{ "asOf": "2026-09-05", "_meta": { "source": "full rich census, S3 snapshot=census-2026-09, deduped per-domain", "graded_note": "graded = domains carrying a grade: the graded disposition plus the dead ones (316,600,902 in September 2026). This is the base of the headline per-check shares; a check with its own smaller base carries n and denominator_note.", "caveats": { "tls": "negotiated-version distribution only (legacy 1.0/1.1 not enumerable); weak_cipher is an overlay flag, not a partition member", "certificate": "valid/invalid only; detailed problem breakdown in cert-problems.json (D5)", "csp": "effective=pass, weak unsplit (=0)", "ipv6": "AAAA-presence from the raw DNS AAAA records (the ipv6-support check passes ~100% and is not used); scaled from the raw pass to the deduped graded denominator" }, "idn_note": "IDN TLDs (xn--) are not broken out per check in this export: the extract merged them under a single key, which has been removed. Their grade aggregates are in tlds.json and tld-grades.csv." }, "total": { "graded": 316600902, "checks": { "dmarc": { "n": 316600902, "na": 0, "states": { "absent": 238156049, "none": 41818395, "quarantine": 19883765, "reject": 16714260, "invalid": 28433 }, "rua_present": 31037403 }, "spf": { "n": 316600902, "na": 0, "states": { "absent": 166497698, "hardfail": 57704425, "softfail": 84153064, "neutral": 5090282, "plus_all": 39589, "invalid": 3115844 } }, "dkim": { "n": 75823110, "na": 240777792, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 37999462, "none_observed": 37823648 } }, "mx": { "n": 316600902, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 173282307, "absent": 143318595 } }, "reverse_dns": { "n": 173216907, "na": 143383995, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 134848964, "none": 38367943 } }, "caa": { "n": 313913664, "na": 2687238, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 4325806, "absent": 309587858 } }, "dnssec": { "n": 316600902, "na": 0, "states": { "signed_valid": 21732692, "signed_broken": 173606, "unsigned": 294694604 } }, "https": { "n": 316600902, "na": 0, "states": { "https": 212154494, "redirects": 0, "http_only": 104446408 } }, "tls": { "n": 212154494, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 200260207, "tls12": 11894287, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 212154494, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 189117751, "invalid": 23036743 } }, "hsts": { "n": 212154494, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 44684372, "absent": 167470122 } }, "csp": { "n": 125815036, "na": 190785866, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 12734849, "weak": 0, "absent": 113080187 } }, "clickjacking": { "n": 125815036, "na": 190785866, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 19226529, "absent": 106588507 } }, "mime_sniffing": { "n": 125815036, "na": 190785866, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 22381337, "absent": 103433699 } }, "referrer_policy": { "n": 125815036, "na": 190785866, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 9952036, "absent": 115863000 } }, "secure_by_default": { "n": 111303315, "na": 205297587, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1384815, "not_all": 109918500 } }, "ipv6": { "n": 316600902, "na": 0, "states": { "aaaa": 69055623, "none": 247545279 } } } }, "byTld": { "ac": { "graded": 12261, "checks": { "dmarc": { "n": 12261, "na": 0, "states": { "absent": 9531, "none": 1405, "quarantine": 780, "reject": 543, "invalid": 2 }, "rua_present": 1298 }, "spf": { "n": 12261, "na": 0, "states": { "absent": 6493, "hardfail": 1727, "softfail": 3816, "neutral": 178, "plus_all": 1, "invalid": 46 } }, "dkim": { "n": 2635, "na": 9626, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1477, "none_observed": 1158 } }, "mx": { "n": 12261, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6293, "absent": 5968 } }, "reverse_dns": { "n": 6285, "na": 5976, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5142, "none": 1143 } }, "caa": { "n": 12161, "na": 100, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 246, "absent": 11915 } }, "dnssec": { "n": 12261, "na": 0, "states": { "signed_valid": 638, "signed_broken": 6, "unsigned": 11617 } }, "https": { "n": 12261, "na": 0, "states": { "https": 8848, "redirects": 0, "http_only": 3413 } }, "tls": { "n": 8848, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8470, "tls12": 378, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8848, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8278, "invalid": 570 } }, "hsts": { "n": 8848, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1824, "absent": 7024 } }, "csp": { "n": 5177, "na": 7084, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 383, "weak": 0, "absent": 4794 } }, "clickjacking": { "n": 5177, "na": 7084, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 767, "absent": 4410 } }, "mime_sniffing": { "n": 5177, "na": 7084, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 945, "absent": 4232 } }, "referrer_policy": { "n": 5177, "na": 7084, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 653, "absent": 4524 } }, "secure_by_default": { "n": 4599, "na": 7662, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 82, "not_all": 4517 } }, "ipv6": { "n": 12261, "na": 0, "states": { "aaaa": 3755, "none": 8506 } } } }, "academy": { "graded": 59317, "checks": { "dmarc": { "n": 59317, "na": 0, "states": { "absent": 40917, "none": 9771, "quarantine": 5433, "reject": 3192, "invalid": 4 }, "rua_present": 7950 }, "spf": { "n": 59317, "na": 0, "states": { "absent": 30643, "hardfail": 7194, "softfail": 19866, "neutral": 974, "plus_all": 11, "invalid": 629 } }, "dkim": { "n": 12241, "na": 47076, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 6259, "none_observed": 5982 } }, "mx": { "n": 59317, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 33684, "absent": 25633 } }, "reverse_dns": { "n": 33663, "na": 25654, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 29348, "none": 4315 } }, "caa": { "n": 59055, "na": 262, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2170, "absent": 56885 } }, "dnssec": { "n": 59317, "na": 0, "states": { "signed_valid": 4812, "signed_broken": 39, "unsigned": 54466 } }, "https": { "n": 59317, "na": 0, "states": { "https": 32897, "redirects": 0, "http_only": 26420 } }, "tls": { "n": 32897, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 31677, "tls12": 1220, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 32897, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 28895, "invalid": 4002 } }, "hsts": { "n": 32897, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 7646, "absent": 25251 } }, "csp": { "n": 22146, "na": 37171, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2449, "weak": 0, "absent": 19697 } }, "clickjacking": { "n": 22146, "na": 37171, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4080, "absent": 18066 } }, "mime_sniffing": { "n": 22146, "na": 37171, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4430, "absent": 17716 } }, "referrer_policy": { "n": 22146, "na": 37171, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2560, "absent": 19586 } }, "secure_by_default": { "n": 18003, "na": 41314, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 283, "not_all": 17720 } }, "ipv6": { "n": 59317, "na": 0, "states": { "aaaa": 12520, "none": 46797 } } } }, "ad": { "graded": 6980, "checks": { "dmarc": { "n": 6980, "na": 0, "states": { "absent": 5378, "none": 833, "quarantine": 471, "reject": 298, "invalid": 0 }, "rua_present": 600 }, "spf": { "n": 6980, "na": 0, "states": { "absent": 3267, "hardfail": 1147, "softfail": 2396, "neutral": 60, "plus_all": 1, "invalid": 109 } }, "dkim": { "n": 1540, "na": 5440, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1014, "none_observed": 526 } }, "mx": { "n": 6980, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3865, "absent": 3115 } }, "reverse_dns": { "n": 3862, "na": 3118, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3284, "none": 578 } }, "caa": { "n": 6956, "na": 24, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 195, "absent": 6761 } }, "dnssec": { "n": 6980, "na": 0, "states": { "signed_valid": 474, "signed_broken": 2, "unsigned": 6504 } }, "https": { "n": 6980, "na": 0, "states": { "https": 5537, "redirects": 0, "http_only": 1443 } }, "tls": { "n": 5537, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5347, "tls12": 190, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5537, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5198, "invalid": 339 } }, "hsts": { "n": 5537, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1401, "absent": 4136 } }, "csp": { "n": 3248, "na": 3732, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 501, "weak": 0, "absent": 2747 } }, "clickjacking": { "n": 3248, "na": 3732, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 731, "absent": 2517 } }, "mime_sniffing": { "n": 3248, "na": 3732, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 887, "absent": 2361 } }, "referrer_policy": { "n": 3248, "na": 3732, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 701, "absent": 2547 } }, "secure_by_default": { "n": 3079, "na": 3901, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 298, "not_all": 2781 } }, "ipv6": { "n": 6980, "na": 0, "states": { "aaaa": 2057, "none": 4923 } } } }, "ae": { "graded": 151673, "checks": { "dmarc": { "n": 151673, "na": 0, "states": { "absent": 89652, "none": 48177, "quarantine": 7369, "reject": 6455, "invalid": 20 }, "rua_present": 16462 }, "spf": { "n": 151673, "na": 0, "states": { "absent": 45006, "hardfail": 29124, "softfail": 74948, "neutral": 1214, "plus_all": 18, "invalid": 1363 } }, "dkim": { "n": 82374, "na": 69299, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 53545, "none_observed": 28829 } }, "mx": { "n": 151673, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 122334, "absent": 29339 } }, "reverse_dns": { "n": 122280, "na": 29393, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 95311, "none": 26969 } }, "caa": { "n": 151000, "na": 673, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3943, "absent": 147057 } }, "dnssec": { "n": 151673, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 151673 } }, "https": { "n": 151673, "na": 0, "states": { "https": 135921, "redirects": 0, "http_only": 15752 } }, "tls": { "n": 135921, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 130559, "tls12": 5362, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 135921, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 129665, "invalid": 6256 } }, "hsts": { "n": 135921, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 30195, "absent": 105726 } }, "csp": { "n": 88385, "na": 63288, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 22351, "weak": 0, "absent": 66034 } }, "clickjacking": { "n": 88385, "na": 63288, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 16617, "absent": 71768 } }, "mime_sniffing": { "n": 88385, "na": 63288, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 18428, "absent": 69957 } }, "referrer_policy": { "n": 88385, "na": 63288, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 7817, "absent": 80568 } }, "secure_by_default": { "n": 85454, "na": 66219, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1255, "not_all": 84199 } }, "ipv6": { "n": 151673, "na": 0, "states": { "aaaa": 39878, "none": 111795 } } } }, "aero": { "graded": 12632, "checks": { "dmarc": { "n": 12632, "na": 0, "states": { "absent": 8902, "none": 1826, "quarantine": 831, "reject": 1071, "invalid": 2 }, "rua_present": 1916 }, "spf": { "n": 12632, "na": 0, "states": { "absent": 4484, "hardfail": 3613, "softfail": 3490, "neutral": 806, "plus_all": 2, "invalid": 237 } }, "dkim": { "n": 5272, "na": 7360, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2637, "none_observed": 2635 } }, "mx": { "n": 12632, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9417, "absent": 3215 } }, "reverse_dns": { "n": 9418, "na": 3214, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8524, "none": 894 } }, "caa": { "n": 12522, "na": 110, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 342, "absent": 12180 } }, "dnssec": { "n": 12632, "na": 0, "states": { "signed_valid": 310, "signed_broken": 5, "unsigned": 12317 } }, "https": { "n": 12632, "na": 0, "states": { "https": 8056, "redirects": 0, "http_only": 4576 } }, "tls": { "n": 8056, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7384, "tls12": 672, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8056, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6419, "invalid": 1637 } }, "hsts": { "n": 8056, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1650, "absent": 6406 } }, "csp": { "n": 5441, "na": 7191, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 568, "weak": 0, "absent": 4873 } }, "clickjacking": { "n": 5441, "na": 7191, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1671, "absent": 3770 } }, "mime_sniffing": { "n": 5441, "na": 7191, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 941, "absent": 4500 } }, "referrer_policy": { "n": 5441, "na": 7191, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 448, "absent": 4993 } }, "secure_by_default": { "n": 3979, "na": 8653, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 74, "not_all": 3905 } }, "ipv6": { "n": 12632, "na": 0, "states": { "aaaa": 2541, "none": 10091 } } } }, "africa": { "graded": 52851, "checks": { "dmarc": { "n": 52851, "na": 0, "states": { "absent": 34702, "none": 9206, "quarantine": 5827, "reject": 3103, "invalid": 13 }, "rua_present": 8251 }, "spf": { "n": 52851, "na": 0, "states": { "absent": 18988, "hardfail": 7700, "softfail": 21870, "neutral": 4055, "plus_all": 4, "invalid": 234 } }, "dkim": { "n": 14163, "na": 38688, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 9088, "none_observed": 5075 } }, "mx": { "n": 52851, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 38827, "absent": 14024 } }, "reverse_dns": { "n": 38810, "na": 14041, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 32095, "none": 6715 } }, "caa": { "n": 52126, "na": 725, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 685, "absent": 51441 } }, "dnssec": { "n": 52851, "na": 0, "states": { "signed_valid": 692, "signed_broken": 40, "unsigned": 52119 } }, "https": { "n": 52851, "na": 0, "states": { "https": 32239, "redirects": 0, "http_only": 20612 } }, "tls": { "n": 32239, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 31328, "tls12": 911, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 32239, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 26662, "invalid": 5577 } }, "hsts": { "n": 32239, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 6147, "absent": 26092 } }, "csp": { "n": 23793, "na": 29058, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1726, "weak": 0, "absent": 22067 } }, "clickjacking": { "n": 23793, "na": 29058, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2731, "absent": 21062 } }, "mime_sniffing": { "n": 23793, "na": 29058, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3589, "absent": 20204 } }, "referrer_policy": { "n": 23793, "na": 29058, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2212, "absent": 21581 } }, "secure_by_default": { "n": 20072, "na": 32779, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 235, "not_all": 19837 } }, "ipv6": { "n": 52851, "na": 0, "states": { "aaaa": 6730, "none": 46121 } } } }, "ag": { "graded": 13391, "checks": { "dmarc": { "n": 13391, "na": 0, "states": { "absent": 9115, "none": 1785, "quarantine": 1438, "reject": 1050, "invalid": 3 }, "rua_present": 2359 }, "spf": { "n": 13391, "na": 0, "states": { "absent": 6491, "hardfail": 3806, "softfail": 2623, "neutral": 227, "plus_all": 14, "invalid": 230 } }, "dkim": { "n": 4167, "na": 9224, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1688, "none_observed": 2479 } }, "mx": { "n": 13391, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7910, "absent": 5481 } }, "reverse_dns": { "n": 7910, "na": 5481, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6550, "none": 1360 } }, "caa": { "n": 13352, "na": 39, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 413, "absent": 12939 } }, "dnssec": { "n": 13391, "na": 0, "states": { "signed_valid": 298, "signed_broken": 0, "unsigned": 13093 } }, "https": { "n": 13391, "na": 0, "states": { "https": 10050, "redirects": 0, "http_only": 3341 } }, "tls": { "n": 10050, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9484, "tls12": 566, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10050, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9257, "invalid": 793 } }, "hsts": { "n": 10050, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2344, "absent": 7706 } }, "csp": { "n": 5186, "na": 8205, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 506, "weak": 0, "absent": 4680 } }, "clickjacking": { "n": 5186, "na": 8205, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 686, "absent": 4500 } }, "mime_sniffing": { "n": 5186, "na": 8205, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 832, "absent": 4354 } }, "referrer_policy": { "n": 5186, "na": 8205, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 550, "absent": 4636 } }, "secure_by_default": { "n": 4921, "na": 8470, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 101, "not_all": 4820 } }, "ipv6": { "n": 13391, "na": 0, "states": { "aaaa": 3128, "none": 10263 } } } }, "agency": { "graded": 114209, "checks": { "dmarc": { "n": 114209, "na": 0, "states": { "absent": 75026, "none": 20140, "quarantine": 12680, "reject": 6352, "invalid": 11 }, "rua_present": 21884 }, "spf": { "n": 114209, "na": 0, "states": { "absent": 52561, "hardfail": 19216, "softfail": 40085, "neutral": 1179, "plus_all": 9, "invalid": 1159 } }, "dkim": { "n": 38312, "na": 75897, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 21015, "none_observed": 17297 } }, "mx": { "n": 114209, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 70725, "absent": 43484 } }, "reverse_dns": { "n": 70709, "na": 43500, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 56534, "none": 14175 } }, "caa": { "n": 113505, "na": 704, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3636, "absent": 109869 } }, "dnssec": { "n": 114209, "na": 0, "states": { "signed_valid": 7650, "signed_broken": 59, "unsigned": 106500 } }, "https": { "n": 114209, "na": 0, "states": { "https": 74032, "redirects": 0, "http_only": 40177 } }, "tls": { "n": 74032, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 71921, "tls12": 2111, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 74032, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 68367, "invalid": 5665 } }, "hsts": { "n": 74032, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 19003, "absent": 55029 } }, "csp": { "n": 49732, "na": 64477, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 5442, "weak": 0, "absent": 44290 } }, "clickjacking": { "n": 49732, "na": 64477, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 7430, "absent": 42302 } }, "mime_sniffing": { "n": 49732, "na": 64477, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 8916, "absent": 40816 } }, "referrer_policy": { "n": 49732, "na": 64477, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4976, "absent": 44756 } }, "secure_by_default": { "n": 44359, "na": 69850, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 756, "not_all": 43603 } }, "ipv6": { "n": 114209, "na": 0, "states": { "aaaa": 22221, "none": 91988 } } } }, "ai": { "graded": 1067055, "checks": { "dmarc": { "n": 1067055, "na": 0, "states": { "absent": 633617, "none": 125858, "quarantine": 222639, "reject": 84872, "invalid": 69 }, "rua_present": 323830 }, "spf": { "n": 1067055, "na": 0, "states": { "absent": 609239, "hardfail": 162995, "softfail": 288849, "neutral": 4384, "plus_all": 35, "invalid": 1553 } }, "dkim": { "n": 273085, "na": 793970, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 116894, "none_observed": 156191 } }, "mx": { "n": 1067055, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 499626, "absent": 567429 } }, "reverse_dns": { "n": 499660, "na": 567395, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 418137, "none": 81523 } }, "caa": { "n": 1065083, "na": 1972, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 26831, "absent": 1038252 } }, "dnssec": { "n": 1067055, "na": 0, "states": { "signed_valid": 41733, "signed_broken": 244, "unsigned": 1025078 } }, "https": { "n": 1067055, "na": 0, "states": { "https": 651658, "redirects": 0, "http_only": 415397 } }, "tls": { "n": 651658, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 641522, "tls12": 10136, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 651658, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 637151, "invalid": 14507 } }, "hsts": { "n": 651658, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 240207, "absent": 411451 } }, "csp": { "n": 426392, "na": 640663, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 51976, "weak": 0, "absent": 374416 } }, "clickjacking": { "n": 426392, "na": 640663, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 104700, "absent": 321692 } }, "mime_sniffing": { "n": 426392, "na": 640663, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 148282, "absent": 278110 } }, "referrer_policy": { "n": 426392, "na": 640663, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 112108, "absent": 314284 } }, "secure_by_default": { "n": 418166, "na": 648889, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 30307, "not_all": 387859 } }, "ipv6": { "n": 1067055, "na": 0, "states": { "aaaa": 160843, "none": 906212 } } } }, "al": { "graded": 24367, "checks": { "dmarc": { "n": 24367, "na": 0, "states": { "absent": 13844, "none": 5618, "quarantine": 2784, "reject": 2120, "invalid": 1 }, "rua_present": 2808 }, "spf": { "n": 24367, "na": 0, "states": { "absent": 7642, "hardfail": 5060, "softfail": 11236, "neutral": 303, "plus_all": 14, "invalid": 112 } }, "dkim": { "n": 12455, "na": 11912, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 9379, "none_observed": 3076 } }, "mx": { "n": 24367, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 18669, "absent": 5698 } }, "reverse_dns": { "n": 18742, "na": 5625, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 15020, "none": 3722 } }, "caa": { "n": 24320, "na": 47, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1466, "absent": 22854 } }, "dnssec": { "n": 24367, "na": 0, "states": { "signed_valid": 12, "signed_broken": 0, "unsigned": 24355 } }, "https": { "n": 24367, "na": 0, "states": { "https": 22125, "redirects": 0, "http_only": 2242 } }, "tls": { "n": 22125, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 21459, "tls12": 666, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 22125, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 21110, "invalid": 1015 } }, "hsts": { "n": 22125, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3784, "absent": 18341 } }, "csp": { "n": 15069, "na": 9298, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1914, "weak": 0, "absent": 13155 } }, "clickjacking": { "n": 15069, "na": 9298, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1888, "absent": 13181 } }, "mime_sniffing": { "n": 15069, "na": 9298, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2334, "absent": 12735 } }, "referrer_policy": { "n": 15069, "na": 9298, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1348, "absent": 13721 } }, "secure_by_default": { "n": 14373, "na": 9994, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 171, "not_all": 14202 } }, "ipv6": { "n": 24367, "na": 0, "states": { "aaaa": 8907, "none": 15460 } } } }, "am": { "graded": 30688, "checks": { "dmarc": { "n": 30688, "na": 0, "states": { "absent": 21585, "none": 6099, "quarantine": 1783, "reject": 1219, "invalid": 2 }, "rua_present": 4014 }, "spf": { "n": 30688, "na": 0, "states": { "absent": 14000, "hardfail": 4528, "softfail": 10305, "neutral": 359, "plus_all": 6, "invalid": 1490 } }, "dkim": { "n": 12883, "na": 17805, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 9705, "none_observed": 3178 } }, "mx": { "n": 30688, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 19509, "absent": 11179 } }, "reverse_dns": { "n": 19541, "na": 11147, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 16186, "none": 3355 } }, "caa": { "n": 30542, "na": 146, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 752, "absent": 29790 } }, "dnssec": { "n": 30688, "na": 0, "states": { "signed_valid": 187, "signed_broken": 2, "unsigned": 30499 } }, "https": { "n": 30688, "na": 0, "states": { "https": 26504, "redirects": 0, "http_only": 4184 } }, "tls": { "n": 26504, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 24329, "tls12": 2175, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 26504, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 23768, "invalid": 2736 } }, "hsts": { "n": 26504, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4660, "absent": 21844 } }, "csp": { "n": 15578, "na": 15110, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1103, "weak": 0, "absent": 14475 } }, "clickjacking": { "n": 15578, "na": 15110, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2285, "absent": 13293 } }, "mime_sniffing": { "n": 15578, "na": 15110, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2162, "absent": 13416 } }, "referrer_policy": { "n": 15578, "na": 15110, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1231, "absent": 14347 } }, "secure_by_default": { "n": 15238, "na": 15450, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 123, "not_all": 15115 } }, "ipv6": { "n": 30688, "na": 0, "states": { "aaaa": 9271, "none": 21417 } } } }, "amsterdam": { "graded": 16065, "checks": { "dmarc": { "n": 16065, "na": 0, "states": { "absent": 10083, "none": 1982, "quarantine": 2197, "reject": 1802, "invalid": 1 }, "rua_present": 2622 }, "spf": { "n": 16065, "na": 0, "states": { "absent": 3836, "hardfail": 9355, "softfail": 2656, "neutral": 119, "plus_all": 6, "invalid": 93 } }, "dkim": { "n": 1290, "na": 14775, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 637, "none_observed": 653 } }, "mx": { "n": 16065, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12205, "absent": 3860 } }, "reverse_dns": { "n": 12148, "na": 3917, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5803, "none": 6345 } }, "caa": { "n": 15517, "na": 548, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 189, "absent": 15328 } }, "dnssec": { "n": 16065, "na": 0, "states": { "signed_valid": 2467, "signed_broken": 17, "unsigned": 13581 } }, "https": { "n": 16065, "na": 0, "states": { "https": 7810, "redirects": 0, "http_only": 8255 } }, "tls": { "n": 7810, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7119, "tls12": 691, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7810, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5510, "invalid": 2300 } }, "hsts": { "n": 7810, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 935, "absent": 6875 } }, "csp": { "n": 3709, "na": 12356, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 144, "weak": 0, "absent": 3565 } }, "clickjacking": { "n": 3709, "na": 12356, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 295, "absent": 3414 } }, "mime_sniffing": { "n": 3709, "na": 12356, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 415, "absent": 3294 } }, "referrer_policy": { "n": 3709, "na": 12356, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 227, "absent": 3482 } }, "secure_by_default": { "n": 2736, "na": 13329, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 20, "not_all": 2716 } }, "ipv6": { "n": 16065, "na": 0, "states": { "aaaa": 5540, "none": 10525 } } } }, "ao": { "graded": 11696, "checks": { "dmarc": { "n": 11696, "na": 0, "states": { "absent": 3321, "none": 6828, "quarantine": 766, "reject": 764, "invalid": 17 }, "rua_present": 1595 }, "spf": { "n": 11696, "na": 0, "states": { "absent": 1531, "hardfail": 2421, "softfail": 7668, "neutral": 49, "plus_all": 2, "invalid": 25 } }, "dkim": { "n": 8255, "na": 3441, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 7186, "none_observed": 1069 } }, "mx": { "n": 11696, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 10532, "absent": 1164 } }, "reverse_dns": { "n": 10531, "na": 1165, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 9158, "none": 1373 } }, "caa": { "n": 11643, "na": 53, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 331, "absent": 11312 } }, "dnssec": { "n": 11696, "na": 0, "states": { "signed_valid": 236, "signed_broken": 3, "unsigned": 11457 } }, "https": { "n": 11696, "na": 0, "states": { "https": 10701, "redirects": 0, "http_only": 995 } }, "tls": { "n": 10701, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 10393, "tls12": 308, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10701, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 10092, "invalid": 609 } }, "hsts": { "n": 10701, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1617, "absent": 9084 } }, "csp": { "n": 7739, "na": 3957, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 747, "weak": 0, "absent": 6992 } }, "clickjacking": { "n": 7739, "na": 3957, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 675, "absent": 7064 } }, "mime_sniffing": { "n": 7739, "na": 3957, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 936, "absent": 6803 } }, "referrer_policy": { "n": 7739, "na": 3957, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 708, "absent": 7031 } }, "secure_by_default": { "n": 7701, "na": 3995, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 57, "not_all": 7644 } }, "ipv6": { "n": 11696, "na": 0, "states": { "aaaa": 1754, "none": 9942 } } } }, "app": { "graded": 1493353, "checks": { "dmarc": { "n": 1493353, "na": 0, "states": { "absent": 1123833, "none": 178966, "quarantine": 124107, "reject": 66381, "invalid": 66 }, "rua_present": 192744 }, "spf": { "n": 1493353, "na": 0, "states": { "absent": 959677, "hardfail": 133528, "softfail": 380889, "neutral": 13393, "plus_all": 56, "invalid": 5810 } }, "dkim": { "n": 184844, "na": 1308509, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 106407, "none_observed": 78437 } }, "mx": { "n": 1493353, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 561788, "absent": 931565 } }, "reverse_dns": { "n": 561748, "na": 931605, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 493133, "none": 68615 } }, "caa": { "n": 1480839, "na": 12514, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 70701, "absent": 1410138 } }, "dnssec": { "n": 1493353, "na": 0, "states": { "signed_valid": 109458, "signed_broken": 1055, "unsigned": 1382840 } }, "https": { "n": 1493353, "na": 0, "states": { "https": 976271, "redirects": 0, "http_only": 517082 } }, "tls": { "n": 976271, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 953385, "tls12": 22886, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 976271, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 925004, "invalid": 51267 } }, "hsts": { "n": 976271, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 371390, "absent": 604881 } }, "csp": { "n": 699482, "na": 793871, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 51991, "weak": 0, "absent": 647491 } }, "clickjacking": { "n": 699482, "na": 793871, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 123086, "absent": 576396 } }, "mime_sniffing": { "n": 699482, "na": 793871, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 192388, "absent": 507094 } }, "referrer_policy": { "n": 699482, "na": 793871, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 160555, "absent": 538927 } }, "secure_by_default": { "n": 628005, "na": 865348, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 21490, "not_all": 606515 } }, "ipv6": { "n": 1493353, "na": 0, "states": { "aaaa": 386986, "none": 1106367 } } } }, "ar": { "graded": 444118, "checks": { "dmarc": { "n": 444118, "na": 0, "states": { "absent": 221460, "none": 193878, "quarantine": 17080, "reject": 11541, "invalid": 159 }, "rua_present": 50107 }, "spf": { "n": 444118, "na": 0, "states": { "absent": 138664, "hardfail": 94794, "softfail": 206432, "neutral": 3274, "plus_all": 59, "invalid": 895 } }, "dkim": { "n": 215625, "na": 228493, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 170770, "none_observed": 44855 } }, "mx": { "n": 444118, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 327967, "absent": 116151 } }, "reverse_dns": { "n": 324703, "na": 119415, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 246973, "none": 77730 } }, "caa": { "n": 443018, "na": 1100, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 20560, "absent": 422458 } }, "dnssec": { "n": 444118, "na": 0, "states": { "signed_valid": 35, "signed_broken": 1, "unsigned": 444082 } }, "https": { "n": 444118, "na": 0, "states": { "https": 397469, "redirects": 0, "http_only": 46649 } }, "tls": { "n": 397469, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 375260, "tls12": 22209, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 397469, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 374887, "invalid": 22582 } }, "hsts": { "n": 397469, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 89432, "absent": 308037 } }, "csp": { "n": 269553, "na": 174565, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 73753, "weak": 0, "absent": 195800 } }, "clickjacking": { "n": 269553, "na": 174565, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 51374, "absent": 218179 } }, "mime_sniffing": { "n": 269553, "na": 174565, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 58785, "absent": 210768 } }, "referrer_policy": { "n": 269553, "na": 174565, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 18896, "absent": 250657 } }, "secure_by_default": { "n": 266411, "na": 177707, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 2066, "not_all": 264345 } }, "ipv6": { "n": 444118, "na": 0, "states": { "aaaa": 138777, "none": 305341 } } } }, "art": { "graded": 282984, "checks": { "dmarc": { "n": 282984, "na": 0, "states": { "absent": 215219, "none": 29156, "quarantine": 23089, "reject": 15512, "invalid": 8 }, "rua_present": 28551 }, "spf": { "n": 282984, "na": 0, "states": { "absent": 161644, "hardfail": 28104, "softfail": 86827, "neutral": 3875, "plus_all": 15, "invalid": 2519 } }, "dkim": { "n": 41513, "na": 241471, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 22758, "none_observed": 18755 } }, "mx": { "n": 282984, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 129102, "absent": 153882 } }, "reverse_dns": { "n": 129052, "na": 153932, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 113062, "none": 15990 } }, "caa": { "n": 281080, "na": 1904, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3416, "absent": 277664 } }, "dnssec": { "n": 282984, "na": 0, "states": { "signed_valid": 25650, "signed_broken": 484, "unsigned": 256850 } }, "https": { "n": 282984, "na": 0, "states": { "https": 181696, "redirects": 0, "http_only": 101288 } }, "tls": { "n": 181696, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 170939, "tls12": 10757, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 181696, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 165775, "invalid": 15921 } }, "hsts": { "n": 181696, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 61028, "absent": 120668 } }, "csp": { "n": 116108, "na": 166876, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 14338, "weak": 0, "absent": 101770 } }, "clickjacking": { "n": 116108, "na": 166876, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 23924, "absent": 92184 } }, "mime_sniffing": { "n": 116108, "na": 166876, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 27325, "absent": 88783 } }, "referrer_policy": { "n": 116108, "na": 166876, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 10393, "absent": 105715 } }, "secure_by_default": { "n": 99439, "na": 183545, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 799, "not_all": 98640 } }, "ipv6": { "n": 282984, "na": 0, "states": { "aaaa": 52482, "none": 230502 } } } }, "as": { "graded": 8735, "checks": { "dmarc": { "n": 8735, "na": 0, "states": { "absent": 5742, "none": 1236, "quarantine": 1127, "reject": 628, "invalid": 2 }, "rua_present": 1501 }, "spf": { "n": 8735, "na": 0, "states": { "absent": 2833, "hardfail": 3306, "softfail": 2369, "neutral": 189, "plus_all": 4, "invalid": 34 } }, "dkim": { "n": 3098, "na": 5637, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1387, "none_observed": 1711 } }, "mx": { "n": 8735, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6767, "absent": 1968 } }, "reverse_dns": { "n": 6768, "na": 1967, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5569, "none": 1199 } }, "caa": { "n": 8706, "na": 29, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 118, "absent": 8588 } }, "dnssec": { "n": 8735, "na": 0, "states": { "signed_valid": 230, "signed_broken": 0, "unsigned": 8505 } }, "https": { "n": 8735, "na": 0, "states": { "https": 7361, "redirects": 0, "http_only": 1374 } }, "tls": { "n": 7361, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6900, "tls12": 461, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7361, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6636, "invalid": 725 } }, "hsts": { "n": 7361, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1250, "absent": 6111 } }, "csp": { "n": 4471, "na": 4264, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 284, "weak": 0, "absent": 4187 } }, "clickjacking": { "n": 4471, "na": 4264, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 459, "absent": 4012 } }, "mime_sniffing": { "n": 4471, "na": 4264, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 682, "absent": 3789 } }, "referrer_policy": { "n": 4471, "na": 4264, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 393, "absent": 4078 } }, "secure_by_default": { "n": 4093, "na": 4642, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 35, "not_all": 4058 } }, "ipv6": { "n": 8735, "na": 0, "states": { "aaaa": 2650, "none": 6085 } } } }, "asia": { "graded": 598693, "checks": { "dmarc": { "n": 598693, "na": 0, "states": { "absent": 553437, "none": 19800, "quarantine": 9695, "reject": 15750, "invalid": 11 }, "rua_present": 23829 }, "spf": { "n": 598693, "na": 0, "states": { "absent": 518617, "hardfail": 32456, "softfail": 44786, "neutral": 1842, "plus_all": 25, "invalid": 967 } }, "dkim": { "n": 28246, "na": 570447, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 12330, "none_observed": 15916 } }, "mx": { "n": 598693, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 100030, "absent": 498663 } }, "reverse_dns": { "n": 99965, "na": 498728, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 64018, "none": 35947 } }, "caa": { "n": 586556, "na": 12137, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3096, "absent": 583460 } }, "dnssec": { "n": 598693, "na": 0, "states": { "signed_valid": 17829, "signed_broken": 116, "unsigned": 580748 } }, "https": { "n": 598693, "na": 0, "states": { "https": 234103, "redirects": 0, "http_only": 364590 } }, "tls": { "n": 234103, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 224288, "tls12": 9815, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 234103, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 189831, "invalid": 44272 } }, "hsts": { "n": 234103, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 99677, "absent": 134426 } }, "csp": { "n": 184339, "na": 414354, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 15542, "weak": 0, "absent": 168797 } }, "clickjacking": { "n": 184339, "na": 414354, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 24506, "absent": 159833 } }, "mime_sniffing": { "n": 184339, "na": 414354, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 22792, "absent": 161547 } }, "referrer_policy": { "n": 184339, "na": 414354, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 15701, "absent": 168638 } }, "secure_by_default": { "n": 155211, "na": 443482, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1135, "not_all": 154076 } }, "ipv6": { "n": 598693, "na": 0, "states": { "aaaa": 86828, "none": 511865 } } } }, "at": { "graded": 917689, "checks": { "dmarc": { "n": 917689, "na": 0, "states": { "absent": 564900, "none": 251250, "quarantine": 49145, "reject": 52306, "invalid": 88 }, "rua_present": 68901 }, "spf": { "n": 917689, "na": 0, "states": { "absent": 283400, "hardfail": 324883, "softfail": 277251, "neutral": 25715, "plus_all": 157, "invalid": 6283 } }, "dkim": { "n": 213981, "na": 703708, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 123412, "none_observed": 90569 } }, "mx": { "n": 917689, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 741787, "absent": 175902 } }, "reverse_dns": { "n": 743408, "na": 174281, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 676627, "none": 66781 } }, "caa": { "n": 905610, "na": 12079, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 20073, "absent": 885537 } }, "dnssec": { "n": 917689, "na": 0, "states": { "signed_valid": 39757, "signed_broken": 123, "unsigned": 877809 } }, "https": { "n": 917689, "na": 0, "states": { "https": 787346, "redirects": 0, "http_only": 130343 } }, "tls": { "n": 787346, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 741627, "tls12": 45719, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 787346, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 693221, "invalid": 94125 } }, "hsts": { "n": 787346, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 160432, "absent": 626914 } }, "csp": { "n": 324774, "na": 592915, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 19856, "weak": 0, "absent": 304918 } }, "clickjacking": { "n": 324774, "na": 592915, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 40309, "absent": 284465 } }, "mime_sniffing": { "n": 324774, "na": 592915, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 53969, "absent": 270805 } }, "referrer_policy": { "n": 324774, "na": 592915, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 27364, "absent": 297410 } }, "secure_by_default": { "n": 306182, "na": 611507, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 3379, "not_all": 302803 } }, "ipv6": { "n": 917689, "na": 0, "states": { "aaaa": 198289, "none": 719400 } } } }, "au": { "graded": 2644651, "checks": { "dmarc": { "n": 2644651, "na": 0, "states": { "absent": 1762170, "none": 462889, "quarantine": 267941, "reject": 151167, "invalid": 484 }, "rua_present": 457469 }, "spf": { "n": 2644651, "na": 0, "states": { "absent": 989943, "hardfail": 790642, "softfail": 821397, "neutral": 34709, "plus_all": 215, "invalid": 7745 } }, "dkim": { "n": 1268011, "na": 1376640, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 480500, "none_observed": 787511 } }, "mx": { "n": 2644651, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1866350, "absent": 778301 } }, "reverse_dns": { "n": 1863898, "na": 780753, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1627061, "none": 236837 } }, "caa": { "n": 2634806, "na": 9845, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 34354, "absent": 2600452 } }, "dnssec": { "n": 2644651, "na": 0, "states": { "signed_valid": 41716, "signed_broken": 264, "unsigned": 2602671 } }, "https": { "n": 2644651, "na": 0, "states": { "https": 1931064, "redirects": 0, "http_only": 713587 } }, "tls": { "n": 1931064, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1859691, "tls12": 71373, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1931064, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1806894, "invalid": 124170 } }, "hsts": { "n": 1931064, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 576571, "absent": 1354493 } }, "csp": { "n": 915950, "na": 1728701, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 127360, "weak": 0, "absent": 788590 } }, "clickjacking": { "n": 915950, "na": 1728701, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 185960, "absent": 729990 } }, "mime_sniffing": { "n": 915950, "na": 1728701, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 218078, "absent": 697872 } }, "referrer_policy": { "n": 915950, "na": 1728701, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 73676, "absent": 842274 } }, "secure_by_default": { "n": 900947, "na": 1743704, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 11801, "not_all": 889146 } }, "ipv6": { "n": 2644651, "na": 0, "states": { "aaaa": 408984, "none": 2235667 } } } }, "autos": { "graded": 195488, "checks": { "dmarc": { "n": 195488, "na": 0, "states": { "absent": 132541, "none": 1623, "quarantine": 950, "reject": 60374, "invalid": 0 }, "rua_present": 1339 }, "spf": { "n": 195488, "na": 0, "states": { "absent": 126781, "hardfail": 62975, "softfail": 5650, "neutral": 36, "plus_all": 0, "invalid": 46 } }, "dkim": { "n": 2366, "na": 193122, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1236, "none_observed": 1130 } }, "mx": { "n": 195488, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 70288, "absent": 125200 } }, "reverse_dns": { "n": 70285, "na": 125203, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6385, "none": 63900 } }, "caa": { "n": 192515, "na": 2973, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 368, "absent": 192147 } }, "dnssec": { "n": 195488, "na": 0, "states": { "signed_valid": 3158, "signed_broken": 22, "unsigned": 192308 } }, "https": { "n": 195488, "na": 0, "states": { "https": 52044, "redirects": 0, "http_only": 143444 } }, "tls": { "n": 52044, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 36575, "tls12": 15469, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 52044, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 49362, "invalid": 2682 } }, "hsts": { "n": 52044, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4647, "absent": 47397 } }, "csp": { "n": 15478, "na": 180010, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1463, "weak": 0, "absent": 14015 } }, "clickjacking": { "n": 15478, "na": 180010, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1793, "absent": 13685 } }, "mime_sniffing": { "n": 15478, "na": 180010, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1762, "absent": 13716 } }, "referrer_policy": { "n": 15478, "na": 180010, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1405, "absent": 14073 } }, "secure_by_default": { "n": 12048, "na": 183440, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 206, "not_all": 11842 } }, "ipv6": { "n": 195488, "na": 0, "states": { "aaaa": 29756, "none": 165732 } } } }, "az": { "graded": 32670, "checks": { "dmarc": { "n": 32670, "na": 0, "states": { "absent": 20228, "none": 8211, "quarantine": 2615, "reject": 1614, "invalid": 2 }, "rua_present": 4703 }, "spf": { "n": 32670, "na": 0, "states": { "absent": 9203, "hardfail": 4746, "softfail": 15434, "neutral": 404, "plus_all": 10, "invalid": 2873 } }, "dkim": { "n": 15121, "na": 17549, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 12191, "none_observed": 2930 } }, "mx": { "n": 32670, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 25209, "absent": 7461 } }, "reverse_dns": { "n": 25182, "na": 7488, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 19310, "none": 5872 } }, "caa": { "n": 32320, "na": 350, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1437, "absent": 30883 } }, "dnssec": { "n": 32670, "na": 0, "states": { "signed_valid": 171, "signed_broken": 1, "unsigned": 32498 } }, "https": { "n": 32670, "na": 0, "states": { "https": 29649, "redirects": 0, "http_only": 3021 } }, "tls": { "n": 29649, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 27879, "tls12": 1770, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 29649, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 28315, "invalid": 1334 } }, "hsts": { "n": 29649, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4982, "absent": 24667 } }, "csp": { "n": 19478, "na": 13192, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2841, "weak": 0, "absent": 16637 } }, "clickjacking": { "n": 19478, "na": 13192, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3351, "absent": 16127 } }, "mime_sniffing": { "n": 19478, "na": 13192, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3787, "absent": 15691 } }, "referrer_policy": { "n": 19478, "na": 13192, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2041, "absent": 17437 } }, "secure_by_default": { "n": 19301, "na": 13369, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 200, "not_all": 19101 } }, "ipv6": { "n": 32670, "na": 0, "states": { "aaaa": 14316, "none": 18354 } } } }, "ba": { "graded": 27797, "checks": { "dmarc": { "n": 27797, "na": 0, "states": { "absent": 12855, "none": 8431, "quarantine": 5406, "reject": 1102, "invalid": 3 }, "rua_present": 6290 }, "spf": { "n": 27797, "na": 0, "states": { "absent": 4182, "hardfail": 4907, "softfail": 17733, "neutral": 590, "plus_all": 17, "invalid": 368 } }, "dkim": { "n": 20491, "na": 7306, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 18141, "none_observed": 2350 } }, "mx": { "n": 27797, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 25069, "absent": 2728 } }, "reverse_dns": { "n": 25071, "na": 2726, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 21808, "none": 3263 } }, "caa": { "n": 27771, "na": 26, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 867, "absent": 26904 } }, "dnssec": { "n": 27797, "na": 0, "states": { "signed_valid": 2, "signed_broken": 0, "unsigned": 27795 } }, "https": { "n": 27797, "na": 0, "states": { "https": 26703, "redirects": 0, "http_only": 1094 } }, "tls": { "n": 26703, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 23870, "tls12": 2833, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 26703, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 25695, "invalid": 1008 } }, "hsts": { "n": 26703, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3198, "absent": 23505 } }, "csp": { "n": 19190, "na": 8607, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1077, "weak": 0, "absent": 18113 } }, "clickjacking": { "n": 19190, "na": 8607, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2060, "absent": 17130 } }, "mime_sniffing": { "n": 19190, "na": 8607, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 6228, "absent": 12962 } }, "referrer_policy": { "n": 19190, "na": 8607, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1363, "absent": 17827 } }, "secure_by_default": { "n": 19060, "na": 8737, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 145, "not_all": 18915 } }, "ipv6": { "n": 27797, "na": 0, "states": { "aaaa": 4747, "none": 23050 } } } }, "baby": { "graded": 44167, "checks": { "dmarc": { "n": 44167, "na": 0, "states": { "absent": 41820, "none": 687, "quarantine": 1154, "reject": 505, "invalid": 1 }, "rua_present": 1602 }, "spf": { "n": 44167, "na": 0, "states": { "absent": 38312, "hardfail": 2474, "softfail": 3300, "neutral": 67, "plus_all": 2, "invalid": 12 } }, "dkim": { "n": 1235, "na": 42932, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 586, "none_observed": 649 } }, "mx": { "n": 44167, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6242, "absent": 37925 } }, "reverse_dns": { "n": 6247, "na": 37920, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4267, "none": 1980 } }, "caa": { "n": 43648, "na": 519, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 181, "absent": 43467 } }, "dnssec": { "n": 44167, "na": 0, "states": { "signed_valid": 3208, "signed_broken": 11, "unsigned": 40948 } }, "https": { "n": 44167, "na": 0, "states": { "https": 15220, "redirects": 0, "http_only": 28947 } }, "tls": { "n": 15220, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 14776, "tls12": 444, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 15220, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 14010, "invalid": 1210 } }, "hsts": { "n": 15220, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2653, "absent": 12567 } }, "csp": { "n": 9430, "na": 34737, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1490, "weak": 0, "absent": 7940 } }, "clickjacking": { "n": 9430, "na": 34737, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2526, "absent": 6904 } }, "mime_sniffing": { "n": 9430, "na": 34737, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2739, "absent": 6691 } }, "referrer_policy": { "n": 9430, "na": 34737, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2220, "absent": 7210 } }, "secure_by_default": { "n": 6842, "na": 37325, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 155, "not_all": 6687 } }, "ipv6": { "n": 44167, "na": 0, "states": { "aaaa": 8933, "none": 35234 } } } }, "band": { "graded": 18696, "checks": { "dmarc": { "n": 18696, "na": 0, "states": { "absent": 13919, "none": 2046, "quarantine": 1112, "reject": 1617, "invalid": 2 }, "rua_present": 1516 }, "spf": { "n": 18696, "na": 0, "states": { "absent": 10322, "hardfail": 2163, "softfail": 5736, "neutral": 341, "plus_all": 0, "invalid": 134 } }, "dkim": { "n": 3654, "na": 15042, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1761, "none_observed": 1893 } }, "mx": { "n": 18696, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9763, "absent": 8933 } }, "reverse_dns": { "n": 9756, "na": 8940, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8851, "none": 905 } }, "caa": { "n": 18618, "na": 78, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 526, "absent": 18092 } }, "dnssec": { "n": 18696, "na": 0, "states": { "signed_valid": 1792, "signed_broken": 5, "unsigned": 16899 } }, "https": { "n": 18696, "na": 0, "states": { "https": 12590, "redirects": 0, "http_only": 6106 } }, "tls": { "n": 12590, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 12183, "tls12": 407, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 12590, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 11610, "invalid": 980 } }, "hsts": { "n": 12590, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4307, "absent": 8283 } }, "csp": { "n": 7918, "na": 10778, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1200, "weak": 0, "absent": 6718 } }, "clickjacking": { "n": 7918, "na": 10778, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2069, "absent": 5849 } }, "mime_sniffing": { "n": 7918, "na": 10778, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2306, "absent": 5612 } }, "referrer_policy": { "n": 7918, "na": 10778, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1190, "absent": 6728 } }, "secure_by_default": { "n": 6980, "na": 11716, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 616, "not_all": 6364 } }, "ipv6": { "n": 18696, "na": 0, "states": { "aaaa": 4270, "none": 14426 } } } }, "bar": { "graded": 40056, "checks": { "dmarc": { "n": 40056, "na": 0, "states": { "absent": 32251, "none": 1419, "quarantine": 5499, "reject": 887, "invalid": 0 }, "rua_present": 6074 }, "spf": { "n": 40056, "na": 0, "states": { "absent": 31965, "hardfail": 3378, "softfail": 4396, "neutral": 196, "plus_all": 2, "invalid": 119 } }, "dkim": { "n": 2723, "na": 37333, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1182, "none_observed": 1541 } }, "mx": { "n": 40056, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9170, "absent": 30886 } }, "reverse_dns": { "n": 9168, "na": 30888, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6669, "none": 2499 } }, "caa": { "n": 39699, "na": 357, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 250, "absent": 39449 } }, "dnssec": { "n": 40056, "na": 0, "states": { "signed_valid": 1286, "signed_broken": 11, "unsigned": 38759 } }, "https": { "n": 40056, "na": 0, "states": { "https": 26498, "redirects": 0, "http_only": 13558 } }, "tls": { "n": 26498, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 25956, "tls12": 542, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 26498, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 25390, "invalid": 1108 } }, "hsts": { "n": 26498, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5271, "absent": 21227 } }, "csp": { "n": 16624, "na": 23432, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 800, "weak": 0, "absent": 15824 } }, "clickjacking": { "n": 16624, "na": 23432, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3644, "absent": 12980 } }, "mime_sniffing": { "n": 16624, "na": 23432, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3894, "absent": 12730 } }, "referrer_policy": { "n": 16624, "na": 23432, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3374, "absent": 13250 } }, "secure_by_default": { "n": 14729, "na": 25327, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 117, "not_all": 14612 } }, "ipv6": { "n": 40056, "na": 0, "states": { "aaaa": 15719, "none": 24337 } } } }, "bayern": { "graded": 22241, "checks": { "dmarc": { "n": 22241, "na": 0, "states": { "absent": 13696, "none": 4603, "quarantine": 453, "reject": 3489, "invalid": 0 }, "rua_present": 620 }, "spf": { "n": 22241, "na": 0, "states": { "absent": 10615, "hardfail": 2378, "softfail": 8354, "neutral": 593, "plus_all": 3, "invalid": 298 } }, "dkim": { "n": 1524, "na": 20717, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 756, "none_observed": 768 } }, "mx": { "n": 22241, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 17915, "absent": 4326 } }, "reverse_dns": { "n": 17931, "na": 4310, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 17062, "none": 869 } }, "caa": { "n": 22226, "na": 15, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 157, "absent": 22069 } }, "dnssec": { "n": 22241, "na": 0, "states": { "signed_valid": 401, "signed_broken": 9, "unsigned": 21831 } }, "https": { "n": 22241, "na": 0, "states": { "https": 9866, "redirects": 0, "http_only": 12375 } }, "tls": { "n": 9866, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9323, "tls12": 543, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9866, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5824, "invalid": 4042 } }, "hsts": { "n": 9866, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1598, "absent": 8268 } }, "csp": { "n": 7122, "na": 15119, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 144, "weak": 0, "absent": 6978 } }, "clickjacking": { "n": 7122, "na": 15119, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 406, "absent": 6716 } }, "mime_sniffing": { "n": 7122, "na": 15119, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 463, "absent": 6659 } }, "referrer_policy": { "n": 7122, "na": 15119, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 217, "absent": 6905 } }, "secure_by_default": { "n": 3733, "na": 18508, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 36, "not_all": 3697 } }, "ipv6": { "n": 22241, "na": 0, "states": { "aaaa": 8421, "none": 13820 } } } }, "bd": { "graded": 49621, "checks": { "dmarc": { "n": 49621, "na": 0, "states": { "absent": 33945, "none": 13468, "quarantine": 1130, "reject": 1077, "invalid": 1 }, "rua_present": 2950 }, "spf": { "n": 49621, "na": 0, "states": { "absent": 22423, "hardfail": 4213, "softfail": 22654, "neutral": 220, "plus_all": 9, "invalid": 102 } }, "dkim": { "n": 18453, "na": 31168, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 16679, "none_observed": 1774 } }, "mx": { "n": 49621, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 27491, "absent": 22130 } }, "reverse_dns": { "n": 27408, "na": 22213, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 16722, "none": 10686 } }, "caa": { "n": 49136, "na": 485, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1338, "absent": 47798 } }, "dnssec": { "n": 49621, "na": 0, "states": { "signed_valid": 53, "signed_broken": 0, "unsigned": 49568 } }, "https": { "n": 49621, "na": 0, "states": { "https": 46237, "redirects": 0, "http_only": 3384 } }, "tls": { "n": 46237, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 45634, "tls12": 603, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 46237, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 43726, "invalid": 2511 } }, "hsts": { "n": 46237, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 7494, "absent": 38743 } }, "csp": { "n": 34023, "na": 15598, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 4232, "weak": 0, "absent": 29791 } }, "clickjacking": { "n": 34023, "na": 15598, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4868, "absent": 29155 } }, "mime_sniffing": { "n": 34023, "na": 15598, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 5628, "absent": 28395 } }, "referrer_policy": { "n": 34023, "na": 15598, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3802, "absent": 30221 } }, "secure_by_default": { "n": 33026, "na": 16595, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1055, "not_all": 31971 } }, "ipv6": { "n": 49621, "na": 0, "states": { "aaaa": 16860, "none": 32761 } } } }, "be": { "graded": 1089600, "checks": { "dmarc": { "n": 1089600, "na": 0, "states": { "absent": 686286, "none": 238990, "quarantine": 86009, "reject": 77935, "invalid": 380 }, "rua_present": 120026 }, "spf": { "n": 1089600, "na": 0, "states": { "absent": 369881, "hardfail": 323329, "softfail": 351299, "neutral": 39705, "plus_all": 1816, "invalid": 3570 } }, "dkim": { "n": 286724, "na": 802876, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 142113, "none_observed": 144611 } }, "mx": { "n": 1089600, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 893954, "absent": 195646 } }, "reverse_dns": { "n": 893995, "na": 195605, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 790373, "none": 103622 } }, "caa": { "n": 1087390, "na": 2210, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 33664, "absent": 1053726 } }, "dnssec": { "n": 1089600, "na": 0, "states": { "signed_valid": 360494, "signed_broken": 513, "unsigned": 728593 } }, "https": { "n": 1089600, "na": 0, "states": { "https": 931213, "redirects": 0, "http_only": 158387 } }, "tls": { "n": 931213, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 875352, "tls12": 55861, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 931213, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 838227, "invalid": 92986 } }, "hsts": { "n": 931213, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 193196, "absent": 738017 } }, "csp": { "n": 436272, "na": 653328, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 29583, "weak": 0, "absent": 406689 } }, "clickjacking": { "n": 436272, "na": 653328, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 56839, "absent": 379433 } }, "mime_sniffing": { "n": 436272, "na": 653328, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 82926, "absent": 353346 } }, "referrer_policy": { "n": 436272, "na": 653328, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 29623, "absent": 406649 } }, "secure_by_default": { "n": 414300, "na": 675300, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 3422, "not_all": 410878 } }, "ipv6": { "n": 1089600, "na": 0, "states": { "aaaa": 411116, "none": 678484 } } } }, "beauty": { "graded": 62754, "checks": { "dmarc": { "n": 62754, "na": 0, "states": { "absent": 57579, "none": 1670, "quarantine": 2723, "reject": 782, "invalid": 0 }, "rua_present": 3391 }, "spf": { "n": 62754, "na": 0, "states": { "absent": 51923, "hardfail": 5197, "softfail": 5420, "neutral": 106, "plus_all": 0, "invalid": 108 } }, "dkim": { "n": 2421, "na": 60333, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1361, "none_observed": 1060 } }, "mx": { "n": 62754, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12252, "absent": 50502 } }, "reverse_dns": { "n": 12261, "na": 50493, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 9865, "none": 2396 } }, "caa": { "n": 61840, "na": 914, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 480, "absent": 61360 } }, "dnssec": { "n": 62754, "na": 0, "states": { "signed_valid": 3765, "signed_broken": 24, "unsigned": 58965 } }, "https": { "n": 62754, "na": 0, "states": { "https": 26830, "redirects": 0, "http_only": 35924 } }, "tls": { "n": 26830, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 25987, "tls12": 843, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 26830, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 24999, "invalid": 1831 } }, "hsts": { "n": 26830, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3499, "absent": 23331 } }, "csp": { "n": 13901, "na": 48853, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2398, "weak": 0, "absent": 11503 } }, "clickjacking": { "n": 13901, "na": 48853, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3282, "absent": 10619 } }, "mime_sniffing": { "n": 13901, "na": 48853, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3382, "absent": 10519 } }, "referrer_policy": { "n": 13901, "na": 48853, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2617, "absent": 11284 } }, "secure_by_default": { "n": 10763, "na": 51991, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 250, "not_all": 10513 } }, "ipv6": { "n": 62754, "na": 0, "states": { "aaaa": 16211, "none": 46543 } } } }, "beer": { "graded": 147153, "checks": { "dmarc": { "n": 147153, "na": 0, "states": { "absent": 143354, "none": 1446, "quarantine": 1613, "reject": 739, "invalid": 1 }, "rua_present": 2467 }, "spf": { "n": 147153, "na": 0, "states": { "absent": 140053, "hardfail": 2197, "softfail": 4558, "neutral": 262, "plus_all": 0, "invalid": 83 } }, "dkim": { "n": 2891, "na": 144262, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1147, "none_observed": 1744 } }, "mx": { "n": 147153, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9235, "absent": 137918 } }, "reverse_dns": { "n": 9236, "na": 137917, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7167, "none": 2069 } }, "caa": { "n": 144591, "na": 2562, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 340, "absent": 144251 } }, "dnssec": { "n": 147153, "na": 0, "states": { "signed_valid": 19549, "signed_broken": 85, "unsigned": 127519 } }, "https": { "n": 147153, "na": 0, "states": { "https": 55540, "redirects": 0, "http_only": 91613 } }, "tls": { "n": 55540, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 53724, "tls12": 1816, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 55540, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 46188, "invalid": 9352 } }, "hsts": { "n": 55540, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5217, "absent": 50323 } }, "csp": { "n": 40241, "na": 106912, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 3529, "weak": 0, "absent": 36712 } }, "clickjacking": { "n": 40241, "na": 106912, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 5352, "absent": 34889 } }, "mime_sniffing": { "n": 40241, "na": 106912, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4489, "absent": 35752 } }, "referrer_policy": { "n": 40241, "na": 106912, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3883, "absent": 36358 } }, "secure_by_default": { "n": 27640, "na": 119513, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 102, "not_all": 27538 } }, "ipv6": { "n": 147153, "na": 0, "states": { "aaaa": 32654, "none": 114499 } } } }, "berlin": { "graded": 28489, "checks": { "dmarc": { "n": 28489, "na": 0, "states": { "absent": 12850, "none": 7682, "quarantine": 780, "reject": 7176, "invalid": 1 }, "rua_present": 1151 }, "spf": { "n": 28489, "na": 0, "states": { "absent": 11415, "hardfail": 3637, "softfail": 12228, "neutral": 790, "plus_all": 1, "invalid": 418 } }, "dkim": { "n": 2928, "na": 25561, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1527, "none_observed": 1401 } }, "mx": { "n": 28489, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 25798, "absent": 2691 } }, "reverse_dns": { "n": 25811, "na": 2678, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 24106, "none": 1705 } }, "caa": { "n": 28462, "na": 27, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 275, "absent": 28187 } }, "dnssec": { "n": 28489, "na": 0, "states": { "signed_valid": 412, "signed_broken": 1, "unsigned": 28076 } }, "https": { "n": 28489, "na": 0, "states": { "https": 14428, "redirects": 0, "http_only": 14061 } }, "tls": { "n": 14428, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 13641, "tls12": 787, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 14428, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 11479, "invalid": 2949 } }, "hsts": { "n": 14428, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2330, "absent": 12098 } }, "csp": { "n": 11787, "na": 16702, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 360, "weak": 0, "absent": 11427 } }, "clickjacking": { "n": 11787, "na": 16702, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 844, "absent": 10943 } }, "mime_sniffing": { "n": 11787, "na": 16702, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1009, "absent": 10778 } }, "referrer_policy": { "n": 11787, "na": 16702, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 488, "absent": 11299 } }, "secure_by_default": { "n": 6412, "na": 22077, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 76, "not_all": 6336 } }, "ipv6": { "n": 28489, "na": 0, "states": { "aaaa": 14504, "none": 13985 } } } }, "best": { "graded": 61351, "checks": { "dmarc": { "n": 61351, "na": 0, "states": { "absent": 56688, "none": 2580, "quarantine": 606, "reject": 1477, "invalid": 0 }, "rua_present": 2154 }, "spf": { "n": 61351, "na": 0, "states": { "absent": 46139, "hardfail": 4919, "softfail": 9857, "neutral": 197, "plus_all": 7, "invalid": 232 } }, "dkim": { "n": 3898, "na": 57453, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3172, "none_observed": 726 } }, "mx": { "n": 61351, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 16179, "absent": 45172 } }, "reverse_dns": { "n": 16173, "na": 45178, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 13596, "none": 2577 } }, "caa": { "n": 61075, "na": 276, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 387, "absent": 60688 } }, "dnssec": { "n": 61351, "na": 0, "states": { "signed_valid": 5638, "signed_broken": 19, "unsigned": 55694 } }, "https": { "n": 61351, "na": 0, "states": { "https": 45263, "redirects": 0, "http_only": 16088 } }, "tls": { "n": 45263, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 43978, "tls12": 1285, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 45263, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 43009, "invalid": 2254 } }, "hsts": { "n": 45263, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5357, "absent": 39906 } }, "csp": { "n": 32570, "na": 28781, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2511, "weak": 0, "absent": 30059 } }, "clickjacking": { "n": 32570, "na": 28781, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4813, "absent": 27757 } }, "mime_sniffing": { "n": 32570, "na": 28781, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 5413, "absent": 27157 } }, "referrer_policy": { "n": 32570, "na": 28781, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4716, "absent": 27854 } }, "secure_by_default": { "n": 29659, "na": 31692, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 321, "not_all": 29338 } }, "ipv6": { "n": 61351, "na": 0, "states": { "aaaa": 33119, "none": 28232 } } } }, "bet": { "graded": 172146, "checks": { "dmarc": { "n": 172146, "na": 0, "states": { "absent": 162346, "none": 2453, "quarantine": 5810, "reject": 1537, "invalid": 0 }, "rua_present": 7045 }, "spf": { "n": 172146, "na": 0, "states": { "absent": 149460, "hardfail": 11377, "softfail": 10978, "neutral": 174, "plus_all": 1, "invalid": 156 } }, "dkim": { "n": 3266, "na": 168880, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1819, "none_observed": 1447 } }, "mx": { "n": 172146, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 24735, "absent": 147411 } }, "reverse_dns": { "n": 24751, "na": 147395, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 19946, "none": 4805 } }, "caa": { "n": 170792, "na": 1354, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 4358, "absent": 166434 } }, "dnssec": { "n": 172146, "na": 0, "states": { "signed_valid": 2078, "signed_broken": 35, "unsigned": 170033 } }, "https": { "n": 172146, "na": 0, "states": { "https": 136914, "redirects": 0, "http_only": 35232 } }, "tls": { "n": 136914, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 134355, "tls12": 2559, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 136914, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 133690, "invalid": 3224 } }, "hsts": { "n": 136914, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 17058, "absent": 119856 } }, "csp": { "n": 111291, "na": 60855, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 3512, "weak": 0, "absent": 107779 } }, "clickjacking": { "n": 111291, "na": 60855, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 8428, "absent": 102863 } }, "mime_sniffing": { "n": 111291, "na": 60855, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 10333, "absent": 100958 } }, "referrer_policy": { "n": 111291, "na": 60855, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 6727, "absent": 104564 } }, "secure_by_default": { "n": 106123, "na": 66023, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 849, "not_all": 105274 } }, "ipv6": { "n": 172146, "na": 0, "states": { "aaaa": 109417, "none": 62729 } } } }, "bg": { "graded": 70767, "checks": { "dmarc": { "n": 70767, "na": 0, "states": { "absent": 44326, "none": 19424, "quarantine": 3076, "reject": 3933, "invalid": 8 }, "rua_present": 8059 }, "spf": { "n": 70767, "na": 0, "states": { "absent": 12298, "hardfail": 9012, "softfail": 48287, "neutral": 814, "plus_all": 17, "invalid": 339 } }, "dkim": { "n": 50851, "na": 19916, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 46217, "none_observed": 4634 } }, "mx": { "n": 70767, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 63690, "absent": 7077 } }, "reverse_dns": { "n": 63768, "na": 6999, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 38866, "none": 24902 } }, "caa": { "n": 70675, "na": 92, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1421, "absent": 69254 } }, "dnssec": { "n": 70767, "na": 0, "states": { "signed_valid": 401, "signed_broken": 7, "unsigned": 70359 } }, "https": { "n": 70767, "na": 0, "states": { "https": 67103, "redirects": 0, "http_only": 3664 } }, "tls": { "n": 67103, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 60246, "tls12": 6857, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 67103, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 64713, "invalid": 2390 } }, "hsts": { "n": 67103, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 11127, "absent": 55976 } }, "csp": { "n": 42844, "na": 27923, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2998, "weak": 0, "absent": 39846 } }, "clickjacking": { "n": 42844, "na": 27923, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 6210, "absent": 36634 } }, "mime_sniffing": { "n": 42844, "na": 27923, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 7108, "absent": 35736 } }, "referrer_policy": { "n": 42844, "na": 27923, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3710, "absent": 39134 } }, "secure_by_default": { "n": 42399, "na": 28368, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 533, "not_all": 41866 } }, "ipv6": { "n": 70767, "na": 0, "states": { "aaaa": 11741, "none": 59026 } } } }, "bid": { "graded": 49387, "checks": { "dmarc": { "n": 49387, "na": 0, "states": { "absent": 48215, "none": 478, "quarantine": 433, "reject": 261, "invalid": 0 }, "rua_present": 683 }, "spf": { "n": 49387, "na": 0, "states": { "absent": 42498, "hardfail": 4398, "softfail": 2377, "neutral": 81, "plus_all": 0, "invalid": 33 } }, "dkim": { "n": 993, "na": 48394, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 580, "none_observed": 413 } }, "mx": { "n": 49387, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7160, "absent": 42227 } }, "reverse_dns": { "n": 7164, "na": 42223, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6099, "none": 1065 } }, "caa": { "n": 48939, "na": 448, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 103, "absent": 48836 } }, "dnssec": { "n": 49387, "na": 0, "states": { "signed_valid": 353, "signed_broken": 5, "unsigned": 49029 } }, "https": { "n": 49387, "na": 0, "states": { "https": 38001, "redirects": 0, "http_only": 11386 } }, "tls": { "n": 38001, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 36201, "tls12": 1800, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 38001, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 33499, "invalid": 4502 } }, "hsts": { "n": 38001, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 6563, "absent": 31438 } }, "csp": { "n": 28571, "na": 20816, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 143, "weak": 0, "absent": 28428 } }, "clickjacking": { "n": 28571, "na": 20816, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 764, "absent": 27807 } }, "mime_sniffing": { "n": 28571, "na": 20816, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 842, "absent": 27729 } }, "referrer_policy": { "n": 28571, "na": 20816, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 687, "absent": 27884 } }, "secure_by_default": { "n": 26744, "na": 22643, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 50, "not_all": 26694 } }, "ipv6": { "n": 49387, "na": 0, "states": { "aaaa": 20053, "none": 29334 } } } }, "bike": { "graded": 14792, "checks": { "dmarc": { "n": 14792, "na": 0, "states": { "absent": 11322, "none": 1830, "quarantine": 688, "reject": 952, "invalid": 0 }, "rua_present": 1089 }, "spf": { "n": 14792, "na": 0, "states": { "absent": 7825, "hardfail": 1935, "softfail": 4633, "neutral": 275, "plus_all": 2, "invalid": 122 } }, "dkim": { "n": 2627, "na": 12165, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1152, "none_observed": 1475 } }, "mx": { "n": 14792, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9095, "absent": 5697 } }, "reverse_dns": { "n": 9090, "na": 5702, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8000, "none": 1090 } }, "caa": { "n": 14723, "na": 69, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 368, "absent": 14355 } }, "dnssec": { "n": 14792, "na": 0, "states": { "signed_valid": 1162, "signed_broken": 6, "unsigned": 13624 } }, "https": { "n": 14792, "na": 0, "states": { "https": 7818, "redirects": 0, "http_only": 6974 } }, "tls": { "n": 7818, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7343, "tls12": 475, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7818, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6625, "invalid": 1193 } }, "hsts": { "n": 7818, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1856, "absent": 5962 } }, "csp": { "n": 4892, "na": 9900, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 627, "weak": 0, "absent": 4265 } }, "clickjacking": { "n": 4892, "na": 9900, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 988, "absent": 3904 } }, "mime_sniffing": { "n": 4892, "na": 9900, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1064, "absent": 3828 } }, "referrer_policy": { "n": 4892, "na": 9900, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 536, "absent": 4356 } }, "secure_by_default": { "n": 3721, "na": 11071, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 74, "not_all": 3647 } }, "ipv6": { "n": 14792, "na": 0, "states": { "aaaa": 3270, "none": 11522 } } } }, "bio": { "graded": 67811, "checks": { "dmarc": { "n": 67811, "na": 0, "states": { "absent": 57399, "none": 4714, "quarantine": 3293, "reject": 2404, "invalid": 1 }, "rua_present": 4862 }, "spf": { "n": 67811, "na": 0, "states": { "absent": 45877, "hardfail": 8977, "softfail": 12226, "neutral": 486, "plus_all": 4, "invalid": 241 } }, "dkim": { "n": 7273, "na": 60538, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3825, "none_observed": 3448 } }, "mx": { "n": 67811, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 23991, "absent": 43820 } }, "reverse_dns": { "n": 24005, "na": 43806, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 20265, "none": 3740 } }, "caa": { "n": 67152, "na": 659, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1413, "absent": 65739 } }, "dnssec": { "n": 67811, "na": 0, "states": { "signed_valid": 3567, "signed_broken": 119, "unsigned": 64125 } }, "https": { "n": 67811, "na": 0, "states": { "https": 48319, "redirects": 0, "http_only": 19492 } }, "tls": { "n": 48319, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 46931, "tls12": 1388, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 48319, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 45438, "invalid": 2881 } }, "hsts": { "n": 48319, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 16646, "absent": 31673 } }, "csp": { "n": 38006, "na": 29805, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 3704, "weak": 0, "absent": 34302 } }, "clickjacking": { "n": 38006, "na": 29805, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 5882, "absent": 32124 } }, "mime_sniffing": { "n": 38006, "na": 29805, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3930, "absent": 34076 } }, "referrer_policy": { "n": 38006, "na": 29805, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2166, "absent": 35840 } }, "secure_by_default": { "n": 34334, "na": 33477, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 320, "not_all": 34014 } }, "ipv6": { "n": 67811, "na": 0, "states": { "aaaa": 26160, "none": 41651 } } } }, "biz": { "graded": 1103067, "checks": { "dmarc": { "n": 1103067, "na": 0, "states": { "absent": 814804, "none": 123397, "quarantine": 51915, "reject": 112896, "invalid": 55 }, "rua_present": 127201 }, "spf": { "n": 1103067, "na": 0, "states": { "absent": 631471, "hardfail": 176645, "softfail": 268213, "neutral": 19380, "plus_all": 200, "invalid": 7158 } }, "dkim": { "n": 268132, "na": 834935, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 112418, "none_observed": 155714 } }, "mx": { "n": 1103067, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 619811, "absent": 483256 } }, "reverse_dns": { "n": 619286, "na": 483781, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 510239, "none": 109047 } }, "caa": { "n": 1094391, "na": 8676, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 11140, "absent": 1083251 } }, "dnssec": { "n": 1103067, "na": 0, "states": { "signed_valid": 43041, "signed_broken": 345, "unsigned": 1059681 } }, "https": { "n": 1103067, "na": 0, "states": { "https": 533287, "redirects": 0, "http_only": 569780 } }, "tls": { "n": 533287, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 497151, "tls12": 36136, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 533287, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 436244, "invalid": 97043 } }, "hsts": { "n": 533287, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 90015, "absent": 443272 } }, "csp": { "n": 335777, "na": 767290, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 19595, "weak": 0, "absent": 316182 } }, "clickjacking": { "n": 335777, "na": 767290, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 44099, "absent": 291678 } }, "mime_sniffing": { "n": 335777, "na": 767290, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 47633, "absent": 288144 } }, "referrer_policy": { "n": 335777, "na": 767290, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 18328, "absent": 317449 } }, "secure_by_default": { "n": 249037, "na": 854030, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1826, "not_all": 247211 } }, "ipv6": { "n": 1103067, "na": 0, "states": { "aaaa": 197226, "none": 905841 } } } }, "black": { "graded": 5482, "checks": { "dmarc": { "n": 5482, "na": 0, "states": { "absent": 4454, "none": 360, "quarantine": 416, "reject": 251, "invalid": 1 }, "rua_present": 546 }, "spf": { "n": 5482, "na": 0, "states": { "absent": 3503, "hardfail": 662, "softfail": 1236, "neutral": 57, "plus_all": 0, "invalid": 24 } }, "dkim": { "n": 791, "na": 4691, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 363, "none_observed": 428 } }, "mx": { "n": 5482, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2290, "absent": 3192 } }, "reverse_dns": { "n": 2288, "na": 3194, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1789, "none": 499 } }, "caa": { "n": 5416, "na": 66, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 362, "absent": 5054 } }, "dnssec": { "n": 5482, "na": 0, "states": { "signed_valid": 376, "signed_broken": 3, "unsigned": 5103 } }, "https": { "n": 5482, "na": 0, "states": { "https": 2943, "redirects": 0, "http_only": 2539 } }, "tls": { "n": 2943, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2839, "tls12": 104, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2943, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2692, "invalid": 251 } }, "hsts": { "n": 2943, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 547, "absent": 2396 } }, "csp": { "n": 1821, "na": 3661, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 171, "weak": 0, "absent": 1650 } }, "clickjacking": { "n": 1821, "na": 3661, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 314, "absent": 1507 } }, "mime_sniffing": { "n": 1821, "na": 3661, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 380, "absent": 1441 } }, "referrer_policy": { "n": 1821, "na": 3661, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 218, "absent": 1603 } }, "secure_by_default": { "n": 1500, "na": 3982, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 22, "not_all": 1478 } }, "ipv6": { "n": 5482, "na": 0, "states": { "aaaa": 1238, "none": 4244 } } } }, "blog": { "graded": 347390, "checks": { "dmarc": { "n": 347390, "na": 0, "states": { "absent": 292398, "none": 37503, "quarantine": 11014, "reject": 6474, "invalid": 1 }, "rua_present": 14717 }, "spf": { "n": 347390, "na": 0, "states": { "absent": 259343, "hardfail": 11890, "softfail": 73590, "neutral": 1806, "plus_all": 5, "invalid": 756 } }, "dkim": { "n": 19107, "na": 328283, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 12812, "none_observed": 6295 } }, "mx": { "n": 347390, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 83680, "absent": 263710 } }, "reverse_dns": { "n": 83633, "na": 263757, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 67865, "none": 15768 } }, "caa": { "n": 344310, "na": 3080, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2150, "absent": 342160 } }, "dnssec": { "n": 347390, "na": 0, "states": { "signed_valid": 16953, "signed_broken": 2030, "unsigned": 328407 } }, "https": { "n": 347390, "na": 0, "states": { "https": 270662, "redirects": 0, "http_only": 76728 } }, "tls": { "n": 270662, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 264743, "tls12": 5919, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 270662, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 255885, "invalid": 14777 } }, "hsts": { "n": 270662, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 117690, "absent": 152972 } }, "csp": { "n": 149536, "na": 197854, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 16325, "weak": 0, "absent": 133211 } }, "clickjacking": { "n": 149536, "na": 197854, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 14384, "absent": 135152 } }, "mime_sniffing": { "n": 149536, "na": 197854, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 17570, "absent": 131966 } }, "referrer_policy": { "n": 149536, "na": 197854, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 11762, "absent": 137774 } }, "secure_by_default": { "n": 125547, "na": 221843, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 477, "not_all": 125070 } }, "ipv6": { "n": 347390, "na": 0, "states": { "aaaa": 95987, "none": 251403 } } } }, "blue": { "graded": 13642, "checks": { "dmarc": { "n": 13642, "na": 0, "states": { "absent": 10699, "none": 1464, "quarantine": 729, "reject": 749, "invalid": 1 }, "rua_present": 1129 }, "spf": { "n": 13642, "na": 0, "states": { "absent": 7209, "hardfail": 1773, "softfail": 4311, "neutral": 269, "plus_all": 2, "invalid": 78 } }, "dkim": { "n": 2220, "na": 11422, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1162, "none_observed": 1058 } }, "mx": { "n": 13642, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7480, "absent": 6162 } }, "reverse_dns": { "n": 7472, "na": 6170, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5732, "none": 1740 } }, "caa": { "n": 13518, "na": 124, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 533, "absent": 12985 } }, "dnssec": { "n": 13642, "na": 0, "states": { "signed_valid": 1327, "signed_broken": 3, "unsigned": 12312 } }, "https": { "n": 13642, "na": 0, "states": { "https": 7691, "redirects": 0, "http_only": 5951 } }, "tls": { "n": 7691, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7362, "tls12": 329, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7691, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6661, "invalid": 1030 } }, "hsts": { "n": 7691, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1424, "absent": 6267 } }, "csp": { "n": 5277, "na": 8365, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 