG's index-review announcements. Each company's email domain comes from a role address it publishes (on its website, in its annual report or other company documents, or in its security.txt), with the evidence URL in the data; the evidence was re-checked on 19 September 2026 for whether the address is visible on the cited page (hidden parts of the page are left out), and is marked medium where the address is only a contact-form routing value, is shown only behind a disclaimer or is on the manager's shared investment-trust contact page; where the page could be read only through a third-party fetch service or could not be re-opened on 19 September 2026; where only individuals' mailboxes are published; or where a trust's website is hosted on its manager's domain. Public DNS was read over DNS-over-HTTPS from Cloudflare and Google on 19 September 2026, and MTA-STS policy files were fetched over HTTPS. Controls are sourced to NCSC guidance, mailbox-provider sender rules and RFCs, including RFC 9989. Tiers are Servnet's grouping of NCSC recommendations; NCSC has not reviewed or endorsed this study. Contains public sector information licensed under the Open Government Licence v3.0.
Company names, tickers, index membership and sector labels are adapted from the Wikipedia articles "FTSE 100 Index" (revision of 18 September 2026) and "FTSE 250 Index" (revision of 18 September 2026) by Wikipedia contributors, licensed under CC BY-SA 4.0. Changes: checked against LSEG index-review announcements, email domains added by Servnet, sector labels grouped into industry groups by Servnet. This dataset (CSV and JSON) is released under CC BY-SA 4.0; please credit "Servnet FTSE 350 Email Security Study 2026" with a link to this page.
FTSE®, FTSE 100, FTSE 250, FTSE 350 and ICB® are trade marks of the London Stock Exchange Group. Servnet is not affiliated with or endorsed by LSEG or FTSE Russell; index membership is reported as a fact.
Tiers are Servnet's grouping of NCSC recommendations; NCSC has not reviewed or endorsed this study. Contains public sector information licensed under the Open Government Licence v3.0. (https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/)
Scroll the chart sideways to see all of it →
Downloads (CC BY-SA 4.0): CSV · README (columns and evidence) · JSON.
Questions
What is DMARC, and why does NCSC recommend quarantine or reject?
DMARC is a DNS record at _dmarc.<your domain> that tells receiving mail servers what to do with mail that claims to be from your domain but fails SPF and DKIM checks aligned with it: nothing (p=none), treat it as suspicious (p=quarantine) or refuse it (p=reject). It also asks receivers to send you aggregate reports (the rua tag). NCSC says a policy of none will not prevent illegitimate emails being sent from your domains, that you must at least use quarantine for that, and that reject on all of your domains is the best way to prevent spoofing.
What are MTA-STS and TLS-RPT?
MTA-STS (RFC 8461) lets a domain that receives email tell sending servers to deliver only over an encrypted, certificate-checked connection to its listed mail servers. It is a _mta-sts DNS record plus a policy file at https://mta-sts.<your domain>/.well-known/mta-sts.txt, in testing or enforce mode. TLS-RPT (RFC 8460) is a DNS record at _smtp._tls.<your domain> that asks senders to report delivery problems over TLS. NCSC recommends starting MTA-STS in testing mode with TLS-RPT, then moving to enforce.
How can an organisation move from p=none to p=reject safely?
Follow the NCSC steps. Publish p=none with a rua address at a DMARC report-processing tool you control. Use the reports to find every service that sends mail as your domain, and make each one pass SPF or DKIM aligned with your domain (NCSC recommends DKIM; keep SPF within 10 DNS lookups). Then move to p=quarantine, and to p=reject once reports show legitimate mail passing. Set the policy for subdomains (sp) as well, and give parked domains v=spf1 -all, p=reject and a null MX. Receivers that follow RFC 9989 ignore the pct tag, so a percentage roll-out may not be applied everywhere; RFC 9989 has a t=y testing flag instead.
What changed with RFC 9989?
RFC 9989 (May 2026) is the Standards Track version of DMARC and obsoletes RFC 7489 and RFC 9091; aggregate reporting is specified separately in RFC 9990. It removes the pct tag (receivers ignore unknown tags), adds a t=y testing flag (reject is then applied as quarantine, and quarantine as none), brings in the np tag for non-existent subdomains (from RFC 9091), finds the organisational domain by a DNS tree walk instead of the Public Suffix List, and discards all records when a name has more than one. It also defines "Enforcement" as every policy for an organisational domain and all subdomains below it being something other than p=none. This study counts the DMARC policy that applies to mail from the domain itself as quarantine or reject only where RFC 7489 and RFC 9989 would apply the same policy to that mail (for example, quarantine with pct below 100 is not counted). It is narrower than RFC 9989's "Enforcement": 12 of the 198 records counted set sp=none.
NCSC Mail Check has been retired. What should users do?
NCSC retired Mail Check and Web Check on 31 March 2026, and users no longer receive findings from them. If a DMARC rua or TLS-RPT record still points at the Mail Check address, replace it with your own mailbox or a report-processing tool. NCSC's retirement notice points to commercial attack-surface management products as alternatives and recommends its Check your cyber security service, which checks email anti-spoofing and email privacy. Some older NCSC guidance pages still mention Mail Check.
Do Gmail, Yahoo and Outlook.com require DMARC?
For bulk senders, yes: a DMARC record is required, and a policy of p=none is enough. Since February 2024 Google has required senders of about 5,000 messages a day or more to Gmail accounts, and Yahoo has required bulk senders, to set up SPF, DKIM and a DMARC record. Microsoft said that from 5 May 2025 Outlook.com would reject mail from domains sending over 5,000 messages a day that do not meet its SPF, DKIM and DMARC requirements, with the code "550; 5.7.515". None of the three requires quarantine or reject. This study does not say whether a company meets these rules: DKIM, alignment and sending volumes cannot be seen in DNS.
What does "DMARC enforced" mean in this study?
It means the DMARC policy that applies to mail from this domain is quarantine or reject. A p=reject record with pct below 100 counts (the rest is quarantined), but quarantine with pct below 100 or t=y does not. It is narrower than RFC 9989's "Enforcement", which also covers every subdomain: 12 of the 198 records counted here set sp=none for subdomains.
How was each company's email domain chosen, and how can it be corrected?
From role addresses the company publishes, such as investor relations, the company secretary or the press office, on its website, in its annual report or other company documents, or in its security.txt file. The page each address was read from is in the data, with the strength of that evidence: high where a role address on the domain is visible on the page, and medium where the address is only a contact-form routing value, is shown only behind a disclaimer or is on the manager's shared investment-trust contact page; where the page could be read only through a third-party fetch service or could not be re-opened on 19 September 2026; where only individuals' mailboxes are published; or where a trust's website is hosted on its manager's domain. 10 companies whose email domain could not be identified are left out of the figures and the lookup, and investment trusts that publish their manager's or company secretary's address are reported separately, labelled as that domain. Companies can ask for a correction or a re-measurement at webmaster@servnetuk.com. Corrections are shown with both the original and the new measurement date.
Talk to a UK specialist
Get expert advice or a no-obligation quote — servers, storage, networking, maintenance, finance and cloud. We reply the same working day.