You should have given them an explicit list of domains to query for in the headers.
Submitted two requests two days ago that might be a bit better than providing the domains, though. One for DNS resolution logs of the mayor's office and another for all domains and times for all emails sent from their office. If just one of those are successful, then I don't need to play any more FOIA games with mayor's office.
Sure, I could just submit the same request to their IT department like those two... but, no. I'm getting that information from the mayor's office directly, dammit. :)
Brilliant. I love you.