427, "weak": 0, "absent": 4850 } }, "clickjacking": { "n": 5277, "na": 8365, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 750, "absent": 4527 } }, "mime_sniffing": { "n": 5277, "na": 8365, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 868, "absent": 4409 } }, "referrer_policy": { "n": 5277, "na": 8365, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 479, "absent": 4798 } }, "secure_by_default": { "n": 4486, "na": 9156, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 67, "not_all": 4419 } }, "ipv6": { "n": 13642, "na": 0, "states": { "aaaa": 2622, "none": 11020 } } } }, "bo": { "graded": 9790, "checks": { "dmarc": { "n": 9790, "na": 0, "states": { "absent": 5113, "none": 2893, "quarantine": 787, "reject": 992, "invalid": 5 }, "rua_present": 1706 }, "spf": { "n": 9790, "na": 0, "states": { "absent": 2284, "hardfail": 2131, "softfail": 5239, "neutral": 106, "plus_all": 1, "invalid": 29 } }, "dkim": { "n": 5725, "na": 4065, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4564, "none_observed": 1161 } }, "mx": { "n": 9790, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7908, "absent": 1882 } }, "reverse_dns": { "n": 7896, "na": 1894, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5652, "none": 2244 } }, "caa": { "n": 9746, "na": 44, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 338, "absent": 9408 } }, "dnssec": { "n": 9790, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 9790 } }, "https": { "n": 9790, "na": 0, "states": { "https": 8793, "redirects": 0, "http_only": 997 } }, "tls": { "n": 8793, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8200, "tls12": 593, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8793, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8340, "invalid": 453 } }, "hsts": { "n": 8793, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1186, "absent": 7607 } }, "csp": { "n": 5443, "na": 4347, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 793, "weak": 0, "absent": 4650 } }, "clickjacking": { "n": 5443, "na": 4347, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 744, "absent": 4699 } }, "mime_sniffing": { "n": 5443, "na": 4347, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 862, "absent": 4581 } }, "referrer_policy": { "n": 5443, "na": 4347, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 445, "absent": 4998 } }, "secure_by_default": { "n": 5374, "na": 4416, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 42, "not_all": 5332 } }, "ipv6": { "n": 9790, "na": 0, "states": { "aaaa": 2342, "none": 7448 } } } }, "boats": { "graded": 29977, "checks": { "dmarc": { "n": 29977, "na": 0, "states": { "absent": 28759, "none": 513, "quarantine": 454, "reject": 251, "invalid": 0 }, "rua_present": 725 }, "spf": { "n": 29977, "na": 0, "states": { "absent": 26561, "hardfail": 944, "softfail": 2356, "neutral": 60, "plus_all": 2, "invalid": 54 } }, "dkim": { "n": 1401, "na": 28576, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 469, "none_observed": 932 } }, "mx": { "n": 29977, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4423, "absent": 25554 } }, "reverse_dns": { "n": 4437, "na": 25540, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3231, "none": 1206 } }, "caa": { "n": 29545, "na": 432, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 217, "absent": 29328 } }, "dnssec": { "n": 29977, "na": 0, "states": { "signed_valid": 1648, "signed_broken": 17, "unsigned": 28312 } }, "https": { "n": 29977, "na": 0, "states": { "https": 9107, "redirects": 0, "http_only": 20870 } }, "tls": { "n": 9107, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8788, "tls12": 319, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9107, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7828, "invalid": 1279 } }, "hsts": { "n": 9107, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1442, "absent": 7665 } }, "csp": { "n": 6275, "na": 23702, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 498, "weak": 0, "absent": 5777 } }, "clickjacking": { "n": 6275, "na": 23702, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 801, "absent": 5474 } }, "mime_sniffing": { "n": 6275, "na": 23702, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 852, "absent": 5423 } }, "referrer_policy": { "n": 6275, "na": 23702, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 710, "absent": 5565 } }, "secure_by_default": { "n": 4443, "na": 25534, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 83, "not_all": 4360 } }, "ipv6": { "n": 29977, "na": 0, "states": { "aaaa": 5264, "none": 24713 } } } }, "bond": { "graded": 1146725, "checks": { "dmarc": { "n": 1146725, "na": 0, "states": { "absent": 1139298, "none": 5175, "quarantine": 503, "reject": 1749, "invalid": 0 }, "rua_present": 2500 }, "spf": { "n": 1146725, "na": 0, "states": { "absent": 1127561, "hardfail": 5089, "softfail": 13991, "neutral": 45, "plus_all": 3, "invalid": 36 } }, "dkim": { "n": 5944, "na": 1140781, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4446, "none_observed": 1498 } }, "mx": { "n": 1146725, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 21712, "absent": 1125013 } }, "reverse_dns": { "n": 21707, "na": 1125018, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 16495, "none": 5212 } }, "caa": { "n": 1076468, "na": 70257, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 262, "absent": 1076206 } }, "dnssec": { "n": 1146725, "na": 0, "states": { "signed_valid": 10149, "signed_broken": 73, "unsigned": 1136503 } }, "https": { "n": 1146725, "na": 0, "states": { "https": 104073, "redirects": 0, "http_only": 1042652 } }, "tls": { "n": 104073, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 102259, "tls12": 1814, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 104073, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 51738, "invalid": 52335 } }, "hsts": { "n": 104073, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 23797, "absent": 80276 } }, "csp": { "n": 46578, "na": 1100147, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 3848, "weak": 0, "absent": 42730 } }, "clickjacking": { "n": 46578, "na": 1100147, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 11369, "absent": 35209 } }, "mime_sniffing": { "n": 46578, "na": 1100147, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 5824, "absent": 40754 } }, "referrer_policy": { "n": 46578, "na": 1100147, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4784, "absent": 41794 } }, "secure_by_default": { "n": 32932, "na": 1113793, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 139, "not_all": 32793 } }, "ipv6": { "n": 1146725, "na": 0, "states": { "aaaa": 41744, "none": 1104981 } } } }, "bot": { "graded": 21132, "checks": { "dmarc": { "n": 21132, "na": 0, "states": { "absent": 17275, "none": 1230, "quarantine": 1812, "reject": 815, "invalid": 0 }, "rua_present": 2523 }, "spf": { "n": 21132, "na": 0, "states": { "absent": 11980, "hardfail": 2350, "softfail": 6641, "neutral": 142, "plus_all": 0, "invalid": 19 } }, "dkim": { "n": 2333, "na": 18799, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1588, "none_observed": 745 } }, "mx": { "n": 21132, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9604, "absent": 11528 } }, "reverse_dns": { "n": 9604, "na": 11528, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7696, "none": 1908 } }, "caa": { "n": 21023, "na": 109, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 446, "absent": 20577 } }, "dnssec": { "n": 21132, "na": 0, "states": { "signed_valid": 1385, "signed_broken": 27, "unsigned": 19720 } }, "https": { "n": 21132, "na": 0, "states": { "https": 11414, "redirects": 0, "http_only": 9718 } }, "tls": { "n": 11414, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 11230, "tls12": 184, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 11414, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 10951, "invalid": 463 } }, "hsts": { "n": 11414, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2870, "absent": 8544 } }, "csp": { "n": 8484, "na": 12648, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1945, "weak": 0, "absent": 6539 } }, "clickjacking": { "n": 8484, "na": 12648, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2630, "absent": 5854 } }, "mime_sniffing": { "n": 8484, "na": 12648, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2356, "absent": 6128 } }, "referrer_policy": { "n": 8484, "na": 12648, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2172, "absent": 6312 } }, "secure_by_default": { "n": 6402, "na": 14730, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 697, "not_all": 5705 } }, "ipv6": { "n": 21132, "na": 0, "states": { "aaaa": 3061, "none": 18071 } } } }, "boutique": { "graded": 17543, "checks": { "dmarc": { "n": 17543, "na": 0, "states": { "absent": 14252, "none": 1229, "quarantine": 956, "reject": 1106, "invalid": 0 }, "rua_present": 1676 }, "spf": { "n": 17543, "na": 0, "states": { "absent": 11726, "hardfail": 2163, "softfail": 3270, "neutral": 314, "plus_all": 22, "invalid": 48 } }, "dkim": { "n": 2018, "na": 15525, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 760, "none_observed": 1258 } }, "mx": { "n": 17543, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6579, "absent": 10964 } }, "reverse_dns": { "n": 6604, "na": 10939, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5216, "none": 1388 } }, "caa": { "n": 17371, "na": 172, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 560, "absent": 16811 } }, "dnssec": { "n": 17543, "na": 0, "states": { "signed_valid": 1588, "signed_broken": 29, "unsigned": 15926 } }, "https": { "n": 17543, "na": 0, "states": { "https": 7439, "redirects": 0, "http_only": 10104 } }, "tls": { "n": 7439, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7156, "tls12": 283, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7439, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6614, "invalid": 825 } }, "hsts": { "n": 7439, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1681, "absent": 5758 } }, "csp": { "n": 5221, "na": 12322, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1253, "weak": 0, "absent": 3968 } }, "clickjacking": { "n": 5221, "na": 12322, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1946, "absent": 3275 } }, "mime_sniffing": { "n": 5221, "na": 12322, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1954, "absent": 3267 } }, "referrer_policy": { "n": 5221, "na": 12322, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1357, "absent": 3864 } }, "secure_by_default": { "n": 3892, "na": 13651, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 94, "not_all": 3798 } }, "ipv6": { "n": 17543, "na": 0, "states": { "aaaa": 3361, "none": 14182 } } } }, "br": { "graded": 3698504, "checks": { "dmarc": { "n": 3698504, "na": 0, "states": { "absent": 2273949, "none": 933534, "quarantine": 173784, "reject": 316270, "invalid": 967 }, "rua_present": 326981 }, "spf": { "n": 3698504, "na": 0, "states": { "absent": 1247386, "hardfail": 788104, "softfail": 1526406, "neutral": 130865, "plus_all": 354, "invalid": 5389 } }, "dkim": { "n": 1370808, "na": 2327696, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 953053, "none_observed": 417755 } }, "mx": { "n": 3698504, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2665603, "absent": 1032901 } }, "reverse_dns": { "n": 2663540, "na": 1034964, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1608440, "none": 1055100 } }, "caa": { "n": 3667228, "na": 31276, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 174808, "absent": 3492420 } }, "dnssec": { "n": 3698504, "na": 0, "states": { "signed_valid": 669361, "signed_broken": 311, "unsigned": 3028832 } }, "https": { "n": 3698504, "na": 0, "states": { "https": 3174196, "redirects": 0, "http_only": 524308 } }, "tls": { "n": 3174196, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2998291, "tls12": 175905, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3174196, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2919399, "invalid": 254797 } }, "hsts": { "n": 3174196, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 689433, "absent": 2484763 } }, "csp": { "n": 1942469, "na": 1756035, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 483349, "weak": 0, "absent": 1459120 } }, "clickjacking": { "n": 1942469, "na": 1756035, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 294773, "absent": 1647696 } }, "mime_sniffing": { "n": 1942469, "na": 1756035, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 388365, "absent": 1554104 } }, "referrer_policy": { "n": 1942469, "na": 1756035, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 201520, "absent": 1740949 } }, "secure_by_default": { "n": 1914448, "na": 1784056, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 19937, "not_all": 1894511 } }, "ipv6": { "n": 3698504, "na": 0, "states": { "aaaa": 1126580, "none": 2571924 } } } }, "brussels": { "graded": 6423, "checks": { "dmarc": { "n": 6423, "na": 0, "states": { "absent": 4971, "none": 728, "quarantine": 292, "reject": 431, "invalid": 1 }, "rua_present": 607 }, "spf": { "n": 6423, "na": 0, "states": { "absent": 3179, "hardfail": 1476, "softfail": 1573, "neutral": 169, "plus_all": 9, "invalid": 17 } }, "dkim": { "n": 924, "na": 5499, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 479, "none_observed": 445 } }, "mx": { "n": 6423, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4358, "absent": 2065 } }, "reverse_dns": { "n": 4357, "na": 2066, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4042, "none": 315 } }, "caa": { "n": 6404, "na": 19, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 84, "absent": 6320 } }, "dnssec": { "n": 6423, "na": 0, "states": { "signed_valid": 2141, "signed_broken": 3, "unsigned": 4279 } }, "https": { "n": 6423, "na": 0, "states": { "https": 3648, "redirects": 0, "http_only": 2775 } }, "tls": { "n": 3648, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3110, "tls12": 538, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3648, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2570, "invalid": 1078 } }, "hsts": { "n": 3648, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 637, "absent": 3011 } }, "csp": { "n": 1980, "na": 4443, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 160, "weak": 0, "absent": 1820 } }, "clickjacking": { "n": 1980, "na": 4443, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 226, "absent": 1754 } }, "mime_sniffing": { "n": 1980, "na": 4443, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 254, "absent": 1726 } }, "referrer_policy": { "n": 1980, "na": 4443, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 116, "absent": 1864 } }, "secure_by_default": { "n": 1317, "na": 5106, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 16, "not_all": 1301 } }, "ipv6": { "n": 6423, "na": 0, "states": { "aaaa": 1027, "none": 5396 } } } }, "build": { "graded": 11166, "checks": { "dmarc": { "n": 11166, "na": 0, "states": { "absent": 7851, "none": 1090, "quarantine": 1594, "reject": 631, "invalid": 0 }, "rua_present": 2342 }, "spf": { "n": 11166, "na": 0, "states": { "absent": 6416, "hardfail": 1488, "softfail": 3119, "neutral": 128, "plus_all": 1, "invalid": 14 } }, "dkim": { "n": 3353, "na": 7813, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1176, "none_observed": 2177 } }, "mx": { "n": 11166, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5727, "absent": 5439 } }, "reverse_dns": { "n": 5728, "na": 5438, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5342, "none": 386 } }, "caa": { "n": 11141, "na": 25, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 570, "absent": 10571 } }, "dnssec": { "n": 11166, "na": 0, "states": { "signed_valid": 435, "signed_broken": 5, "unsigned": 10726 } }, "https": { "n": 11166, "na": 0, "states": { "https": 5947, "redirects": 0, "http_only": 5219 } }, "tls": { "n": 5947, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5800, "tls12": 147, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5947, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5596, "invalid": 351 } }, "hsts": { "n": 5947, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2132, "absent": 3815 } }, "csp": { "n": 3682, "na": 7484, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 358, "weak": 0, "absent": 3324 } }, "clickjacking": { "n": 3682, "na": 7484, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 682, "absent": 3000 } }, "mime_sniffing": { "n": 3682, "na": 7484, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1053, "absent": 2629 } }, "referrer_policy": { "n": 3682, "na": 7484, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 808, "absent": 2874 } }, "secure_by_default": { "n": 3190, "na": 7976, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 104, "not_all": 3086 } }, "ipv6": { "n": 11166, "na": 0, "states": { "aaaa": 1829, "none": 9337 } } } }, "builders": { "graded": 5619, "checks": { "dmarc": { "n": 5619, "na": 0, "states": { "absent": 4590, "none": 463, "quarantine": 295, "reject": 271, "invalid": 0 }, "rua_present": 526 }, "spf": { "n": 5619, "na": 0, "states": { "absent": 3504, "hardfail": 741, "softfail": 1310, "neutral": 46, "plus_all": 0, "invalid": 18 } }, "dkim": { "n": 1380, "na": 4239, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 521, "none_observed": 859 } }, "mx": { "n": 5619, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2657, "absent": 2962 } }, "reverse_dns": { "n": 2655, "na": 2964, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2230, "none": 425 } }, "caa": { "n": 5591, "na": 28, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 384, "absent": 5207 } }, "dnssec": { "n": 5619, "na": 0, "states": { "signed_valid": 433, "signed_broken": 0, "unsigned": 5186 } }, "https": { "n": 5619, "na": 0, "states": { "https": 3020, "redirects": 0, "http_only": 2599 } }, "tls": { "n": 3020, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2957, "tls12": 63, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3020, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2804, "invalid": 216 } }, "hsts": { "n": 3020, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 867, "absent": 2153 } }, "csp": { "n": 1832, "na": 3787, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 204, "weak": 0, "absent": 1628 } }, "clickjacking": { "n": 1832, "na": 3787, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 357, "absent": 1475 } }, "mime_sniffing": { "n": 1832, "na": 3787, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 431, "absent": 1401 } }, "referrer_policy": { "n": 1832, "na": 3787, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 256, "absent": 1576 } }, "secure_by_default": { "n": 1511, "na": 4108, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 79, "not_all": 1432 } }, "ipv6": { "n": 5619, "na": 0, "states": { "aaaa": 855, "none": 4764 } } } }, "business": { "graded": 34623, "checks": { "dmarc": { "n": 34623, "na": 0, "states": { "absent": 25745, "none": 4174, "quarantine": 2498, "reject": 2205, "invalid": 1 }, "rua_present": 3616 }, "spf": { "n": 34623, "na": 0, "states": { "absent": 19755, "hardfail": 4834, "softfail": 9536, "neutral": 315, "plus_all": 1, "invalid": 182 } }, "dkim": { "n": 7651, "na": 26972, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4682, "none_observed": 2969 } }, "mx": { "n": 34623, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 17065, "absent": 17558 } }, "reverse_dns": { "n": 17072, "na": 17551, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 13411, "none": 3661 } }, "caa": { "n": 34433, "na": 190, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1621, "absent": 32812 } }, "dnssec": { "n": 34623, "na": 0, "states": { "signed_valid": 2588, "signed_broken": 30, "unsigned": 32005 } }, "https": { "n": 34623, "na": 0, "states": { "https": 19634, "redirects": 0, "http_only": 14989 } }, "tls": { "n": 19634, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 19007, "tls12": 627, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 19634, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 17451, "invalid": 2183 } }, "hsts": { "n": 19634, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4112, "absent": 15522 } }, "csp": { "n": 12427, "na": 22196, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1322, "weak": 0, "absent": 11105 } }, "clickjacking": { "n": 12427, "na": 22196, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2269, "absent": 10158 } }, "mime_sniffing": { "n": 12427, "na": 22196, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2526, "absent": 9901 } }, "referrer_policy": { "n": 12427, "na": 22196, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1183, "absent": 11244 } }, "secure_by_default": { "n": 10031, "na": 24592, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 185, "not_all": 9846 } }, "ipv6": { "n": 34623, "na": 0, "states": { "aaaa": 8298, "none": 26325 } } } }, "buzz": { "graded": 228518, "checks": { "dmarc": { "n": 228518, "na": 0, "states": { "absent": 215051, "none": 4147, "quarantine": 7115, "reject": 2204, "invalid": 1 }, "rua_present": 9203 }, "spf": { "n": 228518, "na": 0, "states": { "absent": 207714, "hardfail": 7409, "softfail": 13036, "neutral": 132, "plus_all": 2, "invalid": 225 } }, "dkim": { "n": 9295, "na": 219223, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4319, "none_observed": 4976 } }, "mx": { "n": 228518, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 26380, "absent": 202138 } }, "reverse_dns": { "n": 26358, "na": 202160, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 20307, "none": 6051 } }, "caa": { "n": 226885, "na": 1633, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 496, "absent": 226389 } }, "dnssec": { "n": 228518, "na": 0, "states": { "signed_valid": 20491, "signed_broken": 57, "unsigned": 207970 } }, "https": { "n": 228518, "na": 0, "states": { "https": 165379, "redirects": 0, "http_only": 63139 } }, "tls": { "n": 165379, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 105967, "tls12": 59412, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 165379, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 157369, "invalid": 8010 } }, "hsts": { "n": 165379, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 13996, "absent": 151383 } }, "csp": { "n": 55647, "na": 172871, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 4425, "weak": 0, "absent": 51222 } }, "clickjacking": { "n": 55647, "na": 172871, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 6427, "absent": 49220 } }, "mime_sniffing": { "n": 55647, "na": 172871, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 6898, "absent": 48749 } }, "referrer_policy": { "n": 55647, "na": 172871, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 5350, "absent": 50297 } }, "secure_by_default": { "n": 51024, "na": 177494, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 194, "not_all": 50830 } }, "ipv6": { "n": 228518, "na": 0, "states": { "aaaa": 126596, "none": 101922 } } } }, "bw": { "graded": 8485, "checks": { "dmarc": { "n": 8485, "na": 0, "states": { "absent": 5136, "none": 2125, "quarantine": 657, "reject": 567, "invalid": 0 }, "rua_present": 1096 }, "spf": { "n": 8485, "na": 0, "states": { "absent": 1300, "hardfail": 1977, "softfail": 4913, "neutral": 164, "plus_all": 0, "invalid": 131 } }, "dkim": { "n": 5902, "na": 2583, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4708, "none_observed": 1194 } }, "mx": { "n": 8485, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7559, "absent": 926 } }, "reverse_dns": { "n": 7556, "na": 929, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5237, "none": 2319 } }, "caa": { "n": 8411, "na": 74, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 150, "absent": 8261 } }, "dnssec": { "n": 8485, "na": 0, "states": { "signed_valid": 19, "signed_broken": 0, "unsigned": 8466 } }, "https": { "n": 8485, "na": 0, "states": { "https": 7516, "redirects": 0, "http_only": 969 } }, "tls": { "n": 7516, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7350, "tls12": 166, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7516, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6739, "invalid": 777 } }, "hsts": { "n": 7516, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 904, "absent": 6612 } }, "csp": { "n": 4463, "na": 4022, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 382, "weak": 0, "absent": 4081 } }, "clickjacking": { "n": 4463, "na": 4022, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 457, "absent": 4006 } }, "mime_sniffing": { "n": 4463, "na": 4022, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 583, "absent": 3880 } }, "referrer_policy": { "n": 4463, "na": 4022, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 254, "absent": 4209 } }, "secure_by_default": { "n": 4426, "na": 4059, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 22, "not_all": 4404 } }, "ipv6": { "n": 8485, "na": 0, "states": { "aaaa": 1148, "none": 7337 } } } }, "by": { "graded": 101275, "checks": { "dmarc": { "n": 101275, "na": 0, "states": { "absent": 84445, "none": 10332, "quarantine": 3071, "reject": 3418, "invalid": 9 }, "rua_present": 3220 }, "spf": { "n": 101275, "na": 0, "states": { "absent": 31437, "hardfail": 7822, "softfail": 53403, "neutral": 314, "plus_all": 9, "invalid": 8290 } }, "dkim": { "n": 26755, "na": 74520, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 25326, "none_observed": 1429 } }, "mx": { "n": 101275, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 75543, "absent": 25732 } }, "reverse_dns": { "n": 75379, "na": 25896, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 69748, "none": 5631 } }, "caa": { "n": 100955, "na": 320, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1611, "absent": 99344 } }, "dnssec": { "n": 101275, "na": 0, "states": { "signed_valid": 156, "signed_broken": 2, "unsigned": 101117 } }, "https": { "n": 101275, "na": 0, "states": { "https": 94934, "redirects": 0, "http_only": 6341 } }, "tls": { "n": 94934, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 85635, "tls12": 9299, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 94934, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 88773, "invalid": 6161 } }, "hsts": { "n": 94934, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 28864, "absent": 66070 } }, "csp": { "n": 75362, "na": 25913, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1697, "weak": 0, "absent": 73665 } }, "clickjacking": { "n": 75362, "na": 25913, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 13570, "absent": 61792 } }, "mime_sniffing": { "n": 75362, "na": 25913, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 8962, "absent": 66400 } }, "referrer_policy": { "n": 75362, "na": 25913, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3330, "absent": 72032 } }, "secure_by_default": { "n": 74272, "na": 27003, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 362, "not_all": 73910 } }, "ipv6": { "n": 101275, "na": 0, "states": { "aaaa": 33279, "none": 67996 } } } }, "bz": { "graded": 21631, "checks": { "dmarc": { "n": 21631, "na": 0, "states": { "absent": 17786, "none": 1986, "quarantine": 1019, "reject": 839, "invalid": 1 }, "rua_present": 1765 }, "spf": { "n": 21631, "na": 0, "states": { "absent": 13295, "hardfail": 3098, "softfail": 4748, "neutral": 291, "plus_all": 2, "invalid": 197 } }, "dkim": { "n": 5047, "na": 16584, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2029, "none_observed": 3018 } }, "mx": { "n": 21631, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 10371, "absent": 11260 } }, "reverse_dns": { "n": 10364, "na": 11267, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8497, "none": 1867 } }, "caa": { "n": 21504, "na": 127, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 296, "absent": 21208 } }, "dnssec": { "n": 21631, "na": 0, "states": { "signed_valid": 354, "signed_broken": 4, "unsigned": 21273 } }, "https": { "n": 21631, "na": 0, "states": { "https": 16227, "redirects": 0, "http_only": 5404 } }, "tls": { "n": 16227, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 15151, "tls12": 1076, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 16227, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 14794, "invalid": 1433 } }, "hsts": { "n": 16227, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2352, "absent": 13875 } }, "csp": { "n": 7649, "na": 13982, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 376, "weak": 0, "absent": 7273 } }, "clickjacking": { "n": 7649, "na": 13982, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1171, "absent": 6478 } }, "mime_sniffing": { "n": 7649, "na": 13982, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1238, "absent": 6411 } }, "referrer_policy": { "n": 7649, "na": 13982, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 751, "absent": 6898 } }, "secure_by_default": { "n": 7291, "na": 14340, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 68, "not_all": 7223 } }, "ipv6": { "n": 21631, "na": 0, "states": { "aaaa": 3864, "none": 17767 } } } }, "bzh": { "graded": 13285, "checks": { "dmarc": { "n": 13285, "na": 0, "states": { "absent": 9274, "none": 2481, "quarantine": 821, "reject": 704, "invalid": 5 }, "rua_present": 1442 }, "spf": { "n": 13285, "na": 0, "states": { "absent": 2393, "hardfail": 4505, "softfail": 5250, "neutral": 1081, "plus_all": 28, "invalid": 28 } }, "dkim": { "n": 3268, "na": 10017, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2309, "none_observed": 959 } }, "mx": { "n": 13285, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12207, "absent": 1078 } }, "reverse_dns": { "n": 12196, "na": 1089, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 11616, "none": 580 } }, "caa": { "n": 13236, "na": 49, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 128, "absent": 13108 } }, "dnssec": { "n": 13285, "na": 0, "states": { "signed_valid": 4008, "signed_broken": 3, "unsigned": 9274 } }, "https": { "n": 13285, "na": 0, "states": { "https": 7615, "redirects": 0, "http_only": 5670 } }, "tls": { "n": 7615, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7208, "tls12": 407, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7615, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6615, "invalid": 1000 } }, "hsts": { "n": 7615, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1663, "absent": 5952 } }, "csp": { "n": 4667, "na": 8618, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 939, "weak": 0, "absent": 3728 } }, "clickjacking": { "n": 4667, "na": 8618, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 553, "absent": 4114 } }, "mime_sniffing": { "n": 4667, "na": 8618, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 607, "absent": 4060 } }, "referrer_policy": { "n": 4667, "na": 8618, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 366, "absent": 4301 } }, "secure_by_default": { "n": 3620, "na": 9665, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 69, "not_all": 3551 } }, "ipv6": { "n": 13285, "na": 0, "states": { "aaaa": 3339, "none": 9946 } } } }, "ca": { "graded": 2665486, "checks": { "dmarc": { "n": 2665486, "na": 0, "states": { "absent": 1924825, "none": 371219, "quarantine": 246256, "reject": 122869, "invalid": 317 }, "rua_present": 381636 }, "spf": { "n": 2665486, "na": 0, "states": { "absent": 1346563, "hardfail": 488886, "softfail": 751523, "neutral": 73578, "plus_all": 185, "invalid": 4751 } }, "dkim": { "n": 1069918, "na": 1595568, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 423246, "none_observed": 646672 } }, "mx": { "n": 2665486, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1560470, "absent": 1105016 } }, "reverse_dns": { "n": 1558903, "na": 1106583, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1350588, "none": 208315 } }, "caa": { "n": 2659509, "na": 5977, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 46792, "absent": 2612717 } }, "dnssec": { "n": 2665486, "na": 0, "states": { "signed_valid": 68443, "signed_broken": 255, "unsigned": 2596788 } }, "https": { "n": 2665486, "na": 0, "states": { "https": 1850940, "redirects": 0, "http_only": 814546 } }, "tls": { "n": 1850940, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1765696, "tls12": 85244, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1850940, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1766178, "invalid": 84762 } }, "hsts": { "n": 1850940, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 506563, "absent": 1344377 } }, "csp": { "n": 919466, "na": 1746020, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 117460, "weak": 0, "absent": 802006 } }, "clickjacking": { "n": 919466, "na": 1746020, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 168057, "absent": 751409 } }, "mime_sniffing": { "n": 919466, "na": 1746020, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 207799, "absent": 711667 } }, "referrer_policy": { "n": 919466, "na": 1746020, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 82394, "absent": 837072 } }, "secure_by_default": { "n": 897842, "na": 1767644, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 16131, "not_all": 881711 } }, "ipv6": { "n": 2665486, "na": 0, "states": { "aaaa": 344833, "none": 2320653 } } } }, "cafe": { "graded": 22976, "checks": { "dmarc": { "n": 22976, "na": 0, "states": { "absent": 17887, "none": 2152, "quarantine": 1851, "reject": 1085, "invalid": 1 }, "rua_present": 2481 }, "spf": { "n": 22976, "na": 0, "states": { "absent": 13396, "hardfail": 2709, "softfail": 6389, "neutral": 326, "plus_all": 1, "invalid": 155 } }, "dkim": { "n": 3928, "na": 19048, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1999, "none_observed": 1929 } }, "mx": { "n": 22976, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 11136, "absent": 11840 } }, "reverse_dns": { "n": 11133, "na": 11843, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 9143, "none": 1990 } }, "caa": { "n": 22355, "na": 621, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1052, "absent": 21303 } }, "dnssec": { "n": 22976, "na": 0, "states": { "signed_valid": 1637, "signed_broken": 17, "unsigned": 21322 } }, "https": { "n": 22976, "na": 0, "states": { "https": 12836, "redirects": 0, "http_only": 10140 } }, "tls": { "n": 12836, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 12320, "tls12": 516, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 12836, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 11667, "invalid": 1169 } }, "hsts": { "n": 12836, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3228, "absent": 9608 } }, "csp": { "n": 8775, "na": 14201, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 982, "weak": 0, "absent": 7793 } }, "clickjacking": { "n": 8775, "na": 14201, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1567, "absent": 7208 } }, "mime_sniffing": { "n": 8775, "na": 14201, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1836, "absent": 6939 } }, "referrer_policy": { "n": 8775, "na": 14201, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 991, "absent": 7784 } }, "secure_by_default": { "n": 7218, "na": 15758, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 183, "not_all": 7035 } }, "ipv6": { "n": 22976, "na": 0, "states": { "aaaa": 4757, "none": 18219 } } } }, "cam": { "graded": 80660, "checks": { "dmarc": { "n": 80660, "na": 0, "states": { "absent": 76488, "none": 2540, "quarantine": 911, "reject": 721, "invalid": 0 }, "rua_present": 1596 }, "spf": { "n": 80660, "na": 0, "states": { "absent": 68636, "hardfail": 2081, "softfail": 9582, "neutral": 220, "plus_all": 4, "invalid": 137 } }, "dkim": { "n": 5196, "na": 75464, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3808, "none_observed": 1388 } }, "mx": { "n": 80660, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 17769, "absent": 62891 } }, "reverse_dns": { "n": 17739, "na": 62921, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 13278, "none": 4461 } }, "caa": { "n": 80150, "na": 510, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 323, "absent": 79827 } }, "dnssec": { "n": 80660, "na": 0, "states": { "signed_valid": 8266, "signed_broken": 28, "unsigned": 72366 } }, "https": { "n": 80660, "na": 0, "states": { "https": 61925, "redirects": 0, "http_only": 18735 } }, "tls": { "n": 61925, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 57569, "tls12": 4356, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 61925, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 57627, "invalid": 4298 } }, "hsts": { "n": 61925, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 23165, "absent": 38760 } }, "csp": { "n": 41876, "na": 38784, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1464, "weak": 0, "absent": 40412 } }, "clickjacking": { "n": 41876, "na": 38784, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 6547, "absent": 35329 } }, "mime_sniffing": { "n": 41876, "na": 38784, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3375, "absent": 38501 } }, "referrer_policy": { "n": 41876, "na": 38784, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2769, "absent": 39107 } }, "secure_by_default": { "n": 39205, "na": 41455, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 201, "not_all": 39004 } }, "ipv6": { "n": 80660, "na": 0, "states": { "aaaa": 26974, "none": 53686 } } } }, "camp": { "graded": 7598, "checks": { "dmarc": { "n": 7598, "na": 0, "states": { "absent": 5836, "none": 854, "quarantine": 300, "reject": 608, "invalid": 0 }, "rua_present": 555 }, "spf": { "n": 7598, "na": 0, "states": { "absent": 4194, "hardfail": 1355, "softfail": 1834, "neutral": 141, "plus_all": 0, "invalid": 74 } }, "dkim": { "n": 1533, "na": 6065, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 658, "none_observed": 875 } }, "mx": { "n": 7598, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4040, "absent": 3558 } }, "reverse_dns": { "n": 4040, "na": 3558, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3468, "none": 572 } }, "caa": { "n": 7557, "na": 41, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 287, "absent": 7270 } }, "dnssec": { "n": 7598, "na": 0, "states": { "signed_valid": 733, "signed_broken": 0, "unsigned": 6865 } }, "https": { "n": 7598, "na": 0, "states": { "https": 4520, "redirects": 0, "http_only": 3078 } }, "tls": { "n": 4520, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4366, "tls12": 154, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4520, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4094, "invalid": 426 } }, "hsts": { "n": 4520, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1190, "absent": 3330 } }, "csp": { "n": 2963, "na": 4635, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 224, "weak": 0, "absent": 2739 } }, "clickjacking": { "n": 2963, "na": 4635, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 708, "absent": 2255 } }, "mime_sniffing": { "n": 2963, "na": 4635, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 795, "absent": 2168 } }, "referrer_policy": { "n": 2963, "na": 4635, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 304, "absent": 2659 } }, "secure_by_default": { "n": 2434, "na": 5164, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 42, "not_all": 2392 } }, "ipv6": { "n": 7598, "na": 0, "states": { "aaaa": 1339, "none": 6259 } } } }, "capital": { "graded": 34201, "checks": { "dmarc": { "n": 34201, "na": 0, "states": { "absent": 25100, "none": 3325, "quarantine": 3929, "reject": 1845, "invalid": 2 }, "rua_present": 5665 }, "spf": { "n": 34201, "na": 0, "states": { "absent": 16895, "hardfail": 6348, "softfail": 10509, "neutral": 262, "plus_all": 1, "invalid": 186 } }, "dkim": { "n": 10473, "na": 23728, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4391, "none_observed": 6082 } }, "mx": { "n": 34201, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 19774, "absent": 14427 } }, "reverse_dns": { "n": 19775, "na": 14426, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 16626, "none": 3149 } }, "caa": { "n": 34031, "na": 170, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1150, "absent": 32881 } }, "dnssec": { "n": 34201, "na": 0, "states": { "signed_valid": 2438, "signed_broken": 23, "unsigned": 31740 } }, "https": { "n": 34201, "na": 0, "states": { "https": 17429, "redirects": 0, "http_only": 16772 } }, "tls": { "n": 17429, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 16994, "tls12": 435, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 17429, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 16124, "invalid": 1305 } }, "hsts": { "n": 17429, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5065, "absent": 12364 } }, "csp": { "n": 11941, "na": 22260, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1126, "weak": 0, "absent": 10815 } }, "clickjacking": { "n": 11941, "na": 22260, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2268, "absent": 9673 } }, "mime_sniffing": { "n": 11941, "na": 22260, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2890, "absent": 9051 } }, "referrer_policy": { "n": 11941, "na": 22260, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1662, "absent": 10279 } }, "secure_by_default": { "n": 10175, "na": 24026, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 297, "not_all": 9878 } }, "ipv6": { "n": 34201, "na": 0, "states": { "aaaa": 4829, "none": 29372 } } } }, "cards": { "graded": 13370, "checks": { "dmarc": { "n": 13370, "na": 0, "states": { "absent": 10921, "none": 1190, "quarantine": 625, "reject": 634, "invalid": 0 }, "rua_present": 1112 }, "spf": { "n": 13370, "na": 0, "states": { "absent": 8962, "hardfail": 1296, "softfail": 2925, "neutral": 128, "plus_all": 0, "invalid": 59 } }, "dkim": { "n": 1774, "na": 11596, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 842, "none_observed": 932 } }, "mx": { "n": 13370, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5134, "absent": 8236 } }, "reverse_dns": { "n": 5139, "na": 8231, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4405, "none": 734 } }, "caa": { "n": 13269, "na": 101, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 834, "absent": 12435 } }, "dnssec": { "n": 13370, "na": 0, "states": { "signed_valid": 756, "signed_broken": 10, "unsigned": 12604 } }, "https": { "n": 13370, "na": 0, "states": { "https": 7983, "redirects": 0, "http_only": 5387 } }, "tls": { "n": 7983, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7729, "tls12": 254, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7983, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7433, "invalid": 550 } }, "hsts": { "n": 7983, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2175, "absent": 5808 } }, "csp": { "n": 4517, "na": 8853, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 538, "weak": 0, "absent": 3979 } }, "clickjacking": { "n": 4517, "na": 8853, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 889, "absent": 3628 } }, "mime_sniffing": { "n": 4517, "na": 8853, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1131, "absent": 3386 } }, "referrer_policy": { "n": 4517, "na": 8853, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 743, "absent": 3774 } }, "secure_by_default": { "n": 3840, "na": 9530, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 129, "not_all": 3711 } }, "ipv6": { "n": 13370, "na": 0, "states": { "aaaa": 2661, "none": 10709 } } } }, "care": { "graded": 44047, "checks": { "dmarc": { "n": 44047, "na": 0, "states": { "absent": 31603, "none": 5506, "quarantine": 4138, "reject": 2794, "invalid": 6 }, "rua_present": 6430 }, "spf": { "n": 44047, "na": 0, "states": { "absent": 24006, "hardfail": 6898, "softfail": 12444, "neutral": 538, "plus_all": 3, "invalid": 158 } }, "dkim": { "n": 11556, "na": 32491, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4961, "none_observed": 6595 } }, "mx": { "n": 44047, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 23141, "absent": 20906 } }, "reverse_dns": { "n": 23147, "na": 20900, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 20344, "none": 2803 } }, "caa": { "n": 43860, "na": 187, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 987, "absent": 42873 } }, "dnssec": { "n": 44047, "na": 0, "states": { "signed_valid": 3896, "signed_broken": 26, "unsigned": 40125 } }, "https": { "n": 44047, "na": 0, "states": { "https": 24949, "redirects": 0, "http_only": 19098 } }, "tls": { "n": 24949, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 24067, "tls12": 882, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 24949, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 22862, "invalid": 2087 } }, "hsts": { "n": 24949, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 6799, "absent": 18150 } }, "csp": { "n": 15014, "na": 29033, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1604, "weak": 0, "absent": 13410 } }, "clickjacking": { "n": 15014, "na": 29033, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2897, "absent": 12117 } }, "mime_sniffing": { "n": 15014, "na": 29033, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3548, "absent": 11466 } }, "referrer_policy": { "n": 15014, "na": 29033, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1715, "absent": 13299 } }, "secure_by_default": { "n": 12562, "na": 31485, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 260, "not_all": 12302 } }, "ipv6": { "n": 44047, "na": 0, "states": { "aaaa": 9574, "none": 34473 } } } }, "careers": { "graded": 8455, "checks": { "dmarc": { "n": 8455, "na": 0, "states": { "absent": 6265, "none": 699, "quarantine": 455, "reject": 1036, "invalid": 0 }, "rua_present": 1247 }, "spf": { "n": 8455, "na": 0, "states": { "absent": 5000, "hardfail": 1362, "softfail": 1935, "neutral": 116, "plus_all": 0, "invalid": 42 } }, "dkim": { "n": 1453, "na": 7002, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 548, "none_observed": 905 } }, "mx": { "n": 8455, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4002, "absent": 4453 } }, "reverse_dns": { "n": 4003, "na": 4452, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3261, "none": 742 } }, "caa": { "n": 8415, "na": 40, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 333, "absent": 8082 } }, "dnssec": { "n": 8455, "na": 0, "states": { "signed_valid": 579, "signed_broken": 7, "unsigned": 7869 } }, "https": { "n": 8455, "na": 0, "states": { "https": 3642, "redirects": 0, "http_only": 4813 } }, "tls": { "n": 3642, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3478, "tls12": 164, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3642, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3143, "invalid": 499 } }, "hsts": { "n": 3642, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 845, "absent": 2797 } }, "csp": { "n": 2324, "na": 6131, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 335, "weak": 0, "absent": 1989 } }, "clickjacking": { "n": 2324, "na": 6131, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 494, "absent": 1830 } }, "mime_sniffing": { "n": 2324, "na": 6131, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 553, "absent": 1771 } }, "referrer_policy": { "n": 2324, "na": 6131, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 324, "absent": 2000 } }, "secure_by_default": { "n": 1626, "na": 6829, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 45, "not_all": 1581 } }, "ipv6": { "n": 8455, "na": 0, "states": { "aaaa": 1142, "none": 7313 } } } }, "casa": { "graded": 82650, "checks": { "dmarc": { "n": 82650, "na": 0, "states": { "absent": 77113, "none": 2421, "quarantine": 1906, "reject": 1208, "invalid": 2 }, "rua_present": 2851 }, "spf": { "n": 82650, "na": 0, "states": { "absent": 70020, "hardfail": 2715, "softfail": 9429, "neutral": 295, "plus_all": 1, "invalid": 190 } }, "dkim": { "n": 3890, "na": 78760, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2322, "none_observed": 1568 } }, "mx": { "n": 82650, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 13268, "absent": 69382 } }, "reverse_dns": { "n": 13267, "na": 69383, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 11127, "none": 2140 } }, "caa": { "n": 81581, "na": 1069, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 571, "absent": 81010 } }, "dnssec": { "n": 82650, "na": 0, "states": { "signed_valid": 6791, "signed_broken": 52, "unsigned": 75807 } }, "https": { "n": 82650, "na": 0, "states": { "https": 58411, "redirects": 0, "http_only": 24239 } }, "tls": { "n": 58411, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 57410, "tls12": 1001, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 58411, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 48863, "invalid": 9548 } }, "hsts": { "n": 58411, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 16069, "absent": 42342 } }, "csp": { "n": 37908, "na": 44742, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1754, "weak": 0, "absent": 36154 } }, "clickjacking": { "n": 37908, "na": 44742, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3197, "absent": 34711 } }, "mime_sniffing": { "n": 37908, "na": 44742, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3683, "absent": 34225 } }, "referrer_policy": { "n": 37908, "na": 44742, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2947, "absent": 34961 } }, "secure_by_default": { "n": 29292, "na": 53358, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 196, "not_all": 29096 } }, "ipv6": { "n": 82650, "na": 0, "states": { "aaaa": 22676, "none": 59974 } } } }, "cash": { "graded": 18984, "checks": { "dmarc": { "n": 18984, "na": 0, "states": { "absent": 15863, "none": 1049, "quarantine": 1374, "reject": 697, "invalid": 1 }, "rua_present": 1891 }, "spf": { "n": 18984, "na": 0, "states": { "absent": 11566, "hardfail": 2216, "softfail": 4996, "neutral": 140, "plus_all": 1, "invalid": 65 } }, "dkim": { "n": 1919, "na": 17065, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 922, "none_observed": 997 } }, "mx": { "n": 18984, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8021, "absent": 10963 } }, "reverse_dns": { "n": 8020, "na": 10964, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6152, "none": 1868 } }, "caa": { "n": 18839, "na": 145, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 738, "absent": 18101 } }, "dnssec": { "n": 18984, "na": 0, "states": { "signed_valid": 1163, "signed_broken": 11, "unsigned": 17810 } }, "https": { "n": 18984, "na": 0, "states": { "https": 10756, "redirects": 0, "http_only": 8228 } }, "tls": { "n": 10756, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 10471, "tls12": 285, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10756, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 10122, "invalid": 634 } }, "hsts": { "n": 10756, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2310, "absent": 8446 } }, "csp": { "n": 7665, "na": 11319, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 949, "weak": 0, "absent": 6716 } }, "clickjacking": { "n": 7665, "na": 11319, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1333, "absent": 6332 } }, "mime_sniffing": { "n": 7665, "na": 11319, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1446, "absent": 6219 } }, "referrer_policy": { "n": 7665, "na": 11319, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1142, "absent": 6523 } }, "secure_by_default": { "n": 6609, "na": 12375, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 293, "not_all": 6316 } }, "ipv6": { "n": 18984, "na": 0, "states": { "aaaa": 4304, "none": 14680 } } } }, "casino": { "graded": 86481, "checks": { "dmarc": { "n": 86481, "na": 0, "states": { "absent": 82633, "none": 946, "quarantine": 1556, "reject": 1346, "invalid": 0 }, "rua_present": 1905 }, "spf": { "n": 86481, "na": 0, "states": { "absent": 70153, "hardfail": 3149, "softfail": 13049, "neutral": 51, "plus_all": 0, "invalid": 79 } }, "dkim": { "n": 1237, "na": 85244, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 855, "none_observed": 382 } }, "mx": { "n": 86481, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 16270, "absent": 70211 } }, "reverse_dns": { "n": 16272, "na": 70209, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 14214, "none": 2058 } }, "caa": { "n": 83676, "na": 2805, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 566, "absent": 83110 } }, "dnssec": { "n": 86481, "na": 0, "states": { "signed_valid": 5962, "signed_broken": 37, "unsigned": 80482 } }, "https": { "n": 86481, "na": 0, "states": { "https": 69567, "redirects": 0, "http_only": 16914 } }, "tls": { "n": 69567, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 42590, "tls12": 26977, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 69567, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 64533, "invalid": 5034 } }, "hsts": { "n": 69567, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3914, "absent": 65653 } }, "csp": { "n": 29788, "na": 56693, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2866, "weak": 0, "absent": 26922 } }, "clickjacking": { "n": 29788, "na": 56693, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4525, "absent": 25263 } }, "mime_sniffing": { "n": 29788, "na": 56693, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 5613, "absent": 24175 } }, "referrer_policy": { "n": 29788, "na": 56693, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3366, "absent": 26422 } }, "secure_by_default": { "n": 26960, "na": 59521, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 327, "not_all": 26633 } }, "ipv6": { "n": 86481, "na": 0, "states": { "aaaa": 50635, "none": 35846 } } } }, "cat": { "graded": 103765, "checks": { "dmarc": { "n": 103765, "na": 0, "states": { "absent": 70454, "none": 17609, "quarantine": 12526, "reject": 3161, "invalid": 15 }, "rua_present": 5989 }, "spf": { "n": 103765, "na": 0, "states": { "absent": 31696, "hardfail": 14614, "softfail": 51199, "neutral": 840, "plus_all": 23, "invalid": 5393 } }, "dkim": { "n": 26394, "na": 77371, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 17112, "none_observed": 9282 } }, "mx": { "n": 103765, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 77195, "absent": 26570 } }, "reverse_dns": { "n": 77171, "na": 26594, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 73248, "none": 3923 } }, "caa": { "n": 103518, "na": 247, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 951, "absent": 102567 } }, "dnssec": { "n": 103765, "na": 0, "states": { "signed_valid": 12656, "signed_broken": 109, "unsigned": 91000 } }, "https": { "n": 103765, "na": 0, "states": { "https": 72588, "redirects": 0, "http_only": 31177 } }, "tls": { "n": 72588, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 59419, "tls12": 13169, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 72588, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 51925, "invalid": 20663 } }, "hsts": { "n": 72588, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 8716, "absent": 63872 } }, "csp": { "n": 40941, "na": 62824, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2881, "weak": 0, "absent": 38060 } }, "clickjacking": { "n": 40941, "na": 62824, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4227, "absent": 36714 } }, "mime_sniffing": { "n": 40941, "na": 62824, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4481, "absent": 36460 } }, "referrer_policy": { "n": 40941, "na": 62824, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2447, "absent": 38494 } }, "secure_by_default": { "n": 33613, "na": 70152, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 400, "not_all": 33213 } }, "ipv6": { "n": 103765, "na": 0, "states": { "aaaa": 14129, "none": 89636 } } } }, "cc": { "graded": 1880789, "checks": { "dmarc": { "n": 1880789, "na": 0, "states": { "absent": 1791785, "none": 32932, "quarantine": 43898, "reject": 12156, "invalid": 18 }, "rua_present": 55021 }, "spf": { "n": 1880789, "na": 0, "states": { "absent": 1679006, "hardfail": 102630, "softfail": 94639, "neutral": 3008, "plus_all": 43, "invalid": 1463 } }, "dkim": { "n": 56559, "na": 1824230, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 33202, "none_observed": 23357 } }, "mx": { "n": 1880789, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 220305, "absent": 1660484 } }, "reverse_dns": { "n": 220182, "na": 1660607, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 172854, "none": 47328 } }, "caa": { "n": 1871122, "na": 9667, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 5573, "absent": 1865549 } }, "dnssec": { "n": 1880789, "na": 0, "states": { "signed_valid": 71604, "signed_broken": 462, "unsigned": 1808723 } }, "https": { "n": 1880789, "na": 0, "states": { "https": 1098379, "redirects": 0, "http_only": 782410 } }, "tls": { "n": 1098379, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1041051, "tls12": 57328, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1098379, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1015665, "invalid": 82714 } }, "hsts": { "n": 1098379, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 282399, "absent": 815980 } }, "csp": { "n": 644774, "na": 1236015, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 20725, "weak": 0, "absent": 624049 } }, "clickjacking": { "n": 644774, "na": 1236015, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 37307, "absent": 607467 } }, "mime_sniffing": { "n": 644774, "na": 1236015, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 47288, "absent": 597486 } }, "referrer_policy": { "n": 644774, "na": 1236015, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 37068, "absent": 607706 } }, "secure_by_default": { "n": 601471, "na": 1279318, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 3743, "not_all": 597728 } }, "ipv6": { "n": 1880789, "na": 0, "states": { "aaaa": 426834, "none": 1453955 } } } }, "center": { "graded": 45369, "checks": { "dmarc": { "n": 45369, "na": 0, "states": { "absent": 37164, "none": 3782, "quarantine": 2839, "reject": 1583, "invalid": 1 }, "rua_present": 3939 }, "spf": { "n": 45369, "na": 0, "states": { "absent": 30677, "hardfail": 4740, "softfail": 8778, "neutral": 560, "plus_all": 4, "invalid": 610 } }, "dkim": { "n": 6346, "na": 39023, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3012, "none_observed": 3334 } }, "mx": { "n": 45369, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 17792, "absent": 27577 } }, "reverse_dns": { "n": 17791, "na": 27578, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 13663, "none": 4128 } }, "caa": { "n": 44980, "na": 389, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 939, "absent": 44041 } }, "dnssec": { "n": 45369, "na": 0, "states": { "signed_valid": 1748, "signed_broken": 12, "unsigned": 43609 } }, "https": { "n": 45369, "na": 0, "states": { "https": 28746, "redirects": 0, "http_only": 16623 } }, "tls": { "n": 28746, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 19521, "tls12": 9225, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 28746, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 26393, "invalid": 2353 } }, "hsts": { "n": 28746, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3747, "absent": 24999 } }, "csp": { "n": 18787, "na": 26582, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1249, "weak": 0, "absent": 17538 } }, "clickjacking": { "n": 18787, "na": 26582, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2200, "absent": 16587 } }, "mime_sniffing": { "n": 18787, "na": 26582, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2261, "absent": 16526 } }, "referrer_policy": { "n": 18787, "na": 26582, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1272, "absent": 17515 } }, "secure_by_default": { "n": 16366, "na": 29003, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 219, "not_all": 16147 } }, "ipv6": { "n": 45369, "na": 0, "states": { "aaaa": 15390, "none": 29979 } } } }, "ceo": { "graded": 7992, "checks": { "dmarc": { "n": 7992, "na": 0, "states": { "absent": 6458, "none": 368, "quarantine": 755, "reject": 411, "invalid": 0 }, "rua_present": 1103 }, "spf": { "n": 7992, "na": 0, "states": { "absent": 5761, "hardfail": 667, "softfail": 1504, "neutral": 45, "plus_all": 0, "invalid": 15 } }, "dkim": { "n": 887, "na": 7105, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 433, "none_observed": 454 } }, "mx": { "n": 7992, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2401, "absent": 5591 } }, "reverse_dns": { "n": 2400, "na": 5592, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1999, "none": 401 } }, "caa": { "n": 7880, "na": 112, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 133, "absent": 7747 } }, "dnssec": { "n": 7992, "na": 0, "states": { "signed_valid": 484, "signed_broken": 6, "unsigned": 7502 } }, "https": { "n": 7992, "na": 0, "states": { "https": 4770, "redirects": 0, "http_only": 3222 } }, "tls": { "n": 4770, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4625, "tls12": 145, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4770, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4278, "invalid": 492 } }, "hsts": { "n": 4770, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1172, "absent": 3598 } }, "csp": { "n": 3104, "na": 4888, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 268, "weak": 0, "absent": 2836 } }, "clickjacking": { "n": 3104, "na": 4888, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 502, "absent": 2602 } }, "mime_sniffing": { "n": 3104, "na": 4888, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 563, "absent": 2541 } }, "referrer_policy": { "n": 3104, "na": 4888, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 385, "absent": 2719 } }, "secure_by_default": { "n": 2545, "na": 5447, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 42, "not_all": 2503 } }, "ipv6": { "n": 7992, "na": 0, "states": { "aaaa": 1643, "none": 6349 } } } }, "cf": { "graded": 13466, "checks": { "dmarc": { "n": 13466, "na": 0, "states": { "absent": 12986, "none": 283, "quarantine": 75, "reject": 122, "invalid": 0 }, "rua_present": 290 }, "spf": { "n": 13466, "na": 0, "states": { "absent": 11228, "hardfail": 973, "softfail": 1186, "neutral": 29, "plus_all": 1, "invalid": 49 } }, "dkim": { "n": 557, "na": 12909, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 277, "none_observed": 280 } }, "mx": { "n": 13466, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2383, "absent": 11083 } }, "reverse_dns": { "n": 2385, "na": 11081, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2074, "none": 311 } }, "caa": { "n": 13458, "na": 8, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 157, "absent": 13301 } }, "dnssec": { "n": 13466, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 13466 } }, "https": { "n": 13466, "na": 0, "states": { "https": 4660, "redirects": 0, "http_only": 8806 } }, "tls": { "n": 4660, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4342, "tls12": 318, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4660, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4056, "invalid": 604 } }, "hsts": { "n": 4660, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 283, "absent": 4377 } }, "csp": { "n": 1464, "na": 12002, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 51, "weak": 0, "absent": 1413 } }, "clickjacking": { "n": 1464, "na": 12002, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 134, "absent": 1330 } }, "mime_sniffing": { "n": 1464, "na": 12002, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 197, "absent": 1267 } }, "referrer_policy": { "n": 1464, "na": 12002, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 141, "absent": 1323 } }, "secure_by_default": { "n": 1421, "na": 12045, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 18, "not_all": 1403 } }, "ipv6": { "n": 13466, "na": 0, "states": { "aaaa": 3636, "none": 9830 } } } }, "cfd": { "graded": 433466, "checks": { "dmarc": { "n": 433466, "na": 0, "states": { "absent": 403626, "none": 26852, "quarantine": 632, "reject": 2356, "invalid": 0 }, "rua_present": 6499 }, "spf": { "n": 433466, "na": 0, "states": { "absent": 369482, "hardfail": 15057, "softfail": 48076, "neutral": 533, "plus_all": 6, "invalid": 312 } }, "dkim": { "n": 7300, "na": 426166, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 5710, "none_observed": 1590 } }, "mx": { "n": 433466, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 66574, "absent": 366892 } }, "reverse_dns": { "n": 66493, "na": 366973, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 40206, "none": 26287 } }, "caa": { "n": 371263, "na": 62203, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1683, "absent": 369580 } }, "dnssec": { "n": 433466, "na": 0, "states": { "signed_valid": 25543, "signed_broken": 185, "unsigned": 407738 } }, "https": { "n": 433466, "na": 0, "states": { "https": 218799, "redirects": 0, "http_only": 214667 } }, "tls": { "n": 218799, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 206898, "tls12": 11901, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 218799, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 205091, "invalid": 13708 } }, "hsts": { "n": 218799, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 17907, "absent": 200892 } }, "csp": { "n": 132909, "na": 300557, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 10451, "weak": 0, "absent": 122458 } }, "clickjacking": { "n": 132909, "na": 300557, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 13879, "absent": 119030 } }, "mime_sniffing": { "n": 132909, "na": 300557, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 15271, "absent": 117638 } }, "referrer_policy": { "n": 132909, "na": 300557, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 11780, "absent": 121129 } }, "secure_by_default": { "n": 114192, "na": 319274, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 185, "not_all": 114007 } }, "ipv6": { "n": 433466, "na": 0, "states": { "aaaa": 155068, "none": 278398 } } } }, "ch": { "graded": 1683273, "checks": { "dmarc": { "n": 1683273, "na": 0, "states": { "absent": 933576, "none": 208865, "quarantine": 264254, "reject": 276401, "invalid": 177 }, "rua_present": 119042 }, "spf": { "n": 1683273, "na": 0, "states": { "absent": 379896, "hardfail": 617868, "softfail": 417682, "neutral": 70206, "plus_all": 189, "invalid": 197432 } }, "dkim": { "n": 492845, "na": 1190428, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 338447, "none_observed": 154398 } }, "mx": { "n": 1683273, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1380756, "absent": 302517 } }, "reverse_dns": { "n": 1382644, "na": 300629, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1261660, "none": 120984 } }, "caa": { "n": 1681557, "na": 1716, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 36650, "absent": 1644907 } }, "dnssec": { "n": 1683273, "na": 0, "states": { "signed_valid": 865915, "signed_broken": 942, "unsigned": 816416 } }, "https": { "n": 1683273, "na": 0, "states": { "https": 1481119, "redirects": 0, "http_only": 202154 } }, "tls": { "n": 1481119, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1369304, "tls12": 111815, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1481119, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1302048, "invalid": 179071 } }, "hsts": { "n": 1481119, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 451478, "absent": 1029641 } }, "csp": { "n": 688033, "na": 995240, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 42126, "weak": 0, "absent": 645907 } }, "clickjacking": { "n": 688033, "na": 995240, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 99816, "absent": 588217 } }, "mime_sniffing": { "n": 688033, "na": 995240, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 98548, "absent": 589485 } }, "referrer_policy": { "n": 688033, "na": 995240, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 47110, "absent": 640923 } }, "secure_by_default": { "n": 659946, "na": 1023327, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 5927, "not_all": 654019 } }, "ipv6": { "n": 1683273, "na": 0, "states": { "aaaa": 656802, "none": 1026471 } } } }, "chat": { "graded": 51707, "checks": { "dmarc": { "n": 51707, "na": 0, "states": { "absent": 44227, "none": 3199, "quarantine": 2530, "reject": 1750, "invalid": 1 }, "rua_present": 3978 }, "spf": { "n": 51707, "na": 0, "states": { "absent": 34857, "hardfail": 4988, "softfail": 11348, "neutral": 365, "plus_all": 2, "invalid": 147 } }, "dkim": { "n": 4387, "na": 47320, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2528, "none_observed": 1859 } }, "mx": { "n": 51707, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 18001, "absent": 33706 } }, "reverse_dns": { "n": 17997, "na": 33710, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 13906, "none": 4091 } }, "caa": { "n": 50974, "na": 733, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3587, "absent": 47387 } }, "dnssec": { "n": 51707, "na": 0, "states": { "signed_valid": 2989, "signed_broken": 27, "unsigned": 48691 } }, "https": { "n": 51707, "na": 0, "states": { "https": 27418, "redirects": 0, "http_only": 24289 } }, "tls": { "n": 27418, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 26358, "tls12": 1060, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 27418, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 24760, "invalid": 2658 } }, "hsts": { "n": 27418, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 7116, "absent": 20302 } }, "csp": { "n": 18906, "na": 32801, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2369, "weak": 0, "absent": 16537 } }, "clickjacking": { "n": 18906, "na": 32801, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4298, "absent": 14608 } }, "mime_sniffing": { "n": 18906, "na": 32801, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 5003, "absent": 13903 } }, "referrer_policy": { "n": 18906, "na": 32801, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3662, "absent": 15244 } }, "secure_by_default": { "n": 15918, "na": 35789, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 787, "not_all": 15131 } }, "ipv6": { "n": 51707, "na": 0, "states": { "aaaa": 10060, "none": 41647 } } } }, "christmas": { "graded": 15015, "checks": { "dmarc": { "n": 15015, "na": 0, "states": { "absent": 14373, "none": 208, "quarantine": 223, "reject": 211, "invalid": 0 }, "rua_present": 409 }, "spf": { "n": 15015, "na": 0, "states": { "absent": 13095, "hardfail": 479, "softfail": 1380, "neutral": 24, "plus_all": 0, "invalid": 37 } }, "dkim": { "n": 3663, "na": 11352, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 240, "none_observed": 3423 } }, "mx": { "n": 15015, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5893, "absent": 9122 } }, "reverse_dns": { "n": 5913, "na": 9102, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5453, "none": 460 } }, "caa": { "n": 14878, "na": 137, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 47, "absent": 14831 } }, "dnssec": { "n": 15015, "na": 0, "states": { "signed_valid": 6749, "signed_broken": 2, "unsigned": 8264 } }, "https": { "n": 15015, "na": 0, "states": { "https": 4183, "redirects": 0, "http_only": 10832 } }, "tls": { "n": 4183, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4098, "tls12": 85, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4183, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3897, "invalid": 286 } }, "hsts": { "n": 4183, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 594, "absent": 3589 } }, "csp": { "n": 3417, "na": 11598, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 935, "weak": 0, "absent": 2482 } }, "clickjacking": { "n": 3417, "na": 11598, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1162, "absent": 2255 } }, "mime_sniffing": { "n": 3417, "na": 11598, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1188, "absent": 2229 } }, "referrer_policy": { "n": 3417, "na": 11598, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1103, "absent": 2314 } }, "secure_by_default": { "n": 1863, "na": 13152, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 56, "not_all": 1807 } }, "ipv6": { "n": 15015, "na": 0, "states": { "aaaa": 2703, "none": 12312 } } } }, "church": { "graded": 31993, "checks": { "dmarc": { "n": 31993, "na": 0, "states": { "absent": 23684, "none": 4750, "quarantine": 2335, "reject": 1221, "invalid": 3 }, "rua_present": 3683 }, "spf": { "n": 31993, "na": 0, "states": { "absent": 17053, "hardfail": 5076, "softfail": 9259, "neutral": 480, "plus_all": 5, "invalid": 120 } }, "dkim": { "n": 12055, "na": 19938, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4080, "none_observed": 7975 } }, "mx": { "n": 31993, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 19181, "absent": 12812 } }, "reverse_dns": { "n": 19178, "na": 12815, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 16765, "none": 2413 } }, "caa": { "n": 31835, "na": 158, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 736, "absent": 31099 } }, "dnssec": { "n": 31993, "na": 0, "states": { "signed_valid": 1874, "signed_broken": 18, "unsigned": 30101 } }, "https": { "n": 31993, "na": 0, "states": { "https": 21378, "redirects": 0, "http_only": 10615 } }, "tls": { "n": 21378, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 20293, "tls12": 1085, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 21378, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 20117, "invalid": 1261 } }, "hsts": { "n": 21378, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 6889, "absent": 14489 } }, "csp": { "n": 11284, "na": 20709, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 780, "weak": 0, "absent": 10504 } }, "clickjacking": { "n": 11284, "na": 20709, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2008, "absent": 9276 } }, "mime_sniffing": { "n": 11284, "na": 20709, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3473, "absent": 7811 } }, "referrer_policy": { "n": 11284, "na": 20709, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1050, "absent": 10234 } }, "secure_by_default": { "n": 10330, "na": 21663, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 178, "not_all": 10152 } }, "ipv6": { "n": 31993, "na": 0, "states": { "aaaa": 4007, "none": 27986 } } } }, "ci": { "graded": 9919, "checks": { "dmarc": { "n": 9919, "na": 0, "states": { "absent": 5555, "none": 3198, "quarantine": 771, "reject": 394, "invalid": 1 }, "rua_present": 852 }, "spf": { "n": 9919, "na": 0, "states": { "absent": 3068, "hardfail": 2064, "softfail": 4559, "neutral": 94, "plus_all": 2, "invalid": 132 } }, "dkim": { "n": 4386, "na": 5533, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3778, "none_observed": 608 } }, "mx": { "n": 9919, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7813, "absent": 2106 } }, "reverse_dns": { "n": 7871, "na": 2048, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6391, "none": 1480 } }, "caa": { "n": 9888, "na": 31, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 305, "absent": 9583 } }, "dnssec": { "n": 9919, "na": 0, "states": { "signed_valid": 84, "signed_broken": 0, "unsigned": 9835 } }, "https": { "n": 9919, "na": 0, "states": { "https": 8808, "redirects": 0, "http_only": 1111 } }, "tls": { "n": 8808, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8320, "tls12": 488, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8808, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8054, "invalid": 754 } }, "hsts": { "n": 8808, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1416, "absent": 7392 } }, "csp": { "n": 5826, "na": 4093, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 538, "weak": 0, "absent": 5288 } }, "clickjacking": { "n": 5826, "na": 4093, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 855, "absent": 4971 } }, "mime_sniffing": { "n": 5826, "na": 4093, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1017, "absent": 4809 } }, "referrer_policy": { "n": 5826, "na": 4093, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 732, "absent": 5094 } }, "secure_by_default": { "n": 5728, "na": 4191, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 70, "not_all": 5658 } }, "ipv6": { "n": 9919, "na": 0, "states": { "aaaa": 2536, "none": 7383 } } } }, "city": { "graded": 28996, "checks": { "dmarc": { "n": 28996, "na": 0, "states": { "absent": 23929, "none": 2344, "quarantine": 1750, "reject": 970, "invalid": 3 }, "rua_present": 2452 }, "spf": { "n": 28996, "na": 0, "states": { "absent": 17835, "hardfail": 4019, "softfail": 6570, "neutral": 313, "plus_all": 3, "invalid": 256 } }, "dkim": { "n": 3968, "na": 25028, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2043, "none_observed": 1925 } }, "mx": { "n": 28996, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 13035, "absent": 15961 } }, "reverse_dns": { "n": 13026, "na": 15970, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 9535, "none": 3491 } }, "caa": { "n": 28562, "na": 434, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 811, "absent": 27751 } }, "dnssec": { "n": 28996, "na": 0, "states": { "signed_valid": 1896, "signed_broken": 30, "unsigned": 27070 } }, "https": { "n": 28996, "na": 0, "states": { "https": 16958, "redirects": 0, "http_only": 12038 } }, "tls": { "n": 16958, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 16050, "tls12": 908, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 16958, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 15231, "invalid": 1727 } }, "hsts": { "n": 16958, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3282, "absent": 13676 } }, "csp": { "n": 11730, "na": 17266, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 983, "weak": 0, "absent": 10747 } }, "clickjacking": { "n": 11730, "na": 17266, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1890, "absent": 9840 } }, "mime_sniffing": { "n": 11730, "na": 17266, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2082, "absent": 9648 } }, "referrer_policy": { "n": 11730, "na": 17266, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1348, "absent": 10382 } }, "secure_by_default": { "n": 9914, "na": 19082, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 204, "not_all": 9710 } }, "ipv6": { "n": 28996, "na": 0, "states": { "aaaa": 5690, "none": 23306 } } } }, "cl": { "graded": 484700, "checks": { "dmarc": { "n": 484700, "na": 0, "states": { "absent": 276184, "none": 159718, "quarantine": 29075, "reject": 16788, "invalid": 2935 }, "rua_present": 83009 }, "spf": { "n": 484700, "na": 0, "states": { "absent": 132712, "hardfail": 53538, "softfail": 295005, "neutral": 2565, "plus_all": 33, "invalid": 847 } }, "dkim": { "n": 320188, "na": 164512, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 233006, "none_observed": 87182 } }, "mx": { "n": 484700, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 380686, "absent": 104014 } }, "reverse_dns": { "n": 380954, "na": 103746, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 330836, "none": 50118 } }, "caa": { "n": 483116, "na": 1584, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 13526, "absent": 469590 } }, "dnssec": { "n": 484700, "na": 0, "states": { "signed_valid": 1458, "signed_broken": 21, "unsigned": 483221 } }, "https": { "n": 484700, "na": 0, "states": { "https": 437670, "redirects": 0, "http_only": 47030 } }, "tls": { "n": 437670, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 422799, "tls12": 14871, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 437670, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 424457, "invalid": 13213 } }, "hsts": { "n": 437670, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 108213, "absent": 329457 } }, "csp": { "n": 259188, "na": 225512, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 34999, "weak": 0, "absent": 224189 } }, "clickjacking": { "n": 259188, "na": 225512, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 35514, "absent": 223674 } }, "mime_sniffing": { "n": 259188, "na": 225512, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 41512, "absent": 217676 } }, "referrer_policy": { "n": 259188, "na": 225512, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 20928, "absent": 238260 } }, "secure_by_default": { "n": 257733, "na": 226967, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 3659, "not_all": 254074 } }, "ipv6": { "n": 484700, "na": 0, "states": { "aaaa": 83980, "none": 400720 } } } }, "click": { "graded": 728381, "checks": { "dmarc": { "n": 728381, "na": 0, "states": { "absent": 657374, "none": 30989, "quarantine": 8001, "reject": 32014, "invalid": 3 }, "rua_present": 25265 }, "spf": { "n": 728381, "na": 0, "states": { "absent": 535872, "hardfail": 34707, "softfail": 154599, "neutral": 931, "plus_all": 16, "invalid": 2256 } }, "dkim": { "n": 51254, "na": 677127, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 42467, "none_observed": 8787 } }, "mx": { "n": 728381, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 197385, "absent": 530996 } }, "reverse_dns": { "n": 197253, "na": 531128, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 166457, "none": 30796 } }, "caa": { "n": 720865, "na": 7516, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3299, "absent": 717566 } }, "dnssec": { "n": 728381, "na": 0, "states": { "signed_valid": 17503, "signed_broken": 231, "unsigned": 710647 } }, "https": { "n": 728381, "na": 0, "states": { "https": 516827, "redirects": 0, "http_only": 211554 } }, "tls": { "n": 516827, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 503088, "tls12": 13739, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 516827, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 481017, "invalid": 35810 } }, "hsts": { "n": 516827, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 39139, "absent": 477688 } }, "csp": { "n": 246280, "na": 482101, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 16171, "weak": 0, "absent": 230109 } }, "clickjacking": { "n": 246280, "na": 482101, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 46070, "absent": 200210 } }, "mime_sniffing": { "n": 246280, "na": 482101, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 51275, "absent": 195005 } }, "referrer_policy": { "n": 246280, "na": 482101, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 27442, "absent": 218838 } }, "secure_by_default": { "n": 222047, "na": 506334, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 782, "not_all": 221265 } }, "ipv6": { "n": 728381, "na": 0, "states": { "aaaa": 444329, "none": 284052 } } } }, "clinic": { "graded": 17488, "checks": { "dmarc": { "n": 17488, "na": 0, "states": { "absent": 11660, "none": 2030, "quarantine": 2692, "reject": 1105, "invalid": 1 }, "rua_present": 3603 }, "spf": { "n": 17488, "na": 0, "states": { "absent": 9523, "hardfail": 1857, "softfail": 5724, "neutral": 144, "plus_all": 0, "invalid": 240 } }, "dkim": { "n": 3737, "na": 13751, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1804, "none_observed": 1933 } }, "mx": { "n": 17488, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9083, "absent": 8405 } }, "reverse_dns": { "n": 9080, "na": 8408, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7967, "none": 1113 } }, "caa": { "n": 17379, "na": 109, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 360, "absent": 17019 } }, "dnssec": { "n": 17488, "na": 0, "states": { "signed_valid": 880, "signed_broken": 3, "unsigned": 16605 } }, "https": { "n": 17488, "na": 0, "states": { "https": 10407, "redirects": 0, "http_only": 7081 } }, "tls": { "n": 10407, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9822, "tls12": 585, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10407, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9575, "invalid": 832 } }, "hsts": { "n": 10407, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2546, "absent": 7861 } }, "csp": { "n": 7243, "na": 10245, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 737, "weak": 0, "absent": 6506 } }, "clickjacking": { "n": 7243, "na": 10245, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1660, "absent": 5583 } }, "mime_sniffing": { "n": 7243, "na": 10245, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1654, "absent": 5589 } }, "referrer_policy": { "n": 7243, "na": 10245, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 991, "absent": 6252 } }, "secure_by_default": { "n": 6352, "na": 11136, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 81, "not_all": 6271 } }, "ipv6": { "n": 17488, "na": 0, "states": { "aaaa": 2627, "none": 14861 } } } }, "clothing": { "graded": 8502, "checks": { "dmarc": { "n": 8502, "na": 0, "states": { "absent": 6481, "none": 930, "quarantine": 461, "reject": 629, "invalid": 1 }, "rua_present": 871 }, "spf": { "n": 8502, "na": 0, "states": { "absent": 5596, "hardfail": 1005, "softfail": 1751, "neutral": 126, "plus_all": 0, "invalid": 24 } }, "dkim": { "n": 1638, "na": 6864, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 473, "none_observed": 1165 } }, "mx": { "n": 8502, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4122, "absent": 4380 } }, "reverse_dns": { "n": 4119, "na": 4383, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3354, "none": 765 } }, "caa": { "n": 8478, "na": 24, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 183, "absent": 8295 } }, "dnssec": { "n": 8502, "na": 0, "states": { "signed_valid": 609, "signed_broken": 3, "unsigned": 7890 } }, "https": { "n": 8502, "na": 0, "states": { "https": 4118, "redirects": 0, "http_only": 4384 } }, "tls": { "n": 4118, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3972, "tls12": 146, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4118, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3504, "invalid": 614 } }, "hsts": { "n": 4118, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1359, "absent": 2759 } }, "csp": { "n": 2601, "na": 5901, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 686, "weak": 0, "absent": 1915 } }, "clickjacking": { "n": 2601, "na": 5901, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 822, "absent": 1779 } }, "mime_sniffing": { "n": 2601, "na": 5901, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 732, "absent": 1869 } }, "referrer_policy": { "n": 2601, "na": 5901, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 186, "absent": 2415 } }, "secure_by_default": { "n": 1899, "na": 6603, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 30, "not_all": 1869 } }, "ipv6": { "n": 8502, "na": 0, "states": { "aaaa": 1345, "none": 7157 } } } }, "cloud": { "graded": 487373, "checks": { "dmarc": { "n": 487373, "na": 0, "states": { "absent": 364475, "none": 73966, "quarantine": 26673, "reject": 22227, "invalid": 32 }, "rua_present": 42081 }, "spf": { "n": 487373, "na": 0, "states": { "absent": 317505, "hardfail": 53374, "softfail": 110689, "neutral": 4098, "plus_all": 57, "invalid": 1650 } }, "dkim": { "n": 53474, "na": 433899, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 29436, "none_observed": 24038 } }, "mx": { "n": 487373, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 216921, "absent": 270452 } }, "reverse_dns": { "n": 216856, "na": 270517, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 178441, "none": 38415 } }, "caa": { "n": 482201, "na": 5172, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 10260, "absent": 471941 } }, "dnssec": { "n": 487373, "na": 0, "states": { "signed_valid": 35561, "signed_broken": 1209, "unsigned": 450603 } }, "https": { "n": 487373, "na": 0, "states": { "https": 259919, "redirects": 0, "http_only": 227454 } }, "tls": { "n": 259919, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 251337, "tls12": 8582, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 259919, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 220121, "invalid": 39798 } }, "hsts": { "n": 259919, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 40221, "absent": 219698 } }, "csp": { "n": 198713, "na": 288660, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 16654, "weak": 0, "absent": 182059 } }, "clickjacking": { "n": 198713, "na": 288660, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 24837, "absent": 173876 } }, "mime_sniffing": { "n": 198713, "na": 288660, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 29237, "absent": 169476 } }, "referrer_policy": { "n": 198713, "na": 288660, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 19562, "absent": 179151 } }, "secure_by_default": { "n": 147048, "na": 340325, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 2303, "not_all": 144745 } }, "ipv6": { "n": 487373, "na": 0, "states": { "aaaa": 130765, "none": 356608 } } } }, "club": { "graded": 501184, "checks": { "dmarc": { "n": 501184, "na": 0, "states": { "absent": 401395, "none": 35402, "quarantine": 50106, "reject": 14257, "invalid": 24 }, "rua_present": 63402 }, "spf": { "n": 501184, "na": 0, "states": { "absent": 357716, "hardfail": 45327, "softfail": 91320, "neutral": 4099, "plus_all": 29, "invalid": 2693 } }, "dkim": { "n": 51243, "na": 449941, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 24411, "none_observed": 26832 } }, "mx": { "n": 501184, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 164464, "absent": 336720 } }, "reverse_dns": { "n": 164390, "na": 336794, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 134485, "none": 29905 } }, "caa": { "n": 496524, "na": 4660, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 4254, "absent": 492270 } }, "dnssec": { "n": 501184, "na": 0, "states": { "signed_valid": 16325, "signed_broken": 274, "unsigned": 484585 } }, "https": { "n": 501184, "na": 0, "states": { "https": 297974, "redirects": 0, "http_only": 203210 } }, "tls": { "n": 297974, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 287590, "tls12": 10384, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 297974, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 274539, "invalid": 23435 } }, "hsts": { "n": 297974, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 65023, "absent": 232951 } }, "csp": { "n": 199088, "na": 302096, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 13533, "weak": 0, "absent": 185555 } }, "clickjacking": { "n": 199088, "na": 302096, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 25482, "absent": 173606 } }, "mime_sniffing": { "n": 199088, "na": 302096, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 29984, "absent": 169104 } }, "referrer_policy": { "n": 199088, "na": 302096, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 18706, "absent": 180382 } }, "secure_by_default": { "n": 175177, "na": 326007, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1305, "not_all": 173872 } }, "ipv6": { "n": 501184, "na": 0, "states": { "aaaa": 158049, "none": 343135 } } } }, "cm": { "graded": 15200, "checks": { "dmarc": { "n": 15200, "na": 0, "states": { "absent": 12493, "none": 1560, "quarantine": 492, "reject": 654, "invalid": 1 }, "rua_present": 834 }, "spf": { "n": 15200, "na": 0, "states": { "absent": 9362, "hardfail": 3111, "softfail": 2219, "neutral": 314, "plus_all": 1, "invalid": 193 } }, "dkim": { "n": 2291, "na": 12909, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1952, "none_observed": 339 } }, "mx": { "n": 15200, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6069, "absent": 9131 } }, "reverse_dns": { "n": 6066, "na": 9134, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4313, "none": 1753 } }, "caa": { "n": 14728, "na": 472, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 540, "absent": 14188 } }, "dnssec": { "n": 15200, "na": 0, "states": { "signed_valid": 10, "signed_broken": 0, "unsigned": 15190 } }, "https": { "n": 15200, "na": 0, "states": { "https": 10035, "redirects": 0, "http_only": 5165 } }, "tls": { "n": 10035, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9425, "tls12": 610, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10035, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7933, "invalid": 2102 } }, "hsts": { "n": 10035, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1731, "absent": 8304 } }, "csp": { "n": 7493, "na": 7707, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 452, "weak": 0, "absent": 7041 } }, "clickjacking": { "n": 7493, "na": 7707, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 717, "absent": 6776 } }, "mime_sniffing": { "n": 7493, "na": 7707, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 736, "absent": 6757 } }, "referrer_policy": { "n": 7493, "na": 7707, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 504, "absent": 6989 } }, "secure_by_default": { "n": 4700, "na": 10500, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 106, "not_all": 4594 } }, "ipv6": { "n": 15200, "na": 0, "states": { "aaaa": 2265, "none": 12935 } } } }, "cn": { "graded": 4810319, "checks": { "dmarc": { "n": 4810319, "na": 0, "states": { "absent": 4726724, "none": 31570, "quarantine": 29188, "reject": 22792, "invalid": 45 }, "rua_present": 62548 }, "spf": { "n": 4810319, "na": 0, "states": { "absent": 4514446, "hardfail": 187650, "softfail": 105472, "neutral": 963, "plus_all": 590, "invalid": 1198 } }, "dkim": { "n": 41143, "na": 4769176, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 31951, "none_observed": 9192 } }, "mx": { "n": 4810319, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 407061, "absent": 4403258 } }, "reverse_dns": { "n": 406286, "na": 4404033, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 103072, "none": 303214 } }, "caa": { "n": 4755458, "na": 54861, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 6694, "absent": 4748764 } }, "dnssec": { "n": 4810319, "na": 0, "states": { "signed_valid": 3422, "signed_broken": 349, "unsigned": 4806548 } }, "https": { "n": 4810319, "na": 0, "states": { "https": 3172541, "redirects": 0, "http_only": 1637778 } }, "tls": { "n": 3172541, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2995014, "tls12": 177527, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3172541, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2727985, "invalid": 444556 } }, "hsts": { "n": 3172541, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1175219, "absent": 1997322 } }, "csp": { "n": 2065880, "na": 2744439, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 27511, "weak": 0, "absent": 2038369 } }, "clickjacking": { "n": 2065880, "na": 2744439, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 187294, "absent": 1878586 } }, "mime_sniffing": { "n": 2065880, "na": 2744439, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 148825, "absent": 1917055 } }, "referrer_policy": { "n": 2065880, "na": 2744439, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 102837, "absent": 1963043 } }, "secure_by_default": { "n": 1626315, "na": 3184004, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 5203, "not_all": 1621112 } }, "ipv6": { "n": 4810319, "na": 0, "states": { "aaaa": 856033, "none": 3954286 } } } }, "co": { "graded": 2491327, "checks": { "dmarc": { "n": 2491327, "na": 0, "states": { "absent": 1666125, "none": 320412, "quarantine": 286087, "reject": 218476, "invalid": 227 }, "rua_present": 531589 }, "spf": { "n": 2491327, "na": 0, "states": { "absent": 1258045, "hardfail": 499787, "softfail": 711766, "neutral": 17567, "plus_all": 110, "invalid": 4052 } }, "dkim": { "n": 915467, "na": 1575860, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 476342, "none_observed": 439125 } }, "mx": { "n": 2491327, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1428839, "absent": 1062488 } }, "reverse_dns": { "n": 1428275, "na": 1063052, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1116242, "none": 312033 } }, "caa": { "n": 2484326, "na": 7001, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 27685, "absent": 2456641 } }, "dnssec": { "n": 2491327, "na": 0, "states": { "signed_valid": 68183, "signed_broken": 458, "unsigned": 2422686 } }, "https": { "n": 2491327, "na": 0, "states": { "https": 1612251, "redirects": 0, "http_only": 879076 } }, "tls": { "n": 1612251, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1569333, "tls12": 42918, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1612251, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1552540, "invalid": 59711 } }, "hsts": { "n": 1612251, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 413688, "absent": 1198563 } }, "csp": { "n": 869478, "na": 1621849, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 120964, "weak": 0, "absent": 748514 } }, "clickjacking": { "n": 869478, "na": 1621849, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 162987, "absent": 706491 } }, "mime_sniffing": { "n": 869478, "na": 1621849, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 199859, "absent": 669619 } }, "referrer_policy": { "n": 869478, "na": 1621849, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 78875, "absent": 790603 } }, "secure_by_default": { "n": 837348, "na": 1653979, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 12831, "not_all": 824517 } }, "ipv6": { "n": 2491327, "na": 0, "states": { "aaaa": 480659, "none": 2010668 } } } }, "coach": { "graded": 25209, "checks": { "dmarc": { "n": 25209, "na": 0, "states": { "absent": 17107, "none": 3757, "quarantine": 2331, "reject": 2014, "invalid": 0 }, "rua_present": 3502 }, "spf": { "n": 25209, "na": 0, "states": { "absent": 13303, "hardfail": 3226, "softfail": 8188, "neutral": 348, "plus_all": 1, "invalid": 143 } }, "dkim": { "n": 5790, "na": 19419, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2332, "none_observed": 3458 } }, "mx": { "n": 25209, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 13980, "absent": 11229 } }, "reverse_dns": { "n": 13975, "na": 11234, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12679, "none": 1296 } }, "caa": { "n": 25069, "na": 140, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1398, "absent": 23671 } }, "dnssec": { "n": 25209, "na": 0, "states": { "signed_valid": 1880, "signed_broken": 9, "unsigned": 23320 } }, "https": { "n": 25209, "na": 0, "states": { "https": 14921, "redirects": 0, "http_only": 10288 } }, "tls": { "n": 14921, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 14550, "tls12": 371, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 14921, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 13767, "invalid": 1154 } }, "hsts": { "n": 14921, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4916, "absent": 10005 } }, "csp": { "n": 9007, "na": 16202, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1027, "weak": 0, "absent": 7980 } }, "clickjacking": { "n": 9007, "na": 16202, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1921, "absent": 7086 } }, "mime_sniffing": { "n": 9007, "na": 16202, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2251, "absent": 6756 } }, "referrer_policy": { "n": 9007, "na": 16202, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1087, "absent": 7920 } }, "secure_by_default": { "n": 7343, "na": 17866, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 137, "not_all": 7206 } }, "ipv6": { "n": 25209, "na": 0, "states": { "aaaa": 5334, "none": 19875 } } } }, "codes": { "graded": 18682, "checks": { "dmarc": { "n": 18682, "na": 0, "states": { "absent": 15662, "none": 1446, "quarantine": 894, "reject": 678, "invalid": 2 }, "rua_present": 1308 }, "spf": { "n": 18682, "na": 0, "states": { "absent": 10095, "hardfail": 1509, "softfail": 6748, "neutral": 287, "plus_all": 0, "invalid": 43 } }, "dkim": { "n": 2998, "na": 15684, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1622, "none_observed": 1376 } }, "mx": { "n": 18682, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9393, "absent": 9289 } }, "reverse_dns": { "n": 9395, "na": 9287, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8523, "none": 872 } }, "caa": { "n": 18560, "na": 122, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 928, "absent": 17632 } }, "dnssec": { "n": 18682, "na": 0, "states": { "signed_valid": 2131, "signed_broken": 16, "unsigned": 16535 } }, "https": { "n": 18682, "na": 0, "states": { "https": 10705, "redirects": 0, "http_only": 7977 } }, "tls": { "n": 10705, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 10532, "tls12": 173, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10705, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9979, "invalid": 726 } }, "hsts": { "n": 10705, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3372, "absent": 7333 } }, "csp": { "n": 7411, "na": 11271, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 797, "weak": 0, "absent": 6614 } }, "clickjacking": { "n": 7411, "na": 11271, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1239, "absent": 6172 } }, "mime_sniffing": { "n": 7411, "na": 11271, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1634, "absent": 5777 } }, "referrer_policy": { "n": 7411, "na": 11271, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1321, "absent": 6090 } }, "secure_by_default": { "n": 6210, "na": 12472, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 183, "not_all": 6027 } }, "ipv6": { "n": 18682, "na": 0, "states": { "aaaa": 4228, "none": 14454 } } } }, "coffee": { "graded": 25876, "checks": { "dmarc": { "n": 25876, "na": 0, "states": { "absent": 19238, "none": 2972, "quarantine": 2155, "reject": 1510, "invalid": 1 }, "rua_present": 3134 }, "spf": { "n": 25876, "na": 0, "states": { "absent": 14751, "hardfail": 2984, "softfail": 7606, "neutral": 372, "plus_all": 2, "invalid": 161 } }, "dkim": { "n": 6322, "na": 19554, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2565, "none_observed": 3757 } }, "mx": { "n": 25876, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 13500, "absent": 12376 } }, "reverse_dns": { "n": 13497, "na": 12379, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 11976, "none": 1521 } }, "caa": { "n": 25678, "na": 198, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1008, "absent": 24670 } }, "dnssec": { "n": 25876, "na": 0, "states": { "signed_valid": 2204, "signed_broken": 9, "unsigned": 23663 } }, "https": { "n": 25876, "na": 0, "states": { "https": 14043, "redirects": 0, "http_only": 11833 } }, "tls": { "n": 14043, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 13575, "tls12": 468, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 14043, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 12667, "invalid": 1376 } }, "hsts": { "n": 14043, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4855, "absent": 9188 } }, "csp": { "n": 8690, "na": 17186, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1462, "weak": 0, "absent": 7228 } }, "clickjacking": { "n": 8690, "na": 17186, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2470, "absent": 6220 } }, "mime_sniffing": { "n": 8690, "na": 17186, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2781, "absent": 5909 } }, "referrer_policy": { "n": 8690, "na": 17186, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 760, "absent": 7930 } }, "secure_by_default": { "n": 7168, "na": 18708, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 116, "not_all": 7052 } }, "ipv6": { "n": 25876, "na": 0, "states": { "aaaa": 4432, "none": 21444 } } } }, "college": { "graded": 5874, "checks": { "dmarc": { "n": 5874, "na": 0, "states": { "absent": 4540, "none": 368, "quarantine": 669, "reject": 297, "invalid": 0 }, "rua_present": 946 }, "spf": { "n": 5874, "na": 0, "states": { "absent": 3741, "hardfail": 851, "softfail": 1235, "neutral": 39, "plus_all": 0, "invalid": 8 } }, "dkim": { "n": 800, "na": 5074, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 320, "none_observed": 480 } }, "mx": { "n": 5874, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2431, "absent": 3443 } }, "reverse_dns": { "n": 2464, "na": 3410, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1906, "none": 558 } }, "caa": { "n": 5848, "na": 26, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 84, "absent": 5764 } }, "dnssec": { "n": 5874, "na": 0, "states": { "signed_valid": 194, "signed_broken": 3, "unsigned": 5677 } }, "https": { "n": 5874, "na": 0, "states": { "https": 2715, "redirects": 0, "http_only": 3159 } }, "tls": { "n": 2715, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2586, "tls12": 129, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2715, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2465, "invalid": 250 } }, "hsts": { "n": 2715, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 443, "absent": 2272 } }, "csp": { "n": 1911, "na": 3963, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 171, "weak": 0, "absent": 1740 } }, "clickjacking": { "n": 1911, "na": 3963, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 244, "absent": 1667 } }, "mime_sniffing": { "n": 1911, "na": 3963, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 288, "absent": 1623 } }, "referrer_policy": { "n": 1911, "na": 3963, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 190, "absent": 1721 } }, "secure_by_default": { "n": 1371, "na": 4503, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 24, "not_all": 1347 } }, "ipv6": { "n": 5874, "na": 0, "states": { "aaaa": 897, "none": 4977 } } } }, "com": { "graded": 151114731, "checks": { "dmarc": { "n": 151114731, "na": 0, "states": { "absent": 115875234, "none": 18608177, "quarantine": 9620467, "reject": 6999656, "invalid": 11197 }, "rua_present": 15818767 }, "spf": { "n": 151114731, "na": 0, "states": { "absent": 78801511, "hardfail": 28322439, "softfail": 40775586, "neutral": 2502988, "plus_all": 16252, "invalid": 695955 } }, "dkim": { "n": 41691354, "na": 109423377, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 18246969, "none_observed": 23444385 } }, "mx": { "n": 151114731, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 81748543, "absent": 69366188 } }, "reverse_dns": { "n": 81686818, "na": 69427913, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 63371474, "none": 18315344 } }, "caa": { "n": 150112853, "na": 1001878, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1636792, "absent": 148476061 } }, "dnssec": { "n": 151114731, "na": 0, "states": { "signed_valid": 7785628, "signed_broken": 86593, "unsigned": 143242510 } }, "https": { "n": 151114731, "na": 0, "states": { "https": 99595052, "redirects": 0, "http_only": 51519679 } }, "tls": { "n": 99595052, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 94338556, "tls12": 5256496, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 99595052, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 89117402, "invalid": 10477650 } }, "hsts": { "n": 99595052, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 23287070, "absent": 76307982 } }, "csp": { "n": 56819188, "na": 94295543, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 6589880, "weak": 0, "absent": 50229308 } }, "clickjacking": { "n": 56819188, "na": 94295543, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 9649135, "absent": 47170053 } }, "mime_sniffing": { "n": 56819188, "na": 94295543, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 11200856, "absent": 45618332 } }, "referrer_policy": { "n": 56819188, "na": 94295543, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4268469, "absent": 52550719 } }, "secure_by_default": { "n": 50165745, "na": 100948986, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 748613, "not_all": 49417132 } }, "ipv6": { "n": 151114731, "na": 0, "states": { "aaaa": 29609462, "none": 121505269 } } } }, "community": { "graded": 23243, "checks": { "dmarc": { "n": 23243, "na": 0, "states": { "absent": 17257, "none": 2721, "quarantine": 1495, "reject": 1767, "invalid": 3 }, "rua_present": 2282 }, "spf": { "n": 23243, "na": 0, "states": { "absent": 12316, "hardfail": 2812, "softfail": 7283, "neutral": 407, "plus_all": 2, "invalid": 423 } }, "dkim": { "n": 5407, "na": 17836, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3390, "none_observed": 2017 } }, "mx": { "n": 23243, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12111, "absent": 11132 } }, "reverse_dns": { "n": 12113, "na": 11130, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 10861, "none": 1252 } }, "caa": { "n": 23147, "na": 96, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1144, "absent": 22003 } }, "dnssec": { "n": 23243, "na": 0, "states": { "signed_valid": 3168, "signed_broken": 22, "unsigned": 20053 } }, "https": { "n": 23243, "na": 0, "states": { "https": 13068, "redirects": 0, "http_only": 10175 } }, "tls": { "n": 13068, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 12642, "tls12": 426, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 13068, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 11757, "invalid": 1311 } }, "hsts": { "n": 13068, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4467, "absent": 8601 } }, "csp": { "n": 8213, "na": 15030, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 818, "weak": 0, "absent": 7395 } }, "clickjacking": { "n": 8213, "na": 15030, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2654, "absent": 5559 } }, "mime_sniffing": { "n": 8213, "na": 15030, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2864, "absent": 5349 } }, "referrer_policy": { "n": 8213, "na": 15030, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 845, "absent": 7368 } }, "secure_by_default": { "n": 6584, "na": 16659, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 167, "not_all": 6417 } }, "ipv6": { "n": 23243, "na": 0, "states": { "aaaa": 4725, "none": 18518 } } } }, "company": { "graded": 87762, "checks": { "dmarc": { "n": 87762, "na": 0, "states": { "absent": 72053, "none": 7058, "quarantine": 3620, "reject": 5028, "invalid": 3 }, "rua_present": 6381 }, "spf": { "n": 87762, "na": 0, "states": { "absent": 55325, "hardfail": 10708, "softfail": 20353, "neutral": 764, "plus_all": 1, "invalid": 611 } }, "dkim": { "n": 21203, "na": 66559, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 12121, "none_observed": 9082 } }, "mx": { "n": 87762, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 37477, "absent": 50285 } }, "reverse_dns": { "n": 37456, "na": 50306, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 30834, "none": 6622 } }, "caa": { "n": 87318, "na": 444, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2370, "absent": 84948 } }, "dnssec": { "n": 87762, "na": 0, "states": { "signed_valid": 7713, "signed_broken": 56, "unsigned": 79993 } }, "https": { "n": 87762, "na": 0, "states": { "https": 44489, "redirects": 0, "http_only": 43273 } }, "tls": { "n": 44489, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 43078, "tls12": 1411, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 44489, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 40456, "invalid": 4033 } }, "hsts": { "n": 44489, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 14024, "absent": 30465 } }, "csp": { "n": 30240, "na": 57522, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2274, "weak": 0, "absent": 27966 } }, "clickjacking": { "n": 30240, "na": 57522, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 7561, "absent": 22679 } }, "mime_sniffing": { "n": 30240, "na": 57522, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 9337, "absent": 20903 } }, "referrer_policy": { "n": 30240, "na": 57522, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3024, "absent": 27216 } }, "secure_by_default": { "n": 26702, "na": 61060, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 312, "not_all": 26390 } }, "ipv6": { "n": 87762, "na": 0, "states": { "aaaa": 14211, "none": 73551 } } } }, "computer": { "graded": 8785, "checks": { "dmarc": { "n": 8785, "na": 0, "states": { "absent": 7218, "none": 570, "quarantine": 484, "reject": 513, "invalid": 0 }, "rua_present": 709 }, "spf": { "n": 8785, "na": 0, "states": { "absent": 4863, "hardfail": 1039, "softfail": 2650, "neutral": 206, "plus_all": 1, "invalid": 26 } }, "dkim": { "n": 1570, "na": 7215, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 902, "none_observed": 668 } }, "mx": { "n": 8785, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4566, "absent": 4219 } }, "reverse_dns": { "n": 4566, "na": 4219, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4073, "none": 493 } }, "caa": { "n": 8738, "na": 47, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 512, "absent": 8226 } }, "dnssec": { "n": 8785, "na": 0, "states": { "signed_valid": 915, "signed_broken": 13, "unsigned": 7857 } }, "https": { "n": 8785, "na": 0, "states": { "https": 4313, "redirects": 0, "http_only": 4472 } }, "tls": { "n": 4313, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4179, "tls12": 134, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4313, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3906, "invalid": 407 } }, "hsts": { "n": 4313, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1134, "absent": 3179 } }, "csp": { "n": 2938, "na": 5847, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 347, "weak": 0, "absent": 2591 } }, "clickjacking": { "n": 2938, "na": 5847, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 613, "absent": 2325 } }, "mime_sniffing": { "n": 2938, "na": 5847, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 800, "absent": 2138 } }, "referrer_policy": { "n": 2938, "na": 5847, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 552, "absent": 2386 } }, "secure_by_default": { "n": 2414, "na": 6371, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 126, "not_all": 2288 } }, "ipv6": { "n": 8785, "na": 0, "states": { "aaaa": 1912, "none": 6873 } } } }, "construction": { "graded": 8806, "checks": { "dmarc": { "n": 8806, "na": 0, "states": { "absent": 7000, "none": 778, "quarantine": 550, "reject": 477, "invalid": 1 }, "rua_present": 955 }, "spf": { "n": 8806, "na": 0, "states": { "absent": 4612, "hardfail": 1540, "softfail": 2516, "neutral": 106, "plus_all": 0, "invalid": 32 } }, "dkim": { "n": 3338, "na": 5468, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1378, "none_observed": 1960 } }, "mx": { "n": 8806, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5175, "absent": 3631 } }, "reverse_dns": { "n": 5171, "na": 3635, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4555, "none": 616 } }, "caa": { "n": 8626, "na": 180, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 164, "absent": 8462 } }, "dnssec": { "n": 8806, "na": 0, "states": { "signed_valid": 999, "signed_broken": 3, "unsigned": 7804 } }, "https": { "n": 8806, "na": 0, "states": { "https": 4620, "redirects": 0, "http_only": 4186 } }, "tls": { "n": 4620, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4472, "tls12": 148, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4620, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4195, "invalid": 425 } }, "hsts": { "n": 4620, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1400, "absent": 3220 } }, "csp": { "n": 2861, "na": 5945, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 358, "weak": 0, "absent": 2503 } }, "clickjacking": { "n": 2861, "na": 5945, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 639, "absent": 2222 } }, "mime_sniffing": { "n": 2861, "na": 5945, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 639, "absent": 2222 } }, "referrer_policy": { "n": 2861, "na": 5945, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 209, "absent": 2652 } }, "secure_by_default": { "n": 2369, "na": 6437, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 47, "not_all": 2322 } }, "ipv6": { "n": 8806, "na": 0, "states": { "aaaa": 1081, "none": 7725 } } } }, "consulting": { "graded": 37606, "checks": { "dmarc": { "n": 37606, "na": 0, "states": { "absent": 25732, "none": 5926, "quarantine": 3044, "reject": 2898, "invalid": 6 }, "rua_present": 4709 }, "spf": { "n": 37606, "na": 0, "states": { "absent": 15824, "hardfail": 7278, "softfail": 13622, "neutral": 653, "plus_all": 3, "invalid": 226 } }, "dkim": { "n": 14288, "na": 23318, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 6160, "none_observed": 8128 } }, "mx": { "n": 37606, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 26027, "absent": 11579 } }, "reverse_dns": { "n": 26030, "na": 11576, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 23963, "none": 2067 } }, "caa": { "n": 37457, "na": 149, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 675, "absent": 36782 } }, "dnssec": { "n": 37606, "na": 0, "states": { "signed_valid": 4371, "signed_broken": 25, "unsigned": 33210 } }, "https": { "n": 37606, "na": 0, "states": { "https": 20027, "redirects": 0, "http_only": 17579 } }, "tls": { "n": 20027, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 19262, "tls12": 765, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 20027, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 17626, "invalid": 2401 } }, "hsts": { "n": 20027, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 6025, "absent": 14002 } }, "csp": { "n": 13541, "na": 24065, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1336, "weak": 0, "absent": 12205 } }, "clickjacking": { "n": 13541, "na": 24065, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2511, "absent": 11030 } }, "mime_sniffing": { "n": 13541, "na": 24065, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2857, "absent": 10684 } }, "referrer_policy": { "n": 13541, "na": 24065, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1195, "absent": 12346 } }, "secure_by_default": { "n": 10528, "na": 27078, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 182, "not_all": 10346 } }, "ipv6": { "n": 37606, "na": 0, "states": { "aaaa": 7802, "none": 29804 } } } }, "contact": { "graded": 11029, "checks": { "dmarc": { "n": 11029, "na": 0, "states": { "absent": 7481, "none": 990, "quarantine": 652, "reject": 1905, "invalid": 1 }, "rua_present": 995 }, "spf": { "n": 11029, "na": 0, "states": { "absent": 4911, "hardfail": 2868, "softfail": 2832, "neutral": 313, "plus_all": 0, "invalid": 105 } }, "dkim": { "n": 1785, "na": 9244, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1142, "none_observed": 643 } }, "mx": { "n": 11029, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6726, "absent": 4303 } }, "reverse_dns": { "n": 6725, "na": 4304, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5316, "none": 1409 } }, "caa": { "n": 10986, "na": 43, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 146, "absent": 10840 } }, "dnssec": { "n": 11029, "na": 0, "states": { "signed_valid": 2173, "signed_broken": 7, "unsigned": 8849 } }, "https": { "n": 11029, "na": 0, "states": { "https": 5281, "redirects": 0, "http_only": 5748 } }, "tls": { "n": 5281, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5016, "tls12": 265, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5281, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4605, "invalid": 676 } }, "hsts": { "n": 5281, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1017, "absent": 4264 } }, "csp": { "n": 4619, "na": 6410, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 808, "weak": 0, "absent": 3811 } }, "clickjacking": { "n": 4619, "na": 6410, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 864, "absent": 3755 } }, "mime_sniffing": { "n": 4619, "na": 6410, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 701, "absent": 3918 } }, "referrer_policy": { "n": 4619, "na": 6410, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 553, "absent": 4066 } }, "secure_by_default": { "n": 3218, "na": 7811, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 92, "not_all": 3126 } }, "ipv6": { "n": 11029, "na": 0, "states": { "aaaa": 2413, "none": 8616 } } } }, "cool": { "graded": 19932, "checks": { "dmarc": { "n": 19932, "na": 0, "states": { "absent": 16489, "none": 1351, "quarantine": 1192, "reject": 899, "invalid": 1 }, "rua_present": 1672 }, "spf": { "n": 19932, "na": 0, "states": { "absent": 13351, "hardfail": 2262, "softfail": 3919, "neutral": 249, "plus_all": 2, "invalid": 149 } }, "dkim": { "n": 2774, "na": 17158, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1245, "none_observed": 1529 } }, "mx": { "n": 19932, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8080, "absent": 11852 } }, "reverse_dns": { "n": 8086, "na": 11846, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6424, "none": 1662 } }, "caa": { "n": 19652, "na": 280, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 585, "absent": 19067 } }, "dnssec": { "n": 19932, "na": 0, "states": { "signed_valid": 1512, "signed_broken": 20, "unsigned": 18400 } }, "https": { "n": 19932, "na": 0, "states": { "https": 10349, "redirects": 0, "http_only": 9583 } }, "tls": { "n": 10349, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9699, "tls12": 650, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10349, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9005, "invalid": 1344 } }, "hsts": { "n": 10349, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2664, "absent": 7685 } }, "csp": { "n": 7031, "na": 12901, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 637, "weak": 0, "absent": 6394 } }, "clickjacking": { "n": 7031, "na": 12901, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1101, "absent": 5930 } }, "mime_sniffing": { "n": 7031, "na": 12901, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1299, "absent": 5732 } }, "referrer_policy": { "n": 7031, "na": 12901, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 750, "absent": 6281 } }, "secure_by_default": { "n": 5732, "na": 14200, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 103, "not_all": 5629 } }, "ipv6": { "n": 19932, "na": 0, "states": { "aaaa": 3478, "none": 16454 } } } }, "coop": { "graded": 7555, "checks": { "dmarc": { "n": 7555, "na": 0, "states": { "absent": 4293, "none": 1709, "quarantine": 670, "reject": 882, "invalid": 1 }, "rua_present": 1737 }, "spf": { "n": 7555, "na": 0, "states": { "absent": 2315, "hardfail": 2330, "softfail": 2374, "neutral": 353, "plus_all": 2, "invalid": 181 } }, "dkim": { "n": 3511, "na": 4044, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1951, "none_observed": 1560 } }, "mx": { "n": 7555, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5826, "absent": 1729 } }, "reverse_dns": { "n": 5822, "na": 1733, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5177, "none": 645 } }, "caa": { "n": 7536, "na": 19, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 182, "absent": 7354 } }, "dnssec": { "n": 7555, "na": 0, "states": { "signed_valid": 236, "signed_broken": 0, "unsigned": 7319 } }, "https": { "n": 7555, "na": 0, "states": { "https": 5252, "redirects": 0, "http_only": 2303 } }, "tls": { "n": 5252, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4851, "tls12": 401, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5252, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4530, "invalid": 722 } }, "hsts": { "n": 5252, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1321, "absent": 3931 } }, "csp": { "n": 3142, "na": 4413, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 424, "weak": 0, "absent": 2718 } }, "clickjacking": { "n": 3142, "na": 4413, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 819, "absent": 2323 } }, "mime_sniffing": { "n": 3142, "na": 4413, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 807, "absent": 2335 } }, "referrer_policy": { "n": 3142, "na": 4413, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 399, "absent": 2743 } }, "secure_by_default": { "n": 2721, "na": 4834, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 95, "not_all": 2626 } }, "ipv6": { "n": 7555, "na": 0, "states": { "aaaa": 1471, "none": 6084 } } } }, "coupons": { "graded": 6707, "checks": { "dmarc": { "n": 6707, "na": 0, "states": { "absent": 6100, "none": 215, "quarantine": 176, "reject": 216, "invalid": 0 }, "rua_present": 316 }, "spf": { "n": 6707, "na": 0, "states": { "absent": 4379, "hardfail": 1011, "softfail": 1265, "neutral": 39, "plus_all": 0, "invalid": 13 } }, "dkim": { "n": 795, "na": 5912, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 122, "none_observed": 673 } }, "mx": { "n": 6707, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2436, "absent": 4271 } }, "reverse_dns": { "n": 2448, "na": 4259, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1618, "none": 830 } }, "caa": { "n": 6634, "na": 73, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 232, "absent": 6402 } }, "dnssec": { "n": 6707, "na": 0, "states": { "signed_valid": 1473, "signed_broken": 2, "unsigned": 5232 } }, "https": { "n": 6707, "na": 0, "states": { "https": 3269, "redirects": 0, "http_only": 3438 } }, "tls": { "n": 3269, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2948, "tls12": 321, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3269, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2205, "invalid": 1064 } }, "hsts": { "n": 3269, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 319, "absent": 2950 } }, "csp": { "n": 2706, "na": 4001, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 802, "weak": 0, "absent": 1904 } }, "clickjacking": { "n": 2706, "na": 4001, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 847, "absent": 1859 } }, "mime_sniffing": { "n": 2706, "na": 4001, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 850, "absent": 1856 } }, "referrer_policy": { "n": 2706, "na": 4001, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 812, "absent": 1894 } }, "secure_by_default": { "n": 1810, "na": 4897, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 40, "not_all": 1770 } }, "ipv6": { "n": 6707, "na": 0, "states": { "aaaa": 1326, "none": 5381 } } } }, "courses": { "graded": 21006, "checks": { "dmarc": { "n": 21006, "na": 0, "states": { "absent": 19587, "none": 707, "quarantine": 341, "reject": 371, "invalid": 0 }, "rua_present": 983 }, "spf": { "n": 21006, "na": 0, "states": { "absent": 17551, "hardfail": 866, "softfail": 2506, "neutral": 55, "plus_all": 1, "invalid": 27 } }, "dkim": { "n": 1193, "na": 19813, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 643, "none_observed": 550 } }, "mx": { "n": 21006, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3720, "absent": 17286 } }, "reverse_dns": { "n": 3724, "na": 17282, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3146, "none": 578 } }, "caa": { "n": 20660, "na": 346, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 179, "absent": 20481 } }, "dnssec": { "n": 21006, "na": 0, "states": { "signed_valid": 2068, "signed_broken": 9, "unsigned": 18929 } }, "https": { "n": 21006, "na": 0, "states": { "https": 14050, "redirects": 0, "http_only": 6956 } }, "tls": { "n": 14050, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 13845, "tls12": 205, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 14050, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 12449, "invalid": 1601 } }, "hsts": { "n": 14050, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 739, "absent": 13311 } }, "csp": { "n": 5651, "na": 15355, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 258, "weak": 0, "absent": 5393 } }, "clickjacking": { "n": 5651, "na": 15355, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 742, "absent": 4909 } }, "mime_sniffing": { "n": 5651, "na": 15355, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 877, "absent": 4774 } }, "referrer_policy": { "n": 5651, "na": 15355, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 719, "absent": 4932 } }, "secure_by_default": { "n": 4487, "na": 16519, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 38, "not_all": 4449 } }, "ipv6": { "n": 21006, "na": 0, "states": { "aaaa": 9115, "none": 11891 } } } }, "cpa": { "graded": 6483, "checks": { "dmarc": { "n": 6483, "na": 0, "states": { "absent": 5349, "none": 564, "quarantine": 295, "reject": 274, "invalid": 1 }, "rua_present": 641 }, "spf": { "n": 6483, "na": 0, "states": { "absent": 2949, "hardfail": 1672, "softfail": 1832, "neutral": 11, "plus_all": 0, "invalid": 19 } }, "dkim": { "n": 2355, "na": 4128, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 938, "none_observed": 1417 } }, "mx": { "n": 6483, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4433, "absent": 2050 } }, "reverse_dns": { "n": 4433, "na": 2050, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3633, "none": 800 } }, "caa": { "n": 6483, "na": 0, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 25, "absent": 6458 } }, "dnssec": { "n": 6483, "na": 0, "states": { "signed_valid": 42, "signed_broken": 1, "unsigned": 6440 } }, "https": { "n": 6483, "na": 0, "states": { "https": 5087, "redirects": 0, "http_only": 1396 } }, "tls": { "n": 5087, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4764, "tls12": 323, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5087, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3090, "invalid": 1997 } }, "hsts": { "n": 5087, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 781, "absent": 4306 } }, "csp": { "n": 3517, "na": 2966, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 113, "weak": 0, "absent": 3404 } }, "clickjacking": { "n": 3517, "na": 2966, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 377, "absent": 3140 } }, "mime_sniffing": { "n": 3517, "na": 2966, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 337, "absent": 3180 } }, "referrer_policy": { "n": 3517, "na": 2966, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 104, "absent": 3413 } }, "secure_by_default": { "n": 2788, "na": 3695, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 11, "not_all": 2777 } }, "ipv6": { "n": 6483, "na": 0, "states": { "aaaa": 1488, "none": 4995 } } } }, "cr": { "graded": 10223, "checks": { "dmarc": { "n": 10223, "na": 0, "states": { "absent": 5477, "none": 2309, "quarantine": 1163, "reject": 1268, "invalid": 6 }, "rua_present": 2273 }, "spf": { "n": 10223, "na": 0, "states": { "absent": 2921, "hardfail": 3041, "softfail": 4040, "neutral": 154, "plus_all": 2, "invalid": 65 } }, "dkim": { "n": 5837, "na": 4386, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3424, "none_observed": 2413 } }, "mx": { "n": 10223, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7741, "absent": 2482 } }, "reverse_dns": { "n": 7746, "na": 2477, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6567, "none": 1179 } }, "caa": { "n": 10189, "na": 34, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 307, "absent": 9882 } }, "dnssec": { "n": 10223, "na": 0, "states": { "signed_valid": 543, "signed_broken": 6, "unsigned": 9674 } }, "https": { "n": 10223, "na": 0, "states": { "https": 8731, "redirects": 0, "http_only": 1492 } }, "tls": { "n": 8731, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8007, "tls12": 724, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8731, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8205, "invalid": 526 } }, "hsts": { "n": 8731, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1990, "absent": 6741 } }, "csp": { "n": 4732, "na": 5491, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 680, "weak": 0, "absent": 4052 } }, "clickjacking": { "n": 4732, "na": 5491, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 871, "absent": 3861 } }, "mime_sniffing": { "n": 4732, "na": 5491, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1146, "absent": 3586 } }, "referrer_policy": { "n": 4732, "na": 5491, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 554, "absent": 4178 } }, "secure_by_default": { "n": 4645, "na": 5578, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 74, "not_all": 4571 } }, "ipv6": { "n": 10223, "na": 0, "states": { "aaaa": 2336, "none": 7887 } } } }, "credit": { "graded": 5032, "checks": { "dmarc": { "n": 5032, "na": 0, "states": { "absent": 4022, "none": 242, "quarantine": 388, "reject": 380, "invalid": 0 }, "rua_present": 675 }, "spf": { "n": 5032, "na": 0, "states": { "absent": 3024, "hardfail": 969, "softfail": 993, "neutral": 36, "plus_all": 1, "invalid": 9 } }, "dkim": { "n": 562, "na": 4470, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 235, "none_observed": 327 } }, "mx": { "n": 5032, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2179, "absent": 2853 } }, "reverse_dns": { "n": 2185, "na": 2847, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1541, "none": 644 } }, "caa": { "n": 4996, "na": 36, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 159, "absent": 4837 } }, "dnssec": { "n": 5032, "na": 0, "states": { "signed_valid": 337, "signed_broken": 1, "unsigned": 4694 } }, "https": { "n": 5032, "na": 0, "states": { "https": 2287, "redirects": 0, "http_only": 2745 } }, "tls": { "n": 2287, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2197, "tls12": 90, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2287, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2070, "invalid": 217 } }, "hsts": { "n": 2287, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 466, "absent": 1821 } }, "csp": { "n": 1691, "na": 3341, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 229, "weak": 0, "absent": 1462 } }, "clickjacking": { "n": 1691, "na": 3341, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 321, "absent": 1370 } }, "mime_sniffing": { "n": 1691, "na": 3341, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 386, "absent": 1305 } }, "referrer_policy": { "n": 1691, "na": 3341, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 299, "absent": 1392 } }, "secure_by_default": { "n": 1251, "na": 3781, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 68, "not_all": 1183 } }, "ipv6": { "n": 5032, "na": 0, "states": { "aaaa": 724, "none": 4308 } } } }, "cv": { "graded": 48793, "checks": { "dmarc": { "n": 48793, "na": 0, "states": { "absent": 45673, "none": 2355, "quarantine": 345, "reject": 419, "invalid": 1 }, "rua_present": 1191 }, "spf": { "n": 48793, "na": 0, "states": { "absent": 41107, "hardfail": 1379, "softfail": 6192, "neutral": 71, "plus_all": 33, "invalid": 11 } }, "dkim": { "n": 6428, "na": 42365, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1944, "none_observed": 4484 } }, "mx": { "n": 48793, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 10103, "absent": 38690 } }, "reverse_dns": { "n": 10101, "na": 38692, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8343, "none": 1758 } }, "caa": { "n": 48468, "na": 325, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 298, "absent": 48170 } }, "dnssec": { "n": 48793, "na": 0, "states": { "signed_valid": 46, "signed_broken": 1, "unsigned": 48746 } }, "https": { "n": 48793, "na": 0, "states": { "https": 35712, "redirects": 0, "http_only": 13081 } }, "tls": { "n": 35712, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 35536, "tls12": 176, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 35712, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 34925, "invalid": 787 } }, "hsts": { "n": 35712, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 18784, "absent": 16928 } }, "csp": { "n": 22847, "na": 25946, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1184, "weak": 0, "absent": 21663 } }, "clickjacking": { "n": 22847, "na": 25946, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1842, "absent": 21005 } }, "mime_sniffing": { "n": 22847, "na": 25946, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2987, "absent": 19860 } }, "referrer_policy": { "n": 22847, "na": 25946, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2565, "absent": 20282 } }, "secure_by_default": { "n": 22687, "na": 26106, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 838, "not_all": 21849 } }, "ipv6": { "n": 48793, "na": 0, "states": { "aaaa": 9038, "none": 39755 } } } }, "cx": { "graded": 13877, "checks": { "dmarc": { "n": 13877, "na": 0, "states": { "absent": 11376, "none": 1241, "quarantine": 554, "reject": 704, "invalid": 2 }, "rua_present": 1126 }, "spf": { "n": 13877, "na": 0, "states": { "absent": 7807, "hardfail": 1822, "softfail": 3964, "neutral": 231, "plus_all": 2, "invalid": 51 } }, "dkim": { "n": 2459, "na": 11418, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1564, "none_observed": 895 } }, "mx": { "n": 13877, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6634, "absent": 7243 } }, "reverse_dns": { "n": 6636, "na": 7241, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5425, "none": 1211 } }, "caa": { "n": 13697, "na": 180, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 438, "absent": 13259 } }, "dnssec": { "n": 13877, "na": 0, "states": { "signed_valid": 575, "signed_broken": 4, "unsigned": 13298 } }, "https": { "n": 13877, "na": 0, "states": { "https": 10271, "redirects": 0, "http_only": 3606 } }, "tls": { "n": 10271, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9772, "tls12": 499, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10271, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9603, "invalid": 668 } }, "hsts": { "n": 10271, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2681, "absent": 7590 } }, "csp": { "n": 5772, "na": 8105, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 505, "weak": 0, "absent": 5267 } }, "clickjacking": { "n": 5772, "na": 8105, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1026, "absent": 4746 } }, "mime_sniffing": { "n": 5772, "na": 8105, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1253, "absent": 4519 } }, "referrer_policy": { "n": 5772, "na": 8105, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 992, "absent": 4780 } }, "secure_by_default": { "n": 5339, "na": 8538, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 221, "not_all": 5118 } }, "ipv6": { "n": 13877, "na": 0, "states": { "aaaa": 4128, "none": 9749 } } } }, "cy": { "graded": 18354, "checks": { "dmarc": { "n": 18354, "na": 0, "states": { "absent": 11543, "none": 4180, "quarantine": 1311, "reject": 1315, "invalid": 5 }, "rua_present": 2555 }, "spf": { "n": 18354, "na": 0, "states": { "absent": 5231, "hardfail": 5645, "softfail": 7071, "neutral": 285, "plus_all": 3, "invalid": 119 } }, "dkim": { "n": 10232, "na": 8122, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 6273, "none_observed": 3959 } }, "mx": { "n": 18354, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 14234, "absent": 4120 } }, "reverse_dns": { "n": 14251, "na": 4103, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12600, "none": 1651 } }, "caa": { "n": 18314, "na": 40, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 570, "absent": 17744 } }, "dnssec": { "n": 18354, "na": 0, "states": { "signed_valid": 397, "signed_broken": 1, "unsigned": 17956 } }, "https": { "n": 18354, "na": 0, "states": { "https": 15441, "redirects": 0, "http_only": 2913 } }, "tls": { "n": 15441, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 14678, "tls12": 763, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 15441, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 14669, "invalid": 772 } }, "hsts": { "n": 15441, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3282, "absent": 12159 } }, "csp": { "n": 8620, "na": 9734, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1088, "weak": 0, "absent": 7532 } }, "clickjacking": { "n": 8620, "na": 9734, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1609, "absent": 7011 } }, "mime_sniffing": { "n": 8620, "na": 9734, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1884, "absent": 6736 } }, "referrer_policy": { "n": 8620, "na": 9734, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 968, "absent": 7652 } }, "secure_by_default": { "n": 8504, "na": 9850, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 151, "not_all": 8353 } }, "ipv6": { "n": 18354, "na": 0, "states": { "aaaa": 5637, "none": 12717 } } } }, "cymru": { "graded": 8010, "checks": { "dmarc": { "n": 8010, "na": 0, "states": { "absent": 5567, "none": 1314, "quarantine": 618, "reject": 509, "invalid": 2 }, "rua_present": 998 }, "spf": { "n": 8010, "na": 0, "states": { "absent": 4412, "hardfail": 1347, "softfail": 2135, "neutral": 92, "plus_all": 0, "invalid": 24 } }, "dkim": { "n": 1833, "na": 6177, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 912, "none_observed": 921 } }, "mx": { "n": 8010, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5259, "absent": 2751 } }, "reverse_dns": { "n": 5256, "na": 2754, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4920, "none": 336 } }, "caa": { "n": 7975, "na": 35, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 74, "absent": 7901 } }, "dnssec": { "n": 8010, "na": 0, "states": { "signed_valid": 181, "signed_broken": 1, "unsigned": 7828 } }, "https": { "n": 8010, "na": 0, "states": { "https": 5212, "redirects": 0, "http_only": 2798 } }, "tls": { "n": 5212, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5040, "tls12": 172, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5212, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4712, "invalid": 500 } }, "hsts": { "n": 5212, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 876, "absent": 4336 } }, "csp": { "n": 3531, "na": 4479, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 223, "weak": 0, "absent": 3308 } }, "clickjacking": { "n": 3531, "na": 4479, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 430, "absent": 3101 } }, "mime_sniffing": { "n": 3531, "na": 4479, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 465, "absent": 3066 } }, "referrer_policy": { "n": 3531, "na": 4479, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 289, "absent": 3242 } }, "secure_by_default": { "n": 2667, "na": 5343, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 18, "not_all": 2649 } }, "ipv6": { "n": 8010, "na": 0, "states": { "aaaa": 1691, "none": 6319 } } } }, "cyou": { "graded": 415798, "checks": { "dmarc": { "n": 415798, "na": 0, "states": { "absent": 398963, "none": 14872, "quarantine": 651, "reject": 1312, "invalid": 0 }, "rua_present": 1845 }, "spf": { "n": 415798, "na": 0, "states": { "absent": 346925, "hardfail": 43466, "softfail": 24917, "neutral": 331, "plus_all": 10, "invalid": 149 } }, "dkim": { "n": 14040, "na": 401758, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 12641, "none_observed": 1399 } }, "mx": { "n": 415798, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 78002, "absent": 337796 } }, "reverse_dns": { "n": 77985, "na": 337813, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 15958, "none": 62027 } }, "caa": { "n": 407101, "na": 8697, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 637, "absent": 406464 } }, "dnssec": { "n": 415798, "na": 0, "states": { "signed_valid": 22151, "signed_broken": 527, "unsigned": 393120 } }, "https": { "n": 415798, "na": 0, "states": { "https": 207235, "redirects": 0, "http_only": 208563 } }, "tls": { "n": 207235, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 195713, "tls12": 11522, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 207235, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 161083, "invalid": 46152 } }, "hsts": { "n": 207235, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 26790, "absent": 180445 } }, "csp": { "n": 105239, "na": 310559, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 5798, "weak": 0, "absent": 99441 } }, "clickjacking": { "n": 105239, "na": 310559, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 13518, "absent": 91721 } }, "mime_sniffing": { "n": 105239, "na": 310559, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 11663, "absent": 93576 } }, "referrer_policy": { "n": 105239, "na": 310559, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 7335, "absent": 97904 } }, "secure_by_default": { "n": 89075, "na": 326723, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 195, "not_all": 88880 } }, "ipv6": { "n": 415798, "na": 0, "states": { "aaaa": 108872, "none": 306926 } } } }, "cz": { "graded": 1099408, "checks": { "dmarc": { "n": 1099408, "na": 0, "states": { "absent": 823261, "none": 176755, "quarantine": 73474, "reject": 25844, "invalid": 74 }, "rua_present": 79603 }, "spf": { "n": 1099408, "na": 0, "states": { "absent": 614237, "hardfail": 238490, "softfail": 183977, "neutral": 43612, "plus_all": 154, "invalid": 18938 } }, "dkim": { "n": 309720, "na": 789688, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 247619, "none_observed": 62101 } }, "mx": { "n": 1099408, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 828741, "absent": 270667 } }, "reverse_dns": { "n": 828591, "na": 270817, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 739663, "none": 88928 } }, "caa": { "n": 1097741, "na": 1667, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 22418, "absent": 1075323 } }, "dnssec": { "n": 1099408, "na": 0, "states": { "signed_valid": 711123, "signed_broken": 386, "unsigned": 387899 } }, "https": { "n": 1099408, "na": 0, "states": { "https": 924365, "redirects": 0, "http_only": 175043 } }, "tls": { "n": 924365, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 811020, "tls12": 113345, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 924365, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 797031, "invalid": 127334 } }, "hsts": { "n": 924365, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 123158, "absent": 801207 } }, "csp": { "n": 431861, "na": 667547, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 34422, "weak": 0, "absent": 397439 } }, "clickjacking": { "n": 431861, "na": 667547, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 54752, "absent": 377109 } }, "mime_sniffing": { "n": 431861, "na": 667547, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 70959, "absent": 360902 } }, "referrer_policy": { "n": 431861, "na": 667547, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 34091, "absent": 397770 } }, "secure_by_default": { "n": 396185, "na": 703223, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 3199, "not_all": 392986 } }, "ipv6": { "n": 1099408, "na": 0, "states": { "aaaa": 434569, "none": 664839 } } } }, "dance": { "graded": 8042, "checks": { "dmarc": { "n": 8042, "na": 0, "states": { "absent": 6010, "none": 1156, "quarantine": 434, "reject": 442, "invalid": 0 }, "rua_present": 723 }, "spf": { "n": 8042, "na": 0, "states": { "absent": 4396, "hardfail": 865, "softfail": 2531, "neutral": 146, "plus_all": 1, "invalid": 103 } }, "dkim": { "n": 1732, "na": 6310, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 840, "none_observed": 892 } }, "mx": { "n": 8042, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4432, "absent": 3610 } }, "reverse_dns": { "n": 4430, "na": 3612, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3976, "none": 454 } }, "caa": { "n": 8002, "na": 40, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 319, "absent": 7683 } }, "dnssec": { "n": 8042, "na": 0, "states": { "signed_valid": 737, "signed_broken": 7, "unsigned": 7298 } }, "https": { "n": 8042, "na": 0, "states": { "https": 5143, "redirects": 0, "http_only": 2899 } }, "tls": { "n": 5143, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4925, "tls12": 218, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5143, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4660, "invalid": 483 } }, "hsts": { "n": 5143, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1502, "absent": 3641 } }, "csp": { "n": 3161, "na": 4881, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 256, "weak": 0, "absent": 2905 } }, "clickjacking": { "n": 3161, "na": 4881, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 619, "absent": 2542 } }, "mime_sniffing": { "n": 3161, "na": 4881, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 753, "absent": 2408 } }, "referrer_policy": { "n": 3161, "na": 4881, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 381, "absent": 2780 } }, "secure_by_default": { "n": 2671, "na": 5371, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 42, "not_all": 2629 } }, "ipv6": { "n": 8042, "na": 0, "states": { "aaaa": 1768, "none": 6274 } } } }, "date": { "graded": 8805, "checks": { "dmarc": { "n": 8805, "na": 0, "states": { "absent": 7666, "none": 721, "quarantine": 206, "reject": 212, "invalid": 0 }, "rua_present": 391 }, "spf": { "n": 8805, "na": 0, "states": { "absent": 6245, "hardfail": 631, "softfail": 1844, "neutral": 55, "plus_all": 0, "invalid": 30 } }, "dkim": { "n": 523, "na": 8282, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 326, "none_observed": 197 } }, "mx": { "n": 8805, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2747, "absent": 6058 } }, "reverse_dns": { "n": 2746, "na": 6059, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1717, "none": 1029 } }, "caa": { "n": 8743, "na": 62, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 79, "absent": 8664 } }, "dnssec": { "n": 8805, "na": 0, "states": { "signed_valid": 482, "signed_broken": 1, "unsigned": 8322 } }, "https": { "n": 8805, "na": 0, "states": { "https": 5276, "redirects": 0, "http_only": 3529 } }, "tls": { "n": 5276, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4945, "tls12": 331, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5276, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4857, "invalid": 419 } }, "hsts": { "n": 5276, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 758, "absent": 4518 } }, "csp": { "n": 2491, "na": 6314, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 206, "weak": 0, "absent": 2285 } }, "clickjacking": { "n": 2491, "na": 6314, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 356, "absent": 2135 } }, "mime_sniffing": { "n": 2491, "na": 6314, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 431, "absent": 2060 } }, "referrer_policy": { "n": 2491, "na": 6314, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 354, "absent": 2137 } }, "secure_by_default": { "n": 1989, "na": 6816, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 34, "not_all": 1955 } }, "ipv6": { "n": 8805, "na": 0, "states": { "aaaa": 3063, "none": 5742 } } } }, "day": { "graded": 12749, "checks": { "dmarc": { "n": 12749, "na": 0, "states": { "absent": 10650, "none": 801, "quarantine": 660, "reject": 638, "invalid": 0 }, "rua_present": 1120 }, "spf": { "n": 12749, "na": 0, "states": { "absent": 7847, "hardfail": 1122, "softfail": 3584, "neutral": 178, "plus_all": 1, "invalid": 17 } }, "dkim": { "n": 1459, "na": 11290, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 923, "none_observed": 536 } }, "mx": { "n": 12749, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4836, "absent": 7913 } }, "reverse_dns": { "n": 4833, "na": 7916, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4432, "none": 401 } }, "caa": { "n": 12681, "na": 68, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 390, "absent": 12291 } }, "dnssec": { "n": 12749, "na": 0, "states": { "signed_valid": 1864, "signed_broken": 14, "unsigned": 10871 } }, "https": { "n": 12749, "na": 0, "states": { "https": 7100, "redirects": 0, "http_only": 5649 } }, "tls": { "n": 7100, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6938, "tls12": 162, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7100, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6700, "invalid": 400 } }, "hsts": { "n": 7100, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2008, "absent": 5092 } }, "csp": { "n": 4436, "na": 8313, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 495, "weak": 0, "absent": 3941 } }, "clickjacking": { "n": 4436, "na": 8313, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1106, "absent": 3330 } }, "mime_sniffing": { "n": 4436, "na": 8313, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1362, "absent": 3074 } }, "referrer_policy": { "n": 4436, "na": 8313, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 971, "absent": 3465 } }, "secure_by_default": { "n": 3670, "na": 9079, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 127, "not_all": 3543 } }, "ipv6": { "n": 12749, "na": 0, "states": { "aaaa": 3016, "none": 9733 } } } }, "de": { "graded": 11619348, "checks": { "dmarc": { "n": 11619348, "na": 0, "states": { "absent": 6467812, "none": 2623705, "quarantine": 446698, "reject": 2080246, "invalid": 887 }, "rua_present": 541080 }, "spf": { "n": 11619348, "na": 0, "states": { "absent": 4351474, "hardfail": 2610413, "softfail": 4220337, "neutral": 264406, "plus_all": 965, "invalid": 171753 } }, "dkim": { "n": 1464453, "na": 10154895, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 884772, "none_observed": 579681 } }, "mx": { "n": 11619348, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9526099, "absent": 2093249 } }, "reverse_dns": { "n": 9598231, "na": 2021117, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8320058, "none": 1278173 } }, "caa": { "n": 11581043, "na": 38305, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 202909, "absent": 11378134 } }, "dnssec": { "n": 11619348, "na": 0, "states": { "signed_valid": 324697, "signed_broken": 1222, "unsigned": 11293429 } }, "https": { "n": 11619348, "na": 0, "states": { "https": 8951541, "redirects": 0, "http_only": 2667807 } }, "tls": { "n": 8951541, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8470632, "tls12": 480909, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8951541, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7421594, "invalid": 1529947 } }, "hsts": { "n": 8951541, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1195972, "absent": 7755569 } }, "csp": { "n": 4933858, "na": 6685490, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 236190, "weak": 0, "absent": 4697668 } }, "clickjacking": { "n": 4933858, "na": 6685490, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 479964, "absent": 4453894 } }, "mime_sniffing": { "n": 4933858, "na": 6685490, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 605089, "absent": 4328769 } }, "referrer_policy": { "n": 4933858, "na": 6685490, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 311019, "absent": 4622839 } }, "secure_by_default": { "n": 3951197, "na": 7668151, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 45620, "not_all": 3905577 } }, "ipv6": { "n": 11619348, "na": 0, "states": { "aaaa": 4319372, "none": 7299976 } } } }, "deals": { "graded": 8210, "checks": { "dmarc": { "n": 8210, "na": 0, "states": { "absent": 6579, "none": 656, "quarantine": 348, "reject": 627, "invalid": 0 }, "rua_present": 759 }, "spf": { "n": 8210, "na": 0, "states": { "absent": 5194, "hardfail": 1130, "softfail": 1750, "neutral": 95, "plus_all": 1, "invalid": 40 } }, "dkim": { "n": 1083, "na": 7127, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 498, "none_observed": 585 } }, "mx": { "n": 8210, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3698, "absent": 4512 } }, "reverse_dns": { "n": 3709, "na": 4501, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2837, "none": 872 } }, "caa": { "n": 7946, "na": 264, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 340, "absent": 7606 } }, "dnssec": { "n": 8210, "na": 0, "states": { "signed_valid": 478, "signed_broken": 7, "unsigned": 7725 } }, "https": { "n": 8210, "na": 0, "states": { "https": 4420, "redirects": 0, "http_only": 3790 } }, "tls": { "n": 4420, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4296, "tls12": 124, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4420, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3930, "invalid": 490 } }, "hsts": { "n": 4420, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 956, "absent": 3464 } }, "csp": { "n": 2912, "na": 5298, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 303, "weak": 0, "absent": 2609 } }, "clickjacking": { "n": 2912, "na": 5298, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 507, "absent": 2405 } }, "mime_sniffing": { "n": 2912, "na": 5298, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 579, "absent": 2333 } }, "referrer_policy": { "n": 2912, "na": 5298, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 382, "absent": 2530 } }, "secure_by_default": { "n": 2175, "na": 6035, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 47, "not_all": 2128 } }, "ipv6": { "n": 8210, "na": 0, "states": { "aaaa": 1750, "none": 6460 } } } }, "delivery": { "graded": 13356, "checks": { "dmarc": { "n": 13356, "na": 0, "states": { "absent": 11151, "none": 858, "quarantine": 812, "reject": 535, "invalid": 0 }, "rua_present": 1294 }, "spf": { "n": 13356, "na": 0, "states": { "absent": 9814, "hardfail": 1102, "softfail": 2337, "neutral": 67, "plus_all": 0, "invalid": 36 } }, "dkim": { "n": 1390, "na": 11966, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 675, "none_observed": 715 } }, "mx": { "n": 13356, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3858, "absent": 9498 } }, "reverse_dns": { "n": 3868, "na": 9488, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2976, "none": 892 } }, "caa": { "n": 13268, "na": 88, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 530, "absent": 12738 } }, "dnssec": { "n": 13356, "na": 0, "states": { "signed_valid": 1020, "signed_broken": 9, "unsigned": 12327 } }, "https": { "n": 13356, "na": 0, "states": { "https": 5984, "redirects": 0, "http_only": 7372 } }, "tls": { "n": 5984, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5837, "tls12": 147, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5984, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5550, "invalid": 434 } }, "hsts": { "n": 5984, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1196, "absent": 4788 } }, "csp": { "n": 3891, "na": 9465, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 735, "weak": 0, "absent": 3156 } }, "clickjacking": { "n": 3891, "na": 9465, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 907, "absent": 2984 } }, "mime_sniffing": { "n": 3891, "na": 9465, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1141, "absent": 2750 } }, "referrer_policy": { "n": 3891, "na": 9465, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 810, "absent": 3081 } }, "secure_by_default": { "n": 3110, "na": 10246, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 116, "not_all": 2994 } }, "ipv6": { "n": 13356, "na": 0, "states": { "aaaa": 2705, "none": 10651 } } } }, "dental": { "graded": 8231, "checks": { "dmarc": { "n": 8231, "na": 0, "states": { "absent": 5968, "none": 1159, "quarantine": 498, "reject": 606, "invalid": 0 }, "rua_present": 793 }, "spf": { "n": 8231, "na": 0, "states": { "absent": 4073, "hardfail": 1111, "softfail": 2833, "neutral": 136, "plus_all": 0, "invalid": 78 } }, "dkim": { "n": 2331, "na": 5900, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 848, "none_observed": 1483 } }, "mx": { "n": 8231, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5457, "absent": 2774 } }, "reverse_dns": { "n": 5455, "na": 2776, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5009, "none": 446 } }, "caa": { "n": 8206, "na": 25, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 77, "absent": 8129 } }, "dnssec": { "n": 8231, "na": 0, "states": { "signed_valid": 507, "signed_broken": 3, "unsigned": 7721 } }, "https": { "n": 8231, "na": 0, "states": { "https": 4170, "redirects": 0, "http_only": 4061 } }, "tls": { "n": 4170, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3934, "tls12": 236, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4170, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3667, "invalid": 503 } }, "hsts": { "n": 4170, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 883, "absent": 3287 } }, "csp": { "n": 2524, "na": 5707, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 189, "weak": 0, "absent": 2335 } }, "clickjacking": { "n": 2524, "na": 5707, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 456, "absent": 2068 } }, "mime_sniffing": { "n": 2524, "na": 5707, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 515, "absent": 2009 } }, "referrer_policy": { "n": 2524, "na": 5707, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 203, "absent": 2321 } }, "secure_by_default": { "n": 1968, "na": 6263, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 21, "not_all": 1947 } }, "ipv6": { "n": 8231, "na": 0, "states": { "aaaa": 1539, "none": 6692 } } } }, "design": { "graded": 108137, "checks": { "dmarc": { "n": 108137, "na": 0, "states": { "absent": 84645, "none": 10726, "quarantine": 8019, "reject": 4742, "invalid": 5 }, "rua_present": 12174 }, "spf": { "n": 108137, "na": 0, "states": { "absent": 55181, "hardfail": 11479, "softfail": 39442, "neutral": 1408, "plus_all": 8, "invalid": 619 } }, "dkim": { "n": 29384, "na": 78753, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 12754, "none_observed": 16630 } }, "mx": { "n": 108137, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 60936, "absent": 47201 } }, "reverse_dns": { "n": 60928, "na": 47209, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 54915, "none": 6013 } }, "caa": { "n": 107525, "na": 612, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1925, "absent": 105600 } }, "dnssec": { "n": 108137, "na": 0, "states": { "signed_valid": 8169, "signed_broken": 64, "unsigned": 99904 } }, "https": { "n": 108137, "na": 0, "states": { "https": 72004, "redirects": 0, "http_only": 36133 } }, "tls": { "n": 72004, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 66569, "tls12": 5435, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 72004, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 66829, "invalid": 5175 } }, "hsts": { "n": 72004, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 27573, "absent": 44431 } }, "csp": { "n": 40489, "na": 67648, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 3123, "weak": 0, "absent": 37366 } }, "clickjacking": { "n": 40489, "na": 67648, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 6800, "absent": 33689 } }, "mime_sniffing": { "n": 40489, "na": 67648, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 11963, "absent": 28526 } }, "referrer_policy": { "n": 40489, "na": 67648, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3489, "absent": 37000 } }, "secure_by_default": { "n": 35852, "na": 72285, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 444, "not_all": 35408 } }, "ipv6": { "n": 108137, "na": 0, "states": { "aaaa": 12498, "none": 95639 } } } }, "dev": { "graded": 714329, "checks": { "dmarc": { "n": 714329, "na": 0, "states": { "absent": 556620, "none": 74277, "quarantine": 45402, "reject": 37969, "invalid": 61 }, "rua_present": 76182 }, "spf": { "n": 714329, "na": 0, "states": { "absent": 398728, "hardfail": 63709, "softfail": 236435, "neutral": 11876, "plus_all": 69, "invalid": 3512 } }, "dkim": { "n": 138187, "na": 576142, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 82060, "none_observed": 56127 } }, "mx": { "n": 714329, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 330343, "absent": 383986 } }, "reverse_dns": { "n": 330271, "na": 384058, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 304741, "none": 25530 } }, "caa": { "n": 709390, "na": 4939, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 47240, "absent": 662150 } }, "dnssec": { "n": 714329, "na": 0, "states": { "signed_valid": 101838, "signed_broken": 539, "unsigned": 611952 } }, "https": { "n": 714329, "na": 0, "states": { "https": 428082, "redirects": 0, "http_only": 286247 } }, "tls": { "n": 428082, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 422430, "tls12": 5652, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 428082, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 403666, "invalid": 24416 } }, "hsts": { "n": 428082, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 150847, "absent": 277235 } }, "csp": { "n": 278927, "na": 435402, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 19229, "weak": 0, "absent": 259698 } }, "clickjacking": { "n": 278927, "na": 435402, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 44179, "absent": 234748 } }, "mime_sniffing": { "n": 278927, "na": 435402, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 70220, "absent": 208707 } }, "referrer_policy": { "n": 278927, "na": 435402, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 53354, "absent": 225573 } }, "secure_by_default": { "n": 251120, "na": 463209, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 6287, "not_all": 244833 } }, "ipv6": { "n": 714329, "na": 0, "states": { "aaaa": 181884, "none": 532445 } } } }, "digital": { "graded": 375690, "checks": { "dmarc": { "n": 375690, "na": 0, "states": { "absent": 313649, "none": 30994, "quarantine": 17261, "reject": 13779, "invalid": 7 }, "rua_present": 27673 }, "spf": { "n": 375690, "na": 0, "states": { "absent": 255403, "hardfail": 28517, "softfail": 88729, "neutral": 1644, "plus_all": 3, "invalid": 1394 } }, "dkim": { "n": 46701, "na": 328989, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 24854, "none_observed": 21847 } }, "mx": { "n": 375690, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 131988, "absent": 243702 } }, "reverse_dns": { "n": 131947, "na": 243743, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 110911, "none": 21036 } }, "caa": { "n": 363011, "na": 12679, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3552, "absent": 359459 } }, "dnssec": { "n": 375690, "na": 0, "states": { "signed_valid": 10541, "signed_broken": 295, "unsigned": 364854 } }, "https": { "n": 375690, "na": 0, "states": { "https": 273398, "redirects": 0, "http_only": 102292 } }, "tls": { "n": 273398, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 267063, "tls12": 6335, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 273398, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 260390, "invalid": 13008 } }, "hsts": { "n": 273398, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 22150, "absent": 251248 } }, "csp": { "n": 124205, "na": 251485, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 10097, "weak": 0, "absent": 114108 } }, "clickjacking": { "n": 124205, "na": 251485, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 12521, "absent": 111684 } }, "mime_sniffing": { "n": 124205, "na": 251485, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 15310, "absent": 108895 } }, "referrer_policy": { "n": 124205, "na": 251485, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 10408, "absent": 113797 } }, "secure_by_default": { "n": 110347, "na": 265343, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1518, "not_all": 108829 } }, "ipv6": { "n": 375690, "na": 0, "states": { "aaaa": 238432, "none": 137258 } } } }, "direct": { "graded": 11297, "checks": { "dmarc": { "n": 11297, "na": 0, "states": { "absent": 8740, "none": 988, "quarantine": 657, "reject": 912, "invalid": 0 }, "rua_present": 1179 }, "spf": { "n": 11297, "na": 0, "states": { "absent": 6803, "hardfail": 1863, "softfail": 2431, "neutral": 142, "plus_all": 0, "invalid": 58 } }, "dkim": { "n": 1751, "na": 9546, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 714, "none_observed": 1037 } }, "mx": { "n": 11297, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5972, "absent": 5325 } }, "reverse_dns": { "n": 5988, "na": 5309, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4577, "none": 1411 } }, "caa": { "n": 11234, "na": 63, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 291, "absent": 10943 } }, "dnssec": { "n": 11297, "na": 0, "states": { "signed_valid": 721, "signed_broken": 15, "unsigned": 10561 } }, "https": { "n": 11297, "na": 0, "states": { "https": 5633, "redirects": 0, "http_only": 5664 } }, "tls": { "n": 5633, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5373, "tls12": 260, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5633, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4968, "invalid": 665 } }, "hsts": { "n": 5633, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1047, "absent": 4586 } }, "csp": { "n": 3828, "na": 7469, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 446, "weak": 0, "absent": 3382 } }, "clickjacking": { "n": 3828, "na": 7469, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 739, "absent": 3089 } }, "mime_sniffing": { "n": 3828, "na": 7469, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 725, "absent": 3103 } }, "referrer_policy": { "n": 3828, "na": 7469, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 387, "absent": 3441 } }, "secure_by_default": { "n": 2883, "na": 8414, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 82, "not_all": 2801 } }, "ipv6": { "n": 11297, "na": 0, "states": { "aaaa": 2334, "none": 8963 } } } }, "directory": { "graded": 13555, "checks": { "dmarc": { "n": 13555, "na": 0, "states": { "absent": 10825, "none": 884, "quarantine": 1223, "reject": 623, "invalid": 0 }, "rua_present": 1743 }, "spf": { "n": 13555, "na": 0, "states": { "absent": 8925, "hardfail": 1600, "softfail": 2896, "neutral": 104, "plus_all": 0, "invalid": 30 } }, "dkim": { "n": 2279, "na": 11276, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 801, "none_observed": 1478 } }, "mx": { "n": 13555, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5987, "absent": 7568 } }, "reverse_dns": { "n": 5987, "na": 7568, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4686, "none": 1301 } }, "caa": { "n": 13500, "na": 55, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 431, "absent": 13069 } }, "dnssec": { "n": 13555, "na": 0, "states": { "signed_valid": 765, "signed_broken": 9, "unsigned": 12781 } }, "https": { "n": 13555, "na": 0, "states": { "https": 6431, "redirects": 0, "http_only": 7124 } }, "tls": { "n": 6431, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6241, "tls12": 190, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6431, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5911, "invalid": 520 } }, "hsts": { "n": 6431, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1199, "absent": 5232 } }, "csp": { "n": 4498, "na": 9057, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 437, "weak": 0, "absent": 4061 } }, "clickjacking": { "n": 4498, "na": 9057, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 725, "absent": 3773 } }, "mime_sniffing": { "n": 4498, "na": 9057, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 916, "absent": 3582 } }, "referrer_policy": { "n": 4498, "na": 9057, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 686, "absent": 3812 } }, "secure_by_default": { "n": 3604, "na": 9951, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 98, "not_all": 3506 } }, "ipv6": { "n": 13555, "na": 0, "states": { "aaaa": 1991, "none": 11564 } } } }, "diy": { "graded": 7295, "checks": { "dmarc": { "n": 7295, "na": 0, "states": { "absent": 3716, "none": 211, "quarantine": 3240, "reject": 128, "invalid": 0 }, "rua_present": 3351 }, "spf": { "n": 7295, "na": 0, "states": { "absent": 5742, "hardfail": 252, "softfail": 1271, "neutral": 28, "plus_all": 0, "invalid": 2 } }, "dkim": { "n": 317, "na": 6978, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 198, "none_observed": 119 } }, "mx": { "n": 7295, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1606, "absent": 5689 } }, "reverse_dns": { "n": 1609, "na": 5686, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1423, "none": 186 } }, "caa": { "n": 7260, "na": 35, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 61, "absent": 7199 } }, "dnssec": { "n": 7295, "na": 0, "states": { "signed_valid": 288, "signed_broken": 1, "unsigned": 7006 } }, "https": { "n": 7295, "na": 0, "states": { "https": 2544, "redirects": 0, "http_only": 4751 } }, "tls": { "n": 2544, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2457, "tls12": 87, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2544, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2412, "invalid": 132 } }, "hsts": { "n": 2544, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 584, "absent": 1960 } }, "csp": { "n": 1842, "na": 5453, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 324, "weak": 0, "absent": 1518 } }, "clickjacking": { "n": 1842, "na": 5453, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 421, "absent": 1421 } }, "mime_sniffing": { "n": 1842, "na": 5453, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 417, "absent": 1425 } }, "referrer_policy": { "n": 1842, "na": 5453, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 365, "absent": 1477 } }, "secure_by_default": { "n": 1429, "na": 5866, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 29, "not_all": 1400 } }, "ipv6": { "n": 7295, "na": 0, "states": { "aaaa": 1152, "none": 6143 } } } }, "dk": { "graded": 976752, "checks": { "dmarc": { "n": 976752, "na": 0, "states": { "absent": 708796, "none": 95252, "quarantine": 31263, "reject": 141179, "invalid": 262 }, "rua_present": 144016 }, "spf": { "n": 976752, "na": 0, "states": { "absent": 542535, "hardfail": 251307, "softfail": 149676, "neutral": 30815, "plus_all": 127, "invalid": 2292 } }, "dkim": { "n": 206282, "na": 770470, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 109164, "none_observed": 97118 } }, "mx": { "n": 976752, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 722308, "absent": 254444 } }, "reverse_dns": { "n": 722562, "na": 254190, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 627611, "none": 94951 } }, "caa": { "n": 971132, "na": 5620, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 10009, "absent": 961123 } }, "dnssec": { "n": 976752, "na": 0, "states": { "signed_valid": 680480, "signed_broken": 742, "unsigned": 295530 } }, "https": { "n": 976752, "na": 0, "states": { "https": 783060, "redirects": 0, "http_only": 193692 } }, "tls": { "n": 783060, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 748919, "tls12": 34141, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 783060, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 608878, "invalid": 174182 } }, "hsts": { "n": 783060, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 121510, "absent": 661550 } }, "csp": { "n": 450938, "na": 525814, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 23766, "weak": 0, "absent": 427172 } }, "clickjacking": { "n": 450938, "na": 525814, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 44833, "absent": 406105 } }, "mime_sniffing": { "n": 450938, "na": 525814, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 135983, "absent": 314955 } }, "referrer_policy": { "n": 450938, "na": 525814, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 28296, "absent": 422642 } }, "secure_by_default": { "n": 428559, "na": 548193, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 5752, "not_all": 422807 } }, "ipv6": { "n": 976752, "na": 0, "states": { "aaaa": 217458, "none": 759294 } } } }, "do": { "graded": 24038, "checks": { "dmarc": { "n": 24038, "na": 0, "states": { "absent": 16108, "none": 5271, "quarantine": 1290, "reject": 1364, "invalid": 5 }, "rua_present": 3311 }, "spf": { "n": 24038, "na": 0, "states": { "absent": 9236, "hardfail": 4625, "softfail": 9147, "neutral": 339, "plus_all": 1, "invalid": 690 } }, "dkim": { "n": 12055, "na": 11983, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 7178, "none_observed": 4877 } }, "mx": { "n": 24038, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 16564, "absent": 7474 } }, "reverse_dns": { "n": 16589, "na": 7449, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12632, "none": 3957 } }, "caa": { "n": 23942, "na": 96, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 543, "absent": 23399 } }, "dnssec": { "n": 24038, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 24038 } }, "https": { "n": 24038, "na": 0, "states": { "https": 20293, "redirects": 0, "http_only": 3745 } }, "tls": { "n": 20293, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 19273, "tls12": 1020, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 20293, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 19122, "invalid": 1171 } }, "hsts": { "n": 20293, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4488, "absent": 15805 } }, "csp": { "n": 11818, "na": 12220, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2129, "weak": 0, "absent": 9689 } }, "clickjacking": { "n": 11818, "na": 12220, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2077, "absent": 9741 } }, "mime_sniffing": { "n": 11818, "na": 12220, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2523, "absent": 9295 } }, "referrer_policy": { "n": 11818, "na": 12220, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1496, "absent": 10322 } }, "secure_by_default": { "n": 11612, "na": 12426, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 232, "not_all": 11380 } }, "ipv6": { "n": 24038, "na": 0, "states": { "aaaa": 6500, "none": 17538 } } } }, "doctor": { "graded": 7655, "checks": { "dmarc": { "n": 7655, "na": 0, "states": { "absent": 6399, "none": 434, "quarantine": 583, "reject": 239, "invalid": 0 }, "rua_present": 771 }, "spf": { "n": 7655, "na": 0, "states": { "absent": 4701, "hardfail": 1179, "softfail": 1709, "neutral": 33, "plus_all": 0, "invalid": 33 } }, "dkim": { "n": 1955, "na": 5700, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 306, "none_observed": 1649 } }, "mx": { "n": 7655, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4533, "absent": 3122 } }, "reverse_dns": { "n": 4534, "na": 3121, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3481, "none": 1053 } }, "caa": { "n": 7623, "na": 32, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 132, "absent": 7491 } }, "dnssec": { "n": 7655, "na": 0, "states": { "signed_valid": 400, "signed_broken": 2, "unsigned": 7253 } }, "https": { "n": 7655, "na": 0, "states": { "https": 4385, "redirects": 0, "http_only": 3270 } }, "tls": { "n": 4385, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4304, "tls12": 81, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4385, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4172, "invalid": 213 } }, "hsts": { "n": 4385, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 502, "absent": 3883 } }, "csp": { "n": 3643, "na": 4012, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 240, "weak": 0, "absent": 3403 } }, "clickjacking": { "n": 3643, "na": 4012, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 374, "absent": 3269 } }, "mime_sniffing": { "n": 3643, "na": 4012, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1616, "absent": 2027 } }, "referrer_policy": { "n": 3643, "na": 4012, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 302, "absent": 3341 } }, "secure_by_default": { "n": 3131, "na": 4524, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 51, "not_all": 3080 } }, "ipv6": { "n": 7655, "na": 0, "states": { "aaaa": 2179, "none": 5476 } } } }, "dog": { "graded": 17025, "checks": { "dmarc": { "n": 17025, "na": 0, "states": { "absent": 13270, "none": 1555, "quarantine": 1412, "reject": 788, "invalid": 0 }, "rua_present": 1871 }, "spf": { "n": 17025, "na": 0, "states": { "absent": 10363, "hardfail": 1763, "softfail": 4635, "neutral": 207, "plus_all": 4, "invalid": 53 } }, "dkim": { "n": 3230, "na": 13795, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1440, "none_observed": 1790 } }, "mx": { "n": 17025, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7823, "absent": 9202 } }, "reverse_dns": { "n": 7820, "na": 9205, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6869, "none": 951 } }, "caa": { "n": 16951, "na": 74, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 748, "absent": 16203 } }, "dnssec": { "n": 17025, "na": 0, "states": { "signed_valid": 1448, "signed_broken": 10, "unsigned": 15567 } }, "https": { "n": 17025, "na": 0, "states": { "https": 9767, "redirects": 0, "http_only": 7258 } }, "tls": { "n": 9767, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9473, "tls12": 294, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9767, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8983, "invalid": 784 } }, "hsts": { "n": 9767, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2700, "absent": 7067 } }, "csp": { "n": 6137, "na": 10888, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 809, "weak": 0, "absent": 5328 } }, "clickjacking": { "n": 6137, "na": 10888, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1338, "absent": 4799 } }, "mime_sniffing": { "n": 6137, "na": 10888, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1398, "absent": 4739 } }, "referrer_policy": { "n": 6137, "na": 10888, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 738, "absent": 5399 } }, "secure_by_default": { "n": 5028, "na": 11997, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 96, "not_all": 4932 } }, "ipv6": { "n": 17025, "na": 0, "states": { "aaaa": 3344, "none": 13681 } } } }, "domains": { "graded": 6610, "checks": { "dmarc": { "n": 6610, "na": 0, "states": { "absent": 5358, "none": 436, "quarantine": 240, "reject": 576, "invalid": 0 }, "rua_present": 592 }, "spf": { "n": 6610, "na": 0, "states": { "absent": 3767, "hardfail": 1443, "softfail": 1258, "neutral": 74, "plus_all": 1, "invalid": 67 } }, "dkim": { "n": 850, "na": 5760, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 467, "none_observed": 383 } }, "mx": { "n": 6610, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3155, "absent": 3455 } }, "reverse_dns": { "n": 3154, "na": 3456, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2189, "none": 965 } }, "caa": { "n": 6564, "na": 46, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 264, "absent": 6300 } }, "dnssec": { "n": 6610, "na": 0, "states": { "signed_valid": 554, "signed_broken": 25, "unsigned": 6031 } }, "https": { "n": 6610, "na": 0, "states": { "https": 3383, "redirects": 0, "http_only": 3227 } }, "tls": { "n": 3383, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3205, "tls12": 178, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3383, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2946, "invalid": 437 } }, "hsts": { "n": 3383, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 640, "absent": 2743 } }, "csp": { "n": 2369, "na": 4241, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 292, "weak": 0, "absent": 2077 } }, "clickjacking": { "n": 2369, "na": 4241, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 475, "absent": 1894 } }, "mime_sniffing": { "n": 2369, "na": 4241, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 492, "absent": 1877 } }, "referrer_policy": { "n": 2369, "na": 4241, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 320, "absent": 2049 } }, "secure_by_default": { "n": 1863, "na": 4747, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 87, "not_all": 1776 } }, "ipv6": { "n": 6610, "na": 0, "states": { "aaaa": 1298, "none": 5312 } } } }, "download": { "graded": 7234, "checks": { "dmarc": { "n": 7234, "na": 0, "states": { "absent": 6303, "none": 345, "quarantine": 138, "reject": 448, "invalid": 0 }, "rua_present": 478 }, "spf": { "n": 7234, "na": 0, "states": { "absent": 4800, "hardfail": 739, "softfail": 1534, "neutral": 138, "plus_all": 0, "invalid": 23 } }, "dkim": { "n": 378, "na": 6856, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 273, "none_observed": 105 } }, "mx": { "n": 7234, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2346, "absent": 4888 } }, "reverse_dns": { "n": 2349, "na": 4885, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1859, "none": 490 } }, "caa": { "n": 7161, "na": 73, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 133, "absent": 7028 } }, "dnssec": { "n": 7234, "na": 0, "states": { "signed_valid": 520, "signed_broken": 9, "unsigned": 6705 } }, "https": { "n": 7234, "na": 0, "states": { "https": 3853, "redirects": 0, "http_only": 3381 } }, "tls": { "n": 3853, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3739, "tls12": 114, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3853, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3486, "invalid": 367 } }, "hsts": { "n": 3853, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 563, "absent": 3290 } }, "csp": { "n": 2520, "na": 4714, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 362, "weak": 0, "absent": 2158 } }, "clickjacking": { "n": 2520, "na": 4714, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 399, "absent": 2121 } }, "mime_sniffing": { "n": 2520, "na": 4714, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 494, "absent": 2026 } }, "referrer_policy": { "n": 2520, "na": 4714, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 376, "absent": 2144 } }, "secure_by_default": { "n": 1917, "na": 5317, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 36, "not_all": 1881 } }, "ipv6": { "n": 7234, "na": 0, "states": { "aaaa": 2382, "none": 4852 } } } }, "dvag": { "graded": 9274, "checks": { "dmarc": { "n": 9274, "na": 0, "states": { "absent": 3096, "none": 8, "quarantine": 0, "reject": 6170, "invalid": 0 }, "rua_present": 95 }, "spf": { "n": 9274, "na": 0, "states": { "absent": 52, "hardfail": 9219, "softfail": 2, "neutral": 0, "plus_all": 0, "invalid": 1 } }, "dkim": { "n": 9, "na": 9265, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 8, "none_observed": 1 } }, "mx": { "n": 9274, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9239, "absent": 35 } }, "reverse_dns": { "n": 9239, "na": 35, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 15, "none": 9224 } }, "caa": { "n": 9273, "na": 1, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 9122, "absent": 151 } }, "dnssec": { "n": 9274, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 9274 } }, "https": { "n": 9274, "na": 0, "states": { "https": 8480, "redirects": 0, "http_only": 794 } }, "tls": { "n": 8480, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8466, "tls12": 14, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8480, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8391, "invalid": 89 } }, "hsts": { "n": 8480, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 8240, "absent": 240 } }, "csp": { "n": 129, "na": 9145, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 11, "weak": 0, "absent": 118 } }, "clickjacking": { "n": 129, "na": 9145, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 18, "absent": 111 } }, "mime_sniffing": { "n": 129, "na": 9145, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 16, "absent": 113 } }, "referrer_policy": { "n": 129, "na": 9145, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 16, "absent": 113 } }, "secure_by_default": { "n": 129, "na": 9145, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 4, "not_all": 125 } }, "ipv6": { "n": 9274, "na": 0, "states": { "aaaa": 9034, "none": 240 } } } }, "dz": { "graded": 9389, "checks": { "dmarc": { "n": 9389, "na": 0, "states": { "absent": 4808, "none": 2869, "quarantine": 967, "reject": 743, "invalid": 2 }, "rua_present": 1389 }, "spf": { "n": 9389, "na": 0, "states": { "absent": 1779, "hardfail": 1524, "softfail": 5790, "neutral": 97, "plus_all": 2, "invalid": 197 } }, "dkim": { "n": 6307, "na": 3082, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 5862, "none_observed": 445 } }, "mx": { "n": 9389, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8871, "absent": 518 } }, "reverse_dns": { "n": 8867, "na": 522, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7631, "none": 1236 } }, "caa": { "n": 9357, "na": 32, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 108, "absent": 9249 } }, "dnssec": { "n": 9389, "na": 0, "states": { "signed_valid": 5, "signed_broken": 1, "unsigned": 9383 } }, "https": { "n": 9389, "na": 0, "states": { "https": 8039, "redirects": 0, "http_only": 1350 } }, "tls": { "n": 8039, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7355, "tls12": 684, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8039, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7040, "invalid": 999 } }, "hsts": { "n": 8039, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 937, "absent": 7102 } }, "csp": { "n": 5047, "na": 4342, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 182, "weak": 0, "absent": 4865 } }, "clickjacking": { "n": 5047, "na": 4342, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 797, "absent": 4250 } }, "mime_sniffing": { "n": 5047, "na": 4342, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 909, "absent": 4138 } }, "referrer_policy": { "n": 5047, "na": 4342, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 524, "absent": 4523 } }, "secure_by_default": { "n": 5003, "na": 4386, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 47, "not_all": 4956 } }, "ipv6": { "n": 9389, "na": 0, "states": { "aaaa": 532, "none": 8857 } } } }, "earth": { "graded": 28253, "checks": { "dmarc": { "n": 28253, "na": 0, "states": { "absent": 20168, "none": 3286, "quarantine": 3023, "reject": 1774, "invalid": 2 }, "rua_present": 4078 }, "spf": { "n": 28253, "na": 0, "states": { "absent": 15330, "hardfail": 3715, "softfail": 8549, "neutral": 523, "plus_all": 2, "invalid": 134 } }, "dkim": { "n": 7059, "na": 21194, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3198, "none_observed": 3861 } }, "mx": { "n": 28253, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 14819, "absent": 13434 } }, "reverse_dns": { "n": 14814, "na": 13439, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 13449, "none": 1365 } }, "caa": { "n": 28105, "na": 148, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 489, "absent": 27616 } }, "dnssec": { "n": 28253, "na": 0, "states": { "signed_valid": 2626, "signed_broken": 16, "unsigned": 25611 } }, "https": { "n": 28253, "na": 0, "states": { "https": 15064, "redirects": 0, "http_only": 13189 } }, "tls": { "n": 15064, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 14466, "tls12": 598, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 15064, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 13647, "invalid": 1417 } }, "hsts": { "n": 15064, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5190, "absent": 9874 } }, "csp": { "n": 10077, "na": 18176, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 924, "weak": 0, "absent": 9153 } }, "clickjacking": { "n": 10077, "na": 18176, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2036, "absent": 8041 } }, "mime_sniffing": { "n": 10077, "na": 18176, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2259, "absent": 7818 } }, "referrer_policy": { "n": 10077, "na": 18176, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 860, "absent": 9217 } }, "secure_by_default": { "n": 8196, "na": 20057, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 108, "not_all": 8088 } }, "ipv6": { "n": 28253, "na": 0, "states": { "aaaa": 3877, "none": 24376 } } } }, "ec": { "graded": 34819, "checks": { "dmarc": { "n": 34819, "na": 0, "states": { "absent": 18592, "none": 10389, "quarantine": 3112, "reject": 2719, "invalid": 7 }, "rua_present": 5452 }, "spf": { "n": 34819, "na": 0, "states": { "absent": 7542, "hardfail": 6821, "softfail": 19833, "neutral": 374, "plus_all": 5, "invalid": 244 } }, "dkim": { "n": 22997, "na": 11822, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 17816, "none_observed": 5181 } }, "mx": { "n": 34819, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 28583, "absent": 6236 } }, "reverse_dns": { "n": 28501, "na": 6318, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 22992, "none": 5509 } }, "caa": { "n": 34564, "na": 255, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 929, "absent": 33635 } }, "dnssec": { "n": 34819, "na": 0, "states": { "signed_valid": 105, "signed_broken": 0, "unsigned": 34714 } }, "https": { "n": 34819, "na": 0, "states": { "https": 31456, "redirects": 0, "http_only": 3363 } }, "tls": { "n": 31456, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 30026, "tls12": 1430, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 31456, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 30033, "invalid": 1423 } }, "hsts": { "n": 31456, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4531, "absent": 26925 } }, "csp": { "n": 19920, "na": 14899, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2605, "weak": 0, "absent": 17315 } }, "clickjacking": { "n": 19920, "na": 14899, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2656, "absent": 17264 } }, "mime_sniffing": { "n": 19920, "na": 14899, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2915, "absent": 17005 } }, "referrer_policy": { "n": 19920, "na": 14899, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1661, "absent": 18259 } }, "secure_by_default": { "n": 19756, "na": 15063, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 185, "not_all": 19571 } }, "ipv6": { "n": 34819, "na": 0, "states": { "aaaa": 8231, "none": 26588 } } } }, "eco": { "graded": 6573, "checks": { "dmarc": { "n": 6573, "na": 0, "states": { "absent": 4301, "none": 1171, "quarantine": 572, "reject": 527, "invalid": 2 }, "rua_present": 1056 }, "spf": { "n": 6573, "na": 0, "states": { "absent": 2182, "hardfail": 1506, "softfail": 2605, "neutral": 173, "plus_all": 0, "invalid": 107 } }, "dkim": { "n": 2787, "na": 3786, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1444, "none_observed": 1343 } }, "mx": { "n": 6573, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4848, "absent": 1725 } }, "reverse_dns": { "n": 4848, "na": 1725, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4521, "none": 327 } }, "caa": { "n": 6545, "na": 28, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 119, "absent": 6426 } }, "dnssec": { "n": 6573, "na": 0, "states": { "signed_valid": 1008, "signed_broken": 6, "unsigned": 5559 } }, "https": { "n": 6573, "na": 0, "states": { "https": 4572, "redirects": 0, "http_only": 2001 } }, "tls": { "n": 4572, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4368, "tls12": 204, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4572, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4091, "invalid": 481 } }, "hsts": { "n": 4572, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1577, "absent": 2995 } }, "csp": { "n": 2717, "na": 3856, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 434, "weak": 0, "absent": 2283 } }, "clickjacking": { "n": 2717, "na": 3856, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 727, "absent": 1990 } }, "mime_sniffing": { "n": 2717, "na": 3856, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 843, "absent": 1874 } }, "referrer_policy": { "n": 2717, "na": 3856, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 386, "absent": 2331 } }, "secure_by_default": { "n": 2391, "na": 4182, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 36, "not_all": 2355 } }, "ipv6": { "n": 6573, "na": 0, "states": { "aaaa": 1201, "none": 5372 } } } }, "edu": { "graded": 6685, "checks": { "dmarc": { "n": 6685, "na": 0, "states": { "absent": 1676, "none": 2399, "quarantine": 1545, "reject": 1065, "invalid": 0 }, "rua_present": 3954 }, "spf": { "n": 6685, "na": 0, "states": { "absent": 1004, "hardfail": 2381, "softfail": 3100, "neutral": 87, "plus_all": 0, "invalid": 113 } }, "dkim": { "n": 5820, "na": 865, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3876, "none_observed": 1944 } }, "mx": { "n": 6685, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6311, "absent": 374 } }, "reverse_dns": { "n": 6308, "na": 377, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6070, "none": 238 } }, "caa": { "n": 6664, "na": 21, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 456, "absent": 6208 } }, "dnssec": { "n": 6685, "na": 0, "states": { "signed_valid": 323, "signed_broken": 4, "unsigned": 6358 } }, "https": { "n": 6685, "na": 0, "states": { "https": 6032, "redirects": 0, "http_only": 653 } }, "tls": { "n": 6032, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5212, "tls12": 820, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6032, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5690, "invalid": 342 } }, "hsts": { "n": 6032, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1593, "absent": 4439 } }, "csp": { "n": 2400, "na": 4285, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 193, "weak": 0, "absent": 2207 } }, "clickjacking": { "n": 2400, "na": 4285, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 678, "absent": 1722 } }, "mime_sniffing": { "n": 2400, "na": 4285, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 763, "absent": 1637 } }, "referrer_policy": { "n": 2400, "na": 4285, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 210, "absent": 2190 } }, "secure_by_default": { "n": 2381, "na": 4304, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 35, "not_all": 2346 } }, "ipv6": { "n": 6685, "na": 0, "states": { "aaaa": 1392, "none": 5293 } } } }, "education": { "graded": 27382, "checks": { "dmarc": { "n": 27382, "na": 0, "states": { "absent": 20012, "none": 3931, "quarantine": 1740, "reject": 1695, "invalid": 4 }, "rua_present": 3127 }, "spf": { "n": 27382, "na": 0, "states": { "absent": 14136, "hardfail": 3845, "softfail": 8608, "neutral": 599, "plus_all": 4, "invalid": 190 } }, "dkim": { "n": 8761, "na": 18621, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4466, "none_observed": 4295 } }, "mx": { "n": 27382, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 16020, "absent": 11362 } }, "reverse_dns": { "n": 16020, "na": 11362, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 14039, "none": 1981 } }, "caa": { "n": 27269, "na": 113, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 715, "absent": 26554 } }, "dnssec": { "n": 27382, "na": 0, "states": { "signed_valid": 2732, "signed_broken": 14, "unsigned": 24636 } }, "https": { "n": 27382, "na": 0, "states": { "https": 14691, "redirects": 0, "http_only": 12691 } }, "tls": { "n": 14691, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 13989, "tls12": 702, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 14691, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 13108, "invalid": 1583 } }, "hsts": { "n": 14691, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3756, "absent": 10935 } }, "csp": { "n": 9421, "na": 17961, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 953, "weak": 0, "absent": 8468 } }, "clickjacking": { "n": 9421, "na": 17961, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2066, "absent": 7355 } }, "mime_sniffing": { "n": 9421, "na": 17961, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2189, "absent": 7232 } }, "referrer_policy": { "n": 9421, "na": 17961, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 701, "absent": 8720 } }, "secure_by_default": { "n": 7721, "na": 19661, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 92, "not_all": 7629 } }, "ipv6": { "n": 27382, "na": 0, "states": { "aaaa": 4599, "none": 22783 } } } }, "ee": { "graded": 158985, "checks": { "dmarc": { "n": 158985, "na": 0, "states": { "absent": 104650, "none": 36558, "quarantine": 11033, "reject": 6729, "invalid": 15 }, "rua_present": 9616 }, "spf": { "n": 158985, "na": 0, "states": { "absent": 66585, "hardfail": 36834, "softfail": 53726, "neutral": 784, "plus_all": 12, "invalid": 1044 } }, "dkim": { "n": 30097, "na": 128888, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 20623, "none_observed": 9474 } }, "mx": { "n": 158985, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 103960, "absent": 55025 } }, "reverse_dns": { "n": 104334, "na": 54651, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 99837, "none": 4497 } }, "caa": { "n": 158178, "na": 807, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 4253, "absent": 153925 } }, "dnssec": { "n": 158985, "na": 0, "states": { "signed_valid": 47232, "signed_broken": 47, "unsigned": 111706 } }, "https": { "n": 158985, "na": 0, "states": { "https": 147201, "redirects": 0, "http_only": 11784 } }, "tls": { "n": 147201, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 142111, "tls12": 5090, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 147201, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 131926, "invalid": 15275 } }, "hsts": { "n": 147201, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 28904, "absent": 118297 } }, "csp": { "n": 99601, "na": 59384, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 4378, "weak": 0, "absent": 95223 } }, "clickjacking": { "n": 99601, "na": 59384, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 13914, "absent": 85687 } }, "mime_sniffing": { "n": 99601, "na": 59384, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 15317, "absent": 84284 } }, "referrer_policy": { "n": 99601, "na": 59384, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 11877, "absent": 87724 } }, "secure_by_default": { "n": 98897, "na": 60088, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1033, "not_all": 97864 } }, "ipv6": { "n": 158985, "na": 0, "states": { "aaaa": 13237, "none": 145748 } } } }, "eg": { "graded": 5921, "checks": { "dmarc": { "n": 5921, "na": 0, "states": { "absent": 3286, "none": 1482, "quarantine": 607, "reject": 543, "invalid": 3 }, "rua_present": 1097 }, "spf": { "n": 5921, "na": 0, "states": { "absent": 1354, "hardfail": 1756, "softfail": 2700, "neutral": 82, "plus_all": 5, "invalid": 24 } }, "dkim": { "n": 3501, "na": 2420, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2536, "none_observed": 965 } }, "mx": { "n": 5921, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5101, "absent": 820 } }, "reverse_dns": { "n": 5096, "na": 825, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4253, "none": 843 } }, "caa": { "n": 5874, "na": 47, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 85, "absent": 5789 } }, "dnssec": { "n": 5921, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 5921 } }, "https": { "n": 5921, "na": 0, "states": { "https": 4706, "redirects": 0, "http_only": 1215 } }, "tls": { "n": 4706, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4133, "tls12": 573, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4706, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4194, "invalid": 512 } }, "hsts": { "n": 4706, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 851, "absent": 3855 } }, "csp": { "n": 3060, "na": 2861, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 421, "weak": 0, "absent": 2639 } }, "clickjacking": { "n": 3060, "na": 2861, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 497, "absent": 2563 } }, "mime_sniffing": { "n": 3060, "na": 2861, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 523, "absent": 2537 } }, "referrer_policy": { "n": 3060, "na": 2861, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 234, "absent": 2826 } }, "secure_by_default": { "n": 2888, "na": 3033, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 22, "not_all": 2866 } }, "ipv6": { "n": 5921, "na": 0, "states": { "aaaa": 1230, "none": 4691 } } } }, "email": { "graded": 117261, "checks": { "dmarc": { "n": 117261, "na": 0, "states": { "absent": 69672, "none": 18034, "quarantine": 14617, "reject": 14917, "invalid": 21 }, "rua_present": 23300 }, "spf": { "n": 117261, "na": 0, "states": { "absent": 52067, "hardfail": 21822, "softfail": 38277, "neutral": 3053, "plus_all": 17, "invalid": 2025 } }, "dkim": { "n": 35572, "na": 81689, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 20265, "none_observed": 15307 } }, "mx": { "n": 117261, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 78504, "absent": 38757 } }, "reverse_dns": { "n": 78457, "na": 38804, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 67750, "none": 10707 } }, "caa": { "n": 116542, "na": 719, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2497, "absent": 114045 } }, "dnssec": { "n": 117261, "na": 0, "states": { "signed_valid": 12418, "signed_broken": 221, "unsigned": 104622 } }, "https": { "n": 117261, "na": 0, "states": { "https": 42506, "redirects": 0, "http_only": 74755 } }, "tls": { "n": 42506, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 39804, "tls12": 2702, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 42506, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 33696, "invalid": 8810 } }, "hsts": { "n": 42506, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 6742, "absent": 35764 } }, "csp": { "n": 32490, "na": 84771, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2230, "weak": 0, "absent": 30260 } }, "clickjacking": { "n": 32490, "na": 84771, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3881, "absent": 28609 } }, "mime_sniffing": { "n": 32490, "na": 84771, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3766, "absent": 28724 } }, "referrer_policy": { "n": 32490, "na": 84771, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2216, "absent": 30274 } }, "secure_by_default": { "n": 19013, "na": 98248, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 247, "not_all": 18766 } }, "ipv6": { "n": 117261, "na": 0, "states": { "aaaa": 25375, "none": 91886 } } } }, "energy": { "graded": 26834, "checks": { "dmarc": { "n": 26834, "na": 0, "states": { "absent": 18809, "none": 3181, "quarantine": 3000, "reject": 1844, "invalid": 0 }, "rua_present": 4611 }, "spf": { "n": 26834, "na": 0, "states": { "absent": 12833, "hardfail": 5928, "softfail": 7654, "neutral": 260, "plus_all": 1, "invalid": 158 } }, "dkim": { "n": 7062, "na": 19772, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3072, "none_observed": 3990 } }, "mx": { "n": 26834, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 15595, "absent": 11239 } }, "reverse_dns": { "n": 15596, "na": 11238, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 13188, "none": 2408 } }, "caa": { "n": 26706, "na": 128, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 884, "absent": 25822 } }, "dnssec": { "n": 26834, "na": 0, "states": { "signed_valid": 2587, "signed_broken": 17, "unsigned": 24230 } }, "https": { "n": 26834, "na": 0, "states": { "https": 14405, "redirects": 0, "http_only": 12429 } }, "tls": { "n": 14405, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 13800, "tls12": 605, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 14405, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 12894, "invalid": 1511 } }, "hsts": { "n": 14405, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3623, "absent": 10782 } }, "csp": { "n": 9815, "na": 17019, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1123, "weak": 0, "absent": 8692 } }, "clickjacking": { "n": 9815, "na": 17019, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1763, "absent": 8052 } }, "mime_sniffing": { "n": 9815, "na": 17019, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1979, "absent": 7836 } }, "referrer_policy": { "n": 9815, "na": 17019, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1181, "absent": 8634 } }, "secure_by_default": { "n": 7954, "na": 18880, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 312, "not_all": 7642 } }, "ipv6": { "n": 26834, "na": 0, "states": { "aaaa": 4465, "none": 22369 } } } }, "engineer": { "graded": 7170, "checks": { "dmarc": { "n": 7170, "na": 0, "states": { "absent": 5930, "none": 485, "quarantine": 346, "reject": 409, "invalid": 0 }, "rua_present": 542 }, "spf": { "n": 7170, "na": 0, "states": { "absent": 4366, "hardfail": 712, "softfail": 1962, "neutral": 100, "plus_all": 0, "invalid": 30 } }, "dkim": { "n": 1243, "na": 5927, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 625, "none_observed": 618 } }, "mx": { "n": 7170, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3244, "absent": 3926 } }, "reverse_dns": { "n": 3247, "na": 3923, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2904, "none": 343 } }, "caa": { "n": 7101, "na": 69, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 502, "absent": 6599 } }, "dnssec": { "n": 7170, "na": 0, "states": { "signed_valid": 715, "signed_broken": 6, "unsigned": 6449 } }, "https": { "n": 7170, "na": 0, "states": { "https": 3964, "redirects": 0, "http_only": 3206 } }, "tls": { "n": 3964, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3895, "tls12": 69, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3964, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3637, "invalid": 327 } }, "hsts": { "n": 3964, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1109, "absent": 2855 } }, "csp": { "n": 2253, "na": 4917, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 162, "weak": 0, "absent": 2091 } }, "clickjacking": { "n": 2253, "na": 4917, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 350, "absent": 1903 } }, "mime_sniffing": { "n": 2253, "na": 4917, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 487, "absent": 1766 } }, "referrer_policy": { "n": 2253, "na": 4917, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 303, "absent": 1950 } }, "secure_by_default": { "n": 1817, "na": 5353, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 28, "not_all": 1789 } }, "ipv6": { "n": 7170, "na": 0, "states": { "aaaa": 1449, "none": 5721 } } } }, "engineering": { "graded": 10363, "checks": { "dmarc": { "n": 10363, "na": 0, "states": { "absent": 7915, "none": 915, "quarantine": 680, "reject": 852, "invalid": 1 }, "rua_present": 1174 }, "spf": { "n": 10363, "na": 0, "states": { "absent": 5493, "hardfail": 1592, "softfail": 3004, "neutral": 186, "plus_all": 0, "invalid": 88 } }, "dkim": { "n": 2612, "na": 7751, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1191, "none_observed": 1421 } }, "mx": { "n": 10363, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5589, "absent": 4774 } }, "reverse_dns": { "n": 5587, "na": 4776, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5127, "none": 460 } }, "caa": { "n": 10338, "na": 25, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 484, "absent": 9854 } }, "dnssec": { "n": 10363, "na": 0, "states": { "signed_valid": 1072, "signed_broken": 11, "unsigned": 9280 } }, "https": { "n": 10363, "na": 0, "states": { "https": 4917, "redirects": 0, "http_only": 5446 } }, "tls": { "n": 4917, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4757, "tls12": 160, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4917, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4317, "invalid": 600 } }, "hsts": { "n": 4917, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1403, "absent": 3514 } }, "csp": { "n": 3286, "na": 7077, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 398, "weak": 0, "absent": 2888 } }, "clickjacking": { "n": 3286, "na": 7077, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 726, "absent": 2560 } }, "mime_sniffing": { "n": 3286, "na": 7077, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 779, "absent": 2507 } }, "referrer_policy": { "n": 3286, "na": 7077, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 409, "absent": 2877 } }, "secure_by_default": { "n": 2547, "na": 7816, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 83, "not_all": 2464 } }, "ipv6": { "n": 10363, "na": 0, "states": { "aaaa": 1912, "none": 8451 } } } }, "enterprises": { "graded": 8940, "checks": { "dmarc": { "n": 8940, "na": 0, "states": { "absent": 7117, "none": 617, "quarantine": 653, "reject": 552, "invalid": 1 }, "rua_present": 1013 }, "spf": { "n": 8940, "na": 0, "states": { "absent": 5270, "hardfail": 1258, "softfail": 2266, "neutral": 109, "plus_all": 0, "invalid": 37 } }, "dkim": { "n": 2249, "na": 6691, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 977, "none_observed": 1272 } }, "mx": { "n": 8940, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4426, "absent": 4514 } }, "reverse_dns": { "n": 4427, "na": 4513, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3743, "none": 684 } }, "caa": { "n": 8684, "na": 256, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 198, "absent": 8486 } }, "dnssec": { "n": 8940, "na": 0, "states": { "signed_valid": 780, "signed_broken": 7, "unsigned": 8153 } }, "https": { "n": 8940, "na": 0, "states": { "https": 4388, "redirects": 0, "http_only": 4552 } }, "tls": { "n": 4388, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4242, "tls12": 146, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4388, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3938, "invalid": 450 } }, "hsts": { "n": 4388, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1012, "absent": 3376 } }, "csp": { "n": 2940, "na": 6000, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 262, "weak": 0, "absent": 2678 } }, "clickjacking": { "n": 2940, "na": 6000, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 590, "absent": 2350 } }, "mime_sniffing": { "n": 2940, "na": 6000, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 832, "absent": 2108 } }, "referrer_policy": { "n": 2940, "na": 6000, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 475, "absent": 2465 } }, "secure_by_default": { "n": 2317, "na": 6623, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 38, "not_all": 2279 } }, "ipv6": { "n": 8940, "na": 0, "states": { "aaaa": 1359, "none": 7581 } } } }, "es": { "graded": 1341015, "checks": { "dmarc": { "n": 1341015, "na": 0, "states": { "absent": 752725, "none": 397308, "quarantine": 137290, "reject": 53520, "invalid": 172 }, "rua_present": 130865 }, "spf": { "n": 1341015, "na": 0, "states": { "absent": 397599, "hardfail": 258432, "softfail": 588228, "neutral": 10976, "plus_all": 315, "invalid": 85465 } }, "dkim": { "n": 371089, "na": 969926, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 284744, "none_observed": 86345 } }, "mx": { "n": 1341015, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1006120, "absent": 334895 } }, "reverse_dns": { "n": 1005622, "na": 335393, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 865402, "none": 140220 } }, "caa": { "n": 1337549, "na": 3466, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 28049, "absent": 1309500 } }, "dnssec": { "n": 1341015, "na": 0, "states": { "signed_valid": 45992, "signed_broken": 746, "unsigned": 1294277 } }, "https": { "n": 1341015, "na": 0, "states": { "https": 1096179, "redirects": 0, "http_only": 244836 } }, "tls": { "n": 1096179, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1031593, "tls12": 64586, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1096179, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1000201, "invalid": 95978 } }, "hsts": { "n": 1096179, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 172610, "absent": 923569 } }, "csp": { "n": 643914, "na": 697101, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 86049, "weak": 0, "absent": 557865 } }, "clickjacking": { "n": 643914, "na": 697101, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 77870, "absent": 566044 } }, "mime_sniffing": { "n": 643914, "na": 697101, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 86696, "absent": 557218 } }, "referrer_policy": { "n": 643914, "na": 697101, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 44196, "absent": 599718 } }, "secure_by_default": { "n": 587413, "na": 753602, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 6095, "not_all": 581318 } }, "ipv6": { "n": 1341015, "na": 0, "states": { "aaaa": 406310, "none": 934705 } } } }, "estate": { "graded": 10480, "checks": { "dmarc": { "n": 10480, "na": 0, "states": { "absent": 7763, "none": 1193, "quarantine": 983, "reject": 541, "invalid": 0 }, "rua_present": 1271 }, "spf": { "n": 10480, "na": 0, "states": { "absent": 5690, "hardfail": 1607, "softfail": 2908, "neutral": 131, "plus_all": 1, "invalid": 143 } }, "dkim": { "n": 2404, "na": 8076, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1049, "none_observed": 1355 } }, "mx": { "n": 10480, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6009, "absent": 4471 } }, "reverse_dns": { "n": 6007, "na": 4473, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5113, "none": 894 } }, "caa": { "n": 10377, "na": 103, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 252, "absent": 10125 } }, "dnssec": { "n": 10480, "na": 0, "states": { "signed_valid": 725, "signed_broken": 10, "unsigned": 9745 } }, "https": { "n": 10480, "na": 0, "states": { "https": 5644, "redirects": 0, "http_only": 4836 } }, "tls": { "n": 5644, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5394, "tls12": 250, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5644, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4983, "invalid": 661 } }, "hsts": { "n": 5644, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1197, "absent": 4447 } }, "csp": { "n": 4106, "na": 6374, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 398, "weak": 0, "absent": 3708 } }, "clickjacking": { "n": 4106, "na": 6374, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 769, "absent": 3337 } }, "mime_sniffing": { "n": 4106, "na": 6374, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 678, "absent": 3428 } }, "referrer_policy": { "n": 4106, "na": 6374, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 398, "absent": 3708 } }, "secure_by_default": { "n": 3271, "na": 7209, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 57, "not_all": 3214 } }, "ipv6": { "n": 10480, "na": 0, "states": { "aaaa": 1755, "none": 8725 } } } }, "et": { "graded": 6724, "checks": { "dmarc": { "n": 6724, "na": 0, "states": { "absent": 2590, "none": 1979, "quarantine": 154, "reject": 1997, "invalid": 4 }, "rua_present": 333 }, "spf": { "n": 6724, "na": 0, "states": { "absent": 2022, "hardfail": 2917, "softfail": 1738, "neutral": 29, "plus_all": 0, "invalid": 18 } }, "dkim": { "n": 1664, "na": 5060, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1393, "none_observed": 271 } }, "mx": { "n": 6724, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4910, "absent": 1814 } }, "reverse_dns": { "n": 4912, "na": 1812, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4638, "none": 274 } }, "caa": { "n": 6715, "na": 9, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 435, "absent": 6280 } }, "dnssec": { "n": 6724, "na": 0, "states": { "signed_valid": 48, "signed_broken": 4, "unsigned": 6672 } }, "https": { "n": 6724, "na": 0, "states": { "https": 5986, "redirects": 0, "http_only": 738 } }, "tls": { "n": 5986, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5842, "tls12": 144, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5986, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5668, "invalid": 318 } }, "hsts": { "n": 5986, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1436, "absent": 4550 } }, "csp": { "n": 4044, "na": 2680, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 174, "weak": 0, "absent": 3870 } }, "clickjacking": { "n": 4044, "na": 2680, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 618, "absent": 3426 } }, "mime_sniffing": { "n": 4044, "na": 2680, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 735, "absent": 3309 } }, "referrer_policy": { "n": 4044, "na": 2680, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 505, "absent": 3539 } }, "secure_by_default": { "n": 3995, "na": 2729, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 54, "not_all": 3941 } }, "ipv6": { "n": 6724, "na": 0, "states": { "aaaa": 889, "none": 5835 } } } }, "eu": { "graded": 2169628, "checks": { "dmarc": { "n": 2169628, "na": 0, "states": { "absent": 1323520, "none": 438935, "quarantine": 148157, "reject": 258814, "invalid": 202 }, "rua_present": 222035 }, "spf": { "n": 2169628, "na": 0, "states": { "absent": 847541, "hardfail": 568846, "softfail": 666878, "neutral": 54286, "plus_all": 933, "invalid": 31144 } }, "dkim": { "n": 400243, "na": 1769385, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 271592, "none_observed": 128651 } }, "mx": { "n": 2169628, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1679244, "absent": 490384 } }, "reverse_dns": { "n": 1682626, "na": 487002, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1340380, "none": 342246 } }, "caa": { "n": 2162925, "na": 6703, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 58607, "absent": 2104318 } }, "dnssec": { "n": 2169628, "na": 0, "states": { "signed_valid": 418732, "signed_broken": 3357, "unsigned": 1747539 } }, "https": { "n": 2169628, "na": 0, "states": { "https": 1552423, "redirects": 0, "http_only": 617205 } }, "tls": { "n": 1552423, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1444999, "tls12": 107424, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1552423, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1289855, "invalid": 262568 } }, "hsts": { "n": 1552423, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 212262, "absent": 1340161 } }, "csp": { "n": 808845, "na": 1360783, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 55445, "weak": 0, "absent": 753400 } }, "clickjacking": { "n": 808845, "na": 1360783, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 88076, "absent": 720769 } }, "mime_sniffing": { "n": 808845, "na": 1360783, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 106589, "absent": 702256 } }, "referrer_policy": { "n": 808845, "na": 1360783, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 52329, "absent": 756516 } }, "secure_by_default": { "n": 654439, "na": 1515189, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 6462, "not_all": 647977 } }, "ipv6": { "n": 2169628, "na": 0, "states": { "aaaa": 694929, "none": 1474699 } } } }, "eus": { "graded": 14389, "checks": { "dmarc": { "n": 14389, "na": 0, "states": { "absent": 10129, "none": 2462, "quarantine": 1287, "reject": 510, "invalid": 1 }, "rua_present": 1007 }, "spf": { "n": 14389, "na": 0, "states": { "absent": 3913, "hardfail": 2776, "softfail": 6694, "neutral": 290, "plus_all": 5, "invalid": 711 } }, "dkim": { "n": 4954, "na": 9435, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3558, "none_observed": 1396 } }, "mx": { "n": 14389, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 10783, "absent": 3606 } }, "reverse_dns": { "n": 10789, "na": 3600, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 10084, "none": 705 } }, "caa": { "n": 14341, "na": 48, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 196, "absent": 14145 } }, "dnssec": { "n": 14389, "na": 0, "states": { "signed_valid": 1438, "signed_broken": 11, "unsigned": 12940 } }, "https": { "n": 14389, "na": 0, "states": { "https": 10067, "redirects": 0, "http_only": 4322 } }, "tls": { "n": 10067, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9081, "tls12": 986, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10067, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8374, "invalid": 1693 } }, "hsts": { "n": 10067, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1226, "absent": 8841 } }, "csp": { "n": 6441, "na": 7948, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 407, "weak": 0, "absent": 6034 } }, "clickjacking": { "n": 6441, "na": 7948, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 757, "absent": 5684 } }, "mime_sniffing": { "n": 6441, "na": 7948, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 677, "absent": 5764 } }, "referrer_policy": { "n": 6441, "na": 7948, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 281, "absent": 6160 } }, "secure_by_default": { "n": 5479, "na": 8910, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 49, "not_all": 5430 } }, "ipv6": { "n": 14389, "na": 0, "states": { "aaaa": 1820, "none": 12569 } } } }, "events": { "graded": 33725, "checks": { "dmarc": { "n": 33725, "na": 0, "states": { "absent": 22795, "none": 5074, "quarantine": 2756, "reject": 3095, "invalid": 5 }, "rua_present": 4675 }, "spf": { "n": 33725, "na": 0, "states": { "absent": 17177, "hardfail": 5303, "softfail": 10425, "neutral": 574, "plus_all": 2, "invalid": 244 } }, "dkim": { "n": 7730, "na": 25995, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3734, "none_observed": 3996 } }, "mx": { "n": 33725, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 18941, "absent": 14784 } }, "reverse_dns": { "n": 18940, "na": 14785, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 16892, "none": 2048 } }, "caa": { "n": 33583, "na": 142, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1233, "absent": 32350 } }, "dnssec": { "n": 33725, "na": 0, "states": { "signed_valid": 2911, "signed_broken": 17, "unsigned": 30797 } }, "https": { "n": 33725, "na": 0, "states": { "https": 19680, "redirects": 0, "http_only": 14045 } }, "tls": { "n": 19680, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 18803, "tls12": 877, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 19680, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 17512, "invalid": 2168 } }, "hsts": { "n": 19680, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5445, "absent": 14235 } }, "csp": { "n": 11876, "na": 21849, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 984, "weak": 0, "absent": 10892 } }, "clickjacking": { "n": 11876, "na": 21849, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2539, "absent": 9337 } }, "mime_sniffing": { "n": 11876, "na": 21849, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2955, "absent": 8921 } }, "referrer_policy": { "n": 11876, "na": 21849, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1346, "absent": 10530 } }, "secure_by_default": { "n": 9622, "na": 24103, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 156, "not_all": 9466 } }, "ipv6": { "n": 33725, "na": 0, "states": { "aaaa": 7651, "none": 26074 } } } }, "exchange": { "graded": 16603, "checks": { "dmarc": { "n": 16603, "na": 0, "states": { "absent": 13373, "none": 1054, "quarantine": 1345, "reject": 831, "invalid": 0 }, "rua_present": 1943 }, "spf": { "n": 16603, "na": 0, "states": { "absent": 10474, "hardfail": 2365, "softfail": 3578, "neutral": 107, "plus_all": 0, "invalid": 79 } }, "dkim": { "n": 2195, "na": 14408, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1043, "none_observed": 1152 } }, "mx": { "n": 16603, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6640, "absent": 9963 } }, "reverse_dns": { "n": 6644, "na": 9959, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5074, "none": 1570 } }, "caa": { "n": 16468, "na": 135, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1141, "absent": 15327 } }, "dnssec": { "n": 16603, "na": 0, "states": { "signed_valid": 951, "signed_broken": 14, "unsigned": 15638 } }, "https": { "n": 16603, "na": 0, "states": { "https": 9046, "redirects": 0, "http_only": 7557 } }, "tls": { "n": 9046, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8778, "tls12": 268, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9046, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8368, "invalid": 678 } }, "hsts": { "n": 9046, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1939, "absent": 7107 } }, "csp": { "n": 5720, "na": 10883, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 815, "weak": 0, "absent": 4905 } }, "clickjacking": { "n": 5720, "na": 10883, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1195, "absent": 4525 } }, "mime_sniffing": { "n": 5720, "na": 10883, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1213, "absent": 4507 } }, "referrer_policy": { "n": 5720, "na": 10883, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 907, "absent": 4813 } }, "secure_by_default": { "n": 4897, "na": 11706, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 305, "not_all": 4592 } }, "ipv6": { "n": 16603, "na": 0, "states": { "aaaa": 3452, "none": 13151 } } } }, "expert": { "graded": 24752, "checks": { "dmarc": { "n": 24752, "na": 0, "states": { "absent": 18583, "none": 2968, "quarantine": 1690, "reject": 1508, "invalid": 3 }, "rua_present": 2602 }, "spf": { "n": 24752, "na": 0, "states": { "absent": 13622, "hardfail": 3584, "softfail": 6469, "neutral": 437, "plus_all": 3, "invalid": 637 } }, "dkim": { "n": 5430, "na": 19322, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2284, "none_observed": 3146 } }, "mx": { "n": 24752, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 14410, "absent": 10342 } }, "reverse_dns": { "n": 14404, "na": 10348, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12481, "none": 1923 } }, "caa": { "n": 24603, "na": 149, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 521, "absent": 24082 } }, "dnssec": { "n": 24752, "na": 0, "states": { "signed_valid": 1640, "signed_broken": 11, "unsigned": 23101 } }, "https": { "n": 24752, "na": 0, "states": { "https": 12417, "redirects": 0, "http_only": 12335 } }, "tls": { "n": 12417, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 11660, "tls12": 757, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 12417, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 10646, "invalid": 1771 } }, "hsts": { "n": 12417, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2110, "absent": 10307 } }, "csp": { "n": 8720, "na": 16032, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 648, "weak": 0, "absent": 8072 } }, "clickjacking": { "n": 8720, "na": 16032, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1447, "absent": 7273 } }, "mime_sniffing": { "n": 8720, "na": 16032, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1268, "absent": 7452 } }, "referrer_policy": { "n": 8720, "na": 16032, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 703, "absent": 8017 } }, "secure_by_default": { "n": 6589, "na": 18163, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 86, "not_all": 6503 } }, "ipv6": { "n": 24752, "na": 0, "states": { "aaaa": 4455, "none": 20297 } } } }, "express": { "graded": 7762, "checks": { "dmarc": { "n": 7762, "na": 0, "states": { "absent": 5993, "none": 838, "quarantine": 511, "reject": 417, "invalid": 3 }, "rua_present": 840 }, "spf": { "n": 7762, "na": 0, "states": { "absent": 4087, "hardfail": 1316, "softfail": 2195, "neutral": 80, "plus_all": 0, "invalid": 84 } }, "dkim": { "n": 1290, "na": 6472, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 660, "none_observed": 630 } }, "mx": { "n": 7762, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4115, "absent": 3647 } }, "reverse_dns": { "n": 4114, "na": 3648, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3125, "none": 989 } }, "caa": { "n": 7714, "na": 48, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 295, "absent": 7419 } }, "dnssec": { "n": 7762, "na": 0, "states": { "signed_valid": 550, "signed_broken": 7, "unsigned": 7205 } }, "https": { "n": 7762, "na": 0, "states": { "https": 4301, "redirects": 0, "http_only": 3461 } }, "tls": { "n": 4301, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4134, "tls12": 167, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4301, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3845, "invalid": 456 } }, "hsts": { "n": 4301, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 800, "absent": 3501 } }, "csp": { "n": 3056, "na": 4706, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 387, "weak": 0, "absent": 2669 } }, "clickjacking": { "n": 3056, "na": 4706, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 591, "absent": 2465 } }, "mime_sniffing": { "n": 3056, "na": 4706, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 546, "absent": 2510 } }, "referrer_policy": { "n": 3056, "na": 4706, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 368, "absent": 2688 } }, "secure_by_default": { "n": 2486, "na": 5276, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 69, "not_all": 2417 } }, "ipv6": { "n": 7762, "na": 0, "states": { "aaaa": 1561, "none": 6201 } } } }, "family": { "graded": 34760, "checks": { "dmarc": { "n": 34760, "na": 0, "states": { "absent": 25273, "none": 4337, "quarantine": 2478, "reject": 2667, "invalid": 5 }, "rua_present": 3530 }, "spf": { "n": 34760, "na": 0, "states": { "absent": 16129, "hardfail": 4572, "softfail": 12454, "neutral": 1100, "plus_all": 0, "invalid": 505 } }, "dkim": { "n": 11093, "na": 23667, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 6209, "none_observed": 4884 } }, "mx": { "n": 34760, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 21839, "absent": 12921 } }, "reverse_dns": { "n": 21828, "na": 12932, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 20302, "none": 1526 } }, "caa": { "n": 34653, "na": 107, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 909, "absent": 33744 } }, "dnssec": { "n": 34760, "na": 0, "states": { "signed_valid": 5464, "signed_broken": 33, "unsigned": 29263 } }, "https": { "n": 34760, "na": 0, "states": { "https": 14895, "redirects": 0, "http_only": 19865 } }, "tls": { "n": 14895, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 14332, "tls12": 563, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 14895, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 12432, "invalid": 2463 } }, "hsts": { "n": 14895, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3792, "absent": 11103 } }, "csp": { "n": 10993, "na": 23767, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 710, "weak": 0, "absent": 10283 } }, "clickjacking": { "n": 10993, "na": 23767, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1909, "absent": 9084 } }, "mime_sniffing": { "n": 10993, "na": 23767, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2092, "absent": 8901 } }, "referrer_policy": { "n": 10993, "na": 23767, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 948, "absent": 10045 } }, "secure_by_default": { "n": 8188, "na": 26572, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 126, "not_all": 8062 } }, "ipv6": { "n": 34760, "na": 0, "states": { "aaaa": 6638, "none": 28122 } } } }, "fan": { "graded": 7371, "checks": { "dmarc": { "n": 7371, "na": 0, "states": { "absent": 6326, "none": 302, "quarantine": 331, "reject": 412, "invalid": 0 }, "rua_present": 536 }, "spf": { "n": 7371, "na": 0, "states": { "absent": 5276, "hardfail": 844, "softfail": 1114, "neutral": 110, "plus_all": 0, "invalid": 27 } }, "dkim": { "n": 639, "na": 6732, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 371, "none_observed": 268 } }, "mx": { "n": 7371, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2158, "absent": 5213 } }, "reverse_dns": { "n": 2153, "na": 5218, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1625, "none": 528 } }, "caa": { "n": 7139, "na": 232, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 417, "absent": 6722 } }, "dnssec": { "n": 7371, "na": 0, "states": { "signed_valid": 541, "signed_broken": 1, "unsigned": 6829 } }, "https": { "n": 7371, "na": 0, "states": { "https": 3840, "redirects": 0, "http_only": 3531 } }, "tls": { "n": 3840, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3641, "tls12": 199, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3840, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3396, "invalid": 444 } }, "hsts": { "n": 3840, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 898, "absent": 2942 } }, "csp": { "n": 2680, "na": 4691, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 286, "weak": 0, "absent": 2394 } }, "clickjacking": { "n": 2680, "na": 4691, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 437, "absent": 2243 } }, "mime_sniffing": { "n": 2680, "na": 4691, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 486, "absent": 2194 } }, "referrer_policy": { "n": 2680, "na": 4691, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 327, "absent": 2353 } }, "secure_by_default": { "n": 2046, "na": 5325, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 27, "not_all": 2019 } }, "ipv6": { "n": 7371, "na": 0, "states": { "aaaa": 1507, "none": 5864 } } } }, "fans": { "graded": 8263, "checks": { "dmarc": { "n": 8263, "na": 0, "states": { "absent": 7128, "none": 443, "quarantine": 315, "reject": 377, "invalid": 0 }, "rua_present": 573 }, "spf": { "n": 8263, "na": 0, "states": { "absent": 5872, "hardfail": 589, "softfail": 1658, "neutral": 125, "plus_all": 1, "invalid": 18 } }, "dkim": { "n": 816, "na": 7447, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 528, "none_observed": 288 } }, "mx": { "n": 8263, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2594, "absent": 5669 } }, "reverse_dns": { "n": 2598, "na": 5665, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2100, "none": 498 } }, "caa": { "n": 8172, "na": 91, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 150, "absent": 8022 } }, "dnssec": { "n": 8263, "na": 0, "states": { "signed_valid": 1030, "signed_broken": 8, "unsigned": 7225 } }, "https": { "n": 8263, "na": 0, "states": { "https": 4310, "redirects": 0, "http_only": 3953 } }, "tls": { "n": 4310, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4074, "tls12": 236, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4310, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3914, "invalid": 396 } }, "hsts": { "n": 4310, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 952, "absent": 3358 } }, "csp": { "n": 2867, "na": 5396, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 385, "weak": 0, "absent": 2482 } }, "clickjacking": { "n": 2867, "na": 5396, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 569, "absent": 2298 } }, "mime_sniffing": { "n": 2867, "na": 5396, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 733, "absent": 2134 } }, "referrer_policy": { "n": 2867, "na": 5396, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 489, "absent": 2378 } }, "secure_by_default": { "n": 2254, "na": 6009, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 116, "not_all": 2138 } }, "ipv6": { "n": 8263, "na": 0, "states": { "aaaa": 2023, "none": 6240 } } } }, "farm": { "graded": 25527, "checks": { "dmarc": { "n": 25527, "na": 0, "states": { "absent": 19803, "none": 2382, "quarantine": 2233, "reject": 1108, "invalid": 1 }, "rua_present": 3053 }, "spf": { "n": 25527, "na": 0, "states": { "absent": 14399, "hardfail": 3076, "softfail": 7628, "neutral": 311, "plus_all": 2, "invalid": 111 } }, "dkim": { "n": 6428, "na": 19099, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2685, "none_observed": 3743 } }, "mx": { "n": 25527, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 13162, "absent": 12365 } }, "reverse_dns": { "n": 13157, "na": 12370, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 11526, "none": 1631 } }, "caa": { "n": 25411, "na": 116, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 576, "absent": 24835 } }, "dnssec": { "n": 25527, "na": 0, "states": { "signed_valid": 2038, "signed_broken": 9, "unsigned": 23480 } }, "https": { "n": 25527, "na": 0, "states": { "https": 12797, "redirects": 0, "http_only": 12730 } }, "tls": { "n": 12797, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 12370, "tls12": 427, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 12797, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 11616, "invalid": 1181 } }, "hsts": { "n": 12797, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3596, "absent": 9201 } }, "csp": { "n": 8034, "na": 17493, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 970, "weak": 0, "absent": 7064 } }, "clickjacking": { "n": 8034, "na": 17493, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1736, "absent": 6298 } }, "mime_sniffing": { "n": 8034, "na": 17493, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1861, "absent": 6173 } }, "referrer_policy": { "n": 8034, "na": 17493, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 843, "absent": 7191 } }, "secure_by_default": { "n": 6687, "na": 18840, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 90, "not_all": 6597 } }, "ipv6": { "n": 25527, "na": 0, "states": { "aaaa": 3414, "none": 22113 } } } }, "fashion": { "graded": 11757, "checks": { "dmarc": { "n": 11757, "na": 0, "states": { "absent": 8953, "none": 1007, "quarantine": 1113, "reject": 684, "invalid": 0 }, "rua_present": 1610 }, "spf": { "n": 11757, "na": 0, "states": { "absent": 7007, "hardfail": 1548, "softfail": 2965, "neutral": 166, "plus_all": 1, "invalid": 70 } }, "dkim": { "n": 1476, "na": 10281, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 621, "none_observed": 855 } }, "mx": { "n": 11757, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5375, "absent": 6382 } }, "reverse_dns": { "n": 5375, "na": 6382, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4238, "none": 1137 } }, "caa": { "n": 11555, "na": 202, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 124, "absent": 11431 } }, "dnssec": { "n": 11757, "na": 0, "states": { "signed_valid": 420, "signed_broken": 5, "unsigned": 11332 } }, "https": { "n": 11757, "na": 0, "states": { "https": 5775, "redirects": 0, "http_only": 5982 } }, "tls": { "n": 5775, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5521, "tls12": 254, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5775, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4876, "invalid": 899 } }, "hsts": { "n": 5775, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1311, "absent": 4464 } }, "csp": { "n": 4061, "na": 7696, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 549, "weak": 0, "absent": 3512 } }, "clickjacking": { "n": 4061, "na": 7696, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 791, "absent": 3270 } }, "mime_sniffing": { "n": 4061, "na": 7696, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 837, "absent": 3224 } }, "referrer_policy": { "n": 4061, "na": 7696, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 366, "absent": 3695 } }, "secure_by_default": { "n": 3293, "na": 8464, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 34, "not_all": 3259 } }, "ipv6": { "n": 11757, "na": 0, "states": { "aaaa": 1838, "none": 9919 } } } }, "fi": { "graded": 415284, "checks": { "dmarc": { "n": 415284, "na": 0, "states": { "absent": 313875, "none": 70643, "quarantine": 17365, "reject": 13360, "invalid": 41 }, "rua_present": 29786 }, "spf": { "n": 415284, "na": 0, "states": { "absent": 131991, "hardfail": 96839, "softfail": 178355, "neutral": 6051, "plus_all": 611, "invalid": 1437 } }, "dkim": { "n": 192264, "na": 223020, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 124684, "none_observed": 67580 } }, "mx": { "n": 415284, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 330357, "absent": 84927 } }, "reverse_dns": { "n": 331131, "na": 84153, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 299356, "none": 31775 } }, "caa": { "n": 414614, "na": 670, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 6103, "absent": 408511 } }, "dnssec": { "n": 415284, "na": 0, "states": { "signed_valid": 21252, "signed_broken": 49, "unsigned": 393983 } }, "https": { "n": 415284, "na": 0, "states": { "https": 376575, "redirects": 0, "http_only": 38709 } }, "tls": { "n": 376575, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 352413, "tls12": 24162, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 376575, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 350182, "invalid": 26393 } }, "hsts": { "n": 376575, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 73354, "absent": 303221 } }, "csp": { "n": 181488, "na": 233796, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 14250, "weak": 0, "absent": 167238 } }, "clickjacking": { "n": 181488, "na": 233796, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 25448, "absent": 156040 } }, "mime_sniffing": { "n": 181488, "na": 233796, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 32245, "absent": 149243 } }, "referrer_policy": { "n": 181488, "na": 233796, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 16196, "absent": 165292 } }, "secure_by_default": { "n": 176728, "na": 238556, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 2065, "not_all": 174663 } }, "ipv6": { "n": 415284, "na": 0, "states": { "aaaa": 78955, "none": 336329 } } } }, "film": { "graded": 6623, "checks": { "dmarc": { "n": 6623, "na": 0, "states": { "absent": 4692, "none": 796, "quarantine": 675, "reject": 460, "invalid": 0 }, "rua_present": 1027 }, "spf": { "n": 6623, "na": 0, "states": { "absent": 3184, "hardfail": 1004, "softfail": 2159, "neutral": 213, "plus_all": 1, "invalid": 62 } }, "dkim": { "n": 1879, "na": 4744, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 696, "none_observed": 1183 } }, "mx": { "n": 6623, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3954, "absent": 2669 } }, "reverse_dns": { "n": 3959, "na": 2664, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3663, "none": 296 } }, "caa": { "n": 6600, "na": 23, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 124, "absent": 6476 } }, "dnssec": { "n": 6623, "na": 0, "states": { "signed_valid": 218, "signed_broken": 2, "unsigned": 6403 } }, "https": { "n": 6623, "na": 0, "states": { "https": 4245, "redirects": 0, "http_only": 2378 } }, "tls": { "n": 4245, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3895, "tls12": 350, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4245, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3648, "invalid": 597 } }, "hsts": { "n": 4245, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1289, "absent": 2956 } }, "csp": { "n": 2289, "na": 4334, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 175, "weak": 0, "absent": 2114 } }, "clickjacking": { "n": 2289, "na": 4334, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 402, "absent": 1887 } }, "mime_sniffing": { "n": 2289, "na": 4334, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 554, "absent": 1735 } }, "referrer_policy": { "n": 2289, "na": 4334, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 222, "absent": 2067 } }, "secure_by_default": { "n": 2049, "na": 4574, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 26, "not_all": 2023 } }, "ipv6": { "n": 6623, "na": 0, "states": { "aaaa": 1122, "none": 5501 } } } }, "finance": { "graded": 31485, "checks": { "dmarc": { "n": 31485, "na": 0, "states": { "absent": 24903, "none": 2642, "quarantine": 2204, "reject": 1735, "invalid": 1 }, "rua_present": 3664 }, "spf": { "n": 31485, "na": 0, "states": { "absent": 17331, "hardfail": 5621, "softfail": 8069, "neutral": 299, "plus_all": 1, "invalid": 164 } }, "dkim": { "n": 5945, "na": 25540, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2861, "none_observed": 3084 } }, "mx": { "n": 31485, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 15840, "absent": 15645 } }, "reverse_dns": { "n": 15836, "na": 15649, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12217, "none": 3619 } }, "caa": { "n": 30318, "na": 1167, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1920, "absent": 28398 } }, "dnssec": { "n": 31485, "na": 0, "states": { "signed_valid": 2288, "signed_broken": 30, "unsigned": 29167 } }, "https": { "n": 31485, "na": 0, "states": { "https": 18610, "redirects": 0, "http_only": 12875 } }, "tls": { "n": 18610, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 18101, "tls12": 509, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 18610, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 17261, "invalid": 1349 } }, "hsts": { "n": 18610, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4785, "absent": 13825 } }, "csp": { "n": 11980, "na": 19505, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1327, "weak": 0, "absent": 10653 } }, "clickjacking": { "n": 11980, "na": 19505, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2074, "absent": 9906 } }, "mime_sniffing": { "n": 11980, "na": 19505, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2637, "absent": 9343 } }, "referrer_policy": { "n": 11980, "na": 19505, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1917, "absent": 10063 } }, "secure_by_default": { "n": 10032, "na": 21453, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 502, "not_all": 9530 } }, "ipv6": { "n": 31485, "na": 0, "states": { "aaaa": 6624, "none": 24861 } } } }, "financial": { "graded": 7013, "checks": { "dmarc": { "n": 7013, "na": 0, "states": { "absent": 5297, "none": 392, "quarantine": 613, "reject": 710, "invalid": 1 }, "rua_present": 1203 }, "spf": { "n": 7013, "na": 0, "states": { "absent": 4047, "hardfail": 1424, "softfail": 1459, "neutral": 69, "plus_all": 0, "invalid": 14 } }, "dkim": { "n": 1518, "na": 5495, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 559, "none_observed": 959 } }, "mx": { "n": 7013, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3357, "absent": 3656 } }, "reverse_dns": { "n": 3356, "na": 3657, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2525, "none": 831 } }, "caa": { "n": 6807, "na": 206, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 256, "absent": 6551 } }, "dnssec": { "n": 7013, "na": 0, "states": { "signed_valid": 478, "signed_broken": 4, "unsigned": 6531 } }, "https": { "n": 7013, "na": 0, "states": { "https": 3105, "redirects": 0, "http_only": 3908 } }, "tls": { "n": 3105, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2995, "tls12": 110, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3105, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2847, "invalid": 258 } }, "hsts": { "n": 3105, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 698, "absent": 2407 } }, "csp": { "n": 2054, "na": 4959, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 226, "weak": 0, "absent": 1828 } }, "clickjacking": { "n": 2054, "na": 4959, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 387, "absent": 1667 } }, "mime_sniffing": { "n": 2054, "na": 4959, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 434, "absent": 1620 } }, "referrer_policy": { "n": 2054, "na": 4959, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 240, "absent": 1814 } }, "secure_by_default": { "n": 1483, "na": 5530, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 73, "not_all": 1410 } }, "ipv6": { "n": 7013, "na": 0, "states": { "aaaa": 750, "none": 6263 } } } }, "fish": { "graded": 5490, "checks": { "dmarc": { "n": 5490, "na": 0, "states": { "absent": 4377, "none": 482, "quarantine": 317, "reject": 314, "invalid": 0 }, "rua_present": 459 }, "spf": { "n": 5490, "na": 0, "states": { "absent": 3234, "hardfail": 682, "softfail": 1402, "neutral": 112, "plus_all": 0, "invalid": 60 } }, "dkim": { "n": 1294, "na": 4196, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 573, "none_observed": 721 } }, "mx": { "n": 5490, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2757, "absent": 2733 } }, "reverse_dns": { "n": 2757, "na": 2733, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2477, "none": 280 } }, "caa": { "n": 5475, "na": 15, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 213, "absent": 5262 } }, "dnssec": { "n": 5490, "na": 0, "states": { "signed_valid": 592, "signed_broken": 3, "unsigned": 4895 } }, "https": { "n": 5490, "na": 0, "states": { "https": 3213, "redirects": 0, "http_only": 2277 } }, "tls": { "n": 3213, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3101, "tls12": 112, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3213, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2885, "invalid": 328 } }, "hsts": { "n": 3213, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 838, "absent": 2375 } }, "csp": { "n": 2159, "na": 3331, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 235, "weak": 0, "absent": 1924 } }, "clickjacking": { "n": 2159, "na": 3331, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 465, "absent": 1694 } }, "mime_sniffing": { "n": 2159, "na": 3331, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 514, "absent": 1645 } }, "referrer_policy": { "n": 2159, "na": 3331, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 277, "absent": 1882 } }, "secure_by_default": { "n": 1836, "na": 3654, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 32, "not_all": 1804 } }, "ipv6": { "n": 5490, "na": 0, "states": { "aaaa": 1162, "none": 4328 } } } }, "fit": { "graded": 81082, "checks": { "dmarc": { "n": 81082, "na": 0, "states": { "absent": 66423, "none": 7276, "quarantine": 5800, "reject": 1582, "invalid": 1 }, "rua_present": 8058 }, "spf": { "n": 81082, "na": 0, "states": { "absent": 47145, "hardfail": 5709, "softfail": 27812, "neutral": 254, "plus_all": 7, "invalid": 155 } }, "dkim": { "n": 11425, "na": 69657, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 5428, "none_observed": 5997 } }, "mx": { "n": 81082, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 37203, "absent": 43879 } }, "reverse_dns": { "n": 37196, "na": 43886, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 30729, "none": 6467 } }, "caa": { "n": 80458, "na": 624, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1213, "absent": 79245 } }, "dnssec": { "n": 81082, "na": 0, "states": { "signed_valid": 1776, "signed_broken": 24, "unsigned": 79282 } }, "https": { "n": 81082, "na": 0, "states": { "https": 48734, "redirects": 0, "http_only": 32348 } }, "tls": { "n": 48734, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 47763, "tls12": 971, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 48734, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 45512, "invalid": 3222 } }, "hsts": { "n": 48734, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 10050, "absent": 38684 } }, "csp": { "n": 29321, "na": 51761, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2137, "weak": 0, "absent": 27184 } }, "clickjacking": { "n": 29321, "na": 51761, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4142, "absent": 25179 } }, "mime_sniffing": { "n": 29321, "na": 51761, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 6258, "absent": 23063 } }, "referrer_policy": { "n": 29321, "na": 51761, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3888, "absent": 25433 } }, "secure_by_default": { "n": 25829, "na": 55253, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 298, "not_all": 25531 } }, "ipv6": { "n": 81082, "na": 0, "states": { "aaaa": 22038, "none": 59044 } } } }, "fitness": { "graded": 12781, "checks": { "dmarc": { "n": 12781, "na": 0, "states": { "absent": 9388, "none": 1450, "quarantine": 1206, "reject": 736, "invalid": 1 }, "rua_present": 1706 }, "spf": { "n": 12781, "na": 0, "states": { "absent": 7388, "hardfail": 1628, "softfail": 3572, "neutral": 138, "plus_all": 0, "invalid": 55 } }, "dkim": { "n": 2869, "na": 9912, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1136, "none_observed": 1733 } }, "mx": { "n": 12781, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6575, "absent": 6206 } }, "reverse_dns": { "n": 6574, "na": 6207, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5579, "none": 995 } }, "caa": { "n": 12420, "na": 361, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 358, "absent": 12062 } }, "dnssec": { "n": 12781, "na": 0, "states": { "signed_valid": 1070, "signed_broken": 5, "unsigned": 11706 } }, "https": { "n": 12781, "na": 0, "states": { "https": 7487, "redirects": 0, "http_only": 5294 } }, "tls": { "n": 7487, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7294, "tls12": 193, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7487, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6739, "invalid": 748 } }, "hsts": { "n": 7487, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2410, "absent": 5077 } }, "csp": { "n": 4866, "na": 7915, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 701, "weak": 0, "absent": 4165 } }, "clickjacking": { "n": 4866, "na": 7915, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1133, "absent": 3733 } }, "mime_sniffing": { "n": 4866, "na": 7915, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1186, "absent": 3680 } }, "referrer_policy": { "n": 4866, "na": 7915, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 645, "absent": 4221 } }, "secure_by_default": { "n": 3925, "na": 8856, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 99, "not_all": 3826 } }, "ipv6": { "n": 12781, "na": 0, "states": { "aaaa": 2022, "none": 10759 } } } }, "fm": { "graded": 15415, "checks": { "dmarc": { "n": 15415, "na": 0, "states": { "absent": 11628, "none": 1988, "quarantine": 1126, "reject": 672, "invalid": 1 }, "rua_present": 1957 }, "spf": { "n": 15415, "na": 0, "states": { "absent": 8017, "hardfail": 2022, "softfail": 4820, "neutral": 409, "plus_all": 4, "invalid": 143 } }, "dkim": { "n": 4728, "na": 10687, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2177, "none_observed": 2551 } }, "mx": { "n": 15415, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9265, "absent": 6150 } }, "reverse_dns": { "n": 9264, "na": 6151, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8319, "none": 945 } }, "caa": { "n": 15051, "na": 364, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 459, "absent": 14592 } }, "dnssec": { "n": 15415, "na": 0, "states": { "signed_valid": 562, "signed_broken": 3, "unsigned": 14850 } }, "https": { "n": 15415, "na": 0, "states": { "https": 11227, "redirects": 0, "http_only": 4188 } }, "tls": { "n": 11227, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 10597, "tls12": 630, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 11227, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 10588, "invalid": 639 } }, "hsts": { "n": 11227, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2914, "absent": 8313 } }, "csp": { "n": 6255, "na": 9160, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 547, "weak": 0, "absent": 5708 } }, "clickjacking": { "n": 6255, "na": 9160, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1086, "absent": 5169 } }, "mime_sniffing": { "n": 6255, "na": 9160, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1511, "absent": 4744 } }, "referrer_policy": { "n": 6255, "na": 9160, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1022, "absent": 5233 } }, "secure_by_default": { "n": 6025, "na": 9390, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 171, "not_all": 5854 } }, "ipv6": { "n": 15415, "na": 0, "states": { "aaaa": 3746, "none": 11669 } } } }, "food": { "graded": 18846, "checks": { "dmarc": { "n": 18846, "na": 0, "states": { "absent": 13614, "none": 749, "quarantine": 3914, "reject": 569, "invalid": 0 }, "rua_present": 4482 }, "spf": { "n": 18846, "na": 0, "states": { "absent": 13897, "hardfail": 1996, "softfail": 2832, "neutral": 94, "plus_all": 0, "invalid": 27 } }, "dkim": { "n": 1444, "na": 17402, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 684, "none_observed": 760 } }, "mx": { "n": 18846, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5158, "absent": 13688 } }, "reverse_dns": { "n": 5161, "na": 13685, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4581, "none": 580 } }, "caa": { "n": 18676, "na": 170, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 215, "absent": 18461 } }, "dnssec": { "n": 18846, "na": 0, "states": { "signed_valid": 505, "signed_broken": 1, "unsigned": 18340 } }, "https": { "n": 18846, "na": 0, "states": { "https": 9383, "redirects": 0, "http_only": 9463 } }, "tls": { "n": 9383, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8947, "tls12": 436, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9383, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7660, "invalid": 1723 } }, "hsts": { "n": 9383, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2044, "absent": 7339 } }, "csp": { "n": 5694, "na": 13152, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 618, "weak": 0, "absent": 5076 } }, "clickjacking": { "n": 5694, "na": 13152, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 782, "absent": 4912 } }, "mime_sniffing": { "n": 5694, "na": 13152, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1058, "absent": 4636 } }, "referrer_policy": { "n": 5694, "na": 13152, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 836, "absent": 4858 } }, "secure_by_default": { "n": 4613, "na": 14233, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 143, "not_all": 4470 } }, "ipv6": { "n": 18846, "na": 0, "states": { "aaaa": 2153, "none": 16693 } } } }, "football": { "graded": 5885, "checks": { "dmarc": { "n": 5885, "na": 0, "states": { "absent": 4695, "none": 515, "quarantine": 359, "reject": 316, "invalid": 0 }, "rua_present": 556 }, "spf": { "n": 5885, "na": 0, "states": { "absent": 3960, "hardfail": 606, "softfail": 1209, "neutral": 61, "plus_all": 0, "invalid": 49 } }, "dkim": { "n": 773, "na": 5112, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 335, "none_observed": 438 } }, "mx": { "n": 5885, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2443, "absent": 3442 } }, "reverse_dns": { "n": 2447, "na": 3438, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2012, "none": 435 } }, "caa": { "n": 5740, "na": 145, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 160, "absent": 5580 } }, "dnssec": { "n": 5885, "na": 0, "states": { "signed_valid": 382, "signed_broken": 6, "unsigned": 5497 } }, "https": { "n": 5885, "na": 0, "states": { "https": 3147, "redirects": 0, "http_only": 2738 } }, "tls": { "n": 3147, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3018, "tls12": 129, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3147, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2787, "invalid": 360 } }, "hsts": { "n": 3147, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 804, "absent": 2343 } }, "csp": { "n": 2237, "na": 3648, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 274, "weak": 0, "absent": 1963 } }, "clickjacking": { "n": 2237, "na": 3648, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 417, "absent": 1820 } }, "mime_sniffing": { "n": 2237, "na": 3648, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 507, "absent": 1730 } }, "referrer_policy": { "n": 2237, "na": 3648, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 357, "absent": 1880 } }, "secure_by_default": { "n": 1693, "na": 4192, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 86, "not_all": 1607 } }, "ipv6": { "n": 5885, "na": 0, "states": { "aaaa": 1110, "none": 4775 } } } }, "forum": { "graded": 57235, "checks": { "dmarc": { "n": 57235, "na": 0, "states": { "absent": 55424, "none": 1143, "quarantine": 183, "reject": 485, "invalid": 0 }, "rua_present": 671 }, "spf": { "n": 57235, "na": 0, "states": { "absent": 50958, "hardfail": 1340, "softfail": 4839, "neutral": 79, "plus_all": 1, "invalid": 18 } }, "dkim": { "n": 1781, "na": 55454, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 971, "none_observed": 810 } }, "mx": { "n": 57235, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6573, "absent": 50662 } }, "reverse_dns": { "n": 6567, "na": 50668, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5158, "none": 1409 } }, "caa": { "n": 55136, "na": 2099, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 256, "absent": 54880 } }, "dnssec": { "n": 57235, "na": 0, "states": { "signed_valid": 10046, "signed_broken": 19, "unsigned": 47170 } }, "https": { "n": 57235, "na": 0, "states": { "https": 20662, "redirects": 0, "http_only": 36573 } }, "tls": { "n": 20662, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 19716, "tls12": 946, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 20662, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 18795, "invalid": 1867 } }, "hsts": { "n": 20662, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2370, "absent": 18292 } }, "csp": { "n": 14665, "na": 42570, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 5150, "weak": 0, "absent": 9515 } }, "clickjacking": { "n": 14665, "na": 42570, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 5927, "absent": 8738 } }, "mime_sniffing": { "n": 14665, "na": 42570, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 6528, "absent": 8137 } }, "referrer_policy": { "n": 14665, "na": 42570, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 5761, "absent": 8904 } }, "secure_by_default": { "n": 8682, "na": 48553, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 151, "not_all": 8531 } }, "ipv6": { "n": 57235, "na": 0, "states": { "aaaa": 15219, "none": 42016 } } } }, "foundation": { "graded": 28202, "checks": { "dmarc": { "n": 28202, "na": 0, "states": { "absent": 22631, "none": 1943, "quarantine": 2077, "reject": 1550, "invalid": 1 }, "rua_present": 3155 }, "spf": { "n": 28202, "na": 0, "states": { "absent": 16133, "hardfail": 3686, "softfail": 7885, "neutral": 389, "plus_all": 1, "invalid": 108 } }, "dkim": { "n": 5390, "na": 22812, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2145, "none_observed": 3245 } }, "mx": { "n": 28202, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 13755, "absent": 14447 } }, "reverse_dns": { "n": 13756, "na": 14446, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 11755, "none": 2001 } }, "caa": { "n": 28075, "na": 127, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 369, "absent": 27706 } }, "dnssec": { "n": 28202, "na": 0, "states": { "signed_valid": 2130, "signed_broken": 18, "unsigned": 26054 } }, "https": { "n": 28202, "na": 0, "states": { "https": 11967, "redirects": 0, "http_only": 16235 } }, "tls": { "n": 11967, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 11526, "tls12": 441, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 11967, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 10780, "invalid": 1187 } }, "hsts": { "n": 11967, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2987, "absent": 8980 } }, "csp": { "n": 8313, "na": 19889, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1122, "weak": 0, "absent": 7191 } }, "clickjacking": { "n": 8313, "na": 19889, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1744, "absent": 6569 } }, "mime_sniffing": { "n": 8313, "na": 19889, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1852, "absent": 6461 } }, "referrer_policy": { "n": 8313, "na": 19889, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 955, "absent": 7358 } }, "secure_by_default": { "n": 6351, "na": 21851, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 194, "not_all": 6157 } }, "ipv6": { "n": 28202, "na": 0, "states": { "aaaa": 3213, "none": 24989 } } } }, "fr": { "graded": 3192307, "checks": { "dmarc": { "n": 3192307, "na": 0, "states": { "absent": 1925970, "none": 851900, "quarantine": 195188, "reject": 218542, "invalid": 707 }, "rua_present": 285063 }, "spf": { "n": 3192307, "na": 0, "states": { "absent": 833165, "hardfail": 850240, "softfail": 1365016, "neutral": 133884, "plus_all": 2076, "invalid": 7926 } }, "dkim": { "n": 714849, "na": 2477458, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 529605, "none_observed": 185244 } }, "mx": { "n": 3192307, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2635203, "absent": 557104 } }, "reverse_dns": { "n": 2634425, "na": 557882, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2305243, "none": 329182 } }, "caa": { "n": 3182596, "na": 9711, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 42236, "absent": 3140360 } }, "dnssec": { "n": 3192307, "na": 0, "states": { "signed_valid": 704025, "signed_broken": 926, "unsigned": 2487356 } }, "https": { "n": 3192307, "na": 0, "states": { "https": 2517172, "redirects": 0, "http_only": 675135 } }, "tls": { "n": 2517172, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2382909, "tls12": 134263, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2517172, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2327131, "invalid": 190041 } }, "hsts": { "n": 2517172, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 618372, "absent": 1898800 } }, "csp": { "n": 1419801, "na": 1772506, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 197019, "weak": 0, "absent": 1222782 } }, "clickjacking": { "n": 1419801, "na": 1772506, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 230415, "absent": 1189386 } }, "mime_sniffing": { "n": 1419801, "na": 1772506, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 307702, "absent": 1112099 } }, "referrer_policy": { "n": 1419801, "na": 1772506, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 139775, "absent": 1280026 } }, "secure_by_default": { "n": 1293719, "na": 1898588, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 18477, "not_all": 1275242 } }, "ipv6": { "n": 3192307, "na": 0, "states": { "aaaa": 1150154, "none": 2042153 } } } }, "frl": { "graded": 9190, "checks": { "dmarc": { "n": 9190, "na": 0, "states": { "absent": 4927, "none": 1703, "quarantine": 1666, "reject": 894, "invalid": 0 }, "rua_present": 2232 }, "spf": { "n": 9190, "na": 0, "states": { "absent": 2222, "hardfail": 4821, "softfail": 2035, "neutral": 73, "plus_all": 4, "invalid": 35 } }, "dkim": { "n": 1135, "na": 8055, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 672, "none_observed": 463 } }, "mx": { "n": 9190, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6342, "absent": 2848 } }, "reverse_dns": { "n": 6328, "na": 2862, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3839, "none": 2489 } }, "caa": { "n": 9025, "na": 165, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 225, "absent": 8800 } }, "dnssec": { "n": 9190, "na": 0, "states": { "signed_valid": 3224, "signed_broken": 53, "unsigned": 5913 } }, "https": { "n": 9190, "na": 0, "states": { "https": 4339, "redirects": 0, "http_only": 4851 } }, "tls": { "n": 4339, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3856, "tls12": 483, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4339, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3267, "invalid": 1072 } }, "hsts": { "n": 4339, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 546, "absent": 3793 } }, "csp": { "n": 2610, "na": 6580, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 102, "weak": 0, "absent": 2508 } }, "clickjacking": { "n": 2610, "na": 6580, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 226, "absent": 2384 } }, "mime_sniffing": { "n": 2610, "na": 6580, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 261, "absent": 2349 } }, "referrer_policy": { "n": 2610, "na": 6580, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 123, "absent": 2487 } }, "secure_by_default": { "n": 1700, "na": 7490, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 13, "not_all": 1687 } }, "ipv6": { "n": 9190, "na": 0, "states": { "aaaa": 4575, "none": 4615 } } } }, "fun": { "graded": 337765, "checks": { "dmarc": { "n": 337765, "na": 0, "states": { "absent": 296026, "none": 20181, "quarantine": 15126, "reject": 6429, "invalid": 3 }, "rua_present": 18300 }, "spf": { "n": 337765, "na": 0, "states": { "absent": 257621, "hardfail": 20702, "softfail": 55987, "neutral": 807, "plus_all": 8, "invalid": 2640 } }, "dkim": { "n": 16135, "na": 321630, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 10631, "none_observed": 5504 } }, "mx": { "n": 337765, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 87601, "absent": 250164 } }, "reverse_dns": { "n": 87571, "na": 250194, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 58337, "none": 29234 } }, "caa": { "n": 333129, "na": 4636, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 16898, "absent": 316231 } }, "dnssec": { "n": 337765, "na": 0, "states": { "signed_valid": 11768, "signed_broken": 714, "unsigned": 325283 } }, "https": { "n": 337765, "na": 0, "states": { "https": 216069, "redirects": 0, "http_only": 121696 } }, "tls": { "n": 216069, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 206680, "tls12": 9389, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 216069, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 191855, "invalid": 24214 } }, "hsts": { "n": 216069, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 43102, "absent": 172967 } }, "csp": { "n": 154202, "na": 183563, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 15289, "weak": 0, "absent": 138913 } }, "clickjacking": { "n": 154202, "na": 183563, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 15422, "absent": 138780 } }, "mime_sniffing": { "n": 154202, "na": 183563, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 20636, "absent": 133566 } }, "referrer_policy": { "n": 154202, "na": 183563, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 14368, "absent": 139834 } }, "secure_by_default": { "n": 130906, "na": 206859, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1486, "not_all": 129420 } }, "ipv6": { "n": 337765, "na": 0, "states": { "aaaa": 92448, "none": 245317 } } } }, "fund": { "graded": 20181, "checks": { "dmarc": { "n": 20181, "na": 0, "states": { "absent": 16297, "none": 1091, "quarantine": 1831, "reject": 962, "invalid": 0 }, "rua_present": 2583 }, "spf": { "n": 20181, "na": 0, "states": { "absent": 11765, "hardfail": 3735, "softfail": 4420, "neutral": 197, "plus_all": 0, "invalid": 64 } }, "dkim": { "n": 3444, "na": 16737, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1396, "none_observed": 2048 } }, "mx": { "n": 20181, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9513, "absent": 10668 } }, "reverse_dns": { "n": 9527, "na": 10654, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6726, "none": 2801 } }, "caa": { "n": 19626, "na": 555, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 579, "absent": 19047 } }, "dnssec": { "n": 20181, "na": 0, "states": { "signed_valid": 1199, "signed_broken": 20, "unsigned": 18962 } }, "https": { "n": 20181, "na": 0, "states": { "https": 9521, "redirects": 0, "http_only": 10660 } }, "tls": { "n": 9521, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9255, "tls12": 266, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9521, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8873, "invalid": 648 } }, "hsts": { "n": 9521, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2209, "absent": 7312 } }, "csp": { "n": 6794, "na": 13387, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 509, "weak": 0, "absent": 6285 } }, "clickjacking": { "n": 6794, "na": 13387, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1036, "absent": 5758 } }, "mime_sniffing": { "n": 6794, "na": 13387, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1196, "absent": 5598 } }, "referrer_policy": { "n": 6794, "na": 13387, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 701, "absent": 6093 } }, "secure_by_default": { "n": 5691, "na": 14490, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 93, "not_all": 5598 } }, "ipv6": { "n": 20181, "na": 0, "states": { "aaaa": 2275, "none": 17906 } } } }, "fyi": { "graded": 59504, "checks": { "dmarc": { "n": 59504, "na": 0, "states": { "absent": 51590, "none": 2851, "quarantine": 2668, "reject": 2395, "invalid": 0 }, "rua_present": 3853 }, "spf": { "n": 59504, "na": 0, "states": { "absent": 43224, "hardfail": 3700, "softfail": 11995, "neutral": 505, "plus_all": 0, "invalid": 80 } }, "dkim": { "n": 5792, "na": 53712, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3535, "none_observed": 2257 } }, "mx": { "n": 59504, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 16922, "absent": 42582 } }, "reverse_dns": { "n": 16912, "na": 42592, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 14851, "none": 2061 } }, "caa": { "n": 57510, "na": 1994, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2777, "absent": 54733 } }, "dnssec": { "n": 59504, "na": 0, "states": { "signed_valid": 5092, "signed_broken": 34, "unsigned": 54378 } }, "https": { "n": 59504, "na": 0, "states": { "https": 31530, "redirects": 0, "http_only": 27974 } }, "tls": { "n": 31530, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 30705, "tls12": 825, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 31530, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 28256, "invalid": 3274 } }, "hsts": { "n": 31530, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 8190, "absent": 23340 } }, "csp": { "n": 19342, "na": 40162, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1764, "weak": 0, "absent": 17578 } }, "clickjacking": { "n": 19342, "na": 40162, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3196, "absent": 16146 } }, "mime_sniffing": { "n": 19342, "na": 40162, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4013, "absent": 15329 } }, "referrer_policy": { "n": 19342, "na": 40162, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2876, "absent": 16466 } }, "secure_by_default": { "n": 16813, "na": 42691, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 319, "not_all": 16494 } }, "ipv6": { "n": 59504, "na": 0, "states": { "aaaa": 10638, "none": 48866 } } } }, "gal": { "graded": 5564, "checks": { "dmarc": { "n": 5564, "na": 0, "states": { "absent": 3988, "none": 943, "quarantine": 463, "reject": 169, "invalid": 1 }, "rua_present": 466 }, "spf": { "n": 5564, "na": 0, "states": { "absent": 1567, "hardfail": 879, "softfail": 2941, "neutral": 35, "plus_all": 3, "invalid": 139 } }, "dkim": { "n": 2434, "na": 3130, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2104, "none_observed": 330 } }, "mx": { "n": 5564, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4432, "absent": 1132 } }, "reverse_dns": { "n": 4427, "na": 1137, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4298, "none": 129 } }, "caa": { "n": 5557, "na": 7, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 94, "absent": 5463 } }, "dnssec": { "n": 5564, "na": 0, "states": { "signed_valid": 210, "signed_broken": 2, "unsigned": 5352 } }, "https": { "n": 5564, "na": 0, "states": { "https": 4037, "redirects": 0, "http_only": 1527 } }, "tls": { "n": 4037, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3541, "tls12": 496, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4037, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3431, "invalid": 606 } }, "hsts": { "n": 4037, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 557, "absent": 3480 } }, "csp": { "n": 2814, "na": 2750, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 133, "weak": 0, "absent": 2681 } }, "clickjacking": { "n": 2814, "na": 2750, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 492, "absent": 2322 } }, "mime_sniffing": { "n": 2814, "na": 2750, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 286, "absent": 2528 } }, "referrer_policy": { "n": 2814, "na": 2750, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 117, "absent": 2697 } }, "secure_by_default": { "n": 2412, "na": 3152, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 15, "not_all": 2397 } }, "ipv6": { "n": 5564, "na": 0, "states": { "aaaa": 694, "none": 4870 } } } }, "gallery": { "graded": 16553, "checks": { "dmarc": { "n": 16553, "na": 0, "states": { "absent": 12510, "none": 2140, "quarantine": 827, "reject": 1073, "invalid": 3 }, "rua_present": 1333 }, "spf": { "n": 16553, "na": 0, "states": { "absent": 10154, "hardfail": 1756, "softfail": 4228, "neutral": 284, "plus_all": 0, "invalid": 131 } }, "dkim": { "n": 3519, "na": 13034, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1288, "none_observed": 2231 } }, "mx": { "n": 16553, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8559, "absent": 7994 } }, "reverse_dns": { "n": 8559, "na": 7994, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7533, "none": 1026 } }, "caa": { "n": 16497, "na": 56, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 259, "absent": 16238 } }, "dnssec": { "n": 16553, "na": 0, "states": { "signed_valid": 1205, "signed_broken": 8, "unsigned": 15340 } }, "https": { "n": 16553, "na": 0, "states": { "https": 10059, "redirects": 0, "http_only": 6494 } }, "tls": { "n": 10059, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9512, "tls12": 547, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10059, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9092, "invalid": 967 } }, "hsts": { "n": 10059, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2888, "absent": 7171 } }, "csp": { "n": 6711, "na": 9842, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 476, "weak": 0, "absent": 6235 } }, "clickjacking": { "n": 6711, "na": 9842, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1153, "absent": 5558 } }, "mime_sniffing": { "n": 6711, "na": 9842, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1403, "absent": 5308 } }, "referrer_policy": { "n": 6711, "na": 9842, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 470, "absent": 6241 } }, "secure_by_default": { "n": 5621, "na": 10932, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 50, "not_all": 5571 } }, "ipv6": { "n": 16553, "na": 0, "states": { "aaaa": 2832, "none": 13721 } } } }, "game": { "graded": 7046, "checks": { "dmarc": { "n": 7046, "na": 0, "states": { "absent": 5984, "none": 304, "quarantine": 354, "reject": 403, "invalid": 1 }, "rua_present": 664 }, "spf": { "n": 7046, "na": 0, "states": { "absent": 5125, "hardfail": 548, "softfail": 1236, "neutral": 124, "plus_all": 1, "invalid": 12 } }, "dkim": { "n": 681, "na": 6365, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 304, "none_observed": 377 } }, "mx": { "n": 7046, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2069, "absent": 4977 } }, "reverse_dns": { "n": 2076, "na": 4970, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1785, "none": 291 } }, "caa": { "n": 7010, "na": 36, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 103, "absent": 6907 } }, "dnssec": { "n": 7046, "na": 0, "states": { "signed_valid": 163, "signed_broken": 4, "unsigned": 6879 } }, "https": { "n": 7046, "na": 0, "states": { "https": 4278, "redirects": 0, "http_only": 2768 } }, "tls": { "n": 4278, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4134, "tls12": 144, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4278, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4076, "invalid": 202 } }, "hsts": { "n": 4278, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 783, "absent": 3495 } }, "csp": { "n": 2949, "na": 4097, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 308, "weak": 0, "absent": 2641 } }, "clickjacking": { "n": 2949, "na": 4097, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 350, "absent": 2599 } }, "mime_sniffing": { "n": 2949, "na": 4097, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 444, "absent": 2505 } }, "referrer_policy": { "n": 2949, "na": 4097, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 338, "absent": 2611 } }, "secure_by_default": { "n": 2517, "na": 4529, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 37, "not_all": 2480 } }, "ipv6": { "n": 7046, "na": 0, "states": { "aaaa": 2498, "none": 4548 } } } }, "games": { "graded": 71058, "checks": { "dmarc": { "n": 71058, "na": 0, "states": { "absent": 58218, "none": 5524, "quarantine": 4859, "reject": 2450, "invalid": 7 }, "rua_present": 6459 }, "spf": { "n": 71058, "na": 0, "states": { "absent": 46336, "hardfail": 5675, "softfail": 18050, "neutral": 731, "plus_all": 3, "invalid": 263 } }, "dkim": { "n": 10684, "na": 60374, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 6243, "none_observed": 4441 } }, "mx": { "n": 71058, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 27493, "absent": 43565 } }, "reverse_dns": { "n": 27494, "na": 43564, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 22470, "none": 5024 } }, "caa": { "n": 68714, "na": 2344, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1667, "absent": 67047 } }, "dnssec": { "n": 71058, "na": 0, "states": { "signed_valid": 4832, "signed_broken": 58, "unsigned": 66168 } }, "https": { "n": 71058, "na": 0, "states": { "https": 46508, "redirects": 0, "http_only": 24550 } }, "tls": { "n": 46508, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 45212, "tls12": 1296, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 46508, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 43624, "invalid": 2884 } }, "hsts": { "n": 46508, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 9106, "absent": 37402 } }, "csp": { "n": 34169, "na": 36889, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2244, "weak": 0, "absent": 31925 } }, "clickjacking": { "n": 34169, "na": 36889, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 5392, "absent": 28777 } }, "mime_sniffing": { "n": 34169, "na": 36889, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 6999, "absent": 27170 } }, "referrer_policy": { "n": 34169, "na": 36889, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4885, "absent": 29284 } }, "secure_by_default": { "n": 30879, "na": 40179, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 358, "not_all": 30521 } }, "ipv6": { "n": 71058, "na": 0, "states": { "aaaa": 24664, "none": 46394 } } } }, "garden": { "graded": 168870, "checks": { "dmarc": { "n": 168870, "na": 0, "states": { "absent": 160016, "none": 8131, "quarantine": 466, "reject": 257, "invalid": 0 }, "rua_present": 1539 }, "spf": { "n": 168870, "na": 0, "states": { "absent": 158325, "hardfail": 1683, "softfail": 8691, "neutral": 143, "plus_all": 1, "invalid": 27 } }, "dkim": { "n": 7773, "na": 161097, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 646, "none_observed": 7127 } }, "mx": { "n": 168870, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 11510, "absent": 157360 } }, "reverse_dns": { "n": 11506, "na": 157364, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 10194, "none": 1312 } }, "caa": { "n": 167188, "na": 1682, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 198, "absent": 166990 } }, "dnssec": { "n": 168870, "na": 0, "states": { "signed_valid": 39270, "signed_broken": 204, "unsigned": 129396 } }, "https": { "n": 168870, "na": 0, "states": { "https": 30790, "redirects": 0, "http_only": 138080 } }, "tls": { "n": 30790, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 30548, "tls12": 242, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 30790, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 26081, "invalid": 4709 } }, "hsts": { "n": 30790, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1415, "absent": 29375 } }, "csp": { "n": 16252, "na": 152618, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 424, "weak": 0, "absent": 15828 } }, "clickjacking": { "n": 16252, "na": 152618, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 748, "absent": 15504 } }, "mime_sniffing": { "n": 16252, "na": 152618, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 898, "absent": 15354 } }, "referrer_policy": { "n": 16252, "na": 152618, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 924, "absent": 15328 } }, "secure_by_default": { "n": 12635, "na": 156235, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 88, "not_all": 12547 } }, "ipv6": { "n": 168870, "na": 0, "states": { "aaaa": 18125, "none": 150745 } } } }, "gay": { "graded": 17485, "checks": { "dmarc": { "n": 17485, "na": 0, "states": { "absent": 14312, "none": 603, "quarantine": 1625, "reject": 944, "invalid": 1 }, "rua_present": 2017 }, "spf": { "n": 17485, "na": 0, "states": { "absent": 10115, "hardfail": 1505, "softfail": 5612, "neutral": 198, "plus_all": 0, "invalid": 55 } }, "dkim": { "n": 1718, "na": 15767, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1007, "none_observed": 711 } }, "mx": { "n": 17485, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7230, "absent": 10255 } }, "reverse_dns": { "n": 7231, "na": 10254, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6427, "none": 804 } }, "caa": { "n": 17387, "na": 98, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 304, "absent": 17083 } }, "dnssec": { "n": 17485, "na": 0, "states": { "signed_valid": 1989, "signed_broken": 17, "unsigned": 15479 } }, "https": { "n": 17485, "na": 0, "states": { "https": 8797, "redirects": 0, "http_only": 8688 } }, "tls": { "n": 8797, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8681, "tls12": 116, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8797, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8096, "invalid": 701 } }, "hsts": { "n": 8797, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1423, "absent": 7374 } }, "csp": { "n": 6018, "na": 11467, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 723, "weak": 0, "absent": 5295 } }, "clickjacking": { "n": 6018, "na": 11467, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 997, "absent": 5021 } }, "mime_sniffing": { "n": 6018, "na": 11467, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1235, "absent": 4783 } }, "referrer_policy": { "n": 6018, "na": 11467, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 954, "absent": 5064 } }, "secure_by_default": { "n": 4587, "na": 12898, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 80, "not_all": 4507 } }, "ipv6": { "n": 17485, "na": 0, "states": { "aaaa": 3875, "none": 13610 } } } }, "ge": { "graded": 44274, "checks": { "dmarc": { "n": 44274, "na": 0, "states": { "absent": 31868, "none": 9236, "quarantine": 2036, "reject": 1132, "invalid": 2 }, "rua_present": 3702 }, "spf": { "n": 44274, "na": 0, "states": { "absent": 17491, "hardfail": 4298, "softfail": 21735, "neutral": 404, "plus_all": 6, "invalid": 340 } }, "dkim": { "n": 18512, "na": 25762, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 13177, "none_observed": 5335 } }, "mx": { "n": 44274, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 30223, "absent": 14051 } }, "reverse_dns": { "n": 30213, "na": 14061, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 26122, "none": 4091 } }, "caa": { "n": 44167, "na": 107, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1798, "absent": 42369 } }, "dnssec": { "n": 44274, "na": 0, "states": { "signed_valid": 103, "signed_broken": 0, "unsigned": 44171 } }, "https": { "n": 44274, "na": 0, "states": { "https": 40503, "redirects": 0, "http_only": 3771 } }, "tls": { "n": 40503, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 37142, "tls12": 3361, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 40503, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 35639, "invalid": 4864 } }, "hsts": { "n": 40503, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 9492, "absent": 31011 } }, "csp": { "n": 23973, "na": 20301, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2134, "weak": 0, "absent": 21839 } }, "clickjacking": { "n": 23973, "na": 20301, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3543, "absent": 20430 } }, "mime_sniffing": { "n": 23973, "na": 20301, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4044, "absent": 19929 } }, "referrer_policy": { "n": 23973, "na": 20301, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2564, "absent": 21409 } }, "secure_by_default": { "n": 23679, "na": 20595, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 238, "not_all": 23441 } }, "ipv6": { "n": 44274, "na": 0, "states": { "aaaa": 10325, "none": 33949 } } } }, "gg": { "graded": 47267, "checks": { "dmarc": { "n": 47267, "na": 0, "states": { "absent": 35384, "none": 5846, "quarantine": 3888, "reject": 2145, "invalid": 4 }, "rua_present": 6298 }, "spf": { "n": 47267, "na": 0, "states": { "absent": 23845, "hardfail": 7456, "softfail": 15279, "neutral": 539, "plus_all": 5, "invalid": 143 } }, "dkim": { "n": 11926, "na": 35341, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 5580, "none_observed": 6346 } }, "mx": { "n": 47267, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 25859, "absent": 21408 } }, "reverse_dns": { "n": 25855, "na": 21412, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 21508, "none": 4347 } }, "caa": { "n": 47102, "na": 165, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1303, "absent": 45799 } }, "dnssec": { "n": 47267, "na": 0, "states": { "signed_valid": 2055, "signed_broken": 16, "unsigned": 45196 } }, "https": { "n": 47267, "na": 0, "states": { "https": 36254, "redirects": 0, "http_only": 11013 } }, "tls": { "n": 36254, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 35237, "tls12": 1017, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 36254, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 34475, "invalid": 1779 } }, "hsts": { "n": 36254, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 10626, "absent": 25628 } }, "csp": { "n": 22337, "na": 24930, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2375, "weak": 0, "absent": 19962 } }, "clickjacking": { "n": 22337, "na": 24930, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4761, "absent": 17576 } }, "mime_sniffing": { "n": 22337, "na": 24930, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 6182, "absent": 16155 } }, "referrer_policy": { "n": 22337, "na": 24930, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4781, "absent": 17556 } }, "secure_by_default": { "n": 21146, "na": 26121, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 990, "not_all": 20156 } }, "ipv6": { "n": 47267, "na": 0, "states": { "aaaa": 13899, "none": 33368 } } } }, "gifts": { "graded": 5121, "checks": { "dmarc": { "n": 5121, "na": 0, "states": { "absent": 4405, "none": 292, "quarantine": 193, "reject": 230, "invalid": 1 }, "rua_present": 349 }, "spf": { "n": 5121, "na": 0, "states": { "absent": 3705, "hardfail": 479, "softfail": 872, "neutral": 44, "plus_all": 0, "invalid": 21 } }, "dkim": { "n": 621, "na": 4500, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 253, "none_observed": 368 } }, "mx": { "n": 5121, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1645, "absent": 3476 } }, "reverse_dns": { "n": 1645, "na": 3476, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1318, "none": 327 } }, "caa": { "n": 5094, "na": 27, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 279, "absent": 4815 } }, "dnssec": { "n": 5121, "na": 0, "states": { "signed_valid": 238, "signed_broken": 1, "unsigned": 4882 } }, "https": { "n": 5121, "na": 0, "states": { "https": 3392, "redirects": 0, "http_only": 1729 } }, "tls": { "n": 3392, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3313, "tls12": 79, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3392, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3174, "invalid": 218 } }, "hsts": { "n": 3392, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 608, "absent": 2784 } }, "csp": { "n": 1338, "na": 3783, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 235, "weak": 0, "absent": 1103 } }, "clickjacking": { "n": 1338, "na": 3783, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 357, "absent": 981 } }, "mime_sniffing": { "n": 1338, "na": 3783, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 336, "absent": 1002 } }, "referrer_policy": { "n": 1338, "na": 3783, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 175, "absent": 1163 } }, "secure_by_default": { "n": 1065, "na": 4056, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 42, "not_all": 1023 } }, "ipv6": { "n": 5121, "na": 0, "states": { "aaaa": 1904, "none": 3217 } } } }, "global": { "graded": 68300, "checks": { "dmarc": { "n": 68300, "na": 0, "states": { "absent": 38930, "none": 14083, "quarantine": 10691, "reject": 4588, "invalid": 8 }, "rua_present": 15447 }, "spf": { "n": 68300, "na": 0, "states": { "absent": 33769, "hardfail": 10912, "softfail": 22500, "neutral": 732, "plus_all": 5, "invalid": 382 } }, "dkim": { "n": 17614, "na": 50686, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 6886, "none_observed": 10728 } }, "mx": { "n": 68300, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 38751, "absent": 29549 } }, "reverse_dns": { "n": 38741, "na": 29559, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 34533, "none": 4208 } }, "caa": { "n": 67961, "na": 339, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 702, "absent": 67259 } }, "dnssec": { "n": 68300, "na": 0, "states": { "signed_valid": 2796, "signed_broken": 44, "unsigned": 65460 } }, "https": { "n": 68300, "na": 0, "states": { "https": 29029, "redirects": 0, "http_only": 39271 } }, "tls": { "n": 29029, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 27349, "tls12": 1680, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 29029, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 26062, "invalid": 2967 } }, "hsts": { "n": 29029, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 7197, "absent": 21832 } }, "csp": { "n": 25344, "na": 42956, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2054, "weak": 0, "absent": 23290 } }, "clickjacking": { "n": 25344, "na": 42956, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3243, "absent": 22101 } }, "mime_sniffing": { "n": 25344, "na": 42956, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3830, "absent": 21514 } }, "referrer_policy": { "n": 25344, "na": 42956, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2109, "absent": 23235 } }, "secure_by_default": { "n": 15553, "na": 52747, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 278, "not_all": 15275 } }, "ipv6": { "n": 68300, "na": 0, "states": { "aaaa": 15468, "none": 52832 } } } }, "gmbh": { "graded": 32294, "checks": { "dmarc": { "n": 32294, "na": 0, "states": { "absent": 15421, "none": 8754, "quarantine": 1209, "reject": 6908, "invalid": 2 }, "rua_present": 1611 }, "spf": { "n": 32294, "na": 0, "states": { "absent": 11590, "hardfail": 5532, "softfail": 13697, "neutral": 784, "plus_all": 0, "invalid": 691 } }, "dkim": { "n": 5481, "na": 26813, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2389, "none_observed": 3092 } }, "mx": { "n": 32294, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 28856, "absent": 3438 } }, "reverse_dns": { "n": 28865, "na": 3429, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 27863, "none": 1002 } }, "caa": { "n": 32209, "na": 85, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 235, "absent": 31974 } }, "dnssec": { "n": 32294, "na": 0, "states": { "signed_valid": 983, "signed_broken": 6, "unsigned": 31305 } }, "https": { "n": 32294, "na": 0, "states": { "https": 13593, "redirects": 0, "http_only": 18701 } }, "tls": { "n": 13593, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 12649, "tls12": 944, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 13593, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9167, "invalid": 4426 } }, "hsts": { "n": 13593, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1915, "absent": 11678 } }, "csp": { "n": 13452, "na": 18842, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 294, "weak": 0, "absent": 13158 } }, "clickjacking": { "n": 13452, "na": 18842, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 944, "absent": 12508 } }, "mime_sniffing": { "n": 13452, "na": 18842, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 924, "absent": 12528 } }, "referrer_policy": { "n": 13452, "na": 18842, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 526, "absent": 12926 } }, "secure_by_default": { "n": 5759, "na": 26535, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 79, "not_all": 5680 } }, "ipv6": { "n": 32294, "na": 0, "states": { "aaaa": 16702, "none": 15592 } } } }, "gold": { "graded": 13702, "checks": { "dmarc": { "n": 13702, "na": 0, "states": { "absent": 11581, "none": 670, "quarantine": 1038, "reject": 413, "invalid": 0 }, "rua_present": 1388 }, "spf": { "n": 13702, "na": 0, "states": { "absent": 8212, "hardfail": 2880, "softfail": 2522, "neutral": 54, "plus_all": 1, "invalid": 33 } }, "dkim": { "n": 1210, "na": 12492, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 648, "none_observed": 562 } }, "mx": { "n": 13702, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5930, "absent": 7772 } }, "reverse_dns": { "n": 5929, "na": 7773, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3121, "none": 2808 } }, "caa": { "n": 13183, "na": 519, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 431, "absent": 12752 } }, "dnssec": { "n": 13702, "na": 0, "states": { "signed_valid": 581, "signed_broken": 3, "unsigned": 13118 } }, "https": { "n": 13702, "na": 0, "states": { "https": 8505, "redirects": 0, "http_only": 5197 } }, "tls": { "n": 8505, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8292, "tls12": 213, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8505, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7949, "invalid": 556 } }, "hsts": { "n": 8505, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1158, "absent": 7347 } }, "csp": { "n": 6154, "na": 7548, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 613, "weak": 0, "absent": 5541 } }, "clickjacking": { "n": 6154, "na": 7548, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 775, "absent": 5379 } }, "mime_sniffing": { "n": 6154, "na": 7548, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 874, "absent": 5280 } }, "referrer_policy": { "n": 6154, "na": 7548, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 675, "absent": 5479 } }, "secure_by_default": { "n": 5371, "na": 8331, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 134, "not_all": 5237 } }, "ipv6": { "n": 13702, "na": 0, "states": { "aaaa": 2231, "none": 11471 } } } }, "golf": { "graded": 17101, "checks": { "dmarc": { "n": 17101, "na": 0, "states": { "absent": 12052, "none": 1679, "quarantine": 2469, "reject": 899, "invalid": 2 }, "rua_present": 3288 }, "spf": { "n": 17101, "na": 0, "states": { "absent": 10395, "hardfail": 2141, "softfail": 4362, "neutral": 160, "plus_all": 0, "invalid": 43 } }, "dkim": { "n": 3175, "na": 13926, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1193, "none_observed": 1982 } }, "mx": { "n": 17101, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7743, "absent": 9358 } }, "reverse_dns": { "n": 7743, "na": 9358, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6591, "none": 1152 } }, "caa": { "n": 17019, "na": 82, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 699, "absent": 16320 } }, "dnssec": { "n": 17101, "na": 0, "states": { "signed_valid": 912, "signed_broken": 7, "unsigned": 16182 } }, "https": { "n": 17101, "na": 0, "states": { "https": 8848, "redirects": 0, "http_only": 8253 } }, "tls": { "n": 8848, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8622, "tls12": 226, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8848, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8075, "invalid": 773 } }, "hsts": { "n": 8848, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2854, "absent": 5994 } }, "csp": { "n": 5516, "na": 11585, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 615, "weak": 0, "absent": 4901 } }, "clickjacking": { "n": 5516, "na": 11585, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1145, "absent": 4371 } }, "mime_sniffing": { "n": 5516, "na": 11585, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1415, "absent": 4101 } }, "referrer_policy": { "n": 5516, "na": 11585, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 749, "absent": 4767 } }, "secure_by_default": { "n": 4635, "na": 12466, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 89, "not_all": 4546 } }, "ipv6": { "n": 17101, "na": 0, "states": { "aaaa": 2441, "none": 14660 } } } }, "gov": { "graded": 44017, "checks": { "dmarc": { "n": 44017, "na": 0, "states": { "absent": 34617, "none": 3320, "quarantine": 3055, "reject": 3019, "invalid": 6 }, "rua_present": 6986 }, "spf": { "n": 44017, "na": 0, "states": { "absent": 30965, "hardfail": 8459, "softfail": 4428, "neutral": 64, "plus_all": 1, "invalid": 100 } }, "dkim": { "n": 11240, "na": 32777, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 6909, "none_observed": 4331 } }, "mx": { "n": 44017, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12919, "absent": 31098 } }, "reverse_dns": { "n": 12914, "na": 31103, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12376, "none": 538 } }, "caa": { "n": 16013, "na": 28004, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 393, "absent": 15620 } }, "dnssec": { "n": 44017, "na": 0, "states": { "signed_valid": 2041, "signed_broken": 22, "unsigned": 41954 } }, "https": { "n": 44017, "na": 0, "states": { "https": 12663, "redirects": 0, "http_only": 31354 } }, "tls": { "n": 12663, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9481, "tls12": 3182, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 12663, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 12050, "invalid": 613 } }, "hsts": { "n": 12663, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2946, "absent": 9717 } }, "csp": { "n": 5880, "na": 38137, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 475, "weak": 0, "absent": 5405 } }, "clickjacking": { "n": 5880, "na": 38137, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2865, "absent": 3015 } }, "mime_sniffing": { "n": 5880, "na": 38137, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2788, "absent": 3092 } }, "referrer_policy": { "n": 5880, "na": 38137, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 597, "absent": 5283 } }, "secure_by_default": { "n": 5792, "na": 38225, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 66, "not_all": 5726 } }, "ipv6": { "n": 44017, "na": 0, "states": { "aaaa": 3003, "none": 41014 } } } }, "gq": { "graded": 7655, "checks": { "dmarc": { "n": 7655, "na": 0, "states": { "absent": 7477, "none": 84, "quarantine": 36, "reject": 58, "invalid": 0 }, "rua_present": 96 }, "spf": { "n": 7655, "na": 0, "states": { "absent": 7059, "hardfail": 143, "softfail": 419, "neutral": 20, "plus_all": 0, "invalid": 14 } }, "dkim": { "n": 166, "na": 7489, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 90, "none_observed": 76 } }, "mx": { "n": 7655, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 670, "absent": 6985 } }, "reverse_dns": { "n": 670, "na": 6985, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 515, "none": 155 } }, "caa": { "n": 7649, "na": 6, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 64, "absent": 7585 } }, "dnssec": { "n": 7655, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 7655 } }, "https": { "n": 7655, "na": 0, "states": { "https": 2607, "redirects": 0, "http_only": 5048 } }, "tls": { "n": 2607, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2309, "tls12": 298, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2607, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2143, "invalid": 464 } }, "hsts": { "n": 2607, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 145, "absent": 2462 } }, "csp": { "n": 558, "na": 7097, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 28, "weak": 0, "absent": 530 } }, "clickjacking": { "n": 558, "na": 7097, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 59, "absent": 499 } }, "mime_sniffing": { "n": 558, "na": 7097, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 80, "absent": 478 } }, "referrer_policy": { "n": 558, "na": 7097, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 57, "absent": 501 } }, "secure_by_default": { "n": 542, "na": 7113, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 13, "not_all": 529 } }, "ipv6": { "n": 7655, "na": 0, "states": { "aaaa": 1683, "none": 5972 } } } }, "gr": { "graded": 406813, "checks": { "dmarc": { "n": 406813, "na": 0, "states": { "absent": 225654, "none": 110309, "quarantine": 55974, "reject": 14842, "invalid": 34 }, "rua_present": 33211 }, "spf": { "n": 406813, "na": 0, "states": { "absent": 83214, "hardfail": 152167, "softfail": 159581, "neutral": 10790, "plus_all": 51, "invalid": 1010 } }, "dkim": { "n": 207870, "na": 198943, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 177093, "none_observed": 30777 } }, "mx": { "n": 406813, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 338381, "absent": 68432 } }, "reverse_dns": { "n": 339041, "na": 67772, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 304553, "none": 34488 } }, "caa": { "n": 405931, "na": 882, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 7523, "absent": 398408 } }, "dnssec": { "n": 406813, "na": 0, "states": { "signed_valid": 2355, "signed_broken": 16, "unsigned": 404442 } }, "https": { "n": 406813, "na": 0, "states": { "https": 383524, "redirects": 0, "http_only": 23289 } }, "tls": { "n": 383524, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 365213, "tls12": 18311, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 383524, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 358357, "invalid": 25167 } }, "hsts": { "n": 383524, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 51073, "absent": 332451 } }, "csp": { "n": 223581, "na": 183232, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 19043, "weak": 0, "absent": 204538 } }, "clickjacking": { "n": 223581, "na": 183232, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 22866, "absent": 200715 } }, "mime_sniffing": { "n": 223581, "na": 183232, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 40245, "absent": 183336 } }, "referrer_policy": { "n": 223581, "na": 183232, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 15297, "absent": 208284 } }, "secure_by_default": { "n": 219349, "na": 187464, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1483, "not_all": 217866 } }, "ipv6": { "n": 406813, "na": 0, "states": { "aaaa": 124590, "none": 282223 } } } }, "graphics": { "graded": 5009, "checks": { "dmarc": { "n": 5009, "na": 0, "states": { "absent": 3845, "none": 616, "quarantine": 202, "reject": 346, "invalid": 0 }, "rua_present": 359 }, "spf": { "n": 5009, "na": 0, "states": { "absent": 2866, "hardfail": 623, "softfail": 1388, "neutral": 98, "plus_all": 0, "invalid": 34 } }, "dkim": { "n": 1346, "na": 3663, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 525, "none_observed": 821 } }, "mx": { "n": 5009, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3003, "absent": 2006 } }, "reverse_dns": { "n": 3002, "na": 2007, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2635, "none": 367 } }, "caa": { "n": 4980, "na": 29, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 76, "absent": 4904 } }, "dnssec": { "n": 5009, "na": 0, "states": { "signed_valid": 441, "signed_broken": 2, "unsigned": 4566 } }, "https": { "n": 5009, "na": 0, "states": { "https": 2831, "redirects": 0, "http_only": 2178 } }, "tls": { "n": 2831, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2612, "tls12": 219, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2831, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2512, "invalid": 319 } }, "hsts": { "n": 2831, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 642, "absent": 2189 } }, "csp": { "n": 2016, "na": 2993, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 134, "weak": 0, "absent": 1882 } }, "clickjacking": { "n": 2016, "na": 2993, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 306, "absent": 1710 } }, "mime_sniffing": { "n": 2016, "na": 2993, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 419, "absent": 1597 } }, "referrer_policy": { "n": 2016, "na": 2993, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 142, "absent": 1874 } }, "secure_by_default": { "n": 1641, "na": 3368, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 13, "not_all": 1628 } }, "ipv6": { "n": 5009, "na": 0, "states": { "aaaa": 922, "none": 4087 } } } }, "green": { "graded": 7792, "checks": { "dmarc": { "n": 7792, "na": 0, "states": { "absent": 5864, "none": 825, "quarantine": 569, "reject": 533, "invalid": 1 }, "rua_present": 929 }, "spf": { "n": 7792, "na": 0, "states": { "absent": 4404, "hardfail": 1309, "softfail": 1927, "neutral": 110, "plus_all": 2, "invalid": 40 } }, "dkim": { "n": 1469, "na": 6323, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 641, "none_observed": 828 } }, "mx": { "n": 7792, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3971, "absent": 3821 } }, "reverse_dns": { "n": 3974, "na": 3818, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3324, "none": 650 } }, "caa": { "n": 7749, "na": 43, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 275, "absent": 7474 } }, "dnssec": { "n": 7792, "na": 0, "states": { "signed_valid": 657, "signed_broken": 5, "unsigned": 7130 } }, "https": { "n": 7792, "na": 0, "states": { "https": 3835, "redirects": 0, "http_only": 3957 } }, "tls": { "n": 3835, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3666, "tls12": 169, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3835, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3373, "invalid": 462 } }, "hsts": { "n": 3835, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 880, "absent": 2955 } }, "csp": { "n": 2570, "na": 5222, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 343, "weak": 0, "absent": 2227 } }, "clickjacking": { "n": 2570, "na": 5222, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 445, "absent": 2125 } }, "mime_sniffing": { "n": 2570, "na": 5222, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 526, "absent": 2044 } }, "referrer_policy": { "n": 2570, "na": 5222, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 299, "absent": 2271 } }, "secure_by_default": { "n": 1960, "na": 5832, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 48, "not_all": 1912 } }, "ipv6": { "n": 7792, "na": 0, "states": { "aaaa": 1623, "none": 6169 } } } }, "group": { "graded": 116046, "checks": { "dmarc": { "n": 116046, "na": 0, "states": { "absent": 90561, "none": 11472, "quarantine": 7920, "reject": 6080, "invalid": 13 }, "rua_present": 12351 }, "spf": { "n": 116046, "na": 0, "states": { "absent": 50789, "hardfail": 31529, "softfail": 30220, "neutral": 1486, "plus_all": 6, "invalid": 2016 } }, "dkim": { "n": 27728, "na": 88318, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 13576, "none_observed": 14152 } }, "mx": { "n": 116046, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 72730, "absent": 43316 } }, "reverse_dns": { "n": 72691, "na": 43355, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 48518, "none": 24173 } }, "caa": { "n": 112727, "na": 3319, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1377, "absent": 111350 } }, "dnssec": { "n": 116046, "na": 0, "states": { "signed_valid": 8570, "signed_broken": 107, "unsigned": 107369 } }, "https": { "n": 116046, "na": 0, "states": { "https": 64321, "redirects": 0, "http_only": 51725 } }, "tls": { "n": 64321, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 61354, "tls12": 2967, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 64321, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 57344, "invalid": 6977 } }, "hsts": { "n": 64321, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 12847, "absent": 51474 } }, "csp": { "n": 48936, "na": 67110, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 3679, "weak": 0, "absent": 45257 } }, "clickjacking": { "n": 48936, "na": 67110, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 6757, "absent": 42179 } }, "mime_sniffing": { "n": 48936, "na": 67110, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 6908, "absent": 42028 } }, "referrer_policy": { "n": 48936, "na": 67110, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3085, "absent": 45851 } }, "secure_by_default": { "n": 42084, "na": 73962, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 444, "not_all": 41640 } }, "ipv6": { "n": 116046, "na": 0, "states": { "aaaa": 15504, "none": 100542 } } } }, "gs": { "graded": 5486, "checks": { "dmarc": { "n": 5486, "na": 0, "states": { "absent": 4552, "none": 267, "quarantine": 424, "reject": 242, "invalid": 1 }, "rua_present": 657 }, "spf": { "n": 5486, "na": 0, "states": { "absent": 3934, "hardfail": 781, "softfail": 680, "neutral": 64, "plus_all": 0, "invalid": 27 } }, "dkim": { "n": 956, "na": 4530, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 371, "none_observed": 585 } }, "mx": { "n": 5486, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1904, "absent": 3582 } }, "reverse_dns": { "n": 1910, "na": 3576, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1367, "none": 543 } }, "caa": { "n": 5440, "na": 46, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 113, "absent": 5327 } }, "dnssec": { "n": 5486, "na": 0, "states": { "signed_valid": 94, "signed_broken": 6, "unsigned": 5386 } }, "https": { "n": 5486, "na": 0, "states": { "https": 3868, "redirects": 0, "http_only": 1618 } }, "tls": { "n": 3868, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3395, "tls12": 473, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3868, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3526, "invalid": 342 } }, "hsts": { "n": 3868, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 752, "absent": 3116 } }, "csp": { "n": 1945, "na": 3541, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 78, "weak": 0, "absent": 1867 } }, "clickjacking": { "n": 1945, "na": 3541, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 213, "absent": 1732 } }, "mime_sniffing": { "n": 1945, "na": 3541, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 275, "absent": 1670 } }, "referrer_policy": { "n": 1945, "na": 3541, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 194, "absent": 1751 } }, "secure_by_default": { "n": 1733, "na": 3753, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 9, "not_all": 1724 } }, "ipv6": { "n": 5486, "na": 0, "states": { "aaaa": 652, "none": 4834 } } } }, "gt": { "graded": 17094, "checks": { "dmarc": { "n": 17094, "na": 0, "states": { "absent": 9911, "none": 4927, "quarantine": 1110, "reject": 1141, "invalid": 5 }, "rua_present": 2395 }, "spf": { "n": 17094, "na": 0, "states": { "absent": 4433, "hardfail": 3370, "softfail": 8969, "neutral": 245, "plus_all": 0, "invalid": 77 } }, "dkim": { "n": 11052, "na": 6042, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 6794, "none_observed": 4258 } }, "mx": { "n": 17094, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 14014, "absent": 3080 } }, "reverse_dns": { "n": 14006, "na": 3088, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 11238, "none": 2768 } }, "caa": { "n": 16986, "na": 108, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 376, "absent": 16610 } }, "dnssec": { "n": 17094, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 17094 } }, "https": { "n": 17094, "na": 0, "states": { "https": 15107, "redirects": 0, "http_only": 1987 } }, "tls": { "n": 15107, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 14265, "tls12": 842, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 15107, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 14436, "invalid": 671 } }, "hsts": { "n": 15107, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2470, "absent": 12637 } }, "csp": { "n": 9601, "na": 7493, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1558, "weak": 0, "absent": 8043 } }, "clickjacking": { "n": 9601, "na": 7493, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1315, "absent": 8286 } }, "mime_sniffing": { "n": 9601, "na": 7493, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1617, "absent": 7984 } }, "referrer_policy": { "n": 9601, "na": 7493, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 753, "absent": 8848 } }, "secure_by_default": { "n": 9489, "na": 7605, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 93, "not_all": 9396 } }, "ipv6": { "n": 17094, "na": 0, "states": { "aaaa": 4350, "none": 12744 } } } }, "guide": { "graded": 18450, "checks": { "dmarc": { "n": 18450, "na": 0, "states": { "absent": 14505, "none": 1884, "quarantine": 788, "reject": 1272, "invalid": 1 }, "rua_present": 1493 }, "spf": { "n": 18450, "na": 0, "states": { "absent": 11071, "hardfail": 2237, "softfail": 4636, "neutral": 400, "plus_all": 1, "invalid": 105 } }, "dkim": { "n": 2606, "na": 15844, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1199, "none_observed": 1407 } }, "mx": { "n": 18450, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8611, "absent": 9839 } }, "reverse_dns": { "n": 8621, "na": 9829, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7199, "none": 1422 } }, "caa": { "n": 18335, "na": 115, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 864, "absent": 17471 } }, "dnssec": { "n": 18450, "na": 0, "states": { "signed_valid": 1291, "signed_broken": 9, "unsigned": 17150 } }, "https": { "n": 18450, "na": 0, "states": { "https": 10661, "redirects": 0, "http_only": 7789 } }, "tls": { "n": 10661, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 10184, "tls12": 477, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10661, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9730, "invalid": 931 } }, "hsts": { "n": 10661, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2870, "absent": 7791 } }, "csp": { "n": 7295, "na": 11155, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 881, "weak": 0, "absent": 6414 } }, "clickjacking": { "n": 7295, "na": 11155, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1362, "absent": 5933 } }, "mime_sniffing": { "n": 7295, "na": 11155, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1623, "absent": 5672 } }, "referrer_policy": { "n": 7295, "na": 11155, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 965, "absent": 6330 } }, "secure_by_default": { "n": 6056, "na": 12394, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 122, "not_all": 5934 } }, "ipv6": { "n": 18450, "na": 0, "states": { "aaaa": 3774, "none": 14676 } } } }, "guru": { "graded": 51521, "checks": { "dmarc": { "n": 51521, "na": 0, "states": { "absent": 40910, "none": 5411, "quarantine": 3561, "reject": 1638, "invalid": 1 }, "rua_present": 6600 }, "spf": { "n": 51521, "na": 0, "states": { "absent": 34479, "hardfail": 7279, "softfail": 8975, "neutral": 432, "plus_all": 2, "invalid": 354 } }, "dkim": { "n": 9675, "na": 41846, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2906, "none_observed": 6769 } }, "mx": { "n": 51521, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 23074, "absent": 28447 } }, "reverse_dns": { "n": 23077, "na": 28444, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 16959, "none": 6118 } }, "caa": { "n": 51061, "na": 460, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1060, "absent": 50001 } }, "dnssec": { "n": 51521, "na": 0, "states": { "signed_valid": 2687, "signed_broken": 30, "unsigned": 48804 } }, "https": { "n": 51521, "na": 0, "states": { "https": 29659, "redirects": 0, "http_only": 21862 } }, "tls": { "n": 29659, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 28444, "tls12": 1215, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 29659, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 27059, "invalid": 2600 } }, "hsts": { "n": 29659, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3971, "absent": 25688 } }, "csp": { "n": 17059, "na": 34462, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1707, "weak": 0, "absent": 15352 } }, "clickjacking": { "n": 17059, "na": 34462, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2483, "absent": 14576 } }, "mime_sniffing": { "n": 17059, "na": 34462, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2710, "absent": 14349 } }, "referrer_policy": { "n": 17059, "na": 34462, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1948, "absent": 15111 } }, "secure_by_default": { "n": 13852, "na": 37669, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 145, "not_all": 13707 } }, "ipv6": { "n": 51521, "na": 0, "states": { "aaaa": 12858, "none": 38663 } } } }, "hair": { "graded": 50289, "checks": { "dmarc": { "n": 50289, "na": 0, "states": { "absent": 48410, "none": 980, "quarantine": 595, "reject": 304, "invalid": 0 }, "rua_present": 922 }, "spf": { "n": 50289, "na": 0, "states": { "absent": 44945, "hardfail": 1074, "softfail": 4195, "neutral": 34, "plus_all": 3, "invalid": 38 } }, "dkim": { "n": 2761, "na": 47528, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 691, "none_observed": 2070 } }, "mx": { "n": 50289, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6573, "absent": 43716 } }, "reverse_dns": { "n": 6574, "na": 43715, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5401, "none": 1173 } }, "caa": { "n": 49586, "na": 703, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 186, "absent": 49400 } }, "dnssec": { "n": 50289, "na": 0, "states": { "signed_valid": 3828, "signed_broken": 15, "unsigned": 46446 } }, "https": { "n": 50289, "na": 0, "states": { "https": 16871, "redirects": 0, "http_only": 33418 } }, "tls": { "n": 16871, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 15476, "tls12": 1395, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 16871, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 15561, "invalid": 1310 } }, "hsts": { "n": 16871, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2291, "absent": 14580 } }, "csp": { "n": 7560, "na": 42729, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1315, "weak": 0, "absent": 6245 } }, "clickjacking": { "n": 7560, "na": 42729, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1811, "absent": 5749 } }, "mime_sniffing": { "n": 7560, "na": 42729, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1800, "absent": 5760 } }, "referrer_policy": { "n": 7560, "na": 42729, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1499, "absent": 6061 } }, "secure_by_default": { "n": 5666, "na": 44623, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 80, "not_all": 5586 } }, "ipv6": { "n": 50289, "na": 0, "states": { "aaaa": 10520, "none": 39769 } } } }, "hamburg": { "graded": 14564, "checks": { "dmarc": { "n": 14564, "na": 0, "states": { "absent": 7356, "none": 3582, "quarantine": 296, "reject": 3329, "invalid": 1 }, "rua_present": 501 }, "spf": { "n": 14564, "na": 0, "states": { "absent": 5684, "hardfail": 2298, "softfail": 6032, "neutral": 332, "plus_all": 0, "invalid": 218 } }, "dkim": { "n": 1096, "na": 13468, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 545, "none_observed": 551 } }, "mx": { "n": 14564, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 13024, "absent": 1540 } }, "reverse_dns": { "n": 13031, "na": 1533, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 11590, "none": 1441 } }, "caa": { "n": 14506, "na": 58, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 164, "absent": 14342 } }, "dnssec": { "n": 14564, "na": 0, "states": { "signed_valid": 273, "signed_broken": 2, "unsigned": 14289 } }, "https": { "n": 14564, "na": 0, "states": { "https": 6486, "redirects": 0, "http_only": 8078 } }, "tls": { "n": 6486, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6086, "tls12": 400, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6486, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4756, "invalid": 1730 } }, "hsts": { "n": 6486, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 719, "absent": 5767 } }, "csp": { "n": 5010, "na": 9554, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 106, "weak": 0, "absent": 4904 } }, "clickjacking": { "n": 5010, "na": 9554, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 260, "absent": 4750 } }, "mime_sniffing": { "n": 5010, "na": 9554, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 304, "absent": 4706 } }, "referrer_policy": { "n": 5010, "na": 9554, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 163, "absent": 4847 } }, "secure_by_default": { "n": 2134, "na": 12430, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 31, "not_all": 2103 } }, "ipv6": { "n": 14564, "na": 0, "states": { "aaaa": 6934, "none": 7630 } } } }, "haus": { "graded": 8017, "checks": { "dmarc": { "n": 8017, "na": 0, "states": { "absent": 5591, "none": 1163, "quarantine": 522, "reject": 740, "invalid": 1 }, "rua_present": 735 }, "spf": { "n": 8017, "na": 0, "states": { "absent": 4092, "hardfail": 880, "softfail": 2837, "neutral": 151, "plus_all": 1, "invalid": 56 } }, "dkim": { "n": 1714, "na": 6303, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 821, "none_observed": 893 } }, "mx": { "n": 8017, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5032, "absent": 2985 } }, "reverse_dns": { "n": 5031, "na": 2986, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4644, "none": 387 } }, "caa": { "n": 7987, "na": 30, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 259, "absent": 7728 } }, "dnssec": { "n": 8017, "na": 0, "states": { "signed_valid": 809, "signed_broken": 2, "unsigned": 7206 } }, "https": { "n": 8017, "na": 0, "states": { "https": 3945, "redirects": 0, "http_only": 4072 } }, "tls": { "n": 3945, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3771, "tls12": 174, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3945, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3401, "invalid": 544 } }, "hsts": { "n": 3945, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1104, "absent": 2841 } }, "csp": { "n": 2790, "na": 5227, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 226, "weak": 0, "absent": 2564 } }, "clickjacking": { "n": 2790, "na": 5227, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 543, "absent": 2247 } }, "mime_sniffing": { "n": 2790, "na": 5227, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 658, "absent": 2132 } }, "referrer_policy": { "n": 2790, "na": 5227, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 338, "absent": 2452 } }, "secure_by_default": { "n": 1961, "na": 6056, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 39, "not_all": 1922 } }, "ipv6": { "n": 8017, "na": 0, "states": { "aaaa": 2086, "none": 5931 } } } }, "health": { "graded": 59301, "checks": { "dmarc": { "n": 59301, "na": 0, "states": { "absent": 40763, "none": 5081, "quarantine": 9459, "reject": 3992, "invalid": 6 }, "rua_present": 13797 }, "spf": { "n": 59301, "na": 0, "states": { "absent": 30527, "hardfail": 10690, "softfail": 17617, "neutral": 348, "plus_all": 0, "invalid": 119 } }, "dkim": { "n": 13365, "na": 45936, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 5836, "none_observed": 7529 } }, "mx": { "n": 59301, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 29827, "absent": 29474 } }, "reverse_dns": { "n": 29830, "na": 29471, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 24032, "none": 5798 } }, "caa": { "n": 59070, "na": 231, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 581, "absent": 58489 } }, "dnssec": { "n": 59301, "na": 0, "states": { "signed_valid": 3002, "signed_broken": 15, "unsigned": 56284 } }, "https": { "n": 59301, "na": 0, "states": { "https": 28462, "redirects": 0, "http_only": 30839 } }, "tls": { "n": 28462, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 27669, "tls12": 793, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 28462, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 26817, "invalid": 1645 } }, "hsts": { "n": 28462, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 9070, "absent": 19392 } }, "csp": { "n": 18815, "na": 40486, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1754, "weak": 0, "absent": 17061 } }, "clickjacking": { "n": 18815, "na": 40486, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3924, "absent": 14891 } }, "mime_sniffing": { "n": 18815, "na": 40486, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4945, "absent": 13870 } }, "referrer_policy": { "n": 18815, "na": 40486, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2755, "absent": 16060 } }, "secure_by_default": { "n": 16263, "na": 43038, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 393, "not_all": 15870 } }, "ipv6": { "n": 59301, "na": 0, "states": { "aaaa": 5336, "none": 53965 } } } }, "healthcare": { "graded": 7951, "checks": { "dmarc": { "n": 7951, "na": 0, "states": { "absent": 5922, "none": 450, "quarantine": 511, "reject": 1065, "invalid": 3 }, "rua_present": 1349 }, "spf": { "n": 7951, "na": 0, "states": { "absent": 5036, "hardfail": 1390, "softfail": 1371, "neutral": 127, "plus_all": 0, "invalid": 27 } }, "dkim": { "n": 1609, "na": 6342, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 474, "none_observed": 1135 } }, "mx": { "n": 7951, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3509, "absent": 4442 } }, "reverse_dns": { "n": 3506, "na": 4445, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3010, "none": 496 } }, "caa": { "n": 7929, "na": 22, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 123, "absent": 7806 } }, "dnssec": { "n": 7951, "na": 0, "states": { "signed_valid": 526, "signed_broken": 2, "unsigned": 7423 } }, "https": { "n": 7951, "na": 0, "states": { "https": 2912, "redirects": 0, "http_only": 5039 } }, "tls": { "n": 2912, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2727, "tls12": 185, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2912, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2502, "invalid": 410 } }, "hsts": { "n": 2912, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 701, "absent": 2211 } }, "csp": { "n": 1917, "na": 6034, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 221, "weak": 0, "absent": 1696 } }, "clickjacking": { "n": 1917, "na": 6034, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 407, "absent": 1510 } }, "mime_sniffing": { "n": 1917, "na": 6034, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 435, "absent": 1482 } }, "referrer_policy": { "n": 1917, "na": 6034, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 174, "absent": 1743 } }, "secure_by_default": { "n": 1252, "na": 6699, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 38, "not_all": 1214 } }, "ipv6": { "n": 7951, "na": 0, "states": { "aaaa": 798, "none": 7153 } } } }, "help": { "graded": 185437, "checks": { "dmarc": { "n": 185437, "na": 0, "states": { "absent": 110550, "none": 64768, "quarantine": 6217, "reject": 3902, "invalid": 0 }, "rua_present": 65138 }, "spf": { "n": 185437, "na": 0, "states": { "absent": 97196, "hardfail": 62393, "softfail": 25202, "neutral": 434, "plus_all": 6, "invalid": 206 } }, "dkim": { "n": 72051, "na": 113386, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 65134, "none_observed": 6917 } }, "mx": { "n": 185437, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 89844, "absent": 95593 } }, "reverse_dns": { "n": 89840, "na": 95597, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 74558, "none": 15282 } }, "caa": { "n": 182609, "na": 2828, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 970, "absent": 181639 } }, "dnssec": { "n": 185437, "na": 0, "states": { "signed_valid": 2474, "signed_broken": 139, "unsigned": 182824 } }, "https": { "n": 185437, "na": 0, "states": { "https": 86507, "redirects": 0, "http_only": 98930 } }, "tls": { "n": 86507, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 85470, "tls12": 1037, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 86507, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 80006, "invalid": 6501 } }, "hsts": { "n": 86507, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 14799, "absent": 71708 } }, "csp": { "n": 35730, "na": 149707, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2733, "weak": 0, "absent": 32997 } }, "clickjacking": { "n": 35730, "na": 149707, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3654, "absent": 32076 } }, "mime_sniffing": { "n": 35730, "na": 149707, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4320, "absent": 31410 } }, "referrer_policy": { "n": 35730, "na": 149707, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3019, "absent": 32711 } }, "secure_by_default": { "n": 29740, "na": 155697, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 288, "not_all": 29452 } }, "ipv6": { "n": 185437, "na": 0, "states": { "aaaa": 38852, "none": 146585 } } } }, "hk": { "graded": 100651, "checks": { "dmarc": { "n": 100651, "na": 0, "states": { "absent": 73306, "none": 17882, "quarantine": 4051, "reject": 5397, "invalid": 15 }, "rua_present": 14729 }, "spf": { "n": 100651, "na": 0, "states": { "absent": 42065, "hardfail": 20522, "softfail": 34478, "neutral": 1978, "plus_all": 47, "invalid": 1561 } }, "dkim": { "n": 36379, "na": 64272, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 19848, "none_observed": 16531 } }, "mx": { "n": 100651, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 70828, "absent": 29823 } }, "reverse_dns": { "n": 70747, "na": 29904, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 56855, "none": 13892 } }, "caa": { "n": 100082, "na": 569, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1773, "absent": 98309 } }, "dnssec": { "n": 100651, "na": 0, "states": { "signed_valid": 4790, "signed_broken": 13, "unsigned": 95848 } }, "https": { "n": 100651, "na": 0, "states": { "https": 79692, "redirects": 0, "http_only": 20959 } }, "tls": { "n": 79692, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 68260, "tls12": 11432, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 79692, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 67819, "invalid": 11873 } }, "hsts": { "n": 79692, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 19613, "absent": 60079 } }, "csp": { "n": 43037, "na": 57614, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 4186, "weak": 0, "absent": 38851 } }, "clickjacking": { "n": 43037, "na": 57614, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 5952, "absent": 37085 } }, "mime_sniffing": { "n": 43037, "na": 57614, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 6920, "absent": 36117 } }, "referrer_policy": { "n": 43037, "na": 57614, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2613, "absent": 40424 } }, "secure_by_default": { "n": 40005, "na": 60646, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 354, "not_all": 39651 } }, "ipv6": { "n": 100651, "na": 0, "states": { "aaaa": 17915, "none": 82736 } } } }, "holdings": { "graded": 8169, "checks": { "dmarc": { "n": 8169, "na": 0, "states": { "absent": 6200, "none": 586, "quarantine": 704, "reject": 677, "invalid": 2 }, "rua_present": 1079 }, "spf": { "n": 8169, "na": 0, "states": { "absent": 4317, "hardfail": 1331, "softfail": 2355, "neutral": 124, "plus_all": 0, "invalid": 42 } }, "dkim": { "n": 2557, "na": 5612, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 961, "none_observed": 1596 } }, "mx": { "n": 8169, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4812, "absent": 3357 } }, "reverse_dns": { "n": 4811, "na": 3358, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4341, "none": 470 } }, "caa": { "n": 8132, "na": 37, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 100, "absent": 8032 } }, "dnssec": { "n": 8169, "na": 0, "states": { "signed_valid": 737, "signed_broken": 6, "unsigned": 7426 } }, "https": { "n": 8169, "na": 0, "states": { "https": 3054, "redirects": 0, "http_only": 5115 } }, "tls": { "n": 3054, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2932, "tls12": 122, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3054, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2640, "invalid": 414 } }, "hsts": { "n": 3054, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 843, "absent": 2211 } }, "csp": { "n": 2372, "na": 5797, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 167, "weak": 0, "absent": 2205 } }, "clickjacking": { "n": 2372, "na": 5797, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 556, "absent": 1816 } }, "mime_sniffing": { "n": 2372, "na": 5797, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 622, "absent": 1750 } }, "referrer_policy": { "n": 2372, "na": 5797, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 239, "absent": 2133 } }, "secure_by_default": { "n": 1693, "na": 6476, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 23, "not_all": 1670 } }, "ipv6": { "n": 8169, "na": 0, "states": { "aaaa": 987, "none": 7182 } } } }, "homes": { "graded": 106329, "checks": { "dmarc": { "n": 106329, "na": 0, "states": { "absent": 90815, "none": 6269, "quarantine": 7091, "reject": 2150, "invalid": 4 }, "rua_present": 11521 }, "spf": { "n": 106329, "na": 0, "states": { "absent": 55984, "hardfail": 8856, "softfail": 39842, "neutral": 88, "plus_all": 0, "invalid": 1559 } }, "dkim": { "n": 10636, "na": 95693, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4866, "none_observed": 5770 } }, "mx": { "n": 106329, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 53016, "absent": 53313 } }, "reverse_dns": { "n": 53002, "na": 53327, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 44548, "none": 8454 } }, "caa": { "n": 105406, "na": 923, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 895, "absent": 104511 } }, "dnssec": { "n": 106329, "na": 0, "states": { "signed_valid": 5928, "signed_broken": 42, "unsigned": 100359 } }, "https": { "n": 106329, "na": 0, "states": { "https": 50271, "redirects": 0, "http_only": 56058 } }, "tls": { "n": 50271, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 45833, "tls12": 4438, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 50271, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 46386, "invalid": 3885 } }, "hsts": { "n": 50271, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 9824, "absent": 40447 } }, "csp": { "n": 31472, "na": 74857, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2041, "weak": 0, "absent": 29431 } }, "clickjacking": { "n": 31472, "na": 74857, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4260, "absent": 27212 } }, "mime_sniffing": { "n": 31472, "na": 74857, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4858, "absent": 26614 } }, "referrer_policy": { "n": 31472, "na": 74857, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3358, "absent": 28114 } }, "secure_by_default": { "n": 27905, "na": 78424, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 529, "not_all": 27376 } }, "ipv6": { "n": 106329, "na": 0, "states": { "aaaa": 22388, "none": 83941 } } } }, "host": { "graded": 21047, "checks": { "dmarc": { "n": 21047, "na": 0, "states": { "absent": 16342, "none": 2496, "quarantine": 1196, "reject": 1012, "invalid": 1 }, "rua_present": 2102 }, "spf": { "n": 21047, "na": 0, "states": { "absent": 12479, "hardfail": 1942, "softfail": 6163, "neutral": 234, "plus_all": 4, "invalid": 225 } }, "dkim": { "n": 3588, "na": 17459, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2758, "none_observed": 830 } }, "mx": { "n": 21047, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9031, "absent": 12016 } }, "reverse_dns": { "n": 9022, "na": 12025, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6332, "none": 2690 } }, "caa": { "n": 20730, "na": 317, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 428, "absent": 20302 } }, "dnssec": { "n": 21047, "na": 0, "states": { "signed_valid": 935, "signed_broken": 21, "unsigned": 20091 } }, "https": { "n": 21047, "na": 0, "states": { "https": 11086, "redirects": 0, "http_only": 9961 } }, "tls": { "n": 11086, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 10609, "tls12": 477, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 11086, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9296, "invalid": 1790 } }, "hsts": { "n": 11086, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1853, "absent": 9233 } }, "csp": { "n": 7939, "na": 13108, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1212, "weak": 0, "absent": 6727 } }, "clickjacking": { "n": 7939, "na": 13108, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1281, "absent": 6658 } }, "mime_sniffing": { "n": 7939, "na": 13108, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1437, "absent": 6502 } }, "referrer_policy": { "n": 7939, "na": 13108, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 835, "absent": 7104 } }, "secure_by_default": { "n": 6698, "na": 14349, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 107, "not_all": 6591 } }, "ipv6": { "n": 21047, "na": 0, "states": { "aaaa": 4771, "none": 16276 } } } }, "house": { "graded": 23394, "checks": { "dmarc": { "n": 23394, "na": 0, "states": { "absent": 18452, "none": 2144, "quarantine": 1747, "reject": 1050, "invalid": 1 }, "rua_present": 2532 }, "spf": { "n": 23394, "na": 0, "states": { "absent": 12656, "hardfail": 4041, "softfail": 6117, "neutral": 382, "plus_all": 4, "invalid": 194 } }, "dkim": { "n": 5586, "na": 17808, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2293, "none_observed": 3293 } }, "mx": { "n": 23394, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12761, "absent": 10633 } }, "reverse_dns": { "n": 12758, "na": 10636, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 11050, "none": 1708 } }, "caa": { "n": 23301, "na": 93, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 760, "absent": 22541 } }, "dnssec": { "n": 23394, "na": 0, "states": { "signed_valid": 2000, "signed_broken": 12, "unsigned": 21382 } }, "https": { "n": 23394, "na": 0, "states": { "https": 12518, "redirects": 0, "http_only": 10876 } }, "tls": { "n": 12518, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 12060, "tls12": 458, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 12518, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 11393, "invalid": 1125 } }, "hsts": { "n": 12518, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2887, "absent": 9631 } }, "csp": { "n": 8132, "na": 15262, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 651, "weak": 0, "absent": 7481 } }, "clickjacking": { "n": 8132, "na": 15262, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1417, "absent": 6715 } }, "mime_sniffing": { "n": 8132, "na": 15262, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1654, "absent": 6478 } }, "referrer_policy": { "n": 8132, "na": 15262, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 825, "absent": 7307 } }, "secure_by_default": { "n": 6952, "na": 16442, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 169, "not_all": 6783 } }, "ipv6": { "n": 23394, "na": 0, "states": { "aaaa": 3589, "none": 19805 } } } }, "hr": { "graded": 110818, "checks": { "dmarc": { "n": 110818, "na": 0, "states": { "absent": 50145, "none": 48560, "quarantine": 7878, "reject": 4221, "invalid": 14 }, "rua_present": 9875 }, "spf": { "n": 110818, "na": 0, "states": { "absent": 15216, "hardfail": 19939, "softfail": 73373, "neutral": 1967, "plus_all": 13, "invalid": 310 } }, "dkim": { "n": 84022, "na": 26796, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 71711, "none_observed": 12311 } }, "mx": { "n": 110818, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 100235, "absent": 10583 } }, "reverse_dns": { "n": 100204, "na": 10614, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 94233, "none": 5971 } }, "caa": { "n": 110616, "na": 202, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2243, "absent": 108373 } }, "dnssec": { "n": 110818, "na": 0, "states": { "signed_valid": 539, "signed_broken": 2, "unsigned": 110277 } }, "https": { "n": 110818, "na": 0, "states": { "https": 104530, "redirects": 0, "http_only": 6288 } }, "tls": { "n": 104530, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 97755, "tls12": 6775, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 104530, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 100808, "invalid": 3722 } }, "hsts": { "n": 104530, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 12150, "absent": 92380 } }, "csp": { "n": 67425, "na": 43393, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 4029, "weak": 0, "absent": 63396 } }, "clickjacking": { "n": 67425, "na": 43393, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 6800, "absent": 60625 } }, "mime_sniffing": { "n": 67425, "na": 43393, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 10677, "absent": 56748 } }, "referrer_policy": { "n": 67425, "na": 43393, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4361, "absent": 63064 } }, "secure_by_default": { "n": 66593, "na": 44225, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 384, "not_all": 66209 } }, "ipv6": { "n": 110818, "na": 0, "states": { "aaaa": 15586, "none": 95232 } } } }, "hu": { "graded": 667687, "checks": { "dmarc": { "n": 667687, "na": 0, "states": { "absent": 436264, "none": 190630, "quarantine": 28983, "reject": 11757, "invalid": 53 }, "rua_present": 41400 }, "spf": { "n": 667687, "na": 0, "states": { "absent": 197499, "hardfail": 99030, "softfail": 306436, "neutral": 61287, "plus_all": 191, "invalid": 3244 } }, "dkim": { "n": 281605, "na": 386082, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 244081, "none_observed": 37524 } }, "mx": { "n": 667687, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 558304, "absent": 109383 } }, "reverse_dns": { "n": 557866, "na": 109821, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 530198, "none": 27668 } }, "caa": { "n": 666790, "na": 897, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 29294, "absent": 637496 } }, "dnssec": { "n": 667687, "na": 0, "states": { "signed_valid": 93313, "signed_broken": 504, "unsigned": 573870 } }, "https": { "n": 667687, "na": 0, "states": { "https": 621851, "redirects": 0, "http_only": 45836 } }, "tls": { "n": 621851, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 582014, "tls12": 39837, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 621851, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 560755, "invalid": 61096 } }, "hsts": { "n": 621851, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 66702, "absent": 555149 } }, "csp": { "n": 381831, "na": 285856, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 28467, "weak": 0, "absent": 353364 } }, "clickjacking": { "n": 381831, "na": 285856, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 36512, "absent": 345319 } }, "mime_sniffing": { "n": 381831, "na": 285856, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 56429, "absent": 325402 } }, "referrer_policy": { "n": 381831, "na": 285856, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 32023, "absent": 349808 } }, "secure_by_default": { "n": 374072, "na": 293615, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1907, "not_all": 372165 } }, "ipv6": { "n": 667687, "na": 0, "states": { "aaaa": 116950, "none": 550737 } } } }, "icu": { "graded": 398218, "checks": { "dmarc": { "n": 398218, "na": 0, "states": { "absent": 384454, "none": 9572, "quarantine": 2048, "reject": 2143, "invalid": 1 }, "rua_present": 3510 }, "spf": { "n": 398218, "na": 0, "states": { "absent": 365782, "hardfail": 8030, "softfail": 23927, "neutral": 244, "plus_all": 4, "invalid": 231 } }, "dkim": { "n": 15441, "na": 382777, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 13299, "none_observed": 2142 } }, "mx": { "n": 398218, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 55299, "absent": 342919 } }, "reverse_dns": { "n": 55265, "na": 342953, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 28799, "none": 26466 } }, "caa": { "n": 367535, "na": 30683, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 901, "absent": 366634 } }, "dnssec": { "n": 398218, "na": 0, "states": { "signed_valid": 7076, "signed_broken": 239, "unsigned": 390903 } }, "https": { "n": 398218, "na": 0, "states": { "https": 182393, "redirects": 0, "http_only": 215825 } }, "tls": { "n": 182393, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 171672, "tls12": 10721, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 182393, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 141683, "invalid": 40710 } }, "hsts": { "n": 182393, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 31983, "absent": 150410 } }, "csp": { "n": 102527, "na": 295691, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 7417, "weak": 0, "absent": 95110 } }, "clickjacking": { "n": 102527, "na": 295691, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 29986, "absent": 72541 } }, "mime_sniffing": { "n": 102527, "na": 295691, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 26388, "absent": 76139 } }, "referrer_policy": { "n": 102527, "na": 295691, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 10437, "absent": 92090 } }, "secure_by_default": { "n": 82426, "na": 315792, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 313, "not_all": 82113 } }, "ipv6": { "n": 398218, "na": 0, "states": { "aaaa": 111363, "none": 286855 } } } }, "id": { "graded": 772100, "checks": { "dmarc": { "n": 772100, "na": 0, "states": { "absent": 563359, "none": 158694, "quarantine": 20766, "reject": 29254, "invalid": 27 }, "rua_present": 45200 }, "spf": { "n": 772100, "na": 0, "states": { "absent": 427521, "hardfail": 57803, "softfail": 284248, "neutral": 1710, "plus_all": 117, "invalid": 701 } }, "dkim": { "n": 197032, "na": 575068, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 143999, "none_observed": 53033 } }, "mx": { "n": 772100, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 384647, "absent": 387453 } }, "reverse_dns": { "n": 382335, "na": 389765, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 272062, "none": 110273 } }, "caa": { "n": 767016, "na": 5084, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 18809, "absent": 748207 } }, "dnssec": { "n": 772100, "na": 0, "states": { "signed_valid": 3774, "signed_broken": 84, "unsigned": 768242 } }, "https": { "n": 772100, "na": 0, "states": { "https": 583066, "redirects": 0, "http_only": 189034 } }, "tls": { "n": 583066, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 572584, "tls12": 10482, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 583066, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 557049, "invalid": 26017 } }, "hsts": { "n": 583066, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 106250, "absent": 476816 } }, "csp": { "n": 386157, "na": 385943, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 51794, "weak": 0, "absent": 334363 } }, "clickjacking": { "n": 386157, "na": 385943, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 55359, "absent": 330798 } }, "mime_sniffing": { "n": 386157, "na": 385943, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 74643, "absent": 311514 } }, "referrer_policy": { "n": 386157, "na": 385943, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 41418, "absent": 344739 } }, "secure_by_default": { "n": 375269, "na": 396831, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 5457, "not_all": 369812 } }, "ipv6": { "n": 772100, "na": 0, "states": { "aaaa": 306012, "none": 466088 } } } }, "ie": { "graded": 211738, "checks": { "dmarc": { "n": 211738, "na": 0, "states": { "absent": 148080, "none": 44420, "quarantine": 10911, "reject": 8294, "invalid": 33 }, "rua_present": 24353 }, "spf": { "n": 211738, "na": 0, "states": { "absent": 70750, "hardfail": 46440, "softfail": 90849, "neutral": 2085, "plus_all": 29, "invalid": 1585 } }, "dkim": { "n": 119252, "na": 92486, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 69444, "none_observed": 49808 } }, "mx": { "n": 211738, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 168726, "absent": 43012 } }, "reverse_dns": { "n": 169660, "na": 42078, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 153181, "none": 16479 } }, "caa": { "n": 211323, "na": 415, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3306, "absent": 208017 } }, "dnssec": { "n": 211738, "na": 0, "states": { "signed_valid": 1222, "signed_broken": 6, "unsigned": 210510 } }, "https": { "n": 211738, "na": 0, "states": { "https": 188504, "redirects": 0, "http_only": 23234 } }, "tls": { "n": 188504, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 172213, "tls12": 16291, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 188504, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 162851, "invalid": 25653 } }, "hsts": { "n": 188504, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 52275, "absent": 136229 } }, "csp": { "n": 105493, "na": 106245, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 10246, "weak": 0, "absent": 95247 } }, "clickjacking": { "n": 105493, "na": 106245, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 19980, "absent": 85513 } }, "mime_sniffing": { "n": 105493, "na": 106245, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 24989, "absent": 80504 } }, "referrer_policy": { "n": 105493, "na": 106245, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 11520, "absent": 93973 } }, "secure_by_default": { "n": 102602, "na": 109136, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1008, "not_all": 101594 } }, "ipv6": { "n": 211738, "na": 0, "states": { "aaaa": 39549, "none": 172189 } } } }, "il": { "graded": 201578, "checks": { "dmarc": { "n": 201578, "na": 0, "states": { "absent": 145002, "none": 46105, "quarantine": 6231, "reject": 4201, "invalid": 39 }, "rua_present": 16181 }, "spf": { "n": 201578, "na": 0, "states": { "absent": 81598, "hardfail": 30256, "softfail": 83956, "neutral": 1485, "plus_all": 48, "invalid": 4235 } }, "dkim": { "n": 91485, "na": 110093, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 43191, "none_observed": 48294 } }, "mx": { "n": 201578, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 142884, "absent": 58694 } }, "reverse_dns": { "n": 142312, "na": 59266, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 115643, "none": 26669 } }, "caa": { "n": 197275, "na": 4303, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3774, "absent": 193501 } }, "dnssec": { "n": 201578, "na": 0, "states": { "signed_valid": 826, "signed_broken": 4, "unsigned": 200748 } }, "https": { "n": 201578, "na": 0, "states": { "https": 178251, "redirects": 0, "http_only": 23327 } }, "tls": { "n": 178251, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 167619, "tls12": 10632, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 178251, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 168444, "invalid": 9807 } }, "hsts": { "n": 178251, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 42370, "absent": 135881 } }, "csp": { "n": 97231, "na": 104347, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 10603, "weak": 0, "absent": 86628 } }, "clickjacking": { "n": 97231, "na": 104347, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 12865, "absent": 84366 } }, "mime_sniffing": { "n": 97231, "na": 104347, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 19599, "absent": 77632 } }, "referrer_policy": { "n": 97231, "na": 104347, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 11283, "absent": 85948 } }, "secure_by_default": { "n": 95913, "na": 105665, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 999, "not_all": 94914 } }, "ipv6": { "n": 201578, "na": 0, "states": { "aaaa": 54528, "none": 147050 } } } }, "im": { "graded": 45999, "checks": { "dmarc": { "n": 45999, "na": 0, "states": { "absent": 40195, "none": 3276, "quarantine": 1378, "reject": 1150, "invalid": 0 }, "rua_present": 2319 }, "spf": { "n": 45999, "na": 0, "states": { "absent": 32995, "hardfail": 4803, "softfail": 7063, "neutral": 913, "plus_all": 2, "invalid": 223 } }, "dkim": { "n": 7003, "na": 38996, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3608, "none_observed": 3395 } }, "mx": { "n": 45999, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 15476, "absent": 30523 } }, "reverse_dns": { "n": 15473, "na": 30526, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 13174, "none": 2299 } }, "caa": { "n": 45798, "na": 201, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1048, "absent": 44750 } }, "dnssec": { "n": 45999, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 45999 } }, "https": { "n": 45999, "na": 0, "states": { "https": 37135, "redirects": 0, "http_only": 8864 } }, "tls": { "n": 37135, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 35417, "tls12": 1718, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 37135, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 35108, "invalid": 2027 } }, "hsts": { "n": 37135, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 8770, "absent": 28365 } }, "csp": { "n": 23913, "na": 22086, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1741, "weak": 0, "absent": 22172 } }, "clickjacking": { "n": 23913, "na": 22086, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2578, "absent": 21335 } }, "mime_sniffing": { "n": 23913, "na": 22086, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3897, "absent": 20016 } }, "referrer_policy": { "n": 23913, "na": 22086, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2641, "absent": 21272 } }, "secure_by_default": { "n": 23349, "na": 22650, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 760, "not_all": 22589 } }, "ipv6": { "n": 45999, "na": 0, "states": { "aaaa": 21459, "none": 24540 } } } }, "immo": { "graded": 20727, "checks": { "dmarc": { "n": 20727, "na": 0, "states": { "absent": 13356, "none": 5094, "quarantine": 630, "reject": 1645, "invalid": 2 }, "rua_present": 1311 }, "spf": { "n": 20727, "na": 0, "states": { "absent": 7575, "hardfail": 3908, "softfail": 8004, "neutral": 1066, "plus_all": 9, "invalid": 165 } }, "dkim": { "n": 3632, "na": 17095, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1962, "none_observed": 1670 } }, "mx": { "n": 20727, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 16401, "absent": 4326 } }, "reverse_dns": { "n": 16406, "na": 4321, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 15224, "none": 1182 } }, "caa": { "n": 20628, "na": 99, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 281, "absent": 20347 } }, "dnssec": { "n": 20727, "na": 0, "states": { "signed_valid": 3124, "signed_broken": 15, "unsigned": 17588 } }, "https": { "n": 20727, "na": 0, "states": { "https": 9953, "redirects": 0, "http_only": 10774 } }, "tls": { "n": 9953, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9206, "tls12": 747, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9953, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7786, "invalid": 2167 } }, "hsts": { "n": 9953, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1985, "absent": 7968 } }, "csp": { "n": 7518, "na": 13209, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 814, "weak": 0, "absent": 6704 } }, "clickjacking": { "n": 7518, "na": 13209, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 810, "absent": 6708 } }, "mime_sniffing": { "n": 7518, "na": 13209, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 947, "absent": 6571 } }, "referrer_policy": { "n": 7518, "na": 13209, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 623, "absent": 6895 } }, "secure_by_default": { "n": 4268, "na": 16459, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 109, "not_all": 4159 } }, "ipv6": { "n": 20727, "na": 0, "states": { "aaaa": 6406, "none": 14321 } } } }, "immobilien": { "graded": 7088, "checks": { "dmarc": { "n": 7088, "na": 0, "states": { "absent": 4027, "none": 1903, "quarantine": 117, "reject": 1041, "invalid": 0 }, "rua_present": 162 }, "spf": { "n": 7088, "na": 0, "states": { "absent": 2892, "hardfail": 754, "softfail": 3179, "neutral": 154, "plus_all": 0, "invalid": 109 } }, "dkim": { "n": 627, "na": 6461, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 298, "none_observed": 329 } }, "mx": { "n": 7088, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5675, "absent": 1413 } }, "reverse_dns": { "n": 5679, "na": 1409, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5410, "none": 269 } }, "caa": { "n": 7079, "na": 9, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 115, "absent": 6964 } }, "dnssec": { "n": 7088, "na": 0, "states": { "signed_valid": 166, "signed_broken": 3, "unsigned": 6919 } }, "https": { "n": 7088, "na": 0, "states": { "https": 3018, "redirects": 0, "http_only": 4070 } }, "tls": { "n": 3018, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2854, "tls12": 164, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3018, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2128, "invalid": 890 } }, "hsts": { "n": 3018, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 468, "absent": 2550 } }, "csp": { "n": 2677, "na": 4411, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 62, "weak": 0, "absent": 2615 } }, "clickjacking": { "n": 2677, "na": 4411, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 221, "absent": 2456 } }, "mime_sniffing": { "n": 2677, "na": 4411, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 222, "absent": 2455 } }, "referrer_policy": { "n": 2677, "na": 4411, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 147, "absent": 2530 } }, "secure_by_default": { "n": 1176, "na": 5912, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 18, "not_all": 1158 } }, "ipv6": { "n": 7088, "na": 0, "states": { "aaaa": 2966, "none": 4122 } } } }, "in": { "graded": 2611026, "checks": { "dmarc": { "n": 2611026, "na": 0, "states": { "absent": 1612077, "none": 405082, "quarantine": 442801, "reject": 150906, "invalid": 160 }, "rua_present": 585960 }, "spf": { "n": 2611026, "na": 0, "states": { "absent": 1434111, "hardfail": 307684, "softfail": 839303, "neutral": 9352, "plus_all": 145, "invalid": 20431 } }, "dkim": { "n": 625794, "na": 1985232, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 232245, "none_observed": 393549 } }, "mx": { "n": 2611026, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1273772, "absent": 1337254 } }, "reverse_dns": { "n": 1272619, "na": 1338407, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 837467, "none": 435152 } }, "caa": { "n": 2599281, "na": 11745, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 59240, "absent": 2540041 } }, "dnssec": { "n": 2611026, "na": 0, "states": { "signed_valid": 32192, "signed_broken": 341, "unsigned": 2578493 } }, "https": { "n": 2611026, "na": 0, "states": { "https": 1907863, "redirects": 0, "http_only": 703163 } }, "tls": { "n": 1907863, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1807743, "tls12": 100120, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1907863, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1826913, "invalid": 80950 } }, "hsts": { "n": 1907863, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 400563, "absent": 1507300 } }, "csp": { "n": 1244971, "na": 1366055, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 385868, "weak": 0, "absent": 859103 } }, "clickjacking": { "n": 1244971, "na": 1366055, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 165669, "absent": 1079302 } }, "mime_sniffing": { "n": 1244971, "na": 1366055, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 190523, "absent": 1054448 } }, "referrer_policy": { "n": 1244971, "na": 1366055, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 85171, "absent": 1159800 } }, "secure_by_default": { "n": 1214668, "na": 1396358, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 7732, "not_all": 1206936 } }, "ipv6": { "n": 2611026, "na": 0, "states": { "aaaa": 621311, "none": 1989715 } } } }, "inc": { "graded": 6640, "checks": { "dmarc": { "n": 6640, "na": 0, "states": { "absent": 3952, "none": 758, "quarantine": 1251, "reject": 677, "invalid": 2 }, "rua_present": 1996 }, "spf": { "n": 6640, "na": 0, "states": { "absent": 3624, "hardfail": 1108, "softfail": 1864, "neutral": 37, "plus_all": 0, "invalid": 7 } }, "dkim": { "n": 2237, "na": 4403, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 955, "none_observed": 1282 } }, "mx": { "n": 6640, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3317, "absent": 3323 } }, "reverse_dns": { "n": 3313, "na": 3327, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3014, "none": 299 } }, "caa": { "n": 6574, "na": 66, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 193, "absent": 6381 } }, "dnssec": { "n": 6640, "na": 0, "states": { "signed_valid": 287, "signed_broken": 5, "unsigned": 6348 } }, "https": { "n": 6640, "na": 0, "states": { "https": 3360, "redirects": 0, "http_only": 3280 } }, "tls": { "n": 3360, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3254, "tls12": 106, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3360, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3130, "invalid": 230 } }, "hsts": { "n": 3360, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1106, "absent": 2254 } }, "csp": { "n": 2039, "na": 4601, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 327, "weak": 0, "absent": 1712 } }, "clickjacking": { "n": 2039, "na": 4601, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 432, "absent": 1607 } }, "mime_sniffing": { "n": 2039, "na": 4601, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 633, "absent": 1406 } }, "referrer_policy": { "n": 2039, "na": 4601, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 362, "absent": 1677 } }, "secure_by_default": { "n": 1614, "na": 5026, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 43, "not_all": 1571 } }, "ipv6": { "n": 6640, "na": 0, "states": { "aaaa": 702, "none": 5938 } } } }, "industries": { "graded": 6785, "checks": { "dmarc": { "n": 6785, "na": 0, "states": { "absent": 5301, "none": 608, "quarantine": 402, "reject": 472, "invalid": 2 }, "rua_present": 631 }, "spf": { "n": 6785, "na": 0, "states": { "absent": 3693, "hardfail": 961, "softfail": 1951, "neutral": 149, "plus_all": 2, "invalid": 29 } }, "dkim": { "n": 1918, "na": 4867, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 957, "none_observed": 961 } }, "mx": { "n": 6785, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3809, "absent": 2976 } }, "reverse_dns": { "n": 3798, "na": 2987, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3450, "none": 348 } }, "caa": { "n": 6570, "na": 215, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 269, "absent": 6301 } }, "dnssec": { "n": 6785, "na": 0, "states": { "signed_valid": 810, "signed_broken": 5, "unsigned": 5970 } }, "https": { "n": 6785, "na": 0, "states": { "https": 3349, "redirects": 0, "http_only": 3436 } }, "tls": { "n": 3349, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3239, "tls12": 110, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3349, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2944, "invalid": 405 } }, "hsts": { "n": 3349, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 976, "absent": 2373 } }, "csp": { "n": 2314, "na": 4471, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 263, "weak": 0, "absent": 2051 } }, "clickjacking": { "n": 2314, "na": 4471, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 548, "absent": 1766 } }, "mime_sniffing": { "n": 2314, "na": 4471, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 576, "absent": 1738 } }, "referrer_policy": { "n": 2314, "na": 4471, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 232, "absent": 2082 } }, "secure_by_default": { "n": 1776, "na": 5009, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 26, "not_all": 1750 } }, "ipv6": { "n": 6785, "na": 0, "states": { "aaaa": 1198, "none": 5587 } } } }, "info": { "graded": 4678833, "checks": { "dmarc": { "n": 4678833, "na": 0, "states": { "absent": 3354100, "none": 631668, "quarantine": 308857, "reject": 384076, "invalid": 132 }, "rua_present": 611526 }, "spf": { "n": 4678833, "na": 0, "states": { "absent": 2934046, "hardfail": 467239, "softfail": 1217079, "neutral": 38530, "plus_all": 718, "invalid": 21221 } }, "dkim": { "n": 1007121, "na": 3671712, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 594845, "none_observed": 412276 } }, "mx": { "n": 4678833, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2297723, "absent": 2381110 } }, "reverse_dns": { "n": 2296581, "na": 2382252, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1954819, "none": 341762 } }, "caa": { "n": 4626579, "na": 52254, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 38938, "absent": 4587641 } }, "dnssec": { "n": 4678833, "na": 0, "states": { "signed_valid": 236768, "signed_broken": 1314, "unsigned": 4440751 } }, "https": { "n": 4678833, "na": 0, "states": { "https": 2209096, "redirects": 0, "http_only": 2469737 } }, "tls": { "n": 2209096, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2101552, "tls12": 107544, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2209096, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1916997, "invalid": 292099 } }, "hsts": { "n": 2209096, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 228471, "absent": 1980625 } }, "csp": { "n": 1268204, "na": 3410629, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 76400, "weak": 0, "absent": 1191804 } }, "clickjacking": { "n": 1268204, "na": 3410629, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 134606, "absent": 1133598 } }, "mime_sniffing": { "n": 1268204, "na": 3410629, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 146188, "absent": 1122016 } }, "referrer_policy": { "n": 1268204, "na": 3410629, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 85638, "absent": 1182566 } }, "secure_by_default": { "n": 857246, "na": 3821587, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 5016, "not_all": 852230 } }, "ipv6": { "n": 4678833, "na": 0, "states": { "aaaa": 1254948, "none": 3423885 } } } }, "ing": { "graded": 20104, "checks": { "dmarc": { "n": 20104, "na": 0, "states": { "absent": 16962, "none": 1185, "quarantine": 1098, "reject": 859, "invalid": 0 }, "rua_present": 1678 }, "spf": { "n": 20104, "na": 0, "states": { "absent": 12199, "hardfail": 1568, "softfail": 5751, "neutral": 532, "plus_all": 1, "invalid": 53 } }, "dkim": { "n": 2283, "na": 17821, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1441, "none_observed": 842 } }, "mx": { "n": 20104, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8498, "absent": 11606 } }, "reverse_dns": { "n": 8496, "na": 11608, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7580, "none": 916 } }, "caa": { "n": 20028, "na": 76, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 437, "absent": 19591 } }, "dnssec": { "n": 20104, "na": 0, "states": { "signed_valid": 1273, "signed_broken": 10, "unsigned": 18821 } }, "https": { "n": 20104, "na": 0, "states": { "https": 9441, "redirects": 0, "http_only": 10663 } }, "tls": { "n": 9441, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9315, "tls12": 126, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9441, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8832, "invalid": 609 } }, "hsts": { "n": 9441, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2002, "absent": 7439 } }, "csp": { "n": 6579, "na": 13525, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 958, "weak": 0, "absent": 5621 } }, "clickjacking": { "n": 6579, "na": 13525, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1511, "absent": 5068 } }, "mime_sniffing": { "n": 6579, "na": 13525, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1633, "absent": 4946 } }, "referrer_policy": { "n": 6579, "na": 13525, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1365, "absent": 5214 } }, "secure_by_default": { "n": 5010, "na": 15094, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 259, "not_all": 4751 } }, "ipv6": { "n": 20104, "na": 0, "states": { "aaaa": 4484, "none": 15620 } } } }, "ink": { "graded": 125465, "checks": { "dmarc": { "n": 125465, "na": 0, "states": { "absent": 110368, "none": 9944, "quarantine": 3413, "reject": 1739, "invalid": 1 }, "rua_present": 6898 }, "spf": { "n": 125465, "na": 0, "states": { "absent": 84063, "hardfail": 4157, "softfail": 36782, "neutral": 356, "plus_all": 6, "invalid": 101 } }, "dkim": { "n": 13019, "na": 112446, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 10062, "none_observed": 2957 } }, "mx": { "n": 125465, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 45045, "absent": 80420 } }, "reverse_dns": { "n": 45018, "na": 80447, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 37876, "none": 7142 } }, "caa": { "n": 124078, "na": 1387, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1186, "absent": 122892 } }, "dnssec": { "n": 125465, "na": 0, "states": { "signed_valid": 8145, "signed_broken": 72, "unsigned": 117248 } }, "https": { "n": 125465, "na": 0, "states": { "https": 72596, "redirects": 0, "http_only": 52869 } }, "tls": { "n": 72596, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 69982, "tls12": 2614, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 72596, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 66744, "invalid": 5852 } }, "hsts": { "n": 72596, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 12673, "absent": 59923 } }, "csp": { "n": 45390, "na": 80075, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2915, "weak": 0, "absent": 42475 } }, "clickjacking": { "n": 45390, "na": 80075, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 6362, "absent": 39028 } }, "mime_sniffing": { "n": 45390, "na": 80075, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 10385, "absent": 35005 } }, "referrer_policy": { "n": 45390, "na": 80075, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 7626, "absent": 37764 } }, "secure_by_default": { "n": 39543, "na": 85922, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 299, "not_all": 39244 } }, "ipv6": { "n": 125465, "na": 0, "states": { "aaaa": 45027, "none": 80438 } } } }, "institute": { "graded": 20640, "checks": { "dmarc": { "n": 20640, "na": 0, "states": { "absent": 15977, "none": 1893, "quarantine": 1761, "reject": 1009, "invalid": 0 }, "rua_present": 2366 }, "spf": { "n": 20640, "na": 0, "states": { "absent": 13519, "hardfail": 1875, "softfail": 4882, "neutral": 291, "plus_all": 1, "invalid": 72 } }, "dkim": { "n": 6527, "na": 14113, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1513, "none_observed": 5014 } }, "mx": { "n": 20640, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 11696, "absent": 8944 } }, "reverse_dns": { "n": 11693, "na": 8947, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 10502, "none": 1191 } }, "caa": { "n": 20516, "na": 124, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 309, "absent": 20207 } }, "dnssec": { "n": 20640, "na": 0, "states": { "signed_valid": 1196, "signed_broken": 10, "unsigned": 19434 } }, "https": { "n": 20640, "na": 0, "states": { "https": 12090, "redirects": 0, "http_only": 8550 } }, "tls": { "n": 12090, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 11802, "tls12": 288, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 12090, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 11285, "invalid": 805 } }, "hsts": { "n": 12090, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2010, "absent": 10080 } }, "csp": { "n": 9519, "na": 11121, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 641, "weak": 0, "absent": 8878 } }, "clickjacking": { "n": 9519, "na": 11121, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1032, "absent": 8487 } }, "mime_sniffing": { "n": 9519, "na": 11121, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 5005, "absent": 4514 } }, "referrer_policy": { "n": 9519, "na": 11121, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 612, "absent": 8907 } }, "secure_by_default": { "n": 8368, "na": 12272, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 89, "not_all": 8279 } }, "ipv6": { "n": 20640, "na": 0, "states": { "aaaa": 6670, "none": 13970 } } } }, "insure": { "graded": 5471, "checks": { "dmarc": { "n": 5471, "na": 0, "states": { "absent": 4211, "none": 409, "quarantine": 375, "reject": 476, "invalid": 0 }, "rua_present": 832 }, "spf": { "n": 5471, "na": 0, "states": { "absent": 3431, "hardfail": 963, "softfail": 996, "neutral": 46, "plus_all": 1, "invalid": 34 } }, "dkim": { "n": 1362, "na": 4109, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 425, "none_observed": 937 } }, "mx": { "n": 5471, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2507, "absent": 2964 } }, "reverse_dns": { "n": 2508, "na": 2963, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2080, "none": 428 } }, "caa": { "n": 5434, "na": 37, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 114, "absent": 5320 } }, "dnssec": { "n": 5471, "na": 0, "states": { "signed_valid": 329, "signed_broken": 0, "unsigned": 5142 } }, "https": { "n": 5471, "na": 0, "states": { "https": 2393, "redirects": 0, "http_only": 3078 } }, "tls": { "n": 2393, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2312, "tls12": 81, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2393, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2182, "invalid": 211 } }, "hsts": { "n": 2393, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 503, "absent": 1890 } }, "csp": { "n": 1460, "na": 4011, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 112, "weak": 0, "absent": 1348 } }, "clickjacking": { "n": 1460, "na": 4011, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 254, "absent": 1206 } }, "mime_sniffing": { "n": 1460, "na": 4011, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 263, "absent": 1197 } }, "referrer_policy": { "n": 1460, "na": 4011, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 128, "absent": 1332 } }, "secure_by_default": { "n": 1021, "na": 4450, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 17, "not_all": 1004 } }, "ipv6": { "n": 5471, "na": 0, "states": { "aaaa": 657, "none": 4814 } } } }, "international": { "graded": 23498, "checks": { "dmarc": { "n": 23498, "na": 0, "states": { "absent": 16850, "none": 2501, "quarantine": 2310, "reject": 1835, "invalid": 2 }, "rua_present": 3419 }, "spf": { "n": 23498, "na": 0, "states": { "absent": 13248, "hardfail": 3596, "softfail": 5919, "neutral": 550, "plus_all": 12, "invalid": 173 } }, "dkim": { "n": 4282, "na": 19216, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1812, "none_observed": 2470 } }, "mx": { "n": 23498, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12528, "absent": 10970 } }, "reverse_dns": { "n": 12530, "na": 10968, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 10488, "none": 2042 } }, "caa": { "n": 23355, "na": 143, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 498, "absent": 22857 } }, "dnssec": { "n": 23498, "na": 0, "states": { "signed_valid": 1706, "signed_broken": 7, "unsigned": 21785 } }, "https": { "n": 23498, "na": 0, "states": { "https": 10816, "redirects": 0, "http_only": 12682 } }, "tls": { "n": 10816, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 10225, "tls12": 591, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10816, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9094, "invalid": 1722 } }, "hsts": { "n": 10816, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2211, "absent": 8605 } }, "csp": { "n": 7728, "na": 15770, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1128, "weak": 0, "absent": 6600 } }, "clickjacking": { "n": 7728, "na": 15770, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1396, "absent": 6332 } }, "mime_sniffing": { "n": 7728, "na": 15770, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1154, "absent": 6574 } }, "referrer_policy": { "n": 7728, "na": 15770, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 536, "absent": 7192 } }, "secure_by_default": { "n": 5539, "na": 17959, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 85, "not_all": 5454 } }, "ipv6": { "n": 23498, "na": 0, "states": { "aaaa": 4056, "none": 19442 } } } }, "investments": { "graded": 6480, "checks": { "dmarc": { "n": 6480, "na": 0, "states": { "absent": 4899, "none": 431, "quarantine": 585, "reject": 565, "invalid": 0 }, "rua_present": 935 }, "spf": { "n": 6480, "na": 0, "states": { "absent": 3569, "hardfail": 1092, "softfail": 1707, "neutral": 83, "plus_all": 0, "invalid": 29 } }, "dkim": { "n": 1385, "na": 5095, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 568, "none_observed": 817 } }, "mx": { "n": 6480, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3327, "absent": 3153 } }, "reverse_dns": { "n": 3329, "na": 3151, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2756, "none": 573 } }, "caa": { "n": 6427, "na": 53, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 164, "absent": 6263 } }, "dnssec": { "n": 6480, "na": 0, "states": { "signed_valid": 628, "signed_broken": 3, "unsigned": 5849 } }, "https": { "n": 6480, "na": 0, "states": { "https": 2688, "redirects": 0, "http_only": 3792 } }, "tls": { "n": 2688, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2601, "tls12": 87, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2688, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2378, "invalid": 310 } }, "hsts": { "n": 2688, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 600, "absent": 2088 } }, "csp": { "n": 2024, "na": 4456, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 234, "weak": 0, "absent": 1790 } }, "clickjacking": { "n": 2024, "na": 4456, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 476, "absent": 1548 } }, "mime_sniffing": { "n": 2024, "na": 4456, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 458, "absent": 1566 } }, "referrer_policy": { "n": 2024, "na": 4456, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 271, "absent": 1753 } }, "secure_by_default": { "n": 1368, "na": 5112, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 24, "not_all": 1344 } }, "ipv6": { "n": 6480, "na": 0, "states": { "aaaa": 803, "none": 5677 } } } }, "io": { "graded": 1057481, "checks": { "dmarc": { "n": 1057481, "na": 0, "states": { "absent": 753502, "none": 147911, "quarantine": 103469, "reject": 52485, "invalid": 114 }, "rua_present": 173035 }, "spf": { "n": 1057481, "na": 0, "states": { "absent": 552748, "hardfail": 172131, "softfail": 316521, "neutral": 12408, "plus_all": 89, "invalid": 3584 } }, "dkim": { "n": 305877, "na": 751604, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 145457, "none_observed": 160420 } }, "mx": { "n": 1057481, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 567422, "absent": 490059 } }, "reverse_dns": { "n": 567465, "na": 490016, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 459311, "none": 108154 } }, "caa": { "n": 1051191, "na": 6290, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 32877, "absent": 1018314 } }, "dnssec": { "n": 1057481, "na": 0, "states": { "signed_valid": 62847, "signed_broken": 1221, "unsigned": 993413 } }, "https": { "n": 1057481, "na": 0, "states": { "https": 726619, "redirects": 0, "http_only": 330862 } }, "tls": { "n": 726619, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 711184, "tls12": 15435, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 726619, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 698484, "invalid": 28135 } }, "hsts": { "n": 726619, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 219783, "absent": 506836 } }, "csp": { "n": 458016, "na": 599465, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 44545, "weak": 0, "absent": 413471 } }, "clickjacking": { "n": 458016, "na": 599465, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 86900, "absent": 371116 } }, "mime_sniffing": { "n": 458016, "na": 599465, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 117506, "absent": 340510 } }, "referrer_policy": { "n": 458016, "na": 599465, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 77362, "absent": 380654 } }, "secure_by_default": { "n": 442277, "na": 615204, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 10395, "not_all": 431882 } }, "ipv6": { "n": 1057481, "na": 0, "states": { "aaaa": 249849, "none": 807632 } } } }, "iq": { "graded": 6751, "checks": { "dmarc": { "n": 6751, "na": 0, "states": { "absent": 3839, "none": 2268, "quarantine": 277, "reject": 367, "invalid": 0 }, "rua_present": 635 }, "spf": { "n": 6751, "na": 0, "states": { "absent": 1170, "hardfail": 1017, "softfail": 4506, "neutral": 47, "plus_all": 1, "invalid": 10 } }, "dkim": { "n": 3753, "na": 2998, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2975, "none_observed": 778 } }, "mx": { "n": 6751, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5888, "absent": 863 } }, "reverse_dns": { "n": 5878, "na": 873, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4275, "none": 1603 } }, "caa": { "n": 6729, "na": 22, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 125, "absent": 6604 } }, "dnssec": { "n": 6751, "na": 0, "states": { "signed_valid": 1, "signed_broken": 0, "unsigned": 6750 } }, "https": { "n": 6751, "na": 0, "states": { "https": 6326, "redirects": 0, "http_only": 425 } }, "tls": { "n": 6326, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5977, "tls12": 349, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6326, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6128, "invalid": 198 } }, "hsts": { "n": 6326, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 670, "absent": 5656 } }, "csp": { "n": 4421, "na": 2330, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 986, "weak": 0, "absent": 3435 } }, "clickjacking": { "n": 4421, "na": 2330, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 495, "absent": 3926 } }, "mime_sniffing": { "n": 4421, "na": 2330, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 663, "absent": 3758 } }, "referrer_policy": { "n": 4421, "na": 2330, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 287, "absent": 4134 } }, "secure_by_default": { "n": 4412, "na": 2339, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 22, "not_all": 4390 } }, "ipv6": { "n": 6751, "na": 0, "states": { "aaaa": 2303, "none": 4448 } } } }, "ir": { "graded": 630751, "checks": { "dmarc": { "n": 630751, "na": 0, "states": { "absent": 471498, "none": 130729, "quarantine": 14803, "reject": 13714, "invalid": 7 }, "rua_present": 25790 }, "spf": { "n": 630751, "na": 0, "states": { "absent": 276022, "hardfail": 58773, "softfail": 294262, "neutral": 1073, "plus_all": 83, "invalid": 538 } }, "dkim": { "n": 203334, "na": 427417, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 202170, "none_observed": 1164 } }, "mx": { "n": 630751, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 401636, "absent": 229115 } }, "reverse_dns": { "n": 397502, "na": 233249, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 270197, "none": 127305 } }, "caa": { "n": 628332, "na": 2419, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 12748, "absent": 615584 } }, "dnssec": { "n": 630751, "na": 0, "states": { "signed_valid": 7, "signed_broken": 0, "unsigned": 630744 } }, "https": { "n": 630751, "na": 0, "states": { "https": 510984, "redirects": 0, "http_only": 119767 } }, "tls": { "n": 510984, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 493042, "tls12": 17942, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 510984, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 464685, "invalid": 46299 } }, "hsts": { "n": 510984, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 63571, "absent": 447413 } }, "csp": { "n": 344339, "na": 286412, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 50467, "weak": 0, "absent": 293872 } }, "clickjacking": { "n": 344339, "na": 286412, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 64332, "absent": 280007 } }, "mime_sniffing": { "n": 344339, "na": 286412, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 68779, "absent": 275560 } }, "referrer_policy": { "n": 344339, "na": 286412, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 28124, "absent": 316215 } }, "secure_by_default": { "n": 327893, "na": 302858, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 3785, "not_all": 324108 } }, "ipv6": { "n": 630751, "na": 0, "states": { "aaaa": 37733, "none": 593018 } } } }, "is": { "graded": 59240, "checks": { "dmarc": { "n": 59240, "na": 0, "states": { "absent": 40698, "none": 12668, "quarantine": 2808, "reject": 3057, "invalid": 9 }, "rua_present": 6711 }, "spf": { "n": 59240, "na": 0, "states": { "absent": 23941, "hardfail": 16992, "softfail": 17483, "neutral": 613, "plus_all": 15, "invalid": 196 } }, "dkim": { "n": 25732, "na": 33508, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 10768, "none_observed": 14964 } }, "mx": { "n": 59240, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 42489, "absent": 16751 } }, "reverse_dns": { "n": 42530, "na": 16710, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 39753, "none": 2777 } }, "caa": { "n": 59205, "na": 35, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1857, "absent": 57348 } }, "dnssec": { "n": 59240, "na": 0, "states": { "signed_valid": 2636, "signed_broken": 5, "unsigned": 56599 } }, "https": { "n": 59240, "na": 0, "states": { "https": 47739, "redirects": 0, "http_only": 11501 } }, "tls": { "n": 47739, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 45352, "tls12": 2387, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 47739, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 44799, "invalid": 2940 } }, "hsts": { "n": 47739, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 15701, "absent": 32038 } }, "csp": { "n": 32391, "na": 26849, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 4223, "weak": 0, "absent": 28168 } }, "clickjacking": { "n": 32391, "na": 26849, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 7453, "absent": 24938 } }, "mime_sniffing": { "n": 32391, "na": 26849, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 11035, "absent": 21356 } }, "referrer_policy": { "n": 32391, "na": 26849, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4170, "absent": 28221 } }, "secure_by_default": { "n": 32001, "na": 27239, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 707, "not_all": 31294 } }, "ipv6": { "n": 59240, "na": 0, "states": { "aaaa": 12939, "none": 46301 } } } }, "ist": { "graded": 6157, "checks": { "dmarc": { "n": 6157, "na": 0, "states": { "absent": 4504, "none": 568, "quarantine": 705, "reject": 380, "invalid": 0 }, "rua_present": 906 }, "spf": { "n": 6157, "na": 0, "states": { "absent": 3735, "hardfail": 794, "softfail": 1428, "neutral": 138, "plus_all": 1, "invalid": 61 } }, "dkim": { "n": 1306, "na": 4851, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 550, "none_observed": 756 } }, "mx": { "n": 6157, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2959, "absent": 3198 } }, "reverse_dns": { "n": 2958, "na": 3199, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2475, "none": 483 } }, "caa": { "n": 6088, "na": 69, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 103, "absent": 5985 } }, "dnssec": { "n": 6157, "na": 0, "states": { "signed_valid": 123, "signed_broken": 1, "unsigned": 6033 } }, "https": { "n": 6157, "na": 0, "states": { "https": 3040, "redirects": 0, "http_only": 3117 } }, "tls": { "n": 3040, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2759, "tls12": 281, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3040, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2474, "invalid": 566 } }, "hsts": { "n": 3040, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 580, "absent": 2460 } }, "csp": { "n": 2329, "na": 3828, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 263, "weak": 0, "absent": 2066 } }, "clickjacking": { "n": 2329, "na": 3828, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 364, "absent": 1965 } }, "mime_sniffing": { "n": 2329, "na": 3828, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 243, "absent": 2086 } }, "referrer_policy": { "n": 2329, "na": 3828, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 145, "absent": 2184 } }, "secure_by_default": { "n": 1651, "na": 4506, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 15, "not_all": 1636 } }, "ipv6": { "n": 6157, "na": 0, "states": { "aaaa": 1111, "none": 5046 } } } }, "it": { "graded": 2558090, "checks": { "dmarc": { "n": 2558090, "na": 0, "states": { "absent": 1309138, "none": 1114191, "quarantine": 77620, "reject": 56740, "invalid": 401 }, "rua_present": 172961 }, "spf": { "n": 2558090, "na": 0, "states": { "absent": 619894, "hardfail": 531072, "softfail": 1333005, "neutral": 67329, "plus_all": 652, "invalid": 6138 } }, "dkim": { "n": 573813, "na": 1984277, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 379246, "none_observed": 194567 } }, "mx": { "n": 2558090, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2208049, "absent": 350041 } }, "reverse_dns": { "n": 2208754, "na": 349336, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2004639, "none": 204115 } }, "caa": { "n": 2545947, "na": 12143, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 38853, "absent": 2507094 } }, "dnssec": { "n": 2558090, "na": 0, "states": { "signed_valid": 39695, "signed_broken": 215, "unsigned": 2518180 } }, "https": { "n": 2558090, "na": 0, "states": { "https": 2209495, "redirects": 0, "http_only": 348595 } }, "tls": { "n": 2209495, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2042004, "tls12": 167491, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2209495, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1905084, "invalid": 304411 } }, "hsts": { "n": 2209495, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 285017, "absent": 1924478 } }, "csp": { "n": 964388, "na": 1593702, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 69342, "weak": 0, "absent": 895046 } }, "clickjacking": { "n": 964388, "na": 1593702, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 123365, "absent": 841023 } }, "mime_sniffing": { "n": 964388, "na": 1593702, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 162736, "absent": 801652 } }, "referrer_policy": { "n": 964388, "na": 1593702, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 66737, "absent": 897651 } }, "secure_by_default": { "n": 897143, "na": 1660947, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 5310, "not_all": 891833 } }, "ipv6": { "n": 2558090, "na": 0, "states": { "aaaa": 724755, "none": 1833335 } } } }, "jetzt": { "graded": 11030, "checks": { "dmarc": { "n": 11030, "na": 0, "states": { "absent": 7480, "none": 2328, "quarantine": 251, "reject": 971, "invalid": 0 }, "rua_present": 438 }, "spf": { "n": 11030, "na": 0, "states": { "absent": 4481, "hardfail": 1453, "softfail": 4676, "neutral": 250, "plus_all": 0, "invalid": 170 } }, "dkim": { "n": 889, "na": 10141, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 593, "none_observed": 296 } }, "mx": { "n": 11030, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8567, "absent": 2463 } }, "reverse_dns": { "n": 8582, "na": 2448, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7982, "none": 600 } }, "caa": { "n": 10813, "na": 217, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 202, "absent": 10611 } }, "dnssec": { "n": 11030, "na": 0, "states": { "signed_valid": 468, "signed_broken": 1, "unsigned": 10561 } }, "https": { "n": 11030, "na": 0, "states": { "https": 5969, "redirects": 0, "http_only": 5061 } }, "tls": { "n": 5969, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5670, "tls12": 299, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5969, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4696, "invalid": 1273 } }, "hsts": { "n": 5969, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 951, "absent": 5018 } }, "csp": { "n": 4180, "na": 6850, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 163, "weak": 0, "absent": 4017 } }, "clickjacking": { "n": 4180, "na": 6850, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 791, "absent": 3389 } }, "mime_sniffing": { "n": 4180, "na": 6850, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 836, "absent": 3344 } }, "referrer_policy": { "n": 4180, "na": 6850, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 670, "absent": 3510 } }, "secure_by_default": { "n": 2667, "na": 8363, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 46, "not_all": 2621 } }, "ipv6": { "n": 11030, "na": 0, "states": { "aaaa": 4365, "none": 6665 } } } }, "jobs": { "graded": 8603, "checks": { "dmarc": { "n": 8603, "na": 0, "states": { "absent": 5803, "none": 565, "quarantine": 401, "reject": 1833, "invalid": 1 }, "rua_present": 2050 }, "spf": { "n": 8603, "na": 0, "states": { "absent": 4999, "hardfail": 2314, "softfail": 1074, "neutral": 161, "plus_all": 4, "invalid": 51 } }, "dkim": { "n": 1585, "na": 7018, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 467, "none_observed": 1118 } }, "mx": { "n": 8603, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3972, "absent": 4631 } }, "reverse_dns": { "n": 3975, "na": 4628, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2905, "none": 1070 } }, "caa": { "n": 8578, "na": 25, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 292, "absent": 8286 } }, "dnssec": { "n": 8603, "na": 0, "states": { "signed_valid": 201, "signed_broken": 0, "unsigned": 8402 } }, "https": { "n": 8603, "na": 0, "states": { "https": 4272, "redirects": 0, "http_only": 4331 } }, "tls": { "n": 4272, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3799, "tls12": 473, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4272, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3678, "invalid": 594 } }, "hsts": { "n": 4272, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1061, "absent": 3211 } }, "csp": { "n": 2010, "na": 6593, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 425, "weak": 0, "absent": 1585 } }, "clickjacking": { "n": 2010, "na": 6593, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 587, "absent": 1423 } }, "mime_sniffing": { "n": 2010, "na": 6593, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 570, "absent": 1440 } }, "referrer_policy": { "n": 2010, "na": 6593, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 412, "absent": 1598 } }, "secure_by_default": { "n": 1334, "na": 7269, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 117, "not_all": 1217 } }, "ipv6": { "n": 8603, "na": 0, "states": { "aaaa": 926, "none": 7677 } } } }, "jp": { "graded": 1359513, "checks": { "dmarc": { "n": 1359513, "na": 0, "states": { "absent": 905485, "none": 377274, "quarantine": 50328, "reject": 26355, "invalid": 71 }, "rua_present": 97645 }, "spf": { "n": 1359513, "na": 0, "states": { "absent": 261024, "hardfail": 124014, "softfail": 964336, "neutral": 3778, "plus_all": 50, "invalid": 6311 } }, "dkim": { "n": 384630, "na": 974883, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 284645, "none_observed": 99985 } }, "mx": { "n": 1359513, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1182724, "absent": 176789 } }, "reverse_dns": { "n": 1181191, "na": 178322, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 971943, "none": 209248 } }, "caa": { "n": 1356654, "na": 2859, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 8210, "absent": 1348444 } }, "dnssec": { "n": 1359513, "na": 0, "states": { "signed_valid": 8619, "signed_broken": 29, "unsigned": 1350865 } }, "https": { "n": 1359513, "na": 0, "states": { "https": 1173072, "redirects": 0, "http_only": 186441 } }, "tls": { "n": 1173072, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 974373, "tls12": 198699, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1173072, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1007017, "invalid": 166055 } }, "hsts": { "n": 1173072, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 130115, "absent": 1042957 } }, "csp": { "n": 779152, "na": 580361, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 49565, "weak": 0, "absent": 729587 } }, "clickjacking": { "n": 779152, "na": 580361, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 126111, "absent": 653041 } }, "mime_sniffing": { "n": 779152, "na": 580361, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 133049, "absent": 646103 } }, "referrer_policy": { "n": 779152, "na": 580361, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 22483, "absent": 756669 } }, "secure_by_default": { "n": 738351, "na": 621162, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 2001, "not_all": 736350 } }, "ipv6": { "n": 1359513, "na": 0, "states": { "aaaa": 65639, "none": 1293874 } } } }, "ke": { "graded": 95690, "checks": { "dmarc": { "n": 95690, "na": 0, "states": { "absent": 44304, "none": 31084, "quarantine": 16856, "reject": 3439, "invalid": 7 }, "rua_present": 19506 }, "spf": { "n": 95690, "na": 0, "states": { "absent": 17269, "hardfail": 7332, "softfail": 66635, "neutral": 333, "plus_all": 14, "invalid": 4107 } }, "dkim": { "n": 50502, "na": 45188, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 42900, "none_observed": 7602 } }, "mx": { "n": 95690, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 83228, "absent": 12462 } }, "reverse_dns": { "n": 83316, "na": 12374, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 61525, "none": 21791 } }, "caa": { "n": 95063, "na": 627, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3262, "absent": 91801 } }, "dnssec": { "n": 95690, "na": 0, "states": { "signed_valid": 215, "signed_broken": 5, "unsigned": 95470 } }, "https": { "n": 95690, "na": 0, "states": { "https": 91335, "redirects": 0, "http_only": 4355 } }, "tls": { "n": 91335, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 89960, "tls12": 1375, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 91335, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 88088, "invalid": 3247 } }, "hsts": { "n": 91335, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 13279, "absent": 78056 } }, "csp": { "n": 61731, "na": 33959, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 3017, "weak": 0, "absent": 58714 } }, "clickjacking": { "n": 61731, "na": 33959, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 6704, "absent": 55027 } }, "mime_sniffing": { "n": 61731, "na": 33959, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 7854, "absent": 53877 } }, "referrer_policy": { "n": 61731, "na": 33959, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 5352, "absent": 56379 } }, "secure_by_default": { "n": 61581, "na": 34109, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 619, "not_all": 60962 } }, "ipv6": { "n": 95690, "na": 0, "states": { "aaaa": 13029, "none": 82661 } } } }, "kg": { "graded": 10965, "checks": { "dmarc": { "n": 10965, "na": 0, "states": { "absent": 7759, "none": 1623, "quarantine": 1168, "reject": 415, "invalid": 0 }, "rua_present": 1145 }, "spf": { "n": 10965, "na": 0, "states": { "absent": 3876, "hardfail": 1744, "softfail": 4178, "neutral": 41, "plus_all": 0, "invalid": 1126 } }, "dkim": { "n": 3049, "na": 7916, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2558, "none_observed": 491 } }, "mx": { "n": 10965, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7831, "absent": 3134 } }, "reverse_dns": { "n": 7840, "na": 3125, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6668, "none": 1172 } }, "caa": { "n": 10927, "na": 38, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 438, "absent": 10489 } }, "dnssec": { "n": 10965, "na": 0, "states": { "signed_valid": 98, "signed_broken": 0, "unsigned": 10867 } }, "https": { "n": 10965, "na": 0, "states": { "https": 9905, "redirects": 0, "http_only": 1060 } }, "tls": { "n": 9905, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8419, "tls12": 1486, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9905, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8964, "invalid": 941 } }, "hsts": { "n": 9905, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2649, "absent": 7256 } }, "csp": { "n": 7185, "na": 3780, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 293, "weak": 0, "absent": 6892 } }, "clickjacking": { "n": 7185, "na": 3780, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1554, "absent": 5631 } }, "mime_sniffing": { "n": 7185, "na": 3780, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1109, "absent": 6076 } }, "referrer_policy": { "n": 7185, "na": 3780, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 680, "absent": 6505 } }, "secure_by_default": { "n": 7087, "na": 3878, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 78, "not_all": 7009 } }, "ipv6": { "n": 10965, "na": 0, "states": { "aaaa": 1998, "none": 8967 } } } }, "kids": { "graded": 6434, "checks": { "dmarc": { "n": 6434, "na": 0, "states": { "absent": 4627, "none": 430, "quarantine": 809, "reject": 568, "invalid": 0 }, "rua_present": 1274 }, "spf": { "n": 6434, "na": 0, "states": { "absent": 3972, "hardfail": 824, "softfail": 1506, "neutral": 98, "plus_all": 0, "invalid": 34 } }, "dkim": { "n": 824, "na": 5610, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 386, "none_observed": 438 } }, "mx": { "n": 6434, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2681, "absent": 3753 } }, "reverse_dns": { "n": 2680, "na": 3754, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1988, "none": 692 } }, "caa": { "n": 6413, "na": 21, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 177, "absent": 6236 } }, "dnssec": { "n": 6434, "na": 0, "states": { "signed_valid": 258, "signed_broken": 2, "unsigned": 6174 } }, "https": { "n": 6434, "na": 0, "states": { "https": 2855, "redirects": 0, "http_only": 3579 } }, "tls": { "n": 2855, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2754, "tls12": 101, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2855, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2579, "invalid": 276 } }, "hsts": { "n": 2855, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 781, "absent": 2074 } }, "csp": { "n": 2422, "na": 4012, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 439, "weak": 0, "absent": 1983 } }, "clickjacking": { "n": 2422, "na": 4012, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 577, "absent": 1845 } }, "mime_sniffing": { "n": 2422, "na": 4012, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 595, "absent": 1827 } }, "referrer_policy": { "n": 2422, "na": 4012, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 427, "absent": 1995 } }, "secure_by_default": { "n": 1491, "na": 4943, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 39, "not_all": 1452 } }, "ipv6": { "n": 6434, "na": 0, "states": { "aaaa": 716, "none": 5718 } } } }, "kim": { "graded": 7145, "checks": { "dmarc": { "n": 7145, "na": 0, "states": { "absent": 6278, "none": 376, "quarantine": 262, "reject": 228, "invalid": 1 }, "rua_present": 410 }, "spf": { "n": 7145, "na": 0, "states": { "absent": 4846, "hardfail": 631, "softfail": 1528, "neutral": 88, "plus_all": 0, "invalid": 52 } }, "dkim": { "n": 925, "na": 6220, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 456, "none_observed": 469 } }, "mx": { "n": 7145, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2712, "absent": 4433 } }, "reverse_dns": { "n": 2710, "na": 4435, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2237, "none": 473 } }, "caa": { "n": 7062, "na": 83, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 314, "absent": 6748 } }, "dnssec": { "n": 7145, "na": 0, "states": { "signed_valid": 422, "signed_broken": 6, "unsigned": 6717 } }, "https": { "n": 7145, "na": 0, "states": { "https": 4223, "redirects": 0, "http_only": 2922 } }, "tls": { "n": 4223, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3908, "tls12": 315, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4223, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3755, "invalid": 468 } }, "hsts": { "n": 4223, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 805, "absent": 3418 } }, "csp": { "n": 2576, "na": 4569, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 226, "weak": 0, "absent": 2350 } }, "clickjacking": { "n": 2576, "na": 4569, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 383, "absent": 2193 } }, "mime_sniffing": { "n": 2576, "na": 4569, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 507, "absent": 2069 } }, "referrer_policy": { "n": 2576, "na": 4569, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 335, "absent": 2241 } }, "secure_by_default": { "n": 2018, "na": 5127, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 41, "not_all": 1977 } }, "ipv6": { "n": 7145, "na": 0, "states": { "aaaa": 1870, "none": 5275 } } } }, "kitchen": { "graded": 6949, "checks": { "dmarc": { "n": 6949, "na": 0, "states": { "absent": 5175, "none": 756, "quarantine": 617, "reject": 401, "invalid": 0 }, "rua_present": 887 }, "spf": { "n": 6949, "na": 0, "states": { "absent": 3969, "hardfail": 866, "softfail": 1997, "neutral": 68, "plus_all": 0, "invalid": 49 } }, "dkim": { "n": 1521, "na": 5428, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 585, "none_observed": 936 } }, "mx": { "n": 6949, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3690, "absent": 3259 } }, "reverse_dns": { "n": 3691, "na": 3258, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3139, "none": 552 } }, "caa": { "n": 6918, "na": 31, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 230, "absent": 6688 } }, "dnssec": { "n": 6949, "na": 0, "states": { "signed_valid": 499, "signed_broken": 4, "unsigned": 6446 } }, "https": { "n": 6949, "na": 0, "states": { "https": 3666, "redirects": 0, "http_only": 3283 } }, "tls": { "n": 3666, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3545, "tls12": 121, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3666, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3288, "invalid": 378 } }, "hsts": { "n": 3666, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1109, "absent": 2557 } }, "csp": { "n": 2460, "na": 4489, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 232, "weak": 0, "absent": 2228 } }, "clickjacking": { "n": 2460, "na": 4489, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 516, "absent": 1944 } }, "mime_sniffing": { "n": 2460, "na": 4489, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 578, "absent": 1882 } }, "referrer_policy": { "n": 2460, "na": 4489, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 296, "absent": 2164 } }, "secure_by_default": { "n": 1982, "na": 4967, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 49, "not_all": 1933 } }, "ipv6": { "n": 6949, "na": 0, "states": { "aaaa": 1174, "none": 5775 } } } }, "kiwi": { "graded": 9714, "checks": { "dmarc": { "n": 9714, "na": 0, "states": { "absent": 7922, "none": 902, "quarantine": 334, "reject": 554, "invalid": 2 }, "rua_present": 778 }, "spf": { "n": 9714, "na": 0, "states": { "absent": 6290, "hardfail": 1393, "softfail": 1757, "neutral": 250, "plus_all": 1, "invalid": 23 } }, "dkim": { "n": 1990, "na": 7724, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 890, "none_observed": 1100 } }, "mx": { "n": 9714, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4231, "absent": 5483 } }, "reverse_dns": { "n": 4232, "na": 5482, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3509, "none": 723 } }, "caa": { "n": 9646, "na": 68, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 120, "absent": 9526 } }, "dnssec": { "n": 9714, "na": 0, "states": { "signed_valid": 109, "signed_broken": 2, "unsigned": 9603 } }, "https": { "n": 9714, "na": 0, "states": { "https": 4907, "redirects": 0, "http_only": 4807 } }, "tls": { "n": 4907, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4057, "tls12": 850, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4907, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3495, "invalid": 1412 } }, "hsts": { "n": 4907, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 712, "absent": 4195 } }, "csp": { "n": 3757, "na": 5957, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 124, "weak": 0, "absent": 3633 } }, "clickjacking": { "n": 3757, "na": 5957, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 270, "absent": 3487 } }, "mime_sniffing": { "n": 3757, "na": 5957, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 299, "absent": 3458 } }, "referrer_policy": { "n": 3757, "na": 5957, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 158, "absent": 3599 } }, "secure_by_default": { "n": 2079, "na": 7635, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 20, "not_all": 2059 } }, "ipv6": { "n": 9714, "na": 0, "states": { "aaaa": 1413, "none": 8301 } } } }, "koeln": { "graded": 16273, "checks": { "dmarc": { "n": 16273, "na": 0, "states": { "absent": 9279, "none": 4118, "quarantine": 267, "reject": 2609, "invalid": 0 }, "rua_present": 409 }, "spf": { "n": 16273, "na": 0, "states": { "absent": 7007, "hardfail": 1811, "softfail": 6825, "neutral": 413, "plus_all": 0, "invalid": 217 } }, "dkim": { "n": 1172, "na": 15101, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 602, "none_observed": 570 } }, "mx": { "n": 16273, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12735, "absent": 3538 } }, "reverse_dns": { "n": 12744, "na": 3529, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12159, "none": 585 } }, "caa": { "n": 16215, "na": 58, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 165, "absent": 16050 } }, "dnssec": { "n": 16273, "na": 0, "states": { "signed_valid": 294, "signed_broken": 2, "unsigned": 15977 } }, "https": { "n": 16273, "na": 0, "states": { "https": 7138, "redirects": 0, "http_only": 9135 } }, "tls": { "n": 7138, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5732, "tls12": 1406, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7138, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4954, "invalid": 2184 } }, "hsts": { "n": 7138, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 660, "absent": 6478 } }, "csp": { "n": 5461, "na": 10812, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 81, "weak": 0, "absent": 5380 } }, "clickjacking": { "n": 5461, "na": 10812, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 227, "absent": 5234 } }, "mime_sniffing": { "n": 5461, "na": 10812, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 274, "absent": 5187 } }, "referrer_policy": { "n": 5461, "na": 10812, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 121, "absent": 5340 } }, "secure_by_default": { "n": 2586, "na": 13687, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 25, "not_all": 2561 } }, "ipv6": { "n": 16273, "na": 0, "states": { "aaaa": 7472, "none": 8801 } } } }, "kr": { "graded": 536437, "checks": { "dmarc": { "n": 536437, "na": 0, "states": { "absent": 506377, "none": 20673, "quarantine": 4237, "reject": 5118, "invalid": 32 }, "rua_present": 14200 }, "spf": { "n": 536437, "na": 0, "states": { "absent": 306670, "hardfail": 21549, "softfail": 206481, "neutral": 237, "plus_all": 22, "invalid": 1478 } }, "dkim": { "n": 43410, "na": 493027, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 14311, "none_observed": 29099 } }, "mx": { "n": 536437, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 264723, "absent": 271714 } }, "reverse_dns": { "n": 264366, "na": 272071, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 161318, "none": 103048 } }, "caa": { "n": 535227, "na": 1210, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 4952, "absent": 530275 } }, "dnssec": { "n": 536437, "na": 0, "states": { "signed_valid": 588, "signed_broken": 7, "unsigned": 535842 } }, "https": { "n": 536437, "na": 0, "states": { "https": 455962, "redirects": 0, "http_only": 80475 } }, "tls": { "n": 455962, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 286598, "tls12": 169364, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 455962, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 357226, "invalid": 98736 } }, "hsts": { "n": 455962, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 116247, "absent": 339715 } }, "csp": { "n": 305448, "na": 230989, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 9408, "weak": 0, "absent": 296040 } }, "clickjacking": { "n": 305448, "na": 230989, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 25230, "absent": 280218 } }, "mime_sniffing": { "n": 305448, "na": 230989, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 106116, "absent": 199332 } }, "referrer_policy": { "n": 305448, "na": 230989, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 81806, "absent": 223642 } }, "secure_by_default": { "n": 287987, "na": 248450, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1494, "not_all": 286493 } }, "ipv6": { "n": 536437, "na": 0, "states": { "aaaa": 39522, "none": 496915 } } } }, "ky": { "graded": 5476, "checks": { "dmarc": { "n": 5476, "na": 0, "states": { "absent": 3033, "none": 681, "quarantine": 1251, "reject": 509, "invalid": 2 }, "rua_present": 1888 }, "spf": { "n": 5476, "na": 0, "states": { "absent": 2537, "hardfail": 1652, "softfail": 1217, "neutral": 52, "plus_all": 1, "invalid": 17 } }, "dkim": { "n": 2725, "na": 2751, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 977, "none_observed": 1748 } }, "mx": { "n": 5476, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3208, "absent": 2268 } }, "reverse_dns": { "n": 3208, "na": 2268, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2819, "none": 389 } }, "caa": { "n": 5462, "na": 14, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 78, "absent": 5384 } }, "dnssec": { "n": 5476, "na": 0, "states": { "signed_valid": 84, "signed_broken": 0, "unsigned": 5392 } }, "https": { "n": 5476, "na": 0, "states": { "https": 3404, "redirects": 0, "http_only": 2072 } }, "tls": { "n": 3404, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3203, "tls12": 201, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3404, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3295, "invalid": 109 } }, "hsts": { "n": 3404, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 896, "absent": 2508 } }, "csp": { "n": 1529, "na": 3947, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 251, "weak": 0, "absent": 1278 } }, "clickjacking": { "n": 1529, "na": 3947, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 315, "absent": 1214 } }, "mime_sniffing": { "n": 1529, "na": 3947, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 382, "absent": 1147 } }, "referrer_policy": { "n": 1529, "na": 3947, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 173, "absent": 1356 } }, "secure_by_default": { "n": 1505, "na": 3971, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 28, "not_all": 1477 } }, "ipv6": { "n": 5476, "na": 0, "states": { "aaaa": 596, "none": 4880 } } } }, "kz": { "graded": 127024, "checks": { "dmarc": { "n": 127024, "na": 0, "states": { "absent": 109549, "none": 8316, "quarantine": 5956, "reject": 3193, "invalid": 10 }, "rua_present": 5418 }, "spf": { "n": 127024, "na": 0, "states": { "absent": 33032, "hardfail": 45237, "softfail": 36338, "neutral": 2369, "plus_all": 2, "invalid": 10046 } }, "dkim": { "n": 38734, "na": 88290, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 34638, "none_observed": 4096 } }, "mx": { "n": 127024, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 99069, "absent": 27955 } }, "reverse_dns": { "n": 98942, "na": 28082, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 76774, "none": 22168 } }, "caa": { "n": 126740, "na": 284, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2158, "absent": 124582 } }, "dnssec": { "n": 127024, "na": 0, "states": { "signed_valid": 426, "signed_broken": 12, "unsigned": 126586 } }, "https": { "n": 127024, "na": 0, "states": { "https": 117752, "redirects": 0, "http_only": 9272 } }, "tls": { "n": 117752, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 108809, "tls12": 8943, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 117752, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 109707, "invalid": 8045 } }, "hsts": { "n": 117752, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 20614, "absent": 97138 } }, "csp": { "n": 83234, "na": 43790, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2160, "weak": 0, "absent": 81074 } }, "clickjacking": { "n": 83234, "na": 43790, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 19324, "absent": 63910 } }, "mime_sniffing": { "n": 83234, "na": 43790, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 26242, "absent": 56992 } }, "referrer_policy": { "n": 83234, "na": 43790, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 5747, "absent": 77487 } }, "secure_by_default": { "n": 81395, "na": 45629, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 419, "not_all": 80976 } }, "ipv6": { "n": 127024, "na": 0, "states": { "aaaa": 28746, "none": 98278 } } } }, "la": { "graded": 35408, "checks": { "dmarc": { "n": 35408, "na": 0, "states": { "absent": 28980, "none": 2809, "quarantine": 2522, "reject": 1093, "invalid": 4 }, "rua_present": 3911 }, "spf": { "n": 35408, "na": 0, "states": { "absent": 16217, "hardfail": 12256, "softfail": 6463, "neutral": 374, "plus_all": 2, "invalid": 96 } }, "dkim": { "n": 9007, "na": 26401, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2745, "none_observed": 6262 } }, "mx": { "n": 35408, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 22040, "absent": 13368 } }, "reverse_dns": { "n": 22034, "na": 13374, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 11657, "none": 10377 } }, "caa": { "n": 35335, "na": 73, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 383, "absent": 34952 } }, "dnssec": { "n": 35408, "na": 0, "states": { "signed_valid": 277, "signed_broken": 8, "unsigned": 35123 } }, "https": { "n": 35408, "na": 0, "states": { "https": 26141, "redirects": 0, "http_only": 9267 } }, "tls": { "n": 26141, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 24999, "tls12": 1142, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 26141, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 24942, "invalid": 1199 } }, "hsts": { "n": 26141, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4736, "absent": 21405 } }, "csp": { "n": 18043, "na": 17365, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1087, "weak": 0, "absent": 16956 } }, "clickjacking": { "n": 18043, "na": 17365, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1564, "absent": 16479 } }, "mime_sniffing": { "n": 18043, "na": 17365, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1866, "absent": 16177 } }, "referrer_policy": { "n": 18043, "na": 17365, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 845, "absent": 17198 } }, "secure_by_default": { "n": 17575, "na": 17833, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 102, "not_all": 17473 } }, "ipv6": { "n": 35408, "na": 0, "states": { "aaaa": 4481, "none": 30927 } } } }, "land": { "graded": 19810, "checks": { "dmarc": { "n": 19810, "na": 0, "states": { "absent": 15693, "none": 1750, "quarantine": 1273, "reject": 1093, "invalid": 1 }, "rua_present": 1798 }, "spf": { "n": 19810, "na": 0, "states": { "absent": 11219, "hardfail": 2519, "softfail": 5590, "neutral": 346, "plus_all": 1, "invalid": 135 } }, "dkim": { "n": 3906, "na": 15904, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1887, "none_observed": 2019 } }, "mx": { "n": 19810, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 10596, "absent": 9214 } }, "reverse_dns": { "n": 10593, "na": 9217, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 9033, "none": 1560 } }, "caa": { "n": 19165, "na": 645, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 573, "absent": 18592 } }, "dnssec": { "n": 19810, "na": 0, "states": { "signed_valid": 1690, "signed_broken": 15, "unsigned": 18105 } }, "https": { "n": 19810, "na": 0, "states": { "https": 10694, "redirects": 0, "http_only": 9116 } }, "tls": { "n": 10694, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 10263, "tls12": 431, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10694, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9536, "invalid": 1158 } }, "hsts": { "n": 10694, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2564, "absent": 8130 } }, "csp": { "n": 7107, "na": 12703, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 578, "weak": 0, "absent": 6529 } }, "clickjacking": { "n": 7107, "na": 12703, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1170, "absent": 5937 } }, "mime_sniffing": { "n": 7107, "na": 12703, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1456, "absent": 5651 } }, "referrer_policy": { "n": 7107, "na": 12703, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 866, "absent": 6241 } }, "secure_by_default": { "n": 5780, "na": 14030, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 142, "not_all": 5638 } }, "ipv6": { "n": 19810, "na": 0, "states": { "aaaa": 4142, "none": 15668 } } } }, "lat": { "graded": 180971, "checks": { "dmarc": { "n": 180971, "na": 0, "states": { "absent": 156059, "none": 13900, "quarantine": 4468, "reject": 6537, "invalid": 7 }, "rua_present": 8437 }, "spf": { "n": 180971, "na": 0, "states": { "absent": 131685, "hardfail": 10335, "softfail": 38659, "neutral": 167, "plus_all": 4, "invalid": 121 } }, "dkim": { "n": 11814, "na": 169157, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 9159, "none_observed": 2655 } }, "mx": { "n": 180971, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 52402, "absent": 128569 } }, "reverse_dns": { "n": 52362, "na": 128609, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 37943, "none": 14419 } }, "caa": { "n": 179476, "na": 1495, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1587, "absent": 177889 } }, "dnssec": { "n": 180971, "na": 0, "states": { "signed_valid": 14912, "signed_broken": 111, "unsigned": 165948 } }, "https": { "n": 180971, "na": 0, "states": { "https": 124982, "redirects": 0, "http_only": 55989 } }, "tls": { "n": 124982, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 122780, "tls12": 2202, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 124982, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 117123, "invalid": 7859 } }, "hsts": { "n": 124982, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 21476, "absent": 103506 } }, "csp": { "n": 74808, "na": 106163, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 5866, "weak": 0, "absent": 68942 } }, "clickjacking": { "n": 74808, "na": 106163, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 11209, "absent": 63599 } }, "mime_sniffing": { "n": 74808, "na": 106163, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 14183, "absent": 60625 } }, "referrer_policy": { "n": 74808, "na": 106163, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 11492, "absent": 63316 } }, "secure_by_default": { "n": 63017, "na": 117954, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 645, "not_all": 62372 } }, "ipv6": { "n": 180971, "na": 0, "states": { "aaaa": 80443, "none": 100528 } } } }, "law": { "graded": 23401, "checks": { "dmarc": { "n": 23401, "na": 0, "states": { "absent": 16125, "none": 2652, "quarantine": 3186, "reject": 1432, "invalid": 6 }, "rua_present": 4805 }, "spf": { "n": 23401, "na": 0, "states": { "absent": 10639, "hardfail": 6725, "softfail": 5717, "neutral": 180, "plus_all": 0, "invalid": 140 } }, "dkim": { "n": 9419, "na": 13982, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3262, "none_observed": 6157 } }, "mx": { "n": 23401, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 14445, "absent": 8956 } }, "reverse_dns": { "n": 14445, "na": 8956, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12948, "none": 1497 } }, "caa": { "n": 23343, "na": 58, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 233, "absent": 23110 } }, "dnssec": { "n": 23401, "na": 0, "states": { "signed_valid": 858, "signed_broken": 6, "unsigned": 22537 } }, "https": { "n": 23401, "na": 0, "states": { "https": 12752, "redirects": 0, "http_only": 10649 } }, "tls": { "n": 12752, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 12212, "tls12": 540, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 12752, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 11246, "invalid": 1506 } }, "hsts": { "n": 12752, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2947, "absent": 9805 } }, "csp": { "n": 7864, "na": 15537, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 786, "weak": 0, "absent": 7078 } }, "clickjacking": { "n": 7864, "na": 15537, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1920, "absent": 5944 } }, "mime_sniffing": { "n": 7864, "na": 15537, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1383, "absent": 6481 } }, "referrer_policy": { "n": 7864, "na": 15537, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 776, "absent": 7088 } }, "secure_by_default": { "n": 5987, "na": 17414, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 95, "not_all": 5892 } }, "ipv6": { "n": 23401, "na": 0, "states": { "aaaa": 2785, "none": 20616 } } } }, "lawyer": { "graded": 7500, "checks": { "dmarc": { "n": 7500, "na": 0, "states": { "absent": 6243, "none": 454, "quarantine": 358, "reject": 444, "invalid": 1 }, "rua_present": 671 }, "spf": { "n": 7500, "na": 0, "states": { "absent": 5156, "hardfail": 833, "softfail": 1384, "neutral": 91, "plus_all": 2, "invalid": 34 } }, "dkim": { "n": 2279, "na": 5221, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 450, "none_observed": 1829 } }, "mx": { "n": 7500, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3940, "absent": 3560 } }, "reverse_dns": { "n": 3939, "na": 3561, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3528, "none": 411 } }, "caa": { "n": 7469, "na": 31, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 47, "absent": 7422 } }, "dnssec": { "n": 7500, "na": 0, "states": { "signed_valid": 491, "signed_broken": 2, "unsigned": 7007 } }, "https": { "n": 7500, "na": 0, "states": { "https": 3075, "redirects": 0, "http_only": 4425 } }, "tls": { "n": 3075, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2922, "tls12": 153, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3075, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2771, "invalid": 304 } }, "hsts": { "n": 3075, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 586, "absent": 2489 } }, "csp": { "n": 1739, "na": 5761, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 165, "weak": 0, "absent": 1574 } }, "clickjacking": { "n": 1739, "na": 5761, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 360, "absent": 1379 } }, "mime_sniffing": { "n": 1739, "na": 5761, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 321, "absent": 1418 } }, "referrer_policy": { "n": 1739, "na": 5761, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 116, "absent": 1623 } }, "secure_by_default": { "n": 1276, "na": 6224, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 16, "not_all": 1260 } }, "ipv6": { "n": 7500, "na": 0, "states": { "aaaa": 805, "none": 6695 } } } }, "legal": { "graded": 21136, "checks": { "dmarc": { "n": 21136, "na": 0, "states": { "absent": 14800, "none": 3208, "quarantine": 1505, "reject": 1621, "invalid": 2 }, "rua_present": 2448 }, "spf": { "n": 21136, "na": 0, "states": { "absent": 9952, "hardfail": 4422, "softfail": 6240, "neutral": 248, "plus_all": 2, "invalid": 272 } }, "dkim": { "n": 6999, "na": 14137, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2855, "none_observed": 4144 } }, "mx": { "n": 21136, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 13392, "absent": 7744 } }, "reverse_dns": { "n": 13390, "na": 7746, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12161, "none": 1229 } }, "caa": { "n": 20462, "na": 674, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 737, "absent": 19725 } }, "dnssec": { "n": 21136, "na": 0, "states": { "signed_valid": 1722, "signed_broken": 8, "unsigned": 19406 } }, "https": { "n": 21136, "na": 0, "states": { "https": 12113, "redirects": 0, "http_only": 9023 } }, "tls": { "n": 12113, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 11546, "tls12": 567, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 12113, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 10719, "invalid": 1394 } }, "hsts": { "n": 12113, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3055, "absent": 9058 } }, "csp": { "n": 7907, "na": 13229, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 730, "weak": 0, "absent": 7177 } }, "clickjacking": { "n": 7907, "na": 13229, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1467, "absent": 6440 } }, "mime_sniffing": { "n": 7907, "na": 13229, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1630, "absent": 6277 } }, "referrer_policy": { "n": 7907, "na": 13229, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 795, "absent": 7112 } }, "secure_by_default": { "n": 6141, "na": 14995, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 122, "not_all": 6019 } }, "ipv6": { "n": 21136, "na": 0, "states": { "aaaa": 4659, "none": 16477 } } } }, "li": { "graded": 34675, "checks": { "dmarc": { "n": 34675, "na": 0, "states": { "absent": 23029, "none": 4175, "quarantine": 3700, "reject": 3763, "invalid": 8 }, "rua_present": 2879 }, "spf": { "n": 34675, "na": 0, "states": { "absent": 11812, "hardfail": 10709, "softfail": 9406, "neutral": 788, "plus_all": 8, "invalid": 1952 } }, "dkim": { "n": 8454, "na": 26221, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 6044, "none_observed": 2410 } }, "mx": { "n": 34675, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 24972, "absent": 9703 } }, "reverse_dns": { "n": 24992, "na": 9683, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 21707, "none": 3285 } }, "caa": { "n": 34587, "na": 88, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1394, "absent": 33193 } }, "dnssec": { "n": 34675, "na": 0, "states": { "signed_valid": 9878, "signed_broken": 29, "unsigned": 24768 } }, "https": { "n": 34675, "na": 0, "states": { "https": 29075, "redirects": 0, "http_only": 5600 } }, "tls": { "n": 29075, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 27092, "tls12": 1983, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 29075, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 26351, "invalid": 2724 } }, "hsts": { "n": 29075, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 6709, "absent": 22366 } }, "csp": { "n": 13455, "na": 21220, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 696, "weak": 0, "absent": 12759 } }, "clickjacking": { "n": 13455, "na": 21220, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1716, "absent": 11739 } }, "mime_sniffing": { "n": 13455, "na": 21220, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2056, "absent": 11399 } }, "referrer_policy": { "n": 13455, "na": 21220, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1338, "absent": 12117 } }, "secure_by_default": { "n": 12809, "na": 21866, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 176, "not_all": 12633 } }, "ipv6": { "n": 34675, "na": 0, "states": { "aaaa": 11251, "none": 23424 } } } }, "life": { "graded": 388095, "checks": { "dmarc": { "n": 388095, "na": 0, "states": { "absent": 313584, "none": 20184, "quarantine": 41753, "reject": 12564, "invalid": 10 }, "rua_present": 52722 }, "spf": { "n": 388095, "na": 0, "states": { "absent": 267134, "hardfail": 39036, "softfail": 79755, "neutral": 1456, "plus_all": 27, "invalid": 687 } }, "dkim": { "n": 42169, "na": 345926, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 15321, "none_observed": 26848 } }, "mx": { "n": 388095, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 134617, "absent": 253478 } }, "reverse_dns": { "n": 134564, "na": 253531, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 107439, "none": 27125 } }, "caa": { "n": 376542, "na": 11553, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3105, "absent": 373437 } }, "dnssec": { "n": 388095, "na": 0, "states": { "signed_valid": 10559, "signed_broken": 101, "unsigned": 377435 } }, "https": { "n": 388095, "na": 0, "states": { "https": 220941, "redirects": 0, "http_only": 167154 } }, "tls": { "n": 220941, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 214930, "tls12": 6011, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 220941, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 205899, "invalid": 15042 } }, "hsts": { "n": 220941, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 44981, "absent": 175960 } }, "csp": { "n": 125055, "na": 263040, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 11306, "weak": 0, "absent": 113749 } }, "clickjacking": { "n": 125055, "na": 263040, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 17852, "absent": 107203 } }, "mime_sniffing": { "n": 125055, "na": 263040, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 24579, "absent": 100476 } }, "referrer_policy": { "n": 125055, "na": 263040, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 16494, "absent": 108561 } }, "secure_by_default": { "n": 112541, "na": 275554, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 862, "not_all": 111679 } }, "ipv6": { "n": 388095, "na": 0, "states": { "aaaa": 109059, "none": 279036 } } } }, "lifestyle": { "graded": 9673, "checks": { "dmarc": { "n": 9673, "na": 0, "states": { "absent": 8830, "none": 272, "quarantine": 416, "reject": 155, "invalid": 0 }, "rua_present": 550 }, "spf": { "n": 9673, "na": 0, "states": { "absent": 8127, "hardfail": 249, "softfail": 1269, "neutral": 28, "plus_all": 0, "invalid": 0 } }, "dkim": { "n": 426, "na": 9247, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 203, "none_observed": 223 } }, "mx": { "n": 9673, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1686, "absent": 7987 } }, "reverse_dns": { "n": 1690, "na": 7983, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1395, "none": 295 } }, "caa": { "n": 9595, "na": 78, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 22, "absent": 9573 } }, "dnssec": { "n": 9673, "na": 0, "states": { "signed_valid": 2173, "signed_broken": 0, "unsigned": 7500 } }, "https": { "n": 9673, "na": 0, "states": { "https": 4307, "redirects": 0, "http_only": 5366 } }, "tls": { "n": 4307, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4221, "tls12": 86, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4307, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3606, "invalid": 701 } }, "hsts": { "n": 4307, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 572, "absent": 3735 } }, "csp": { "n": 2706, "na": 6967, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 331, "weak": 0, "absent": 2375 } }, "clickjacking": { "n": 2706, "na": 6967, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 500, "absent": 2206 } }, "mime_sniffing": { "n": 2706, "na": 6967, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 564, "absent": 2142 } }, "referrer_policy": { "n": 2706, "na": 6967, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 466, "absent": 2240 } }, "secure_by_default": { "n": 2195, "na": 7478, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 62, "not_all": 2133 } }, "ipv6": { "n": 9673, "na": 0, "states": { "aaaa": 2433, "none": 7240 } } } }, "limited": { "graded": 6119, "checks": { "dmarc": { "n": 6119, "na": 0, "states": { "absent": 4680, "none": 679, "quarantine": 323, "reject": 437, "invalid": 0 }, "rua_present": 585 }, "spf": { "n": 6119, "na": 0, "states": { "absent": 3280, "hardfail": 1009, "softfail": 1721, "neutral": 78, "plus_all": 0, "invalid": 31 } }, "dkim": { "n": 1584, "na": 4535, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 743, "none_observed": 841 } }, "mx": { "n": 6119, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3472, "absent": 2647 } }, "reverse_dns": { "n": 3470, "na": 2649, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3014, "none": 456 } }, "caa": { "n": 6090, "na": 29, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 150, "absent": 5940 } }, "dnssec": { "n": 6119, "na": 0, "states": { "signed_valid": 476, "signed_broken": 2, "unsigned": 5641 } }, "https": { "n": 6119, "na": 0, "states": { "https": 2898, "redirects": 0, "http_only": 3221 } }, "tls": { "n": 2898, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2780, "tls12": 118, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2898, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2537, "invalid": 361 } }, "hsts": { "n": 2898, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 599, "absent": 2299 } }, "csp": { "n": 2181, "na": 3938, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 164, "weak": 0, "absent": 2017 } }, "clickjacking": { "n": 2181, "na": 3938, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 375, "absent": 1806 } }, "mime_sniffing": { "n": 2181, "na": 3938, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 364, "absent": 1817 } }, "referrer_policy": { "n": 2181, "na": 3938, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 171, "absent": 2010 } }, "secure_by_default": { "n": 1424, "na": 4695, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 17, "not_all": 1407 } }, "ipv6": { "n": 6119, "na": 0, "states": { "aaaa": 1335, "none": 4784 } } } }, "link": { "graded": 253875, "checks": { "dmarc": { "n": 253875, "na": 0, "states": { "absent": 224920, "none": 12466, "quarantine": 4518, "reject": 11969, "invalid": 2 }, "rua_present": 11339 }, "spf": { "n": 253875, "na": 0, "states": { "absent": 184029, "hardfail": 28350, "softfail": 39246, "neutral": 1711, "plus_all": 12, "invalid": 527 } }, "dkim": { "n": 17068, "na": 236807, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 12239, "none_observed": 4829 } }, "mx": { "n": 253875, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 70539, "absent": 183336 } }, "reverse_dns": { "n": 70503, "na": 183372, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 47052, "none": 23451 } }, "caa": { "n": 251470, "na": 2405, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 4648, "absent": 246822 } }, "dnssec": { "n": 253875, "na": 0, "states": { "signed_valid": 41614, "signed_broken": 184, "unsigned": 212077 } }, "https": { "n": 253875, "na": 0, "states": { "https": 180627, "redirects": 0, "http_only": 73248 } }, "tls": { "n": 180627, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 168593, "tls12": 12034, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 180627, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 167518, "invalid": 13109 } }, "hsts": { "n": 180627, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 37112, "absent": 143515 } }, "csp": { "n": 85416, "na": 168459, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 18288, "weak": 0, "absent": 67128 } }, "clickjacking": { "n": 85416, "na": 168459, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 22823, "absent": 62593 } }, "mime_sniffing": { "n": 85416, "na": 168459, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 12578, "absent": 72838 } }, "referrer_policy": { "n": 85416, "na": 168459, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 8136, "absent": 77280 } }, "secure_by_default": { "n": 77939, "na": 175936, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1005, "not_all": 76934 } }, "ipv6": { "n": 253875, "na": 0, "states": { "aaaa": 54272, "none": 199603 } } } }, "live": { "graded": 536042, "checks": { "dmarc": { "n": 536042, "na": 0, "states": { "absent": 444357, "none": 34138, "quarantine": 38360, "reject": 19179, "invalid": 8 }, "rua_present": 53829 }, "spf": { "n": 536042, "na": 0, "states": { "absent": 382353, "hardfail": 48043, "softfail": 102540, "neutral": 1977, "plus_all": 15, "invalid": 1114 } }, "dkim": { "n": 54382, "na": 481660, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 34812, "none_observed": 19570 } }, "mx": { "n": 536042, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 161397, "absent": 374645 } }, "reverse_dns": { "n": 161365, "na": 374677, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 129995, "none": 31370 } }, "caa": { "n": 510174, "na": 25868, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 6082, "absent": 504092 } }, "dnssec": { "n": 536042, "na": 0, "states": { "signed_valid": 20480, "signed_broken": 216, "unsigned": 515346 } }, "https": { "n": 536042, "na": 0, "states": { "https": 349686, "redirects": 0, "http_only": 186356 } }, "tls": { "n": 349686, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 339922, "tls12": 9764, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 349686, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 329702, "invalid": 19984 } }, "hsts": { "n": 349686, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 66602, "absent": 283084 } }, "csp": { "n": 202491, "na": 333551, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 17974, "weak": 0, "absent": 184517 } }, "clickjacking": { "n": 202491, "na": 333551, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 35986, "absent": 166505 } }, "mime_sniffing": { "n": 202491, "na": 333551, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 48258, "absent": 154233 } }, "referrer_policy": { "n": 202491, "na": 333551, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 33192, "absent": 169299 } }, "secure_by_default": { "n": 182025, "na": 354017, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1598, "not_all": 180427 } }, "ipv6": { "n": 536042, "na": 0, "states": { "aaaa": 183826, "none": 352216 } } } }, "living": { "graded": 20265, "checks": { "dmarc": { "n": 20265, "na": 0, "states": { "absent": 16785, "none": 870, "quarantine": 2304, "reject": 306, "invalid": 0 }, "rua_present": 3109 }, "spf": { "n": 20265, "na": 0, "states": { "absent": 16735, "hardfail": 1722, "softfail": 1780, "neutral": 21, "plus_all": 0, "invalid": 7 } }, "dkim": { "n": 1047, "na": 19218, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 373, "none_observed": 674 } }, "mx": { "n": 20265, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3457, "absent": 16808 } }, "reverse_dns": { "n": 3458, "na": 16807, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2191, "none": 1267 } }, "caa": { "n": 20127, "na": 138, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 37, "absent": 20090 } }, "dnssec": { "n": 20265, "na": 0, "states": { "signed_valid": 7448, "signed_broken": 3, "unsigned": 12814 } }, "https": { "n": 20265, "na": 0, "states": { "https": 6254, "redirects": 0, "http_only": 14011 } }, "tls": { "n": 6254, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6161, "tls12": 93, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6254, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6053, "invalid": 201 } }, "hsts": { "n": 6254, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 917, "absent": 5337 } }, "csp": { "n": 5018, "na": 15247, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1222, "weak": 0, "absent": 3796 } }, "clickjacking": { "n": 5018, "na": 15247, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1409, "absent": 3609 } }, "mime_sniffing": { "n": 5018, "na": 15247, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1531, "absent": 3487 } }, "referrer_policy": { "n": 5018, "na": 15247, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1422, "absent": 3596 } }, "secure_by_default": { "n": 3323, "na": 16942, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 144, "not_all": 3179 } }, "ipv6": { "n": 20265, "na": 0, "states": { "aaaa": 3035, "none": 17230 } } } }, "lk": { "graded": 52876, "checks": { "dmarc": { "n": 52876, "na": 0, "states": { "absent": 31297, "none": 18471, "quarantine": 1793, "reject": 1313, "invalid": 2 }, "rua_present": 6770 }, "spf": { "n": 52876, "na": 0, "states": { "absent": 16411, "hardfail": 6056, "softfail": 29887, "neutral": 368, "plus_all": 19, "invalid": 135 } }, "dkim": { "n": 26444, "na": 26432, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 21218, "none_observed": 5226 } }, "mx": { "n": 52876, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 40119, "absent": 12757 } }, "reverse_dns": { "n": 40094, "na": 12782, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 30216, "none": 9878 } }, "caa": { "n": 51712, "na": 1164, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2046, "absent": 49666 } }, "dnssec": { "n": 52876, "na": 0, "states": { "signed_valid": 95, "signed_broken": 1, "unsigned": 52780 } }, "https": { "n": 52876, "na": 0, "states": { "https": 46464, "redirects": 0, "http_only": 6412 } }, "tls": { "n": 46464, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 45148, "tls12": 1316, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 46464, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 44540, "invalid": 1924 } }, "hsts": { "n": 46464, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 8310, "absent": 38154 } }, "csp": { "n": 33192, "na": 19684, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 5514, "weak": 0, "absent": 27678 } }, "clickjacking": { "n": 33192, "na": 19684, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3937, "absent": 29255 } }, "mime_sniffing": { "n": 33192, "na": 19684, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4701, "absent": 28491 } }, "referrer_policy": { "n": 33192, "na": 19684, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2764, "absent": 30428 } }, "secure_by_default": { "n": 32112, "na": 20764, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 261, "not_all": 31851 } }, "ipv6": { "n": 52876, "na": 0, "states": { "aaaa": 16460, "none": 36416 } } } }, "llc": { "graded": 53207, "checks": { "dmarc": { "n": 53207, "na": 0, "states": { "absent": 38434, "none": 3869, "quarantine": 7609, "reject": 3292, "invalid": 3 }, "rua_present": 9831 }, "spf": { "n": 53207, "na": 0, "states": { "absent": 24106, "hardfail": 8492, "softfail": 20197, "neutral": 278, "plus_all": 3, "invalid": 131 } }, "dkim": { "n": 21196, "na": 32011, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 10603, "none_observed": 10593 } }, "mx": { "n": 53207, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 30980, "absent": 22227 } }, "reverse_dns": { "n": 30971, "na": 22236, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 28626, "none": 2345 } }, "caa": { "n": 52965, "na": 242, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 742, "absent": 52223 } }, "dnssec": { "n": 53207, "na": 0, "states": { "signed_valid": 8536, "signed_broken": 53, "unsigned": 44618 } }, "https": { "n": 53207, "na": 0, "states": { "https": 23524, "redirects": 0, "http_only": 29683 } }, "tls": { "n": 23524, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 23000, "tls12": 524, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 23524, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 21863, "invalid": 1661 } }, "hsts": { "n": 23524, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 8575, "absent": 14949 } }, "csp": { "n": 13669, "na": 39538, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1494, "weak": 0, "absent": 12175 } }, "clickjacking": { "n": 13669, "na": 39538, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4049, "absent": 9620 } }, "mime_sniffing": { "n": 13669, "na": 39538, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4481, "absent": 9188 } }, "referrer_policy": { "n": 13669, "na": 39538, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1664, "absent": 12005 } }, "secure_by_default": { "n": 11733, "na": 41474, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 211, "not_all": 11522 } }, "ipv6": { "n": 53207, "na": 0, "states": { "aaaa": 4659, "none": 48548 } } } }, "loan": { "graded": 18163, "checks": { "dmarc": { "n": 18163, "na": 0, "states": { "absent": 17377, "none": 283, "quarantine": 175, "reject": 328, "invalid": 0 }, "rua_present": 565 }, "spf": { "n": 18163, "na": 0, "states": { "absent": 13583, "hardfail": 3390, "softfail": 1150, "neutral": 33, "plus_all": 1, "invalid": 6 } }, "dkim": { "n": 549, "na": 17614, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 327, "none_observed": 222 } }, "mx": { "n": 18163, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4596, "absent": 13567 } }, "reverse_dns": { "n": 4597, "na": 13566, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4154, "none": 443 } }, "caa": { "n": 18051, "na": 112, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 58, "absent": 17993 } }, "dnssec": { "n": 18163, "na": 0, "states": { "signed_valid": 421, "signed_broken": 1, "unsigned": 17741 } }, "https": { "n": 18163, "na": 0, "states": { "https": 9891, "redirects": 0, "http_only": 8272 } }, "tls": { "n": 9891, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8849, "tls12": 1042, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9891, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7634, "invalid": 2257 } }, "hsts": { "n": 9891, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1483, "absent": 8408 } }, "csp": { "n": 6123, "na": 12040, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 239, "weak": 0, "absent": 5884 } }, "clickjacking": { "n": 6123, "na": 12040, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 488, "absent": 5635 } }, "mime_sniffing": { "n": 6123, "na": 12040, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 517, "absent": 5606 } }, "referrer_policy": { "n": 6123, "na": 12040, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 453, "absent": 5670 } }, "secure_by_default": { "n": 4569, "na": 13594, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 42, "not_all": 4527 } }, "ipv6": { "n": 18163, "na": 0, "states": { "aaaa": 2007, "none": 16156 } } } }, "locker": { "graded": 6135, "checks": { "dmarc": { "n": 6135, "na": 0, "states": { "absent": 5816, "none": 66, "quarantine": 141, "reject": 112, "invalid": 0 }, "rua_present": 241 }, "spf": { "n": 6135, "na": 0, "states": { "absent": 5356, "hardfail": 127, "softfail": 642, "neutral": 3, "plus_all": 1, "invalid": 6 } }, "dkim": { "n": 115, "na": 6020, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 76, "none_observed": 39 } }, "mx": { "n": 6135, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 927, "absent": 5208 } }, "reverse_dns": { "n": 927, "na": 5208, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 863, "none": 64 } }, "caa": { "n": 6090, "na": 45, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 39, "absent": 6051 } }, "dnssec": { "n": 6135, "na": 0, "states": { "signed_valid": 117, "signed_broken": 1, "unsigned": 6017 } }, "https": { "n": 6135, "na": 0, "states": { "https": 4468, "redirects": 0, "http_only": 1667 } }, "tls": { "n": 4468, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4356, "tls12": 112, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4468, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3874, "invalid": 594 } }, "hsts": { "n": 4468, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1835, "absent": 2633 } }, "csp": { "n": 1755, "na": 4380, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 148, "weak": 0, "absent": 1607 } }, "clickjacking": { "n": 1755, "na": 4380, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 275, "absent": 1480 } }, "mime_sniffing": { "n": 1755, "na": 4380, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 272, "absent": 1483 } }, "referrer_policy": { "n": 1755, "na": 4380, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 248, "absent": 1507 } }, "secure_by_default": { "n": 1462, "na": 4673, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 45, "not_all": 1417 } }, "ipv6": { "n": 6135, "na": 0, "states": { "aaaa": 776, "none": 5359 } } } }, "lol": { "graded": 1017425, "checks": { "dmarc": { "n": 1017425, "na": 0, "states": { "absent": 994226, "none": 12855, "quarantine": 6749, "reject": 3592, "invalid": 3 }, "rua_present": 9388 }, "spf": { "n": 1017425, "na": 0, "states": { "absent": 936359, "hardfail": 32682, "softfail": 47445, "neutral": 642, "plus_all": 3, "invalid": 294 } }, "dkim": { "n": 9394, "na": 1008031, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 7044, "none_observed": 2350 } }, "mx": { "n": 1017425, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 86763, "absent": 930662 } }, "reverse_dns": { "n": 86738, "na": 930687, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 71563, "none": 15175 } }, "caa": { "n": 1001820, "na": 15605, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 4434, "absent": 997386 } }, "dnssec": { "n": 1017425, "na": 0, "states": { "signed_valid": 19614, "signed_broken": 147, "unsigned": 997664 } }, "https": { "n": 1017425, "na": 0, "states": { "https": 254135, "redirects": 0, "http_only": 763290 } }, "tls": { "n": 254135, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 250179, "tls12": 3956, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 254135, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 237560, "invalid": 16575 } }, "hsts": { "n": 254135, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 146976, "absent": 107159 } }, "csp": { "n": 191033, "na": 826392, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 8081, "weak": 0, "absent": 182952 } }, "clickjacking": { "n": 191033, "na": 826392, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 13292, "absent": 177741 } }, "mime_sniffing": { "n": 191033, "na": 826392, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 16513, "absent": 174520 } }, "referrer_policy": { "n": 191033, "na": 826392, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 14079, "absent": 176954 } }, "secure_by_default": { "n": 174359, "na": 843066, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 922, "not_all": 173437 } }, "ipv6": { "n": 1017425, "na": 0, "states": { "aaaa": 74986, "none": 942439 } } } }, "london": { "graded": 33289, "checks": { "dmarc": { "n": 33289, "na": 0, "states": { "absent": 23966, "none": 4683, "quarantine": 2589, "reject": 2050, "invalid": 1 }, "rua_present": 4666 }, "spf": { "n": 33289, "na": 0, "states": { "absent": 19334, "hardfail": 5092, "softfail": 8349, "neutral": 446, "plus_all": 0, "invalid": 68 } }, "dkim": { "n": 7415, "na": 25874, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2276, "none_observed": 5139 } }, "mx": { "n": 33289, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 19748, "absent": 13541 } }, "reverse_dns": { "n": 19746, "na": 13543, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 17773, "none": 1973 } }, "caa": { "n": 33189, "na": 100, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 251, "absent": 32938 } }, "dnssec": { "n": 33289, "na": 0, "states": { "signed_valid": 1079, "signed_broken": 11, "unsigned": 32199 } }, "https": { "n": 33289, "na": 0, "states": { "https": 17179, "redirects": 0, "http_only": 16110 } }, "tls": { "n": 17179, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 16542, "tls12": 637, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 17179, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 15637, "invalid": 1542 } }, "hsts": { "n": 17179, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3607, "absent": 13572 } }, "csp": { "n": 12824, "na": 20465, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1404, "weak": 0, "absent": 11420 } }, "clickjacking": { "n": 12824, "na": 20465, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1961, "absent": 10863 } }, "mime_sniffing": { "n": 12824, "na": 20465, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1763, "absent": 11061 } }, "referrer_policy": { "n": 12824, "na": 20465, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1079, "absent": 11745 } }, "secure_by_default": { "n": 8393, "na": 24896, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 128, "not_all": 8265 } }, "ipv6": { "n": 33289, "na": 0, "states": { "aaaa": 6002, "none": 27287 } } } }, "love": { "graded": 56434, "checks": { "dmarc": { "n": 56434, "na": 0, "states": { "absent": 46941, "none": 3947, "quarantine": 3648, "reject": 1898, "invalid": 0 }, "rua_present": 5153 }, "spf": { "n": 56434, "na": 0, "states": { "absent": 37749, "hardfail": 5772, "softfail": 12225, "neutral": 474, "plus_all": 2, "invalid": 212 } }, "dkim": { "n": 7264, "na": 49170, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3327, "none_observed": 3937 } }, "mx": { "n": 56434, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 21029, "absent": 35405 } }, "reverse_dns": { "n": 21017, "na": 35417, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 16874, "none": 4143 } }, "caa": { "n": 55893, "na": 541, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 693, "absent": 55200 } }, "dnssec": { "n": 56434, "na": 0, "states": { "signed_valid": 2839, "signed_broken": 33, "unsigned": 53562 } }, "https": { "n": 56434, "na": 0, "states": { "https": 29690, "redirects": 0, "http_only": 26744 } }, "tls": { "n": 29690, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 28568, "tls12": 1122, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 29690, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 25813, "invalid": 3877 } }, "hsts": { "n": 29690, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 8828, "absent": 20862 } }, "csp": { "n": 18794, "na": 37640, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1367, "weak": 0, "absent": 17427 } }, "clickjacking": { "n": 18794, "na": 37640, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2805, "absent": 15989 } }, "mime_sniffing": { "n": 18794, "na": 37640, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3867, "absent": 14927 } }, "referrer_policy": { "n": 18794, "na": 37640, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2118, "absent": 16676 } }, "secure_by_default": { "n": 16122, "na": 40312, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 196, "not_all": 15926 } }, "ipv6": { "n": 56434, "na": 0, "states": { "aaaa": 7978, "none": 48456 } } } }, "lt": { "graded": 176194, "checks": { "dmarc": { "n": 176194, "na": 0, "states": { "absent": 124675, "none": 41562, "quarantine": 5357, "reject": 4577, "invalid": 23 }, "rua_present": 11790 }, "spf": { "n": 176194, "na": 0, "states": { "absent": 45951, "hardfail": 19745, "softfail": 56420, "neutral": 4093, "plus_all": 18, "invalid": 49967 } }, "dkim": { "n": 31654, "na": 144540, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 18556, "none_observed": 13098 } }, "mx": { "n": 176194, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 138258, "absent": 37936 } }, "reverse_dns": { "n": 138698, "na": 37496, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 103430, "none": 35268 } }, "caa": { "n": 175746, "na": 448, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3037, "absent": 172709 } }, "dnssec": { "n": 176194, "na": 0, "states": { "signed_valid": 6890, "signed_broken": 37, "unsigned": 169267 } }, "https": { "n": 176194, "na": 0, "states": { "https": 155604, "redirects": 0, "http_only": 20590 } }, "tls": { "n": 155604, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 146704, "tls12": 8900, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 155604, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 138925, "invalid": 16679 } }, "hsts": { "n": 155604, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 22818, "absent": 132786 } }, "csp": { "n": 103178, "na": 73016, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 27706, "weak": 0, "absent": 75472 } }, "clickjacking": { "n": 103178, "na": 73016, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 14795, "absent": 88383 } }, "mime_sniffing": { "n": 103178, "na": 73016, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 16698, "absent": 86480 } }, "referrer_policy": { "n": 103178, "na": 73016, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 6326, "absent": 96852 } }, "secure_by_default": { "n": 96908, "na": 79286, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 965, "not_all": 95943 } }, "ipv6": { "n": 176194, "na": 0, "states": { "aaaa": 53270, "none": 122924 } } } }, "ltd": { "graded": 100375, "checks": { "dmarc": { "n": 100375, "na": 0, "states": { "absent": 79008, "none": 9201, "quarantine": 8167, "reject": 3993, "invalid": 6 }, "rua_present": 12406 }, "spf": { "n": 100375, "na": 0, "states": { "absent": 60186, "hardfail": 16555, "softfail": 22704, "neutral": 442, "plus_all": 4, "invalid": 484 } }, "dkim": { "n": 20689, "na": 79686, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 10224, "none_observed": 10465 } }, "mx": { "n": 100375, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 47857, "absent": 52518 } }, "reverse_dns": { "n": 47812, "na": 52563, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 32845, "none": 14967 } }, "caa": { "n": 98693, "na": 1682, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 920, "absent": 97773 } }, "dnssec": { "n": 100375, "na": 0, "states": { "signed_valid": 4044, "signed_broken": 36, "unsigned": 96295 } }, "https": { "n": 100375, "na": 0, "states": { "https": 43659, "redirects": 0, "http_only": 56716 } }, "tls": { "n": 43659, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 40997, "tls12": 2662, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 43659, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 37652, "invalid": 6007 } }, "hsts": { "n": 43659, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 8520, "absent": 35139 } }, "csp": { "n": 32837, "na": 67538, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2650, "weak": 0, "absent": 30187 } }, "clickjacking": { "n": 32837, "na": 67538, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4667, "absent": 28170 } }, "mime_sniffing": { "n": 32837, "na": 67538, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 5075, "absent": 27762 } }, "referrer_policy": { "n": 32837, "na": 67538, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2739, "absent": 30098 } }, "secure_by_default": { "n": 26572, "na": 73803, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 174, "not_all": 26398 } }, "ipv6": { "n": 100375, "na": 0, "states": { "aaaa": 14216, "none": 86159 } } } }, "lu": { "graded": 62197, "checks": { "dmarc": { "n": 62197, "na": 0, "states": { "absent": 41154, "none": 9932, "quarantine": 6171, "reject": 4928, "invalid": 12 }, "rua_present": 7910 }, "spf": { "n": 62197, "na": 0, "states": { "absent": 19355, "hardfail": 22289, "softfail": 17875, "neutral": 2115, "plus_all": 44, "invalid": 519 } }, "dkim": { "n": 21382, "na": 40815, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 14015, "none_observed": 7367 } }, "mx": { "n": 62197, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 47457, "absent": 14740 } }, "reverse_dns": { "n": 47481, "na": 14716, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 43021, "none": 4460 } }, "caa": { "n": 62111, "na": 86, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1361, "absent": 60750 } }, "dnssec": { "n": 62197, "na": 0, "states": { "signed_valid": 6627, "signed_broken": 125, "unsigned": 55445 } }, "https": { "n": 62197, "na": 0, "states": { "https": 52012, "redirects": 0, "http_only": 10185 } }, "tls": { "n": 52012, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 48454, "tls12": 3558, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 52012, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 47053, "invalid": 4959 } }, "hsts": { "n": 52012, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 11829, "absent": 40183 } }, "csp": { "n": 26920, "na": 35277, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2589, "weak": 0, "absent": 24331 } }, "clickjacking": { "n": 26920, "na": 35277, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4112, "absent": 22808 } }, "mime_sniffing": { "n": 26920, "na": 35277, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 5405, "absent": 21515 } }, "referrer_policy": { "n": 26920, "na": 35277, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2798, "absent": 24122 } }, "secure_by_default": { "n": 25719, "na": 36478, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 338, "not_all": 25381 } }, "ipv6": { "n": 62197, "na": 0, "states": { "aaaa": 15576, "none": 46621 } } } }, "luxe": { "graded": 11792, "checks": { "dmarc": { "n": 11792, "na": 0, "states": { "absent": 11195, "none": 110, "quarantine": 285, "reject": 202, "invalid": 0 }, "rua_present": 446 }, "spf": { "n": 11792, "na": 0, "states": { "absent": 10160, "hardfail": 1189, "softfail": 353, "neutral": 76, "plus_all": 0, "invalid": 14 } }, "dkim": { "n": 236, "na": 11556, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 120, "none_observed": 116 } }, "mx": { "n": 11792, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1641, "absent": 10151 } }, "reverse_dns": { "n": 1642, "na": 10150, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 596, "none": 1046 } }, "caa": { "n": 11733, "na": 59, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 42, "absent": 11691 } }, "dnssec": { "n": 11792, "na": 0, "states": { "signed_valid": 230, "signed_broken": 0, "unsigned": 11562 } }, "https": { "n": 11792, "na": 0, "states": { "https": 2222, "redirects": 0, "http_only": 9570 } }, "tls": { "n": 2222, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2171, "tls12": 51, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2222, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2043, "invalid": 179 } }, "hsts": { "n": 2222, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 210, "absent": 2012 } }, "csp": { "n": 1819, "na": 9973, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 207, "weak": 0, "absent": 1612 } }, "clickjacking": { "n": 1819, "na": 9973, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 217, "absent": 1602 } }, "mime_sniffing": { "n": 1819, "na": 9973, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 222, "absent": 1597 } }, "referrer_policy": { "n": 1819, "na": 9973, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 169, "absent": 1650 } }, "secure_by_default": { "n": 1373, "na": 10419, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 26, "not_all": 1347 } }, "ipv6": { "n": 11792, "na": 0, "states": { "aaaa": 723, "none": 11069 } } } }, "lv": { "graded": 99092, "checks": { "dmarc": { "n": 99092, "na": 0, "states": { "absent": 72920, "none": 14692, "quarantine": 5302, "reject": 6172, "invalid": 6 }, "rua_present": 10173 }, "spf": { "n": 99092, "na": 0, "states": { "absent": 43711, "hardfail": 18680, "softfail": 33958, "neutral": 1496, "plus_all": 29, "invalid": 1218 } }, "dkim": { "n": 37943, "na": 61149, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 27382, "none_observed": 10561 } }, "mx": { "n": 99092, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 63567, "absent": 35525 } }, "reverse_dns": { "n": 65702, "na": 33390, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 55472, "none": 10230 } }, "caa": { "n": 98761, "na": 331, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3006, "absent": 95755 } }, "dnssec": { "n": 99092, "na": 0, "states": { "signed_valid": 11609, "signed_broken": 97, "unsigned": 87386 } }, "https": { "n": 99092, "na": 0, "states": { "https": 88848, "redirects": 0, "http_only": 10244 } }, "tls": { "n": 88848, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 83297, "tls12": 5551, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 88848, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 82003, "invalid": 6845 } }, "hsts": { "n": 88848, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 15775, "absent": 73073 } }, "csp": { "n": 45506, "na": 53586, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 5270, "weak": 0, "absent": 40236 } }, "clickjacking": { "n": 45506, "na": 53586, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 7532, "absent": 37974 } }, "mime_sniffing": { "n": 45506, "na": 53586, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 8710, "absent": 36796 } }, "referrer_policy": { "n": 45506, "na": 53586, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4837, "absent": 40669 } }, "secure_by_default": { "n": 44582, "na": 54510, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 459, "not_all": 44123 } }, "ipv6": { "n": 99092, "na": 0, "states": { "aaaa": 22728, "none": 76364 } } } }, "ly": { "graded": 27774, "checks": { "dmarc": { "n": 27774, "na": 0, "states": { "absent": 16826, "none": 9176, "quarantine": 1280, "reject": 491, "invalid": 1 }, "rua_present": 1186 }, "spf": { "n": 27774, "na": 0, "states": { "absent": 7019, "hardfail": 15246, "softfail": 5350, "neutral": 113, "plus_all": 0, "invalid": 46 } }, "dkim": { "n": 17183, "na": 10591, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 15847, "none_observed": 1336 } }, "mx": { "n": 27774, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 21688, "absent": 6086 } }, "reverse_dns": { "n": 21560, "na": 6214, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 19613, "none": 1947 } }, "caa": { "n": 27296, "na": 478, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 556, "absent": 26740 } }, "dnssec": { "n": 27774, "na": 0, "states": { "signed_valid": 360, "signed_broken": 8, "unsigned": 27406 } }, "https": { "n": 27774, "na": 0, "states": { "https": 25997, "redirects": 0, "http_only": 1777 } }, "tls": { "n": 25997, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 25295, "tls12": 702, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 25997, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 25063, "invalid": 934 } }, "hsts": { "n": 25997, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2823, "absent": 23174 } }, "csp": { "n": 19022, "na": 8752, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1046, "weak": 0, "absent": 17976 } }, "clickjacking": { "n": 19022, "na": 8752, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1530, "absent": 17492 } }, "mime_sniffing": { "n": 19022, "na": 8752, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1765, "absent": 17257 } }, "referrer_policy": { "n": 19022, "na": 8752, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1277, "absent": 17745 } }, "secure_by_default": { "n": 18870, "na": 8904, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 152, "not_all": 18718 } }, "ipv6": { "n": 27774, "na": 0, "states": { "aaaa": 5332, "none": 22442 } } } }, "ma": { "graded": 73570, "checks": { "dmarc": { "n": 73570, "na": 0, "states": { "absent": 44211, "none": 25022, "quarantine": 2258, "reject": 2072, "invalid": 7 }, "rua_present": 5475 }, "spf": { "n": 73570, "na": 0, "states": { "absent": 22679, "hardfail": 14504, "softfail": 35682, "neutral": 542, "plus_all": 13, "invalid": 150 } }, "dkim": { "n": 37253, "na": 36317, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 30965, "none_observed": 6288 } }, "mx": { "n": 73570, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 58280, "absent": 15290 } }, "reverse_dns": { "n": 58259, "na": 15311, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 44469, "none": 13790 } }, "caa": { "n": 73108, "na": 462, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3056, "absent": 70052 } }, "dnssec": { "n": 73570, "na": 0, "states": { "signed_valid": 49, "signed_broken": 1, "unsigned": 73520 } }, "https": { "n": 73570, "na": 0, "states": { "https": 65737, "redirects": 0, "http_only": 7833 } }, "tls": { "n": 65737, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 64355, "tls12": 1382, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 65737, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 61988, "invalid": 3749 } }, "hsts": { "n": 65737, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 11544, "absent": 54193 } }, "csp": { "n": 42695, "na": 30875, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 9179, "weak": 0, "absent": 33516 } }, "clickjacking": { "n": 42695, "na": 30875, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 5781, "absent": 36914 } }, "mime_sniffing": { "n": 42695, "na": 30875, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 6799, "absent": 35896 } }, "referrer_policy": { "n": 42695, "na": 30875, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3807, "absent": 38888 } }, "secure_by_default": { "n": 41852, "na": 31718, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 465, "not_all": 41387 } }, "ipv6": { "n": 73570, "na": 0, "states": { "aaaa": 20069, "none": 53501 } } } }, "makeup": { "graded": 42814, "checks": { "dmarc": { "n": 42814, "na": 0, "states": { "absent": 42184, "none": 337, "quarantine": 163, "reject": 130, "invalid": 0 }, "rua_present": 304 }, "spf": { "n": 42814, "na": 0, "states": { "absent": 40907, "hardfail": 441, "softfail": 1435, "neutral": 14, "plus_all": 0, "invalid": 17 } }, "dkim": { "n": 391, "na": 42423, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 234, "none_observed": 157 } }, "mx": { "n": 42814, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2551, "absent": 40263 } }, "reverse_dns": { "n": 2555, "na": 40259, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1827, "none": 728 } }, "caa": { "n": 41925, "na": 889, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 84, "absent": 41841 } }, "dnssec": { "n": 42814, "na": 0, "states": { "signed_valid": 11778, "signed_broken": 41, "unsigned": 30995 } }, "https": { "n": 42814, "na": 0, "states": { "https": 11742, "redirects": 0, "http_only": 31072 } }, "tls": { "n": 11742, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 11252, "tls12": 490, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 11742, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9146, "invalid": 2596 } }, "hsts": { "n": 11742, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1687, "absent": 10055 } }, "csp": { "n": 4921, "na": 37893, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 672, "weak": 0, "absent": 4249 } }, "clickjacking": { "n": 4921, "na": 37893, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1155, "absent": 3766 } }, "mime_sniffing": { "n": 4921, "na": 37893, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1108, "absent": 3813 } }, "referrer_policy": { "n": 4921, "na": 37893, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 894, "absent": 4027 } }, "secure_by_default": { "n": 3666, "na": 39148, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 243, "not_all": 3423 } }, "ipv6": { "n": 42814, "na": 0, "states": { "aaaa": 7364, "none": 35450 } } } }, "management": { "graded": 11282, "checks": { "dmarc": { "n": 11282, "na": 0, "states": { "absent": 8604, "none": 1366, "quarantine": 573, "reject": 739, "invalid": 0 }, "rua_present": 988 }, "spf": { "n": 11282, "na": 0, "states": { "absent": 6054, "hardfail": 1816, "softfail": 3129, "neutral": 191, "plus_all": 2, "invalid": 90 } }, "dkim": { "n": 2791, "na": 8491, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1162, "none_observed": 1629 } }, "mx": { "n": 11282, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6598, "absent": 4684 } }, "reverse_dns": { "n": 6597, "na": 4685, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5678, "none": 919 } }, "caa": { "n": 10875, "na": 407, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 229, "absent": 10646 } }, "dnssec": { "n": 11282, "na": 0, "states": { "signed_valid": 1142, "signed_broken": 7, "unsigned": 10133 } }, "https": { "n": 11282, "na": 0, "states": { "https": 5358, "redirects": 0, "http_only": 5924 } }, "tls": { "n": 5358, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5093, "tls12": 265, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5358, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4601, "invalid": 757 } }, "hsts": { "n": 5358, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1412, "absent": 3946 } }, "csp": { "n": 3857, "na": 7425, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 412, "weak": 0, "absent": 3445 } }, "clickjacking": { "n": 3857, "na": 7425, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 753, "absent": 3104 } }, "mime_sniffing": { "n": 3857, "na": 7425, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 743, "absent": 3114 } }, "referrer_policy": { "n": 3857, "na": 7425, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 368, "absent": 3489 } }, "secure_by_default": { "n": 2852, "na": 8430, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 59, "not_all": 2793 } }, "ipv6": { "n": 11282, "na": 0, "states": { "aaaa": 2033, "none": 9249 } } } }, "market": { "graded": 17104, "checks": { "dmarc": { "n": 17104, "na": 0, "states": { "absent": 13618, "none": 1577, "quarantine": 993, "reject": 916, "invalid": 0 }, "rua_present": 1671 }, "spf": { "n": 17104, "na": 0, "states": { "absent": 9986, "hardfail": 2271, "softfail": 4134, "neutral": 230, "plus_all": 2, "invalid": 481 } }, "dkim": { "n": 2783, "na": 14321, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1542, "none_observed": 1241 } }, "mx": { "n": 17104, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8110, "absent": 8994 } }, "reverse_dns": { "n": 8101, "na": 9003, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6408, "none": 1693 } }, "caa": { "n": 16614, "na": 490, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 404, "absent": 16210 } }, "dnssec": { "n": 17104, "na": 0, "states": { "signed_valid": 1061, "signed_broken": 9, "unsigned": 16034 } }, "https": { "n": 17104, "na": 0, "states": { "https": 9208, "redirects": 0, "http_only": 7896 } }, "tls": { "n": 9208, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8737, "tls12": 471, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9208, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8280, "invalid": 928 } }, "hsts": { "n": 9208, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2446, "absent": 6762 } }, "csp": { "n": 7151, "na": 9953, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 714, "weak": 0, "absent": 6437 } }, "clickjacking": { "n": 7151, "na": 9953, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1467, "absent": 5684 } }, "mime_sniffing": { "n": 7151, "na": 9953, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1520, "absent": 5631 } }, "referrer_policy": { "n": 7151, "na": 9953, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 844, "absent": 6307 } }, "secure_by_default": { "n": 5763, "na": 11341, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 144, "not_all": 5619 } }, "ipv6": { "n": 17104, "na": 0, "states": { "aaaa": 2587, "none": 14517 } } } }, "marketing": { "graded": 26423, "checks": { "dmarc": { "n": 26423, "na": 0, "states": { "absent": 18587, "none": 3953, "quarantine": 2345, "reject": 1535, "invalid": 3 }, "rua_present": 3930 }, "spf": { "n": 26423, "na": 0, "states": { "absent": 13563, "hardfail": 4061, "softfail": 8354, "neutral": 269, "plus_all": 1, "invalid": 175 } }, "dkim": { "n": 7779, "na": 18644, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3589, "none_observed": 4190 } }, "mx": { "n": 26423, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 15161, "absent": 11262 } }, "reverse_dns": { "n": 15161, "na": 11262, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12644, "none": 2517 } }, "caa": { "n": 25739, "na": 684, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 564, "absent": 25175 } }, "dnssec": { "n": 26423, "na": 0, "states": { "signed_valid": 1735, "signed_broken": 17, "unsigned": 24671 } }, "https": { "n": 26423, "na": 0, "states": { "https": 15435, "redirects": 0, "http_only": 10988 } }, "tls": { "n": 15435, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 14928, "tls12": 507, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 15435, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 13983, "invalid": 1452 } }, "hsts": { "n": 15435, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3713, "absent": 11722 } }, "csp": { "n": 9989, "na": 16434, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1180, "weak": 0, "absent": 8809 } }, "clickjacking": { "n": 9989, "na": 16434, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1685, "absent": 8304 } }, "mime_sniffing": { "n": 9989, "na": 16434, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2008, "absent": 7981 } }, "referrer_policy": { "n": 9989, "na": 16434, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1028, "absent": 8961 } }, "secure_by_default": { "n": 8613, "na": 17810, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 177, "not_all": 8436 } }, "ipv6": { "n": 26423, "na": 0, "states": { "aaaa": 4488, "none": 21935 } } } }, "markets": { "graded": 6090, "checks": { "dmarc": { "n": 6090, "na": 0, "states": { "absent": 5392, "none": 348, "quarantine": 71, "reject": 279, "invalid": 0 }, "rua_present": 315 }, "spf": { "n": 6090, "na": 0, "states": { "absent": 3130, "hardfail": 711, "softfail": 2145, "neutral": 89, "plus_all": 0, "invalid": 15 } }, "dkim": { "n": 554, "na": 5536, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 351, "none_observed": 203 } }, "mx": { "n": 6090, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3032, "absent": 3058 } }, "reverse_dns": { "n": 3031, "na": 3059, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2427, "none": 604 } }, "caa": { "n": 6056, "na": 34, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 431, "absent": 5625 } }, "dnssec": { "n": 6090, "na": 0, "states": { "signed_valid": 444, "signed_broken": 5, "unsigned": 5641 } }, "https": { "n": 6090, "na": 0, "states": { "https": 3473, "redirects": 0, "http_only": 2617 } }, "tls": { "n": 3473, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3441, "tls12": 32, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3473, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3257, "invalid": 216 } }, "hsts": { "n": 3473, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1114, "absent": 2359 } }, "csp": { "n": 2469, "na": 3621, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 623, "weak": 0, "absent": 1846 } }, "clickjacking": { "n": 2469, "na": 3621, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 750, "absent": 1719 } }, "mime_sniffing": { "n": 2469, "na": 3621, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 819, "absent": 1650 } }, "referrer_policy": { "n": 2469, "na": 3621, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 748, "absent": 1721 } }, "secure_by_default": { "n": 1928, "na": 4162, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 370, "not_all": 1558 } }, "ipv6": { "n": 6090, "na": 0, "states": { "aaaa": 1205, "none": 4885 } } } }, "md": { "graded": 12940, "checks": { "dmarc": { "n": 12940, "na": 0, "states": { "absent": 9573, "none": 2484, "quarantine": 511, "reject": 370, "invalid": 2 }, "rua_present": 948 }, "spf": { "n": 12940, "na": 0, "states": { "absent": 4883, "hardfail": 1465, "softfail": 5435, "neutral": 115, "plus_all": 6, "invalid": 1036 } }, "dkim": { "n": 5401, "na": 7539, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4564, "none_observed": 837 } }, "mx": { "n": 12940, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8938, "absent": 4002 } }, "reverse_dns": { "n": 8551, "na": 4389, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7087, "none": 1464 } }, "caa": { "n": 11588, "na": 1352, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 493, "absent": 11095 } }, "dnssec": { "n": 12940, "na": 0, "states": { "signed_valid": 65, "signed_broken": 2, "unsigned": 12873 } }, "https": { "n": 12940, "na": 0, "states": { "https": 10955, "redirects": 0, "http_only": 1985 } }, "tls": { "n": 10955, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 10344, "tls12": 611, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10955, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 10436, "invalid": 519 } }, "hsts": { "n": 10955, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2070, "absent": 8885 } }, "csp": { "n": 7123, "na": 5817, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 544, "weak": 0, "absent": 6579 } }, "clickjacking": { "n": 7123, "na": 5817, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1392, "absent": 5731 } }, "mime_sniffing": { "n": 7123, "na": 5817, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1592, "absent": 5531 } }, "referrer_policy": { "n": 7123, "na": 5817, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 973, "absent": 6150 } }, "secure_by_default": { "n": 7055, "na": 5885, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 101, "not_all": 6954 } }, "ipv6": { "n": 12940, "na": 0, "states": { "aaaa": 2895, "none": 10045 } } } }, "me": { "graded": 845470, "checks": { "dmarc": { "n": 845470, "na": 0, "states": { "absent": 670724, "none": 80164, "quarantine": 61850, "reject": 32671, "invalid": 61 }, "rua_present": 86759 }, "spf": { "n": 845470, "na": 0, "states": { "absent": 490256, "hardfail": 112180, "softfail": 225520, "neutral": 12771, "plus_all": 78, "invalid": 4665 } }, "dkim": { "n": 184682, "na": 660788, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 81590, "none_observed": 103092 } }, "mx": { "n": 845470, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 423594, "absent": 421876 } }, "reverse_dns": { "n": 423463, "na": 422007, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 341754, "none": 81709 } }, "caa": { "n": 839320, "na": 6150, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 17338, "absent": 821982 } }, "dnssec": { "n": 845470, "na": 0, "states": { "signed_valid": 44259, "signed_broken": 336, "unsigned": 800875 } }, "https": { "n": 845470, "na": 0, "states": { "https": 570037, "redirects": 0, "http_only": 275433 } }, "tls": { "n": 570037, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 548963, "tls12": 21074, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 570037, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 534961, "invalid": 35076 } }, "hsts": { "n": 570037, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 139203, "absent": 430834 } }, "csp": { "n": 344274, "na": 501196, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 27798, "weak": 0, "absent": 316476 } }, "clickjacking": { "n": 344274, "na": 501196, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 47432, "absent": 296842 } }, "mime_sniffing": { "n": 344274, "na": 501196, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 63123, "absent": 281151 } }, "referrer_policy": { "n": 344274, "na": 501196, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 36014, "absent": 308260 } }, "secure_by_default": { "n": 323536, "na": 521934, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 4809, "not_all": 318727 } }, "ipv6": { "n": 845470, "na": 0, "states": { "aaaa": 187479, "none": 657991 } } } }, "media": { "graded": 95510, "checks": { "dmarc": { "n": 95510, "na": 0, "states": { "absent": 73626, "none": 10600, "quarantine": 7130, "reject": 4146, "invalid": 8 }, "rua_present": 10560 }, "spf": { "n": 95510, "na": 0, "states": { "absent": 57235, "hardfail": 11710, "softfail": 24835, "neutral": 1143, "plus_all": 8, "invalid": 579 } }, "dkim": { "n": 23885, "na": 71625, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 11408, "none_observed": 12477 } }, "mx": { "n": 95510, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 45863, "absent": 49647 } }, "reverse_dns": { "n": 45856, "na": 49654, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 37878, "none": 7978 } }, "caa": { "n": 92627, "na": 2883, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1771, "absent": 90856 } }, "dnssec": { "n": 95510, "na": 0, "states": { "signed_valid": 5734, "signed_broken": 66, "unsigned": 89710 } }, "https": { "n": 95510, "na": 0, "states": { "https": 64143, "redirects": 0, "http_only": 31367 } }, "tls": { "n": 64143, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 47567, "tls12": 16576, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 64143, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 59367, "invalid": 4776 } }, "hsts": { "n": 64143, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 12330, "absent": 51813 } }, "csp": { "n": 42499, "na": 53011, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 3794, "weak": 0, "absent": 38705 } }, "clickjacking": { "n": 42499, "na": 53011, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 5514, "absent": 36985 } }, "mime_sniffing": { "n": 42499, "na": 53011, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 6752, "absent": 35747 } }, "referrer_policy": { "n": 42499, "na": 53011, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3171, "absent": 39328 } }, "secure_by_default": { "n": 38280, "na": 57230, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 573, "not_all": 37707 } }, "ipv6": { "n": 95510, "na": 0, "states": { "aaaa": 30585, "none": 64925 } } } }, "meme": { "graded": 5304, "checks": { "dmarc": { "n": 5304, "na": 0, "states": { "absent": 4501, "none": 244, "quarantine": 300, "reject": 259, "invalid": 0 }, "rua_present": 437 }, "spf": { "n": 5304, "na": 0, "states": { "absent": 3313, "hardfail": 377, "softfail": 1571, "neutral": 40, "plus_all": 0, "invalid": 3 } }, "dkim": { "n": 432, "na": 4872, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 268, "none_observed": 164 } }, "mx": { "n": 5304, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1943, "absent": 3361 } }, "reverse_dns": { "n": 1943, "na": 3361, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1658, "none": 285 } }, "caa": { "n": 5241, "na": 63, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 346, "absent": 4895 } }, "dnssec": { "n": 5304, "na": 0, "states": { "signed_valid": 360, "signed_broken": 3, "unsigned": 4941 } }, "https": { "n": 5304, "na": 0, "states": { "https": 3058, "redirects": 0, "http_only": 2246 } }, "tls": { "n": 3058, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3020, "tls12": 38, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3058, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2794, "invalid": 264 } }, "hsts": { "n": 3058, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 986, "absent": 2072 } }, "csp": { "n": 2111, "na": 3193, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 357, "weak": 0, "absent": 1754 } }, "clickjacking": { "n": 2111, "na": 3193, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 417, "absent": 1694 } }, "mime_sniffing": { "n": 2111, "na": 3193, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 553, "absent": 1558 } }, "referrer_policy": { "n": 2111, "na": 3193, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 475, "absent": 1636 } }, "secure_by_default": { "n": 1659, "na": 3645, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 94, "not_all": 1565 } }, "ipv6": { "n": 5304, "na": 0, "states": { "aaaa": 1163, "none": 4141 } } } }, "men": { "graded": 9665, "checks": { "dmarc": { "n": 9665, "na": 0, "states": { "absent": 8374, "none": 475, "quarantine": 339, "reject": 477, "invalid": 0 }, "rua_present": 558 }, "spf": { "n": 9665, "na": 0, "states": { "absent": 6177, "hardfail": 1164, "softfail": 2189, "neutral": 90, "plus_all": 0, "invalid": 45 } }, "dkim": { "n": 914, "na": 8751, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 600, "none_observed": 314 } }, "mx": { "n": 9665, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3670, "absent": 5995 } }, "reverse_dns": { "n": 3664, "na": 6001, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2448, "none": 1216 } }, "caa": { "n": 9592, "na": 73, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 81, "absent": 9511 } }, "dnssec": { "n": 9665, "na": 0, "states": { "signed_valid": 884, "signed_broken": 9, "unsigned": 8772 } }, "https": { "n": 9665, "na": 0, "states": { "https": 5131, "redirects": 0, "http_only": 4534 } }, "tls": { "n": 5131, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5019, "tls12": 112, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5131, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4553, "invalid": 578 } }, "hsts": { "n": 5131, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 907, "absent": 4224 } }, "csp": { "n": 3214, "na": 6451, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 296, "weak": 0, "absent": 2918 } }, "clickjacking": { "n": 3214, "na": 6451, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 465, "absent": 2749 } }, "mime_sniffing": { "n": 3214, "na": 6451, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 620, "absent": 2594 } }, "referrer_policy": { "n": 3214, "na": 6451, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 474, "absent": 2740 } }, "secure_by_default": { "n": 2593, "na": 7072, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 47, "not_all": 2546 } }, "ipv6": { "n": 9665, "na": 0, "states": { "aaaa": 2548, "none": 7117 } } } }, "miami": { "graded": 11186, "checks": { "dmarc": { "n": 11186, "na": 0, "states": { "absent": 9338, "none": 520, "quarantine": 904, "reject": 424, "invalid": 0 }, "rua_present": 1367 }, "spf": { "n": 11186, "na": 0, "states": { "absent": 7875, "hardfail": 1514, "softfail": 1695, "neutral": 56, "plus_all": 0, "invalid": 46 } }, "dkim": { "n": 2509, "na": 8677, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 410, "none_observed": 2099 } }, "mx": { "n": 11186, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4534, "absent": 6652 } }, "reverse_dns": { "n": 4534, "na": 6652, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3558, "none": 976 } }, "caa": { "n": 11145, "na": 41, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 82, "absent": 11063 } }, "dnssec": { "n": 11186, "na": 0, "states": { "signed_valid": 252, "signed_broken": 3, "unsigned": 10931 } }, "https": { "n": 11186, "na": 0, "states": { "https": 4591, "redirects": 0, "http_only": 6595 } }, "tls": { "n": 4591, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4385, "tls12": 206, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4591, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4245, "invalid": 346 } }, "hsts": { "n": 4591, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 796, "absent": 3795 } }, "csp": { "n": 2733, "na": 8453, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 334, "weak": 0, "absent": 2399 } }, "clickjacking": { "n": 2733, "na": 8453, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 470, "absent": 2263 } }, "mime_sniffing": { "n": 2733, "na": 8453, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 415, "absent": 2318 } }, "referrer_policy": { "n": 2733, "na": 8453, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 257, "absent": 2476 } }, "secure_by_default": { "n": 2330, "na": 8856, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 33, "not_all": 2297 } }, "ipv6": { "n": 11186, "na": 0, "states": { "aaaa": 724, "none": 10462 } } } }, "mk": { "graded": 25676, "checks": { "dmarc": { "n": 25676, "na": 0, "states": { "absent": 15061, "none": 7707, "quarantine": 1812, "reject": 1095, "invalid": 1 }, "rua_present": 2523 }, "spf": { "n": 25676, "na": 0, "states": { "absent": 6525, "hardfail": 4174, "softfail": 14408, "neutral": 418, "plus_all": 1, "invalid": 150 } }, "dkim": { "n": 14599, "na": 11077, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 12477, "none_observed": 2122 } }, "mx": { "n": 25676, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 21463, "absent": 4213 } }, "reverse_dns": { "n": 21589, "na": 4087, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 17262, "none": 4327 } }, "caa": { "n": 25553, "na": 123, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 584, "absent": 24969 } }, "dnssec": { "n": 25676, "na": 0, "states": { "signed_valid": 1, "signed_broken": 0, "unsigned": 25675 } }, "https": { "n": 25676, "na": 0, "states": { "https": 23294, "redirects": 0, "http_only": 2382 } }, "tls": { "n": 23294, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 21653, "tls12": 1641, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 23294, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 21850, "invalid": 1444 } }, "hsts": { "n": 23294, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3124, "absent": 20170 } }, "csp": { "n": 15487, "na": 10189, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1189, "weak": 0, "absent": 14298 } }, "clickjacking": { "n": 15487, "na": 10189, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1615, "absent": 13872 } }, "mime_sniffing": { "n": 15487, "na": 10189, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2162, "absent": 13325 } }, "referrer_policy": { "n": 15487, "na": 10189, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1005, "absent": 14482 } }, "secure_by_default": { "n": 15000, "na": 10676, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 101, "not_all": 14899 } }, "ipv6": { "n": 25676, "na": 0, "states": { "aaaa": 5311, "none": 20365 } } } }, "ml": { "graded": 9648, "checks": { "dmarc": { "n": 9648, "na": 0, "states": { "absent": 8489, "none": 746, "quarantine": 153, "reject": 260, "invalid": 0 }, "rua_present": 384 }, "spf": { "n": 9648, "na": 0, "states": { "absent": 3834, "hardfail": 4478, "softfail": 1243, "neutral": 77, "plus_all": 0, "invalid": 16 } }, "dkim": { "n": 1076, "na": 8572, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 935, "none_observed": 141 } }, "mx": { "n": 9648, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5893, "absent": 3755 } }, "reverse_dns": { "n": 5895, "na": 3753, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1613, "none": 4282 } }, "caa": { "n": 9626, "na": 22, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 92, "absent": 9534 } }, "dnssec": { "n": 9648, "na": 0, "states": { "signed_valid": 20, "signed_broken": 0, "unsigned": 9628 } }, "https": { "n": 9648, "na": 0, "states": { "https": 8924, "redirects": 0, "http_only": 724 } }, "tls": { "n": 8924, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8673, "tls12": 251, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8924, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8695, "invalid": 229 } }, "hsts": { "n": 8924, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1478, "absent": 7446 } }, "csp": { "n": 6978, "na": 2670, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 625, "weak": 0, "absent": 6353 } }, "clickjacking": { "n": 6978, "na": 2670, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 723, "absent": 6255 } }, "mime_sniffing": { "n": 6978, "na": 2670, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 782, "absent": 6196 } }, "referrer_policy": { "n": 6978, "na": 2670, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 693, "absent": 6285 } }, "secure_by_default": { "n": 6903, "na": 2745, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 509, "not_all": 6394 } }, "ipv6": { "n": 9648, "na": 0, "states": { "aaaa": 1581, "none": 8067 } } } }, "mn": { "graded": 19689, "checks": { "dmarc": { "n": 19689, "na": 0, "states": { "absent": 15581, "none": 2043, "quarantine": 1309, "reject": 755, "invalid": 1 }, "rua_present": 1081 }, "spf": { "n": 19689, "na": 0, "states": { "absent": 8659, "hardfail": 2968, "softfail": 7293, "neutral": 86, "plus_all": 5, "invalid": 678 } }, "dkim": { "n": 5824, "na": 13865, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3436, "none_observed": 2388 } }, "mx": { "n": 19689, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12218, "absent": 7471 } }, "reverse_dns": { "n": 12216, "na": 7473, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 10534, "none": 1682 } }, "caa": { "n": 19647, "na": 42, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 537, "absent": 19110 } }, "dnssec": { "n": 19689, "na": 0, "states": { "signed_valid": 57, "signed_broken": 2, "unsigned": 19630 } }, "https": { "n": 19689, "na": 0, "states": { "https": 15412, "redirects": 0, "http_only": 4277 } }, "tls": { "n": 15412, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 14489, "tls12": 923, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 15412, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 13289, "invalid": 2123 } }, "hsts": { "n": 15412, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4139, "absent": 11273 } }, "csp": { "n": 10112, "na": 9577, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 607, "weak": 0, "absent": 9505 } }, "clickjacking": { "n": 10112, "na": 9577, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1588, "absent": 8524 } }, "mime_sniffing": { "n": 10112, "na": 9577, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1805, "absent": 8307 } }, "referrer_policy": { "n": 10112, "na": 9577, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 856, "absent": 9256 } }, "secure_by_default": { "n": 9970, "na": 9719, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 77, "not_all": 9893 } }, "ipv6": { "n": 19689, "na": 0, "states": { "aaaa": 3458, "none": 16231 } } } }, "mobi": { "graded": 196353, "checks": { "dmarc": { "n": 196353, "na": 0, "states": { "absent": 169970, "none": 7950, "quarantine": 3139, "reject": 15288, "invalid": 6 }, "rua_present": 15318 }, "spf": { "n": 196353, "na": 0, "states": { "absent": 149858, "hardfail": 25584, "softfail": 16966, "neutral": 3308, "plus_all": 28, "invalid": 609 } }, "dkim": { "n": 50277, "na": 146076, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4341, "none_observed": 45936 } }, "mx": { "n": 196353, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 93181, "absent": 103172 } }, "reverse_dns": { "n": 93205, "na": 103148, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 76147, "none": 17058 } }, "caa": { "n": 193994, "na": 2359, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2260, "absent": 191734 } }, "dnssec": { "n": 196353, "na": 0, "states": { "signed_valid": 21460, "signed_broken": 120, "unsigned": 174773 } }, "https": { "n": 196353, "na": 0, "states": { "https": 69834, "redirects": 0, "http_only": 126519 } }, "tls": { "n": 69834, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 63660, "tls12": 6174, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 69834, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 55859, "invalid": 13975 } }, "hsts": { "n": 69834, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 6632, "absent": 63202 } }, "csp": { "n": 56663, "na": 139690, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 19801, "weak": 0, "absent": 36862 } }, "clickjacking": { "n": 56663, "na": 139690, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 20870, "absent": 35793 } }, "mime_sniffing": { "n": 56663, "na": 139690, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 21344, "absent": 35319 } }, "referrer_policy": { "n": 56663, "na": 139690, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 19458, "absent": 37205 } }, "secure_by_default": { "n": 29300, "na": 167053, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 167, "not_all": 29133 } }, "ipv6": { "n": 196353, "na": 0, "states": { "aaaa": 24199, "none": 172154 } } } }, "moe": { "graded": 15960, "checks": { "dmarc": { "n": 15960, "na": 0, "states": { "absent": 12376, "none": 1452, "quarantine": 1146, "reject": 984, "invalid": 2 }, "rua_present": 1904 }, "spf": { "n": 15960, "na": 0, "states": { "absent": 8022, "hardfail": 1871, "softfail": 5615, "neutral": 362, "plus_all": 5, "invalid": 85 } }, "dkim": { "n": 3146, "na": 12814, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2023, "none_observed": 1123 } }, "mx": { "n": 15960, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8631, "absent": 7329 } }, "reverse_dns": { "n": 8622, "na": 7338, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7755, "none": 867 } }, "caa": { "n": 15852, "na": 108, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 611, "absent": 15241 } }, "dnssec": { "n": 15960, "na": 0, "states": { "signed_valid": 1784, "signed_broken": 16, "unsigned": 14160 } }, "https": { "n": 15960, "na": 0, "states": { "https": 9543, "redirects": 0, "http_only": 6417 } }, "tls": { "n": 9543, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9220, "tls12": 323, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9543, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8574, "invalid": 969 } }, "hsts": { "n": 9543, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2045, "absent": 7498 } }, "csp": { "n": 6181, "na": 9779, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 338, "weak": 0, "absent": 5843 } }, "clickjacking": { "n": 6181, "na": 9779, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 833, "absent": 5348 } }, "mime_sniffing": { "n": 6181, "na": 9779, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1327, "absent": 4854 } }, "referrer_policy": { "n": 6181, "na": 9779, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 893, "absent": 5288 } }, "secure_by_default": { "n": 5531, "na": 10429, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 109, "not_all": 5422 } }, "ipv6": { "n": 15960, "na": 0, "states": { "aaaa": 5248, "none": 10712 } } } }, "mom": { "graded": 72324, "checks": { "dmarc": { "n": 72324, "na": 0, "states": { "absent": 69818, "none": 1499, "quarantine": 617, "reject": 390, "invalid": 0 }, "rua_present": 968 }, "spf": { "n": 72324, "na": 0, "states": { "absent": 58772, "hardfail": 2668, "softfail": 10760, "neutral": 64, "plus_all": 0, "invalid": 60 } }, "dkim": { "n": 4730, "na": 67594, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1250, "none_observed": 3480 } }, "mx": { "n": 72324, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 14905, "absent": 57419 } }, "reverse_dns": { "n": 14900, "na": 57424, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12099, "none": 2801 } }, "caa": { "n": 71775, "na": 549, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 326, "absent": 71449 } }, "dnssec": { "n": 72324, "na": 0, "states": { "signed_valid": 4787, "signed_broken": 8, "unsigned": 67529 } }, "https": { "n": 72324, "na": 0, "states": { "https": 48448, "redirects": 0, "http_only": 23876 } }, "tls": { "n": 48448, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 46944, "tls12": 1504, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 48448, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 45569, "invalid": 2879 } }, "hsts": { "n": 48448, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 8571, "absent": 39877 } }, "csp": { "n": 29099, "na": 43225, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 4750, "weak": 0, "absent": 24349 } }, "clickjacking": { "n": 29099, "na": 43225, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 7680, "absent": 21419 } }, "mime_sniffing": { "n": 29099, "na": 43225, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 7243, "absent": 21856 } }, "referrer_policy": { "n": 29099, "na": 43225, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4079, "absent": 25020 } }, "secure_by_default": { "n": 26071, "na": 46253, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1028, "not_all": 25043 } }, "ipv6": { "n": 72324, "na": 0, "states": { "aaaa": 36472, "none": 35852 } } } }, "money": { "graded": 20186, "checks": { "dmarc": { "n": 20186, "na": 0, "states": { "absent": 16193, "none": 1305, "quarantine": 1709, "reject": 979, "invalid": 0 }, "rua_present": 2529 }, "spf": { "n": 20186, "na": 0, "states": { "absent": 12413, "hardfail": 2759, "softfail": 4791, "neutral": 149, "plus_all": 1, "invalid": 73 } }, "dkim": { "n": 2760, "na": 17426, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1245, "none_observed": 1515 } }, "mx": { "n": 20186, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8533, "absent": 11653 } }, "reverse_dns": { "n": 8534, "na": 11652, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6552, "none": 1982 } }, "caa": { "n": 20023, "na": 163, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1817, "absent": 18206 } }, "dnssec": { "n": 20186, "na": 0, "states": { "signed_valid": 1170, "signed_broken": 9, "unsigned": 19007 } }, "https": { "n": 20186, "na": 0, "states": { "https": 11480, "redirects": 0, "http_only": 8706 } }, "tls": { "n": 11480, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 11186, "tls12": 294, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 11480, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 10764, "invalid": 716 } }, "hsts": { "n": 11480, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2670, "absent": 8810 } }, "csp": { "n": 7090, "na": 13096, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 784, "weak": 0, "absent": 6306 } }, "clickjacking": { "n": 7090, "na": 13096, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1343, "absent": 5747 } }, "mime_sniffing": { "n": 7090, "na": 13096, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1656, "absent": 5434 } }, "referrer_policy": { "n": 7090, "na": 13096, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1216, "absent": 5874 } }, "secure_by_default": { "n": 5969, "na": 14217, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 358, "not_all": 5611 } }, "ipv6": { "n": 20186, "na": 0, "states": { "aaaa": 4523, "none": 15663 } } } }, "monster": { "graded": 38048, "checks": { "dmarc": { "n": 38048, "na": 0, "states": { "absent": 33252, "none": 1180, "quarantine": 3054, "reject": 562, "invalid": 0 }, "rua_present": 3388 }, "spf": { "n": 38048, "na": 0, "states": { "absent": 29049, "hardfail": 2292, "softfail": 6409, "neutral": 195, "plus_all": 0, "invalid": 103 } }, "dkim": { "n": 1863, "na": 36185, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1360, "none_observed": 503 } }, "mx": { "n": 38048, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9843, "absent": 28205 } }, "reverse_dns": { "n": 9835, "na": 28213, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7382, "none": 2453 } }, "caa": { "n": 37590, "na": 458, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 417, "absent": 37173 } }, "dnssec": { "n": 38048, "na": 0, "states": { "signed_valid": 1964, "signed_broken": 43, "unsigned": 36041 } }, "https": { "n": 38048, "na": 0, "states": { "https": 24493, "redirects": 0, "http_only": 13555 } }, "tls": { "n": 24493, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 21626, "tls12": 2867, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 24493, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 21768, "invalid": 2725 } }, "hsts": { "n": 24493, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3131, "absent": 21362 } }, "csp": { "n": 13139, "na": 24909, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 878, "weak": 0, "absent": 12261 } }, "clickjacking": { "n": 13139, "na": 24909, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1677, "absent": 11462 } }, "mime_sniffing": { "n": 13139, "na": 24909, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1953, "absent": 11186 } }, "referrer_policy": { "n": 13139, "na": 24909, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1199, "absent": 11940 } }, "secure_by_default": { "n": 11310, "na": 26738, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 192, "not_all": 11118 } }, "ipv6": { "n": 38048, "na": 0, "states": { "aaaa": 13740, "none": 24308 } } } }, "motorcycles": { "graded": 11057, "checks": { "dmarc": { "n": 11057, "na": 0, "states": { "absent": 10654, "none": 195, "quarantine": 126, "reject": 82, "invalid": 0 }, "rua_present": 231 }, "spf": { "n": 11057, "na": 0, "states": { "absent": 8848, "hardfail": 1306, "softfail": 894, "neutral": 2, "plus_all": 0, "invalid": 7 } }, "dkim": { "n": 863, "na": 10194, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 114, "none_observed": 749 } }, "mx": { "n": 11057, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2428, "absent": 8629 } }, "reverse_dns": { "n": 2428, "na": 8629, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 970, "none": 1458 } }, "caa": { "n": 11008, "na": 49, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 39, "absent": 10969 } }, "dnssec": { "n": 11057, "na": 0, "states": { "signed_valid": 1098, "signed_broken": 0, "unsigned": 9959 } }, "https": { "n": 11057, "na": 0, "states": { "https": 4266, "redirects": 0, "http_only": 6791 } }, "tls": { "n": 4266, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4058, "tls12": 208, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4266, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3929, "invalid": 337 } }, "hsts": { "n": 4266, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 483, "absent": 3783 } }, "csp": { "n": 2347, "na": 8710, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 224, "weak": 0, "absent": 2123 } }, "clickjacking": { "n": 2347, "na": 8710, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 467, "absent": 1880 } }, "mime_sniffing": { "n": 2347, "na": 8710, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 403, "absent": 1944 } }, "referrer_policy": { "n": 2347, "na": 8710, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 306, "absent": 2041 } }, "secure_by_default": { "n": 1969, "na": 9088, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 37, "not_all": 1932 } }, "ipv6": { "n": 11057, "na": 0, "states": { "aaaa": 2735, "none": 8322 } } } }, "ms": { "graded": 5962, "checks": { "dmarc": { "n": 5962, "na": 0, "states": { "absent": 3958, "none": 543, "quarantine": 995, "reject": 466, "invalid": 0 }, "rua_present": 1403 }, "spf": { "n": 5962, "na": 0, "states": { "absent": 2990, "hardfail": 1336, "softfail": 1127, "neutral": 141, "plus_all": 0, "invalid": 368 } }, "dkim": { "n": 1676, "na": 4286, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 631, "none_observed": 1045 } }, "mx": { "n": 5962, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3530, "absent": 2432 } }, "reverse_dns": { "n": 3530, "na": 2432, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3043, "none": 487 } }, "caa": { "n": 5937, "na": 25, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 197, "absent": 5740 } }, "dnssec": { "n": 5962, "na": 0, "states": { "signed_valid": 17, "signed_broken": 0, "unsigned": 5945 } }, "https": { "n": 5962, "na": 0, "states": { "https": 4093, "redirects": 0, "http_only": 1869 } }, "tls": { "n": 4093, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3753, "tls12": 340, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4093, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3368, "invalid": 725 } }, "hsts": { "n": 4093, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 782, "absent": 3311 } }, "csp": { "n": 1887, "na": 4075, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 137, "weak": 0, "absent": 1750 } }, "clickjacking": { "n": 1887, "na": 4075, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 288, "absent": 1599 } }, "mime_sniffing": { "n": 1887, "na": 4075, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 360, "absent": 1527 } }, "referrer_policy": { "n": 1887, "na": 4075, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 210, "absent": 1677 } }, "secure_by_default": { "n": 1787, "na": 4175, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 37, "not_all": 1750 } }, "ipv6": { "n": 5962, "na": 0, "states": { "aaaa": 1026, "none": 4936 } } } }, "mt": { "graded": 12588, "checks": { "dmarc": { "n": 12588, "na": 0, "states": { "absent": 8357, "none": 2507, "quarantine": 823, "reject": 901, "invalid": 0 }, "rua_present": 2098 }, "spf": { "n": 12588, "na": 0, "states": { "absent": 4353, "hardfail": 4000, "softfail": 3960, "neutral": 199, "plus_all": 5, "invalid": 71 } }, "dkim": { "n": 7177, "na": 5411, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3141, "none_observed": 4036 } }, "mx": { "n": 12588, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9337, "absent": 3251 } }, "reverse_dns": { "n": 9331, "na": 3257, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8388, "none": 943 } }, "caa": { "n": 12500, "na": 88, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 289, "absent": 12211 } }, "dnssec": { "n": 12588, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 12588 } }, "https": { "n": 12588, "na": 0, "states": { "https": 10007, "redirects": 0, "http_only": 2581 } }, "tls": { "n": 10007, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9562, "tls12": 445, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10007, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9413, "invalid": 594 } }, "hsts": { "n": 10007, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2084, "absent": 7923 } }, "csp": { "n": 4836, "na": 7752, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 689, "weak": 0, "absent": 4147 } }, "clickjacking": { "n": 4836, "na": 7752, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 867, "absent": 3969 } }, "mime_sniffing": { "n": 4836, "na": 7752, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1104, "absent": 3732 } }, "referrer_policy": { "n": 4836, "na": 7752, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 602, "absent": 4234 } }, "secure_by_default": { "n": 4710, "na": 7878, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 114, "not_all": 4596 } }, "ipv6": { "n": 12588, "na": 0, "states": { "aaaa": 4142, "none": 8446 } } } }, "mu": { "graded": 8391, "checks": { "dmarc": { "n": 8391, "na": 0, "states": { "absent": 4962, "none": 2202, "quarantine": 556, "reject": 671, "invalid": 0 }, "rua_present": 1383 }, "spf": { "n": 8391, "na": 0, "states": { "absent": 2014, "hardfail": 2648, "softfail": 3371, "neutral": 238, "plus_all": 1, "invalid": 119 } }, "dkim": { "n": 4377, "na": 4014, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2524, "none_observed": 1853 } }, "mx": { "n": 8391, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6955, "absent": 1436 } }, "reverse_dns": { "n": 6952, "na": 1439, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6040, "none": 912 } }, "caa": { "n": 8360, "na": 31, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 161, "absent": 8199 } }, "dnssec": { "n": 8391, "na": 0, "states": { "signed_valid": 161, "signed_broken": 0, "unsigned": 8230 } }, "https": { "n": 8391, "na": 0, "states": { "https": 7331, "redirects": 0, "http_only": 1060 } }, "tls": { "n": 7331, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6917, "tls12": 414, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7331, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6840, "invalid": 491 } }, "hsts": { "n": 7331, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1503, "absent": 5828 } }, "csp": { "n": 4225, "na": 4166, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 537, "weak": 0, "absent": 3688 } }, "clickjacking": { "n": 4225, "na": 4166, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 692, "absent": 3533 } }, "mime_sniffing": { "n": 4225, "na": 4166, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 900, "absent": 3325 } }, "referrer_policy": { "n": 4225, "na": 4166, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 397, "absent": 3828 } }, "secure_by_default": { "n": 4110, "na": 4281, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 36, "not_all": 4074 } }, "ipv6": { "n": 8391, "na": 0, "states": { "aaaa": 2397, "none": 5994 } } } }, "music": { "graded": 11745, "checks": { "dmarc": { "n": 11745, "na": 0, "states": { "absent": 8670, "none": 903, "quarantine": 1371, "reject": 801, "invalid": 0 }, "rua_present": 1785 }, "spf": { "n": 11745, "na": 0, "states": { "absent": 7201, "hardfail": 1166, "softfail": 3168, "neutral": 147, "plus_all": 2, "invalid": 61 } }, "dkim": { "n": 1895, "na": 9850, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 883, "none_observed": 1012 } }, "mx": { "n": 11745, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4612, "absent": 7133 } }, "reverse_dns": { "n": 4613, "na": 7132, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4249, "none": 364 } }, "caa": { "n": 11700, "na": 45, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 100, "absent": 11600 } }, "dnssec": { "n": 11745, "na": 0, "states": { "signed_valid": 467, "signed_broken": 1, "unsigned": 11277 } }, "https": { "n": 11745, "na": 0, "states": { "https": 7737, "redirects": 0, "http_only": 4008 } }, "tls": { "n": 7737, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7597, "tls12": 140, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7737, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5495, "invalid": 2242 } }, "hsts": { "n": 7737, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3096, "absent": 4641 } }, "csp": { "n": 3387, "na": 8358, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 421, "weak": 0, "absent": 2966 } }, "clickjacking": { "n": 3387, "na": 8358, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1069, "absent": 2318 } }, "mime_sniffing": { "n": 3387, "na": 8358, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1126, "absent": 2261 } }, "referrer_policy": { "n": 3387, "na": 8358, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 501, "absent": 2886 } }, "secure_by_default": { "n": 2795, "na": 8950, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 100, "not_all": 2695 } }, "ipv6": { "n": 11745, "na": 0, "states": { "aaaa": 1197, "none": 10548 } } } }, "mx": { "graded": 757489, "checks": { "dmarc": { "n": 757489, "na": 0, "states": { "absent": 471460, "none": 177412, "quarantine": 67308, "reject": 41169, "invalid": 140 }, "rua_present": 111831 }, "spf": { "n": 757489, "na": 0, "states": { "absent": 287345, "hardfail": 118011, "softfail": 344703, "neutral": 5731, "plus_all": 53, "invalid": 1646 } }, "dkim": { "n": 371514, "na": 385975, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 239533, "none_observed": 131981 } }, "mx": { "n": 757489, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 524806, "absent": 232683 } }, "reverse_dns": { "n": 524239, "na": 233250, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 412256, "none": 111983 } }, "caa": { "n": 756164, "na": 1325, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 9388, "absent": 746776 } }, "dnssec": { "n": 757489, "na": 0, "states": { "signed_valid": 16884, "signed_broken": 60, "unsigned": 740545 } }, "https": { "n": 757489, "na": 0, "states": { "https": 582856, "redirects": 0, "http_only": 174633 } }, "tls": { "n": 582856, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 550018, "tls12": 32838, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 582856, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 559706, "invalid": 23150 } }, "hsts": { "n": 582856, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 159528, "absent": 423328 } }, "csp": { "n": 367893, "na": 389596, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 69641, "weak": 0, "absent": 298252 } }, "clickjacking": { "n": 367893, "na": 389596, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 93529, "absent": 274364 } }, "mime_sniffing": { "n": 367893, "na": 389596, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 102077, "absent": 265816 } }, "referrer_policy": { "n": 367893, "na": 389596, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 19297, "absent": 348596 } }, "secure_by_default": { "n": 354106, "na": 403383, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 2286, "not_all": 351820 } }, "ipv6": { "n": 757489, "na": 0, "states": { "aaaa": 141677, "none": 615812 } } } }, "my": { "graded": 331401, "checks": { "dmarc": { "n": 331401, "na": 0, "states": { "absent": 264666, "none": 41194, "quarantine": 17812, "reject": 7704, "invalid": 25 }, "rua_present": 19687 }, "spf": { "n": 331401, "na": 0, "states": { "absent": 197723, "hardfail": 55132, "softfail": 77182, "neutral": 952, "plus_all": 19, "invalid": 393 } }, "dkim": { "n": 89988, "na": 241413, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 72963, "none_observed": 17025 } }, "mx": { "n": 331401, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 152519, "absent": 178882 } }, "reverse_dns": { "n": 152362, "na": 179039, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 116872, "none": 35490 } }, "caa": { "n": 329448, "na": 1953, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3286, "absent": 326162 } }, "dnssec": { "n": 331401, "na": 0, "states": { "signed_valid": 6480, "signed_broken": 61, "unsigned": 324860 } }, "https": { "n": 331401, "na": 0, "states": { "https": 277157, "redirects": 0, "http_only": 54244 } }, "tls": { "n": 277157, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 258278, "tls12": 18879, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 277157, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 259835, "invalid": 17322 } }, "hsts": { "n": 277157, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 51295, "absent": 225862 } }, "csp": { "n": 153791, "na": 177610, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 16502, "weak": 0, "absent": 137289 } }, "clickjacking": { "n": 153791, "na": 177610, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 22649, "absent": 131142 } }, "mime_sniffing": { "n": 153791, "na": 177610, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 26079, "absent": 127712 } }, "referrer_policy": { "n": 153791, "na": 177610, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 18092, "absent": 135699 } }, "secure_by_default": { "n": 146161, "na": 185240, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 5028, "not_all": 141133 } }, "ipv6": { "n": 331401, "na": 0, "states": { "aaaa": 77941, "none": 253460 } } } }, "mz": { "graded": 9599, "checks": { "dmarc": { "n": 9599, "na": 0, "states": { "absent": 5030, "none": 3351, "quarantine": 608, "reject": 608, "invalid": 2 }, "rua_present": 1072 }, "spf": { "n": 9599, "na": 0, "states": { "absent": 1121, "hardfail": 1325, "softfail": 6980, "neutral": 128, "plus_all": 1, "invalid": 44 } }, "dkim": { "n": 6235, "na": 3364, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 5312, "none_observed": 923 } }, "mx": { "n": 9599, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8899, "absent": 700 } }, "reverse_dns": { "n": 8898, "na": 701, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7140, "none": 1758 } }, "caa": { "n": 9564, "na": 35, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 249, "absent": 9315 } }, "dnssec": { "n": 9599, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 9599 } }, "https": { "n": 9599, "na": 0, "states": { "https": 8806, "redirects": 0, "http_only": 793 } }, "tls": { "n": 8806, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8556, "tls12": 250, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8806, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8402, "invalid": 404 } }, "hsts": { "n": 8806, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1273, "absent": 7533 } }, "csp": { "n": 6003, "na": 3596, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 652, "weak": 0, "absent": 5351 } }, "clickjacking": { "n": 6003, "na": 3596, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 532, "absent": 5471 } }, "mime_sniffing": { "n": 6003, "na": 3596, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 702, "absent": 5301 } }, "referrer_policy": { "n": 6003, "na": 3596, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 365, "absent": 5638 } }, "secure_by_default": { "n": 5965, "na": 3634, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 27, "not_all": 5938 } }, "ipv6": { "n": 9599, "na": 0, "states": { "aaaa": 1301, "none": 8298 } } } }, "name": { "graded": 70383, "checks": { "dmarc": { "n": 70383, "na": 0, "states": { "absent": 53035, "none": 11227, "quarantine": 2857, "reject": 3257, "invalid": 7 }, "rua_present": 4958 }, "spf": { "n": 70383, "na": 0, "states": { "absent": 34226, "hardfail": 9227, "softfail": 22490, "neutral": 2629, "plus_all": 5, "invalid": 1806 } }, "dkim": { "n": 16521, "na": 53862, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 6842, "none_observed": 9679 } }, "mx": { "n": 70383, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 50957, "absent": 19426 } }, "reverse_dns": { "n": 50941, "na": 19442, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 44327, "none": 6614 } }, "caa": { "n": 69620, "na": 763, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1139, "absent": 68481 } }, "dnssec": { "n": 70383, "na": 0, "states": { "signed_valid": 2408, "signed_broken": 24, "unsigned": 67951 } }, "https": { "n": 70383, "na": 0, "states": { "https": 30019, "redirects": 0, "http_only": 40364 } }, "tls": { "n": 30019, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 27400, "tls12": 2619, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 30019, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 20779, "invalid": 9240 } }, "hsts": { "n": 30019, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3450, "absent": 26569 } }, "csp": { "n": 25078, "na": 45305, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 988, "weak": 0, "absent": 24090 } }, "clickjacking": { "n": 25078, "na": 45305, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1717, "absent": 23361 } }, "mime_sniffing": { "n": 25078, "na": 45305, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1770, "absent": 23308 } }, "referrer_policy": { "n": 25078, "na": 45305, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 911, "absent": 24167 } }, "secure_by_default": { "n": 15198, "na": 55185, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 164, "not_all": 15034 } }, "ipv6": { "n": 70383, "na": 0, "states": { "aaaa": 12781, "none": 57602 } } } }, "net": { "graded": 10995426, "checks": { "dmarc": { "n": 10995426, "na": 0, "states": { "absent": 8513314, "none": 1193216, "quarantine": 662708, "reject": 625472, "invalid": 716 }, "rua_present": 1072370 }, "spf": { "n": 10995426, "na": 0, "states": { "absent": 6337512, "hardfail": 1504063, "softfail": 2846297, "neutral": 234585, "plus_all": 1653, "invalid": 71316 } }, "dkim": { "n": 2771483, "na": 8223943, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1161389, "none_observed": 1610094 } }, "mx": { "n": 10995426, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6016544, "absent": 4978882 } }, "reverse_dns": { "n": 6012519, "na": 4982907, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4905946, "none": 1106573 } }, "caa": { "n": 10913092, "na": 82334, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 141194, "absent": 10771898 } }, "dnssec": { "n": 10995426, "na": 0, "states": { "signed_valid": 656728, "signed_broken": 5657, "unsigned": 10333041 } }, "https": { "n": 10995426, "na": 0, "states": { "https": 6016871, "redirects": 0, "http_only": 4978555 } }, "tls": { "n": 6016871, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5623556, "tls12": 393315, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6016871, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5119538, "invalid": 897333 } }, "hsts": { "n": 6016871, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1203477, "absent": 4813394 } }, "csp": { "n": 3713131, "na": 7282295, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 278077, "weak": 0, "absent": 3435054 } }, "clickjacking": { "n": 3713131, "na": 7282295, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 598442, "absent": 3114689 } }, "mime_sniffing": { "n": 3713131, "na": 7282295, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 670262, "absent": 3042869 } }, "referrer_policy": { "n": 3713131, "na": 7282295, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 232461, "absent": 3480670 } }, "secure_by_default": { "n": 3091374, "na": 7904052, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 28705, "not_all": 3062669 } }, "ipv6": { "n": 10995426, "na": 0, "states": { "aaaa": 1869078, "none": 9126348 } } } }, "network": { "graded": 69859, "checks": { "dmarc": { "n": 69859, "na": 0, "states": { "absent": 53981, "none": 6179, "quarantine": 5625, "reject": 4070, "invalid": 4 }, "rua_present": 8926 }, "spf": { "n": 69859, "na": 0, "states": { "absent": 37969, "hardfail": 11124, "softfail": 19322, "neutral": 1157, "plus_all": 9, "invalid": 278 } }, "dkim": { "n": 13906, "na": 55953, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 8007, "none_observed": 5899 } }, "mx": { "n": 69859, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 35248, "absent": 34611 } }, "reverse_dns": { "n": 35229, "na": 34630, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 28035, "none": 7194 } }, "caa": { "n": 69465, "na": 394, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2199, "absent": 67266 } }, "dnssec": { "n": 69859, "na": 0, "states": { "signed_valid": 7563, "signed_broken": 63, "unsigned": 62233 } }, "https": { "n": 69859, "na": 0, "states": { "https": 36765, "redirects": 0, "http_only": 33094 } }, "tls": { "n": 36765, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 35576, "tls12": 1189, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 36765, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 33257, "invalid": 3508 } }, "hsts": { "n": 36765, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 8110, "absent": 28655 } }, "csp": { "n": 24927, "na": 44932, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2444, "weak": 0, "absent": 22483 } }, "clickjacking": { "n": 24927, "na": 44932, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4847, "absent": 20080 } }, "mime_sniffing": { "n": 24927, "na": 44932, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 5588, "absent": 19339 } }, "referrer_policy": { "n": 24927, "na": 44932, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2879, "absent": 22048 } }, "secure_by_default": { "n": 20916, "na": 48943, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 611, "not_all": 20305 } }, "ipv6": { "n": 69859, "na": 0, "states": { "aaaa": 13401, "none": 56458 } } } }, "news": { "graded": 70721, "checks": { "dmarc": { "n": 70721, "na": 0, "states": { "absent": 52244, "none": 7903, "quarantine": 5007, "reject": 5562, "invalid": 5 }, "rua_present": 8086 }, "spf": { "n": 70721, "na": 0, "states": { "absent": 41999, "hardfail": 9628, "softfail": 17650, "neutral": 1102, "plus_all": 14, "invalid": 328 } }, "dkim": { "n": 10605, "na": 60116, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 5091, "none_observed": 5514 } }, "mx": { "n": 70721, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 30049, "absent": 40672 } }, "reverse_dns": { "n": 30051, "na": 40670, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 24785, "none": 5266 } }, "caa": { "n": 70010, "na": 711, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2145, "absent": 67865 } }, "dnssec": { "n": 70721, "na": 0, "states": { "signed_valid": 3765, "signed_broken": 56, "unsigned": 66900 } }, "https": { "n": 70721, "na": 0, "states": { "https": 41176, "redirects": 0, "http_only": 29545 } }, "tls": { "n": 41176, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 38961, "tls12": 2215, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 41176, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 37603, "invalid": 3573 } }, "hsts": { "n": 41176, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 9669, "absent": 31507 } }, "csp": { "n": 26185, "na": 44536, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2950, "weak": 0, "absent": 23235 } }, "clickjacking": { "n": 26185, "na": 44536, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4502, "absent": 21683 } }, "mime_sniffing": { "n": 26185, "na": 44536, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 5191, "absent": 20994 } }, "referrer_policy": { "n": 26185, "na": 44536, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3224, "absent": 22961 } }, "secure_by_default": { "n": 22057, "na": 48664, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 339, "not_all": 21718 } }, "ipv6": { "n": 70721, "na": 0, "states": { "aaaa": 16193, "none": 54528 } } } }, "ng": { "graded": 139921, "checks": { "dmarc": { "n": 139921, "na": 0, "states": { "absent": 77878, "none": 45080, "quarantine": 13295, "reject": 3664, "invalid": 4 }, "rua_present": 16858 }, "spf": { "n": 139921, "na": 0, "states": { "absent": 40845, "hardfail": 8953, "softfail": 89231, "neutral": 571, "plus_all": 14, "invalid": 307 } }, "dkim": { "n": 64419, "na": 75502, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 57612, "none_observed": 6807 } }, "mx": { "n": 139921, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 109177, "absent": 30744 } }, "reverse_dns": { "n": 109272, "na": 30649, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 77934, "none": 31338 } }, "caa": { "n": 139265, "na": 656, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 5541, "absent": 133724 } }, "dnssec": { "n": 139921, "na": 0, "states": { "signed_valid": 180, "signed_broken": 3, "unsigned": 139738 } }, "https": { "n": 139921, "na": 0, "states": { "https": 125967, "redirects": 0, "http_only": 13954 } }, "tls": { "n": 125967, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 124394, "tls12": 1573, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 125967, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 117885, "invalid": 8082 } }, "hsts": { "n": 125967, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 21770, "absent": 104197 } }, "csp": { "n": 87936, "na": 51985, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 6337, "weak": 0, "absent": 81599 } }, "clickjacking": { "n": 87936, "na": 51985, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 10417, "absent": 77519 } }, "mime_sniffing": { "n": 87936, "na": 51985, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 12510, "absent": 75426 } }, "referrer_policy": { "n": 87936, "na": 51985, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 7242, "absent": 80694 } }, "secure_by_default": { "n": 87615, "na": 52306, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 716, "not_all": 86899 } }, "ipv6": { "n": 139921, "na": 0, "states": { "aaaa": 24021, "none": 115900 } } } }, "ninja": { "graded": 21967, "checks": { "dmarc": { "n": 21967, "na": 0, "states": { "absent": 18237, "none": 1621, "quarantine": 1125, "reject": 982, "invalid": 2 }, "rua_present": 1777 }, "spf": { "n": 21967, "na": 0, "states": { "absent": 13435, "hardfail": 2547, "softfail": 5212, "neutral": 634, "plus_all": 5, "invalid": 134 } }, "dkim": { "n": 5428, "na": 16539, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2308, "none_observed": 3120 } }, "mx": { "n": 21967, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 10901, "absent": 11066 } }, "reverse_dns": { "n": 10896, "na": 11071, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 9652, "none": 1244 } }, "caa": { "n": 21357, "na": 610, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 633, "absent": 20724 } }, "dnssec": { "n": 21967, "na": 0, "states": { "signed_valid": 1955, "signed_broken": 29, "unsigned": 19983 } }, "https": { "n": 21967, "na": 0, "states": { "https": 10879, "redirects": 0, "http_only": 11088 } }, "tls": { "n": 10879, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 10419, "tls12": 460, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10879, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9491, "invalid": 1388 } }, "hsts": { "n": 10879, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2209, "absent": 8670 } }, "csp": { "n": 7215, "na": 14752, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 742, "weak": 0, "absent": 6473 } }, "clickjacking": { "n": 7215, "na": 14752, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1170, "absent": 6045 } }, "mime_sniffing": { "n": 7215, "na": 14752, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1258, "absent": 5957 } }, "referrer_policy": { "n": 7215, "na": 14752, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 727, "absent": 6488 } }, "secure_by_default": { "n": 6110, "na": 15857, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 102, "not_all": 6008 } }, "ipv6": { "n": 21967, "na": 0, "states": { "aaaa": 3667, "none": 18300 } } } }, "nl": { "graded": 3748769, "checks": { "dmarc": { "n": 3748769, "na": 0, "states": { "absent": 1579444, "none": 1035173, "quarantine": 459452, "reject": 672666, "invalid": 2034 }, "rua_present": 472340 }, "spf": { "n": 3748769, "na": 0, "states": { "absent": 1010049, "hardfail": 1226985, "softfail": 1408292, "neutral": 63237, "plus_all": 2603, "invalid": 37603 } }, "dkim": { "n": 846174, "na": 2902595, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 457770, "none_observed": 388404 } }, "mx": { "n": 3748769, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3047227, "absent": 701542 } }, "reverse_dns": { "n": 3045660, "na": 703109, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2665586, "none": 380074 } }, "caa": { "n": 3736944, "na": 11825, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 149251, "absent": 3587693 } }, "dnssec": { "n": 3748769, "na": 0, "states": { "signed_valid": 2093933, "signed_broken": 3826, "unsigned": 1651010 } }, "https": { "n": 3748769, "na": 0, "states": { "https": 3175427, "redirects": 0, "http_only": 573342 } }, "tls": { "n": 3175427, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2894537, "tls12": 280890, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3175427, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2718852, "invalid": 456575 } }, "hsts": { "n": 3175427, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 669065, "absent": 2506362 } }, "csp": { "n": 1707209, "na": 2041560, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 104175, "weak": 0, "absent": 1603034 } }, "clickjacking": { "n": 1707209, "na": 2041560, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 243824, "absent": 1463385 } }, "mime_sniffing": { "n": 1707209, "na": 2041560, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 356099, "absent": 1351110 } }, "referrer_policy": { "n": 1707209, "na": 2041560, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 153765, "absent": 1553444 } }, "secure_by_default": { "n": 1625026, "na": 2123743, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 17491, "not_all": 1607535 } }, "ipv6": { "n": 3748769, "na": 0, "states": { "aaaa": 2031379, "none": 1717390 } } } }, "no": { "graded": 544755, "checks": { "dmarc": { "n": 544755, "na": 0, "states": { "absent": 310288, "none": 116409, "quarantine": 83605, "reject": 34335, "invalid": 118 }, "rua_present": 98403 }, "spf": { "n": 544755, "na": 0, "states": { "absent": 218150, "hardfail": 126938, "softfail": 184220, "neutral": 14085, "plus_all": 63, "invalid": 1299 } }, "dkim": { "n": 184871, "na": 359884, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 112824, "none_observed": 72047 } }, "mx": { "n": 544755, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 395776, "absent": 148979 } }, "reverse_dns": { "n": 399429, "na": 145326, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 355476, "none": 43953 } }, "caa": { "n": 544252, "na": 503, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 5149, "absent": 539103 } }, "dnssec": { "n": 544755, "na": 0, "states": { "signed_valid": 299078, "signed_broken": 110, "unsigned": 245567 } }, "https": { "n": 544755, "na": 0, "states": { "https": 486876, "redirects": 0, "http_only": 57879 } }, "tls": { "n": 486876, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 459227, "tls12": 27649, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 486876, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 457794, "invalid": 29082 } }, "hsts": { "n": 486876, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 95055, "absent": 391821 } }, "csp": { "n": 257120, "na": 287635, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 28522, "weak": 0, "absent": 228598 } }, "clickjacking": { "n": 257120, "na": 287635, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 29227, "absent": 227893 } }, "mime_sniffing": { "n": 257120, "na": 287635, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 43471, "absent": 213649 } }, "referrer_policy": { "n": 257120, "na": 287635, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 19356, "absent": 237764 } }, "secure_by_default": { "n": 239739, "na": 305016, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 2146, "not_all": 237593 } }, "ipv6": { "n": 544755, "na": 0, "states": { "aaaa": 213329, "none": 331426 } } } }, "now": { "graded": 26108, "checks": { "dmarc": { "n": 26108, "na": 0, "states": { "absent": 22417, "none": 2769, "quarantine": 481, "reject": 441, "invalid": 0 }, "rua_present": 865 }, "spf": { "n": 26108, "na": 0, "states": { "absent": 15041, "hardfail": 3476, "softfail": 7026, "neutral": 552, "plus_all": 0, "invalid": 13 } }, "dkim": { "n": 3557, "na": 22551, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2886, "none_observed": 671 } }, "mx": { "n": 26108, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 11368, "absent": 14740 } }, "reverse_dns": { "n": 11375, "na": 14733, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8365, "none": 3010 } }, "caa": { "n": 25827, "na": 281, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 344, "absent": 25483 } }, "dnssec": { "n": 26108, "na": 0, "states": { "signed_valid": 2175, "signed_broken": 44, "unsigned": 23889 } }, "https": { "n": 26108, "na": 0, "states": { "https": 18245, "redirects": 0, "http_only": 7863 } }, "tls": { "n": 18245, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 18135, "tls12": 110, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 18245, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 17592, "invalid": 653 } }, "hsts": { "n": 18245, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4493, "absent": 13752 } }, "csp": { "n": 12224, "na": 13884, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 3371, "weak": 0, "absent": 8853 } }, "clickjacking": { "n": 12224, "na": 13884, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3964, "absent": 8260 } }, "mime_sniffing": { "n": 12224, "na": 13884, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4169, "absent": 8055 } }, "referrer_policy": { "n": 12224, "na": 13884, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3852, "absent": 8372 } }, "secure_by_default": { "n": 10128, "na": 15980, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 2163, "not_all": 7965 } }, "ipv6": { "n": 26108, "na": 0, "states": { "aaaa": 2908, "none": 23200 } } } }, "np": { "graded": 82069, "checks": { "dmarc": { "n": 82069, "na": 0, "states": { "absent": 63913, "none": 14890, "quarantine": 1421, "reject": 1843, "invalid": 2 }, "rua_present": 4686 }, "spf": { "n": 82069, "na": 0, "states": { "absent": 44792, "hardfail": 4904, "softfail": 31644, "neutral": 528, "plus_all": 25, "invalid": 176 } }, "dkim": { "n": 24376, "na": 57693, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 19181, "none_observed": 5195 } }, "mx": { "n": 82069, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 41747, "absent": 40322 } }, "reverse_dns": { "n": 41689, "na": 40380, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 33090, "none": 8599 } }, "caa": { "n": 81593, "na": 476, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 8569, "absent": 73024 } }, "dnssec": { "n": 82069, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 82069 } }, "https": { "n": 82069, "na": 0, "states": { "https": 72766, "redirects": 0, "http_only": 9303 } }, "tls": { "n": 72766, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 71854, "tls12": 912, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 72766, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 68962, "invalid": 3804 } }, "hsts": { "n": 72766, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 16874, "absent": 55892 } }, "csp": { "n": 42409, "na": 39660, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2353, "weak": 0, "absent": 40056 } }, "clickjacking": { "n": 42409, "na": 39660, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4296, "absent": 38113 } }, "mime_sniffing": { "n": 42409, "na": 39660, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 6799, "absent": 35610 } }, "referrer_policy": { "n": 42409, "na": 39660, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4923, "absent": 37486 } }, "secure_by_default": { "n": 42100, "na": 39969, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 179, "not_all": 41921 } }, "ipv6": { "n": 82069, "na": 0, "states": { "aaaa": 31599, "none": 50470 } } } }, "nrw": { "graded": 16719, "checks": { "dmarc": { "n": 16719, "na": 0, "states": { "absent": 8293, "none": 5105, "quarantine": 377, "reject": 2943, "invalid": 1 }, "rua_present": 735 }, "spf": { "n": 16719, "na": 0, "states": { "absent": 7461, "hardfail": 1828, "softfail": 6908, "neutral": 312, "plus_all": 2, "invalid": 208 } }, "dkim": { "n": 1360, "na": 15359, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 818, "none_observed": 542 } }, "mx": { "n": 16719, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12593, "absent": 4126 } }, "reverse_dns": { "n": 12607, "na": 4112, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12066, "none": 541 } }, "caa": { "n": 16642, "na": 77, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 190, "absent": 16452 } }, "dnssec": { "n": 16719, "na": 0, "states": { "signed_valid": 2355, "signed_broken": 24, "unsigned": 14340 } }, "https": { "n": 16719, "na": 0, "states": { "https": 6846, "redirects": 0, "http_only": 9873 } }, "tls": { "n": 6846, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6485, "tls12": 361, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6846, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4877, "invalid": 1969 } }, "hsts": { "n": 6846, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1210, "absent": 5636 } }, "csp": { "n": 5459, "na": 11260, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 114, "weak": 0, "absent": 5345 } }, "clickjacking": { "n": 5459, "na": 11260, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 388, "absent": 5071 } }, "mime_sniffing": { "n": 5459, "na": 11260, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 495, "absent": 4964 } }, "referrer_policy": { "n": 5459, "na": 11260, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 266, "absent": 5193 } }, "secure_by_default": { "n": 2738, "na": 13981, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 34, "not_all": 2704 } }, "ipv6": { "n": 16719, "na": 0, "states": { "aaaa": 7744, "none": 8975 } } } }, "nu": { "graded": 130716, "checks": { "dmarc": { "n": 130716, "na": 0, "states": { "absent": 95990, "none": 18094, "quarantine": 7861, "reject": 8737, "invalid": 34 }, "rua_present": 10637 }, "spf": { "n": 130716, "na": 0, "states": { "absent": 65706, "hardfail": 34676, "softfail": 24811, "neutral": 4751, "plus_all": 52, "invalid": 720 } }, "dkim": { "n": 24787, "na": 105929, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 14696, "none_observed": 10091 } }, "mx": { "n": 130716, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 81946, "absent": 48770 } }, "reverse_dns": { "n": 81972, "na": 48744, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 66200, "none": 15772 } }, "caa": { "n": 130301, "na": 415, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 4390, "absent": 125911 } }, "dnssec": { "n": 130716, "na": 0, "states": { "signed_valid": 81603, "signed_broken": 163, "unsigned": 48950 } }, "https": { "n": 130716, "na": 0, "states": { "https": 111418, "redirects": 0, "http_only": 19298 } }, "tls": { "n": 111418, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 106092, "tls12": 5326, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 111418, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 99318, "invalid": 12100 } }, "hsts": { "n": 111418, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 13029, "absent": 98389 } }, "csp": { "n": 64059, "na": 66657, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1761, "weak": 0, "absent": 62298 } }, "clickjacking": { "n": 64059, "na": 66657, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3978, "absent": 60081 } }, "mime_sniffing": { "n": 64059, "na": 66657, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 7641, "absent": 56418 } }, "referrer_policy": { "n": 64059, "na": 66657, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3321, "absent": 60738 } }, "secure_by_default": { "n": 58979, "na": 71737, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 311, "not_all": 58668 } }, "ipv6": { "n": 130716, "na": 0, "states": { "aaaa": 46711, "none": 84005 } } } }, "nyc": { "graded": 54916, "checks": { "dmarc": { "n": 54916, "na": 0, "states": { "absent": 44799, "none": 4206, "quarantine": 3247, "reject": 2662, "invalid": 2 }, "rua_present": 5473 }, "spf": { "n": 54916, "na": 0, "states": { "absent": 34572, "hardfail": 6586, "softfail": 12713, "neutral": 955, "plus_all": 0, "invalid": 90 } }, "dkim": { "n": 21686, "na": 33230, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3725, "none_observed": 17961 } }, "mx": { "n": 54916, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 32156, "absent": 22760 } }, "reverse_dns": { "n": 32144, "na": 22772, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 29183, "none": 2961 } }, "caa": { "n": 54751, "na": 165, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 474, "absent": 54277 } }, "dnssec": { "n": 54916, "na": 0, "states": { "signed_valid": 1124, "signed_broken": 8, "unsigned": 53784 } }, "https": { "n": 54916, "na": 0, "states": { "https": 27766, "redirects": 0, "http_only": 27150 } }, "tls": { "n": 27766, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 26730, "tls12": 1036, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 27766, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 25312, "invalid": 2454 } }, "hsts": { "n": 27766, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 7286, "absent": 20480 } }, "csp": { "n": 14414, "na": 40502, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1676, "weak": 0, "absent": 12738 } }, "clickjacking": { "n": 14414, "na": 40502, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2822, "absent": 11592 } }, "mime_sniffing": { "n": 14414, "na": 40502, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3111, "absent": 11303 } }, "referrer_policy": { "n": 14414, "na": 40502, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1087, "absent": 13327 } }, "secure_by_default": { "n": 11492, "na": 43424, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 138, "not_all": 11354 } }, "ipv6": { "n": 54916, "na": 0, "states": { "aaaa": 4441, "none": 50475 } } } }, "nz": { "graded": 488851, "checks": { "dmarc": { "n": 488851, "na": 0, "states": { "absent": 328953, "none": 103082, "quarantine": 30353, "reject": 26374, "invalid": 89 }, "rua_present": 72616 }, "spf": { "n": 488851, "na": 0, "states": { "absent": 193772, "hardfail": 118485, "softfail": 162459, "neutral": 12552, "plus_all": 67, "invalid": 1516 } }, "dkim": { "n": 227780, "na": 261071, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 93456, "none_observed": 134324 } }, "mx": { "n": 488851, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 342318, "absent": 146533 } }, "reverse_dns": { "n": 342139, "na": 146712, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 305078, "none": 37061 } }, "caa": { "n": 486922, "na": 1929, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 8203, "absent": 478719 } }, "dnssec": { "n": 488851, "na": 0, "states": { "signed_valid": 14852, "signed_broken": 68, "unsigned": 473931 } }, "https": { "n": 488851, "na": 0, "states": { "https": 399933, "redirects": 0, "http_only": 88918 } }, "tls": { "n": 399933, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 382908, "tls12": 17025, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 399933, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 374336, "invalid": 25597 } }, "hsts": { "n": 399933, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 121748, "absent": 278185 } }, "csp": { "n": 182917, "na": 305934, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 25545, "weak": 0, "absent": 157372 } }, "clickjacking": { "n": 182917, "na": 305934, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 42570, "absent": 140347 } }, "mime_sniffing": { "n": 182917, "na": 305934, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 50466, "absent": 132451 } }, "referrer_policy": { "n": 182917, "na": 305934, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 16067, "absent": 166850 } }, "secure_by_default": { "n": 175254, "na": 313597, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1839, "not_all": 173415 } }, "ipv6": { "n": 488851, "na": 0, "states": { "aaaa": 89993, "none": 398858 } } } }, "one": { "graded": 239272, "checks": { "dmarc": { "n": 239272, "na": 0, "states": { "absent": 192514, "none": 20917, "quarantine": 12706, "reject": 13121, "invalid": 14 }, "rua_present": 22707 }, "spf": { "n": 239272, "na": 0, "states": { "absent": 159735, "hardfail": 25230, "softfail": 50238, "neutral": 1900, "plus_all": 19, "invalid": 2150 } }, "dkim": { "n": 42515, "na": 196757, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 26257, "none_observed": 16258 } }, "mx": { "n": 239272, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 107824, "absent": 131448 } }, "reverse_dns": { "n": 107801, "na": 131471, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 82815, "none": 24986 } }, "caa": { "n": 237349, "na": 1923, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2788, "absent": 234561 } }, "dnssec": { "n": 239272, "na": 0, "states": { "signed_valid": 42283, "signed_broken": 188, "unsigned": 196801 } }, "https": { "n": 239272, "na": 0, "states": { "https": 159145, "redirects": 0, "http_only": 80127 } }, "tls": { "n": 159145, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 154210, "tls12": 4935, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 159145, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 134956, "invalid": 24189 } }, "hsts": { "n": 159145, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 36793, "absent": 122352 } }, "csp": { "n": 99729, "na": 139543, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 9310, "weak": 0, "absent": 90419 } }, "clickjacking": { "n": 99729, "na": 139543, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 15842, "absent": 83887 } }, "mime_sniffing": { "n": 99729, "na": 139543, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 22799, "absent": 76930 } }, "referrer_policy": { "n": 99729, "na": 139543, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 13506, "absent": 86223 } }, "secure_by_default": { "n": 86232, "na": 153040, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 3158, "not_all": 83074 } }, "ipv6": { "n": 239272, "na": 0, "states": { "aaaa": 86455, "none": 152817 } } } }, "onl": { "graded": 58772, "checks": { "dmarc": { "n": 58772, "na": 0, "states": { "absent": 55825, "none": 1502, "quarantine": 697, "reject": 748, "invalid": 0 }, "rua_present": 1094 }, "spf": { "n": 58772, "na": 0, "states": { "absent": 51345, "hardfail": 2621, "softfail": 4347, "neutral": 188, "plus_all": 2, "invalid": 269 } }, "dkim": { "n": 8142, "na": 50630, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1162, "none_observed": 6980 } }, "mx": { "n": 58772, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 14428, "absent": 44344 } }, "reverse_dns": { "n": 14438, "na": 44334, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 13235, "none": 1203 } }, "caa": { "n": 58597, "na": 175, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 242, "absent": 58355 } }, "dnssec": { "n": 58772, "na": 0, "states": { "signed_valid": 477, "signed_broken": 7, "unsigned": 58288 } }, "https": { "n": 58772, "na": 0, "states": { "https": 51268, "redirects": 0, "http_only": 7504 } }, "tls": { "n": 51268, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 49953, "tls12": 1315, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 51268, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 49818, "invalid": 1450 } }, "hsts": { "n": 51268, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 6223, "absent": 45045 } }, "csp": { "n": 45405, "na": 13367, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 259, "weak": 0, "absent": 45146 } }, "clickjacking": { "n": 45405, "na": 13367, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 686, "absent": 44719 } }, "mime_sniffing": { "n": 45405, "na": 13367, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 8128, "absent": 37277 } }, "referrer_policy": { "n": 45405, "na": 13367, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 676, "absent": 44729 } }, "secure_by_default": { "n": 43959, "na": 14813, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 58, "not_all": 43901 } }, "ipv6": { "n": 58772, "na": 0, "states": { "aaaa": 43699, "none": 15073 } } } }, "online": { "graded": 2771112, "checks": { "dmarc": { "n": 2771112, "na": 0, "states": { "absent": 2074251, "none": 367378, "quarantine": 223551, "reject": 105862, "invalid": 70 }, "rua_present": 255538 }, "spf": { "n": 2771112, "na": 0, "states": { "absent": 1686290, "hardfail": 241467, "softfail": 791570, "neutral": 35239, "plus_all": 106, "invalid": 16440 } }, "dkim": { "n": 243961, "na": 2527151, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 171296, "none_observed": 72665 } }, "mx": { "n": 2771112, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1155451, "absent": 1615661 } }, "reverse_dns": { "n": 1158821, "na": 1612291, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 842995, "none": 315826 } }, "caa": { "n": 2735218, "na": 35894, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 43642, "absent": 2691576 } }, "dnssec": { "n": 2771112, "na": 0, "states": { "signed_valid": 121515, "signed_broken": 4270, "unsigned": 2645327 } }, "https": { "n": 2771112, "na": 0, "states": { "https": 1664599, "redirects": 0, "http_only": 1106513 } }, "tls": { "n": 1664599, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1545186, "tls12": 119413, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1664599, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1368867, "invalid": 295732 } }, "hsts": { "n": 1664599, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 273506, "absent": 1391093 } }, "csp": { "n": 1274757, "na": 1496355, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 132867, "weak": 0, "absent": 1141890 } }, "clickjacking": { "n": 1274757, "na": 1496355, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 130156, "absent": 1144601 } }, "mime_sniffing": { "n": 1274757, "na": 1496355, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 170368, "absent": 1104389 } }, "referrer_policy": { "n": 1274757, "na": 1496355, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 99758, "absent": 1174999 } }, "secure_by_default": { "n": 963017, "na": 1808095, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 7345, "not_all": 955672 } }, "ipv6": { "n": 2771112, "na": 0, "states": { "aaaa": 804006, "none": 1967106 } } } }, "ooo": { "graded": 12323, "checks": { "dmarc": { "n": 12323, "na": 0, "states": { "absent": 10858, "none": 720, "quarantine": 379, "reject": 366, "invalid": 0 }, "rua_present": 572 }, "spf": { "n": 12323, "na": 0, "states": { "absent": 7917, "hardfail": 1108, "softfail": 2257, "neutral": 183, "plus_all": 0, "invalid": 858 } }, "dkim": { "n": 2114, "na": 10209, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1417, "none_observed": 697 } }, "mx": { "n": 12323, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5210, "absent": 7113 } }, "reverse_dns": { "n": 5218, "na": 7105, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4556, "none": 662 } }, "caa": { "n": 12087, "na": 236, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 248, "absent": 11839 } }, "dnssec": { "n": 12323, "na": 0, "states": { "signed_valid": 1955, "signed_broken": 24, "unsigned": 10344 } }, "https": { "n": 12323, "na": 0, "states": { "https": 7794, "redirects": 0, "http_only": 4529 } }, "tls": { "n": 7794, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7305, "tls12": 489, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7794, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6026, "invalid": 1768 } }, "hsts": { "n": 7794, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2204, "absent": 5590 } }, "csp": { "n": 4570, "na": 7753, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 304, "weak": 0, "absent": 4266 } }, "clickjacking": { "n": 4570, "na": 7753, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 768, "absent": 3802 } }, "mime_sniffing": { "n": 4570, "na": 7753, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 685, "absent": 3885 } }, "referrer_policy": { "n": 4570, "na": 7753, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 361, "absent": 4209 } }, "secure_by_default": { "n": 3852, "na": 8471, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 107, "not_all": 3745 } }, "ipv6": { "n": 12323, "na": 0, "states": { "aaaa": 1843, "none": 10480 } } } }, "org": { "graded": 11087980, "checks": { "dmarc": { "n": 11087980, "na": 0, "states": { "absent": 8275911, "none": 1515955, "quarantine": 638593, "reject": 656662, "invalid": 859 }, "rua_present": 1135627 }, "spf": { "n": 11087980, "na": 0, "states": { "absent": 6082466, "hardfail": 1585345, "softfail": 3147262, "neutral": 220639, "plus_all": 1320, "invalid": 50948 } }, "dkim": { "n": 3289034, "na": 7798946, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1415864, "none_observed": 1873170 } }, "mx": { "n": 11087980, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6322856, "absent": 4765124 } }, "reverse_dns": { "n": 6317890, "na": 4770090, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5233563, "none": 1084327 } }, "caa": { "n": 10972851, "na": 115129, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 114390, "absent": 10858461 } }, "dnssec": { "n": 11087980, "na": 0, "states": { "signed_valid": 666896, "signed_broken": 5919, "unsigned": 10415165 } }, "https": { "n": 11087980, "na": 0, "states": { "https": 6715563, "redirects": 0, "http_only": 4372417 } }, "tls": { "n": 6715563, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6371626, "tls12": 343937, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6715563, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6026248, "invalid": 689315 } }, "hsts": { "n": 6715563, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1601041, "absent": 5114522 } }, "csp": { "n": 4144484, "na": 6943496, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 350141, "weak": 0, "absent": 3794343 } }, "clickjacking": { "n": 4144484, "na": 6943496, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 674112, "absent": 3470372 } }, "mime_sniffing": { "n": 4144484, "na": 6943496, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 785560, "absent": 3358924 } }, "referrer_policy": { "n": 4144484, "na": 6943496, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 285252, "absent": 3859232 } }, "secure_by_default": { "n": 3538657, "na": 7549323, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 36180, "not_all": 3502477 } }, "ipv6": { "n": 11087980, "na": 0, "states": { "aaaa": 2085859, "none": 9002121 } } } }, "ovh": { "graded": 76610, "checks": { "dmarc": { "n": 76610, "na": 0, "states": { "absent": 66850, "none": 5323, "quarantine": 2611, "reject": 1821, "invalid": 5 }, "rua_present": 5025 }, "spf": { "n": 76610, "na": 0, "states": { "absent": 20186, "hardfail": 30003, "softfail": 25462, "neutral": 341, "plus_all": 126, "invalid": 492 } }, "dkim": { "n": 7123, "na": 69487, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 5444, "none_observed": 1679 } }, "mx": { "n": 76610, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 63649, "absent": 12961 } }, "reverse_dns": { "n": 63630, "na": 12980, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 61791, "none": 1839 } }, "caa": { "n": 76422, "na": 188, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1359, "absent": 75063 } }, "dnssec": { "n": 76610, "na": 0, "states": { "signed_valid": 29785, "signed_broken": 119, "unsigned": 46706 } }, "https": { "n": 76610, "na": 0, "states": { "https": 41175, "redirects": 0, "http_only": 35435 } }, "tls": { "n": 41175, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 39633, "tls12": 1542, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 41175, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 33724, "invalid": 7451 } }, "hsts": { "n": 41175, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3520, "absent": 37655 } }, "csp": { "n": 25045, "na": 51565, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 567, "weak": 0, "absent": 24478 } }, "clickjacking": { "n": 25045, "na": 51565, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4522, "absent": 20523 } }, "mime_sniffing": { "n": 25045, "na": 51565, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4533, "absent": 20512 } }, "referrer_policy": { "n": 25045, "na": 51565, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3602, "absent": 21443 } }, "secure_by_default": { "n": 23220, "na": 53390, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 203, "not_all": 23017 } }, "ipv6": { "n": 76610, "na": 0, "states": { "aaaa": 23329, "none": 53281 } } } }, "pa": { "graded": 6748, "checks": { "dmarc": { "n": 6748, "na": 0, "states": { "absent": 3967, "none": 1411, "quarantine": 475, "reject": 893, "invalid": 2 }, "rua_present": 1344 }, "spf": { "n": 6748, "na": 0, "states": { "absent": 2153, "hardfail": 1940, "softfail": 2479, "neutral": 98, "plus_all": 1, "invalid": 77 } }, "dkim": { "n": 3554, "na": 3194, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2002, "none_observed": 1552 } }, "mx": { "n": 6748, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4849, "absent": 1899 } }, "reverse_dns": { "n": 4847, "na": 1901, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4039, "none": 808 } }, "caa": { "n": 6735, "na": 13, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 162, "absent": 6573 } }, "dnssec": { "n": 6748, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 6748 } }, "https": { "n": 6748, "na": 0, "states": { "https": 5574, "redirects": 0, "http_only": 1174 } }, "tls": { "n": 5574, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5152, "tls12": 422, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5574, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5161, "invalid": 413 } }, "hsts": { "n": 5574, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1158, "absent": 4416 } }, "csp": { "n": 2868, "na": 3880, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 502, "weak": 0, "absent": 2366 } }, "clickjacking": { "n": 2868, "na": 3880, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 580, "absent": 2288 } }, "mime_sniffing": { "n": 2868, "na": 3880, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 702, "absent": 2166 } }, "referrer_policy": { "n": 2868, "na": 3880, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 361, "absent": 2507 } }, "secure_by_default": { "n": 2784, "na": 3964, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 54, "not_all": 2730 } }, "ipv6": { "n": 6748, "na": 0, "states": { "aaaa": 1558, "none": 5190 } } } }, "page": { "graded": 37086, "checks": { "dmarc": { "n": 37086, "na": 0, "states": { "absent": 32395, "none": 1839, "quarantine": 1571, "reject": 1280, "invalid": 1 }, "rua_present": 2533 }, "spf": { "n": 37086, "na": 0, "states": { "absent": 18661, "hardfail": 2071, "softfail": 15754, "neutral": 490, "plus_all": 3, "invalid": 107 } }, "dkim": { "n": 12923, "na": 24163, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 11449, "none_observed": 1474 } }, "mx": { "n": 37086, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 18626, "absent": 18460 } }, "reverse_dns": { "n": 18628, "na": 18458, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 17580, "none": 1048 } }, "caa": { "n": 36897, "na": 189, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 826, "absent": 36071 } }, "dnssec": { "n": 37086, "na": 0, "states": { "signed_valid": 12056, "signed_broken": 44, "unsigned": 24986 } }, "https": { "n": 37086, "na": 0, "states": { "https": 17273, "redirects": 0, "http_only": 19813 } }, "tls": { "n": 17273, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 16946, "tls12": 327, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 17273, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 16388, "invalid": 885 } }, "hsts": { "n": 17273, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4433, "absent": 12840 } }, "csp": { "n": 10713, "na": 26373, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1103, "weak": 0, "absent": 9610 } }, "clickjacking": { "n": 10713, "na": 26373, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2173, "absent": 8540 } }, "mime_sniffing": { "n": 10713, "na": 26373, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2501, "absent": 8212 } }, "referrer_policy": { "n": 10713, "na": 26373, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1728, "absent": 8985 } }, "secure_by_default": { "n": 9371, "na": 27715, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 206, "not_all": 9165 } }, "ipv6": { "n": 37086, "na": 0, "states": { "aaaa": 7265, "none": 29821 } } } }, "paris": { "graded": 18154, "checks": { "dmarc": { "n": 18154, "na": 0, "states": { "absent": 14003, "none": 2512, "quarantine": 643, "reject": 996, "invalid": 0 }, "rua_present": 1560 }, "spf": { "n": 18154, "na": 0, "states": { "absent": 5643, "hardfail": 5253, "softfail": 5366, "neutral": 1825, "plus_all": 18, "invalid": 49 } }, "dkim": { "n": 2427, "na": 15727, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1202, "none_observed": 1225 } }, "mx": { "n": 18154, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 15636, "absent": 2518 } }, "reverse_dns": { "n": 15635, "na": 2519, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 14438, "none": 1197 } }, "caa": { "n": 18103, "na": 51, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 189, "absent": 17914 } }, "dnssec": { "n": 18154, "na": 0, "states": { "signed_valid": 3752, "signed_broken": 16, "unsigned": 14386 } }, "https": { "n": 18154, "na": 0, "states": { "https": 6686, "redirects": 0, "http_only": 11468 } }, "tls": { "n": 6686, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6050, "tls12": 636, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6686, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5432, "invalid": 1254 } }, "hsts": { "n": 6686, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1645, "absent": 5041 } }, "csp": { "n": 5308, "na": 12846, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1640, "weak": 0, "absent": 3668 } }, "clickjacking": { "n": 5308, "na": 12846, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 667, "absent": 4641 } }, "mime_sniffing": { "n": 5308, "na": 12846, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 797, "absent": 4511 } }, "referrer_policy": { "n": 5308, "na": 12846, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 448, "absent": 4860 } }, "secure_by_default": { "n": 2994, "na": 15160, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 36, "not_all": 2958 } }, "ipv6": { "n": 18154, "na": 0, "states": { "aaaa": 3874, "none": 14280 } } } }, "partners": { "graded": 15976, "checks": { "dmarc": { "n": 15976, "na": 0, "states": { "absent": 11304, "none": 1712, "quarantine": 1699, "reject": 1258, "invalid": 3 }, "rua_present": 2807 }, "spf": { "n": 15976, "na": 0, "states": { "absent": 8291, "hardfail": 2767, "softfail": 4608, "neutral": 187, "plus_all": 0, "invalid": 123 } }, "dkim": { "n": 4958, "na": 11018, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2110, "none_observed": 2848 } }, "mx": { "n": 15976, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8936, "absent": 7040 } }, "reverse_dns": { "n": 8938, "na": 7038, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8108, "none": 830 } }, "caa": { "n": 15880, "na": 96, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 383, "absent": 15497 } }, "dnssec": { "n": 15976, "na": 0, "states": { "signed_valid": 1210, "signed_broken": 17, "unsigned": 14749 } }, "https": { "n": 15976, "na": 0, "states": { "https": 8110, "redirects": 0, "http_only": 7866 } }, "tls": { "n": 8110, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7755, "tls12": 355, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8110, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7367, "invalid": 743 } }, "hsts": { "n": 8110, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2659, "absent": 5451 } }, "csp": { "n": 5247, "na": 10729, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 461, "weak": 0, "absent": 4786 } }, "clickjacking": { "n": 5247, "na": 10729, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1160, "absent": 4087 } }, "mime_sniffing": { "n": 5247, "na": 10729, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1415, "absent": 3832 } }, "referrer_policy": { "n": 5247, "na": 10729, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 710, "absent": 4537 } }, "secure_by_default": { "n": 4260, "na": 11716, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 75, "not_all": 4185 } }, "ipv6": { "n": 15976, "na": 0, "states": { "aaaa": 2470, "none": 13506 } } } }, "parts": { "graded": 6779, "checks": { "dmarc": { "n": 6779, "na": 0, "states": { "absent": 5266, "none": 575, "quarantine": 537, "reject": 401, "invalid": 0 }, "rua_present": 814 }, "spf": { "n": 6779, "na": 0, "states": { "absent": 4270, "hardfail": 837, "softfail": 1480, "neutral": 111, "plus_all": 0, "invalid": 81 } }, "dkim": { "n": 1399, "na": 5380, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 528, "none_observed": 871 } }, "mx": { "n": 6779, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3308, "absent": 3471 } }, "reverse_dns": { "n": 3306, "na": 3473, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2844, "none": 462 } }, "caa": { "n": 6644, "na": 135, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 185, "absent": 6459 } }, "dnssec": { "n": 6779, "na": 0, "states": { "signed_valid": 455, "signed_broken": 5, "unsigned": 6319 } }, "https": { "n": 6779, "na": 0, "states": { "https": 3359, "redirects": 0, "http_only": 3420 } }, "tls": { "n": 3359, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3129, "tls12": 230, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3359, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2905, "invalid": 454 } }, "hsts": { "n": 3359, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 767, "absent": 2592 } }, "csp": { "n": 2059, "na": 4720, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 325, "weak": 0, "absent": 1734 } }, "clickjacking": { "n": 2059, "na": 4720, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 548, "absent": 1511 } }, "mime_sniffing": { "n": 2059, "na": 4720, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 465, "absent": 1594 } }, "referrer_policy": { "n": 2059, "na": 4720, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 217, "absent": 1842 } }, "secure_by_default": { "n": 1626, "na": 5153, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 36, "not_all": 1590 } }, "ipv6": { "n": 6779, "na": 0, "states": { "aaaa": 1178, "none": 5601 } } } }, "party": { "graded": 18616, "checks": { "dmarc": { "n": 18616, "na": 0, "states": { "absent": 15741, "none": 1307, "quarantine": 738, "reject": 830, "invalid": 0 }, "rua_present": 1289 }, "spf": { "n": 18616, "na": 0, "states": { "absent": 11655, "hardfail": 1521, "softfail": 5055, "neutral": 299, "plus_all": 1, "invalid": 85 } }, "dkim": { "n": 1898, "na": 16718, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1074, "none_observed": 824 } }, "mx": { "n": 18616, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7615, "absent": 11001 } }, "reverse_dns": { "n": 7612, "na": 11004, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6561, "none": 1051 } }, "caa": { "n": 18407, "na": 209, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 297, "absent": 18110 } }, "dnssec": { "n": 18616, "na": 0, "states": { "signed_valid": 1703, "signed_broken": 9, "unsigned": 16904 } }, "https": { "n": 18616, "na": 0, "states": { "https": 10081, "redirects": 0, "http_only": 8535 } }, "tls": { "n": 10081, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9697, "tls12": 384, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10081, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9144, "invalid": 937 } }, "hsts": { "n": 10081, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2097, "absent": 7984 } }, "csp": { "n": 6172, "na": 12444, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 533, "weak": 0, "absent": 5639 } }, "clickjacking": { "n": 6172, "na": 12444, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 951, "absent": 5221 } }, "mime_sniffing": { "n": 6172, "na": 12444, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1492, "absent": 4680 } }, "referrer_policy": { "n": 6172, "na": 12444, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1134, "absent": 5038 } }, "secure_by_default": { "n": 5150, "na": 13466, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 109, "not_all": 5041 } }, "ipv6": { "n": 18616, "na": 0, "states": { "aaaa": 5078, "none": 13538 } } } }, "pe": { "graded": 106956, "checks": { "dmarc": { "n": 106956, "na": 0, "states": { "absent": 61218, "none": 32233, "quarantine": 7531, "reject": 5886, "invalid": 88 }, "rua_present": 15886 }, "spf": { "n": 106956, "na": 0, "states": { "absent": 29012, "hardfail": 16563, "softfail": 60360, "neutral": 629, "plus_all": 15, "invalid": 377 } }, "dkim": { "n": 68423, "na": 38533, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 47381, "none_observed": 21042 } }, "mx": { "n": 106956, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 85003, "absent": 21953 } }, "reverse_dns": { "n": 84974, "na": 21982, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 65807, "none": 19167 } }, "caa": { "n": 106776, "na": 180, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2085, "absent": 104691 } }, "dnssec": { "n": 106956, "na": 0, "states": { "signed_valid": 279, "signed_broken": 2, "unsigned": 106675 } }, "https": { "n": 106956, "na": 0, "states": { "https": 92005, "redirects": 0, "http_only": 14951 } }, "tls": { "n": 92005, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 86895, "tls12": 5110, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 92005, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 88607, "invalid": 3398 } }, "hsts": { "n": 92005, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 13924, "absent": 78081 } }, "csp": { "n": 59205, "na": 47751, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 7945, "weak": 0, "absent": 51260 } }, "clickjacking": { "n": 59205, "na": 47751, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 7231, "absent": 51974 } }, "mime_sniffing": { "n": 59205, "na": 47751, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 8184, "absent": 51021 } }, "referrer_policy": { "n": 59205, "na": 47751, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4073, "absent": 55132 } }, "secure_by_default": { "n": 58694, "na": 48262, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 496, "not_all": 58198 } }, "ipv6": { "n": 106956, "na": 0, "states": { "aaaa": 18282, "none": 88674 } } } }, "pet": { "graded": 18451, "checks": { "dmarc": { "n": 18451, "na": 0, "states": { "absent": 13865, "none": 1851, "quarantine": 1910, "reject": 824, "invalid": 1 }, "rua_present": 2685 }, "spf": { "n": 18451, "na": 0, "states": { "absent": 11868, "hardfail": 2154, "softfail": 4190, "neutral": 122, "plus_all": 0, "invalid": 117 } }, "dkim": { "n": 3347, "na": 15104, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1241, "none_observed": 2106 } }, "mx": { "n": 18451, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7862, "absent": 10589 } }, "reverse_dns": { "n": 7860, "na": 10591, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6340, "none": 1520 } }, "caa": { "n": 18298, "na": 153, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 409, "absent": 17889 } }, "dnssec": { "n": 18451, "na": 0, "states": { "signed_valid": 949, "signed_broken": 9, "unsigned": 17493 } }, "https": { "n": 18451, "na": 0, "states": { "https": 10177, "redirects": 0, "http_only": 8274 } }, "tls": { "n": 10177, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9758, "tls12": 419, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10177, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9129, "invalid": 1048 } }, "hsts": { "n": 10177, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2584, "absent": 7593 } }, "csp": { "n": 6522, "na": 11929, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1023, "weak": 0, "absent": 5499 } }, "clickjacking": { "n": 6522, "na": 11929, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1342, "absent": 5180 } }, "mime_sniffing": { "n": 6522, "na": 11929, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1380, "absent": 5142 } }, "referrer_policy": { "n": 6522, "na": 11929, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 866, "absent": 5656 } }, "secure_by_default": { "n": 5362, "na": 13089, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 79, "not_all": 5283 } }, "ipv6": { "n": 18451, "na": 0, "states": { "aaaa": 3122, "none": 15329 } } } }, "ph": { "graded": 79064, "checks": { "dmarc": { "n": 79064, "na": 0, "states": { "absent": 54906, "none": 11977, "quarantine": 6625, "reject": 5549, "invalid": 7 }, "rua_present": 14570 }, "spf": { "n": 79064, "na": 0, "states": { "absent": 36806, "hardfail": 18170, "softfail": 23303, "neutral": 608, "plus_all": 7, "invalid": 170 } }, "dkim": { "n": 27064, "na": 52000, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 11062, "none_observed": 16002 } }, "mx": { "n": 79064, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 48294, "absent": 30770 } }, "reverse_dns": { "n": 48260, "na": 30804, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 34065, "none": 14195 } }, "caa": { "n": 78604, "na": 460, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1239, "absent": 77365 } }, "dnssec": { "n": 79064, "na": 0, "states": { "signed_valid": 417, "signed_broken": 1, "unsigned": 78646 } }, "https": { "n": 79064, "na": 0, "states": { "https": 60069, "redirects": 0, "http_only": 18995 } }, "tls": { "n": 60069, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 56995, "tls12": 3074, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 60069, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 50346, "invalid": 9723 } }, "hsts": { "n": 60069, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 15529, "absent": 44540 } }, "csp": { "n": 43892, "na": 35172, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 7019, "weak": 0, "absent": 36873 } }, "clickjacking": { "n": 43892, "na": 35172, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 8568, "absent": 35324 } }, "mime_sniffing": { "n": 43892, "na": 35172, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 12554, "absent": 31338 } }, "referrer_policy": { "n": 43892, "na": 35172, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3802, "absent": 40090 } }, "secure_by_default": { "n": 42685, "na": 36379, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 656, "not_all": 42029 } }, "ipv6": { "n": 79064, "na": 0, "states": { "aaaa": 20304, "none": 58760 } } } }, "photo": { "graded": 14837, "checks": { "dmarc": { "n": 14837, "na": 0, "states": { "absent": 11199, "none": 2034, "quarantine": 859, "reject": 742, "invalid": 3 }, "rua_present": 1122 }, "spf": { "n": 14837, "na": 0, "states": { "absent": 6954, "hardfail": 1697, "softfail": 5364, "neutral": 609, "plus_all": 1, "invalid": 212 } }, "dkim": { "n": 3091, "na": 11746, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1607, "none_observed": 1484 } }, "mx": { "n": 14837, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 10161, "absent": 4676 } }, "reverse_dns": { "n": 10164, "na": 4673, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 9325, "none": 839 } }, "caa": { "n": 14766, "na": 71, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 264, "absent": 14502 } }, "dnssec": { "n": 14837, "na": 0, "states": { "signed_valid": 1228, "signed_broken": 6, "unsigned": 13603 } }, "https": { "n": 14837, "na": 0, "states": { "https": 9565, "redirects": 0, "http_only": 5272 } }, "tls": { "n": 9565, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8245, "tls12": 1320, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9565, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8355, "invalid": 1210 } }, "hsts": { "n": 9565, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2307, "absent": 7258 } }, "csp": { "n": 5991, "na": 8846, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 487, "weak": 0, "absent": 5504 } }, "clickjacking": { "n": 5991, "na": 8846, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 933, "absent": 5058 } }, "mime_sniffing": { "n": 5991, "na": 8846, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1105, "absent": 4886 } }, "referrer_policy": { "n": 5991, "na": 8846, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 456, "absent": 5535 } }, "secure_by_default": { "n": 4962, "na": 9875, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 61, "not_all": 4901 } }, "ipv6": { "n": 14837, "na": 0, "states": { "aaaa": 2995, "none": 11842 } } } }, "photography": { "graded": 31714, "checks": { "dmarc": { "n": 31714, "na": 0, "states": { "absent": 24822, "none": 3164, "quarantine": 1432, "reject": 2294, "invalid": 2 }, "rua_present": 1897 }, "spf": { "n": 31714, "na": 0, "states": { "absent": 19340, "hardfail": 3373, "softfail": 8336, "neutral": 507, "plus_all": 0, "invalid": 158 } }, "dkim": { "n": 8877, "na": 22837, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2613, "none_observed": 6264 } }, "mx": { "n": 31714, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 17816, "absent": 13898 } }, "reverse_dns": { "n": 17814, "na": 13900, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 16324, "none": 1490 } }, "caa": { "n": 31584, "na": 130, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 362, "absent": 31222 } }, "dnssec": { "n": 31714, "na": 0, "states": { "signed_valid": 2370, "signed_broken": 15, "unsigned": 29329 } }, "https": { "n": 31714, "na": 0, "states": { "https": 20023, "redirects": 0, "http_only": 11691 } }, "tls": { "n": 20023, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 18023, "tls12": 2000, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 20023, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 18407, "invalid": 1616 } }, "hsts": { "n": 20023, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5759, "absent": 14264 } }, "csp": { "n": 9315, "na": 22399, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 734, "weak": 0, "absent": 8581 } }, "clickjacking": { "n": 9315, "na": 22399, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1834, "absent": 7481 } }, "mime_sniffing": { "n": 9315, "na": 22399, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2516, "absent": 6799 } }, "referrer_policy": { "n": 9315, "na": 22399, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 562, "absent": 8753 } }, "secure_by_default": { "n": 7709, "na": 24005, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 92, "not_all": 7617 } }, "ipv6": { "n": 31714, "na": 0, "states": { "aaaa": 4633, "none": 27081 } } } }, "photos": { "graded": 17860, "checks": { "dmarc": { "n": 17860, "na": 0, "states": { "absent": 14369, "none": 1680, "quarantine": 870, "reject": 941, "invalid": 0 }, "rua_present": 1315 }, "spf": { "n": 17860, "na": 0, "states": { "absent": 10754, "hardfail": 1841, "softfail": 4739, "neutral": 351, "plus_all": 1, "invalid": 174 } }, "dkim": { "n": 3726, "na": 14134, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1490, "none_observed": 2236 } }, "mx": { "n": 17860, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9293, "absent": 8567 } }, "reverse_dns": { "n": 9296, "na": 8564, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8276, "none": 1020 } }, "caa": { "n": 17800, "na": 60, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 371, "absent": 17429 } }, "dnssec": { "n": 17860, "na": 0, "states": { "signed_valid": 1511, "signed_broken": 5, "unsigned": 16344 } }, "https": { "n": 17860, "na": 0, "states": { "https": 10499, "redirects": 0, "http_only": 7361 } }, "tls": { "n": 10499, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9482, "tls12": 1017, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10499, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9518, "invalid": 981 } }, "hsts": { "n": 10499, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2681, "absent": 7818 } }, "csp": { "n": 5949, "na": 11911, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 507, "weak": 0, "absent": 5442 } }, "clickjacking": { "n": 5949, "na": 11911, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1105, "absent": 4844 } }, "mime_sniffing": { "n": 5949, "na": 11911, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1725, "absent": 4224 } }, "referrer_policy": { "n": 5949, "na": 11911, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 542, "absent": 5407 } }, "secure_by_default": { "n": 4950, "na": 12910, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 89, "not_all": 4861 } }, "ipv6": { "n": 17860, "na": 0, "states": { "aaaa": 3132, "none": 14728 } } } }, "pics": { "graded": 104777, "checks": { "dmarc": { "n": 104777, "na": 0, "states": { "absent": 100890, "none": 2819, "quarantine": 545, "reject": 523, "invalid": 0 }, "rua_present": 2078 }, "spf": { "n": 104777, "na": 0, "states": { "absent": 83102, "hardfail": 3068, "softfail": 18371, "neutral": 151, "plus_all": 4, "invalid": 81 } }, "dkim": { "n": 2424, "na": 102353, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1655, "none_observed": 769 } }, "mx": { "n": 104777, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 22334, "absent": 82443 } }, "reverse_dns": { "n": 22324, "na": 82453, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 19688, "none": 2636 } }, "caa": { "n": 103866, "na": 911, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 409, "absent": 103457 } }, "dnssec": { "n": 104777, "na": 0, "states": { "signed_valid": 4911, "signed_broken": 22, "unsigned": 99844 } }, "https": { "n": 104777, "na": 0, "states": { "https": 67088, "redirects": 0, "http_only": 37689 } }, "tls": { "n": 67088, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 66086, "tls12": 1002, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 67088, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 64643, "invalid": 2445 } }, "hsts": { "n": 67088, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 11602, "absent": 55486 } }, "csp": { "n": 35220, "na": 69557, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1401, "weak": 0, "absent": 33819 } }, "clickjacking": { "n": 35220, "na": 69557, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2510, "absent": 32710 } }, "mime_sniffing": { "n": 35220, "na": 69557, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 9825, "absent": 25395 } }, "referrer_policy": { "n": 35220, "na": 69557, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 9101, "absent": 26119 } }, "secure_by_default": { "n": 31164, "na": 73613, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 167, "not_all": 30997 } }, "ipv6": { "n": 104777, "na": 0, "states": { "aaaa": 57040, "none": 47737 } } } }, "pictures": { "graded": 7672, "checks": { "dmarc": { "n": 7672, "na": 0, "states": { "absent": 6355, "none": 630, "quarantine": 256, "reject": 431, "invalid": 0 }, "rua_present": 449 }, "spf": { "n": 7672, "na": 0, "states": { "absent": 4874, "hardfail": 779, "softfail": 1792, "neutral": 128, "plus_all": 0, "invalid": 99 } }, "dkim": { "n": 1362, "na": 6310, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 621, "none_observed": 741 } }, "mx": { "n": 7672, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3667, "absent": 4005 } }, "reverse_dns": { "n": 3668, "na": 4004, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3143, "none": 525 } }, "caa": { "n": 7427, "na": 245, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 309, "absent": 7118 } }, "dnssec": { "n": 7672, "na": 0, "states": { "signed_valid": 757, "signed_broken": 5, "unsigned": 6910 } }, "https": { "n": 7672, "na": 0, "states": { "https": 4477, "redirects": 0, "http_only": 3195 } }, "tls": { "n": 4477, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4258, "tls12": 219, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4477, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4087, "invalid": 390 } }, "hsts": { "n": 4477, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1007, "absent": 3470 } }, "csp": { "n": 2784, "na": 4888, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 194, "weak": 0, "absent": 2590 } }, "clickjacking": { "n": 2784, "na": 4888, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 425, "absent": 2359 } }, "mime_sniffing": { "n": 2784, "na": 4888, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 521, "absent": 2263 } }, "referrer_policy": { "n": 2784, "na": 4888, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 204, "absent": 2580 } }, "secure_by_default": { "n": 2206, "na": 5466, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 28, "not_all": 2178 } }, "ipv6": { "n": 7672, "na": 0, "states": { "aaaa": 1789, "none": 5883 } } } }, "pink": { "graded": 6186, "checks": { "dmarc": { "n": 6186, "na": 0, "states": { "absent": 5193, "none": 428, "quarantine": 331, "reject": 233, "invalid": 1 }, "rua_present": 415 }, "spf": { "n": 6186, "na": 0, "states": { "absent": 3810, "hardfail": 634, "softfail": 1569, "neutral": 105, "plus_all": 0, "invalid": 68 } }, "dkim": { "n": 634, "na": 5552, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 360, "none_observed": 274 } }, "mx": { "n": 6186, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2721, "absent": 3465 } }, "reverse_dns": { "n": 2717, "na": 3469, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2098, "none": 619 } }, "caa": { "n": 6049, "na": 137, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 255, "absent": 5794 } }, "dnssec": { "n": 6186, "na": 0, "states": { "signed_valid": 383, "signed_broken": 3, "unsigned": 5800 } }, "https": { "n": 6186, "na": 0, "states": { "https": 3500, "redirects": 0, "http_only": 2686 } }, "tls": { "n": 3500, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3307, "tls12": 193, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3500, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2971, "invalid": 529 } }, "hsts": { "n": 3500, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 628, "absent": 2872 } }, "csp": { "n": 2427, "na": 3759, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 232, "weak": 0, "absent": 2195 } }, "clickjacking": { "n": 2427, "na": 3759, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 366, "absent": 2061 } }, "mime_sniffing": { "n": 2427, "na": 3759, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 404, "absent": 2023 } }, "referrer_policy": { "n": 2427, "na": 3759, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 284, "absent": 2143 } }, "secure_by_default": { "n": 1982, "na": 4204, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 33, "not_all": 1949 } }, "ipv6": { "n": 6186, "na": 0, "states": { "aaaa": 1246, "none": 4940 } } } }, "pizza": { "graded": 8969, "checks": { "dmarc": { "n": 8969, "na": 0, "states": { "absent": 7373, "none": 654, "quarantine": 537, "reject": 404, "invalid": 1 }, "rua_present": 762 }, "spf": { "n": 8969, "na": 0, "states": { "absent": 5824, "hardfail": 856, "softfail": 2106, "neutral": 135, "plus_all": 2, "invalid": 46 } }, "dkim": { "n": 1442, "na": 7527, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 602, "none_observed": 840 } }, "mx": { "n": 8969, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3801, "absent": 5168 } }, "reverse_dns": { "n": 3801, "na": 5168, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3424, "none": 377 } }, "caa": { "n": 8902, "na": 67, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 410, "absent": 8492 } }, "dnssec": { "n": 8969, "na": 0, "states": { "signed_valid": 674, "signed_broken": 11, "unsigned": 8284 } }, "https": { "n": 8969, "na": 0, "states": { "https": 5357, "redirects": 0, "http_only": 3612 } }, "tls": { "n": 5357, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5009, "tls12": 348, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5357, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4634, "invalid": 723 } }, "hsts": { "n": 5357, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1149, "absent": 4208 } }, "csp": { "n": 2952, "na": 6017, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 222, "weak": 0, "absent": 2730 } }, "clickjacking": { "n": 2952, "na": 6017, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 494, "absent": 2458 } }, "mime_sniffing": { "n": 2952, "na": 6017, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 613, "absent": 2339 } }, "referrer_policy": { "n": 2952, "na": 6017, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 355, "absent": 2597 } }, "secure_by_default": { "n": 2412, "na": 6557, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 54, "not_all": 2358 } }, "ipv6": { "n": 8969, "na": 0, "states": { "aaaa": 1738, "none": 7231 } } } }, "pk": { "graded": 133809, "checks": { "dmarc": { "n": 133809, "na": 0, "states": { "absent": 78652, "none": 47464, "quarantine": 4241, "reject": 3448, "invalid": 4 }, "rua_present": 7500 }, "spf": { "n": 133809, "na": 0, "states": { "absent": 44074, "hardfail": 12718, "softfail": 76253, "neutral": 590, "plus_all": 15, "invalid": 159 } }, "dkim": { "n": 55249, "na": 78560, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 49096, "none_observed": 6153 } }, "mx": { "n": 133809, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 93386, "absent": 40423 } }, "reverse_dns": { "n": 93290, "na": 40519, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 58684, "none": 34606 } }, "caa": { "n": 133262, "na": 547, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 4539, "absent": 128723 } }, "dnssec": { "n": 133809, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 133809 } }, "https": { "n": 133809, "na": 0, "states": { "https": 127964, "redirects": 0, "http_only": 5845 } }, "tls": { "n": 127964, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 124877, "tls12": 3087, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 127964, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 122603, "invalid": 5361 } }, "hsts": { "n": 127964, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 22589, "absent": 105375 } }, "csp": { "n": 87451, "na": 46358, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 26762, "weak": 0, "absent": 60689 } }, "clickjacking": { "n": 87451, "na": 46358, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 15712, "absent": 71739 } }, "mime_sniffing": { "n": 87451, "na": 46358, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 16908, "absent": 70543 } }, "referrer_policy": { "n": 87451, "na": 46358, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 6236, "absent": 81215 } }, "secure_by_default": { "n": 86894, "na": 46915, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 518, "not_all": 86376 } }, "ipv6": { "n": 133809, "na": 0, "states": { "aaaa": 46615, "none": 87194 } } } }, "pl": { "graded": 1906113, "checks": { "dmarc": { "n": 1906113, "na": 0, "states": { "absent": 1032838, "none": 465896, "quarantine": 289949, "reject": 117278, "invalid": 152 }, "rua_present": 360012 }, "spf": { "n": 1906113, "na": 0, "states": { "absent": 399328, "hardfail": 842128, "softfail": 553010, "neutral": 9474, "plus_all": 594, "invalid": 101579 } }, "dkim": { "n": 468672, "na": 1437441, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 390580, "none_observed": 78092 } }, "mx": { "n": 1906113, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1570588, "absent": 335525 } }, "reverse_dns": { "n": 1569711, "na": 336402, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1416223, "none": 153488 } }, "caa": { "n": 1881933, "na": 24180, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 121326, "absent": 1760607 } }, "dnssec": { "n": 1906113, "na": 0, "states": { "signed_valid": 260576, "signed_broken": 14715, "unsigned": 1630822 } }, "https": { "n": 1906113, "na": 0, "states": { "https": 1699805, "redirects": 0, "http_only": 206308 } }, "tls": { "n": 1699805, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1652899, "tls12": 46906, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1699805, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1429178, "invalid": 270627 } }, "hsts": { "n": 1699805, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 150926, "absent": 1548879 } }, "csp": { "n": 1105597, "na": 800516, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 52183, "weak": 0, "absent": 1053414 } }, "clickjacking": { "n": 1105597, "na": 800516, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 145186, "absent": 960411 } }, "mime_sniffing": { "n": 1105597, "na": 800516, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 150208, "absent": 955389 } }, "referrer_policy": { "n": 1105597, "na": 800516, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 78116, "absent": 1027481 } }, "secure_by_default": { "n": 1092289, "na": 813824, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 7210, "not_all": 1085079 } }, "ipv6": { "n": 1906113, "na": 0, "states": { "aaaa": 297156, "none": 1608957 } } } }, "place": { "graded": 9732, "checks": { "dmarc": { "n": 9732, "na": 0, "states": { "absent": 7817, "none": 730, "quarantine": 649, "reject": 536, "invalid": 0 }, "rua_present": 1012 }, "spf": { "n": 9732, "na": 0, "states": { "absent": 5585, "hardfail": 1379, "softfail": 2571, "neutral": 130, "plus_all": 2, "invalid": 65 } }, "dkim": { "n": 1868, "na": 7864, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 914, "none_observed": 954 } }, "mx": { "n": 9732, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4664, "absent": 5068 } }, "reverse_dns": { "n": 4661, "na": 5071, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3958, "none": 703 } }, "caa": { "n": 9661, "na": 71, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 193, "absent": 9468 } }, "dnssec": { "n": 9732, "na": 0, "states": { "signed_valid": 1246, "signed_broken": 11, "unsigned": 8475 } }, "https": { "n": 9732, "na": 0, "states": { "https": 5393, "redirects": 0, "http_only": 4339 } }, "tls": { "n": 5393, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5190, "tls12": 203, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5393, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4983, "invalid": 410 } }, "hsts": { "n": 5393, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1661, "absent": 3732 } }, "csp": { "n": 3689, "na": 6043, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 479, "weak": 0, "absent": 3210 } }, "clickjacking": { "n": 3689, "na": 6043, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 918, "absent": 2771 } }, "mime_sniffing": { "n": 3689, "na": 6043, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 933, "absent": 2756 } }, "referrer_policy": { "n": 3689, "na": 6043, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 525, "absent": 3164 } }, "secure_by_default": { "n": 3258, "na": 6474, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 129, "not_all": 3129 } }, "ipv6": { "n": 9732, "na": 0, "states": { "aaaa": 1673, "none": 8059 } } } }, "plus": { "graded": 36039, "checks": { "dmarc": { "n": 36039, "na": 0, "states": { "absent": 30503, "none": 2659, "quarantine": 1569, "reject": 1308, "invalid": 0 }, "rua_present": 2536 }, "spf": { "n": 36039, "na": 0, "states": { "absent": 24335, "hardfail": 5018, "softfail": 6080, "neutral": 338, "plus_all": 3, "invalid": 265 } }, "dkim": { "n": 9244, "na": 26795, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1949, "none_observed": 7295 } }, "mx": { "n": 36039, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 18732, "absent": 17307 } }, "reverse_dns": { "n": 18734, "na": 17305, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 14644, "none": 4090 } }, "caa": { "n": 35767, "na": 272, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 821, "absent": 34946 } }, "dnssec": { "n": 36039, "na": 0, "states": { "signed_valid": 1886, "signed_broken": 24, "unsigned": 34129 } }, "https": { "n": 36039, "na": 0, "states": { "https": 24840, "redirects": 0, "http_only": 11199 } }, "tls": { "n": 24840, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 24002, "tls12": 838, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 24840, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 23180, "invalid": 1660 } }, "hsts": { "n": 24840, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3128, "absent": 21712 } }, "csp": { "n": 20183, "na": 15856, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1301, "weak": 0, "absent": 18882 } }, "clickjacking": { "n": 20183, "na": 15856, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1851, "absent": 18332 } }, "mime_sniffing": { "n": 20183, "na": 15856, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 8984, "absent": 11199 } }, "referrer_policy": { "n": 20183, "na": 15856, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1516, "absent": 18667 } }, "secure_by_default": { "n": 18346, "na": 17693, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 404, "not_all": 17942 } }, "ipv6": { "n": 36039, "na": 0, "states": { "aaaa": 14817, "none": 21222 } } } }, "porn": { "graded": 6272, "checks": { "dmarc": { "n": 6272, "na": 0, "states": { "absent": 5004, "none": 112, "quarantine": 185, "reject": 971, "invalid": 0 }, "rua_present": 925 }, "spf": { "n": 6272, "na": 0, "states": { "absent": 4137, "hardfail": 1419, "softfail": 527, "neutral": 167, "plus_all": 0, "invalid": 22 } }, "dkim": { "n": 534, "na": 5738, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 84, "none_observed": 450 } }, "mx": { "n": 6272, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2862, "absent": 3410 } }, "reverse_dns": { "n": 2865, "na": 3407, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1777, "none": 1088 } }, "caa": { "n": 6225, "na": 47, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 140, "absent": 6085 } }, "dnssec": { "n": 6272, "na": 0, "states": { "signed_valid": 233, "signed_broken": 2, "unsigned": 6037 } }, "https": { "n": 6272, "na": 0, "states": { "https": 1905, "redirects": 0, "http_only": 4367 } }, "tls": { "n": 1905, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1772, "tls12": 133, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1905, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1657, "invalid": 248 } }, "hsts": { "n": 1905, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 204, "absent": 1701 } }, "csp": { "n": 2240, "na": 4032, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 526, "weak": 0, "absent": 1714 } }, "clickjacking": { "n": 2240, "na": 4032, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 467, "absent": 1773 } }, "mime_sniffing": { "n": 2240, "na": 4032, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 439, "absent": 1801 } }, "referrer_policy": { "n": 2240, "na": 4032, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 301, "absent": 1939 } }, "secure_by_default": { "n": 889, "na": 5383, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 22, "not_all": 867 } }, "ipv6": { "n": 6272, "na": 0, "states": { "aaaa": 528, "none": 5744 } } } }, "press": { "graded": 16599, "checks": { "dmarc": { "n": 16599, "na": 0, "states": { "absent": 12275, "none": 1818, "quarantine": 1507, "reject": 997, "invalid": 2 }, "rua_present": 2235 }, "spf": { "n": 16599, "na": 0, "states": { "absent": 9887, "hardfail": 1579, "softfail": 4497, "neutral": 320, "plus_all": 3, "invalid": 313 } }, "dkim": { "n": 2441, "na": 14158, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1352, "none_observed": 1089 } }, "mx": { "n": 16599, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7108, "absent": 9491 } }, "reverse_dns": { "n": 7102, "na": 9497, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5382, "none": 1720 } }, "caa": { "n": 16440, "na": 159, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 306, "absent": 16134 } }, "dnssec": { "n": 16599, "na": 0, "states": { "signed_valid": 610, "signed_broken": 7, "unsigned": 15982 } }, "https": { "n": 16599, "na": 0, "states": { "https": 9258, "redirects": 0, "http_only": 7341 } }, "tls": { "n": 9258, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8872, "tls12": 386, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9258, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8436, "invalid": 822 } }, "hsts": { "n": 9258, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2096, "absent": 7162 } }, "csp": { "n": 7063, "na": 9536, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 972, "weak": 0, "absent": 6091 } }, "clickjacking": { "n": 7063, "na": 9536, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1080, "absent": 5983 } }, "mime_sniffing": { "n": 7063, "na": 9536, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1129, "absent": 5934 } }, "referrer_policy": { "n": 7063, "na": 9536, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 522, "absent": 6541 } }, "secure_by_default": { "n": 6076, "na": 10523, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 67, "not_all": 6009 } }, "ipv6": { "n": 16599, "na": 0, "states": { "aaaa": 2770, "none": 13829 } } } }, "pro": { "graded": 1021353, "checks": { "dmarc": { "n": 1021353, "na": 0, "states": { "absent": 869932, "none": 79725, "quarantine": 47596, "reject": 24065, "invalid": 35 }, "rua_present": 73253 }, "spf": { "n": 1021353, "na": 0, "states": { "absent": 686789, "hardfail": 87388, "softfail": 225522, "neutral": 5811, "plus_all": 77, "invalid": 15766 } }, "dkim": { "n": 111259, "na": 910094, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 80376, "none_observed": 30883 } }, "mx": { "n": 1021353, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 363714, "absent": 657639 } }, "reverse_dns": { "n": 363449, "na": 657904, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 301787, "none": 61662 } }, "caa": { "n": 1011837, "na": 9516, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 11270, "absent": 1000567 } }, "dnssec": { "n": 1021353, "na": 0, "states": { "signed_valid": 52470, "signed_broken": 304, "unsigned": 968579 } }, "https": { "n": 1021353, "na": 0, "states": { "https": 707164, "redirects": 0, "http_only": 314189 } }, "tls": { "n": 707164, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 657889, "tls12": 49275, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 707164, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 628351, "invalid": 78813 } }, "hsts": { "n": 707164, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 82617, "absent": 624547 } }, "csp": { "n": 428211, "na": 593142, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 42678, "weak": 0, "absent": 385533 } }, "clickjacking": { "n": 428211, "na": 593142, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 59972, "absent": 368239 } }, "mime_sniffing": { "n": 428211, "na": 593142, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 59255, "absent": 368956 } }, "referrer_policy": { "n": 428211, "na": 593142, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 77136, "absent": 351075 } }, "secure_by_default": { "n": 370198, "na": 651155, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 4177, "not_all": 366021 } }, "ipv6": { "n": 1021353, "na": 0, "states": { "aaaa": 432237, "none": 589116 } } } }, "productions": { "graded": 10127, "checks": { "dmarc": { "n": 10127, "na": 0, "states": { "absent": 7897, "none": 949, "quarantine": 721, "reject": 559, "invalid": 1 }, "rua_present": 1027 }, "spf": { "n": 10127, "na": 0, "states": { "absent": 5406, "hardfail": 1128, "softfail": 3374, "neutral": 181, "plus_all": 0, "invalid": 38 } }, "dkim": { "n": 2989, "na": 7138, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1263, "none_observed": 1726 } }, "mx": { "n": 10127, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5784, "absent": 4343 } }, "reverse_dns": { "n": 5786, "na": 4341, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5279, "none": 507 } }, "caa": { "n": 10097, "na": 30, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 251, "absent": 9846 } }, "dnssec": { "n": 10127, "na": 0, "states": { "signed_valid": 1006, "signed_broken": 3, "unsigned": 9118 } }, "https": { "n": 10127, "na": 0, "states": { "https": 5545, "redirects": 0, "http_only": 4582 } }, "tls": { "n": 5545, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5314, "tls12": 231, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5545, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5077, "invalid": 468 } }, "hsts": { "n": 5545, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1839, "absent": 3706 } }, "csp": { "n": 3503, "na": 6624, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 444, "weak": 0, "absent": 3059 } }, "clickjacking": { "n": 3503, "na": 6624, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 847, "absent": 2656 } }, "mime_sniffing": { "n": 3503, "na": 6624, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 892, "absent": 2611 } }, "referrer_policy": { "n": 3503, "na": 6624, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 289, "absent": 3214 } }, "secure_by_default": { "n": 2899, "na": 7228, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 34, "not_all": 2865 } }, "ipv6": { "n": 10127, "na": 0, "states": { "aaaa": 1559, "none": 8568 } } } }, "promo": { "graded": 6177, "checks": { "dmarc": { "n": 6177, "na": 0, "states": { "absent": 4700, "none": 641, "quarantine": 336, "reject": 500, "invalid": 0 }, "rua_present": 679 }, "spf": { "n": 6177, "na": 0, "states": { "absent": 3508, "hardfail": 943, "softfail": 1510, "neutral": 131, "plus_all": 1, "invalid": 84 } }, "dkim": { "n": 663, "na": 5514, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 363, "none_observed": 300 } }, "mx": { "n": 6177, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2846, "absent": 3331 } }, "reverse_dns": { "n": 2845, "na": 3332, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2151, "none": 694 } }, "caa": { "n": 6135, "na": 42, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 198, "absent": 5937 } }, "dnssec": { "n": 6177, "na": 0, "states": { "signed_valid": 318, "signed_broken": 3, "unsigned": 5856 } }, "https": { "n": 6177, "na": 0, "states": { "https": 3316, "redirects": 0, "http_only": 2861 } }, "tls": { "n": 3316, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3134, "tls12": 182, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3316, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2987, "invalid": 329 } }, "hsts": { "n": 3316, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 581, "absent": 2735 } }, "csp": { "n": 1934, "na": 4243, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 228, "weak": 0, "absent": 1706 } }, "clickjacking": { "n": 1934, "na": 4243, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 397, "absent": 1537 } }, "mime_sniffing": { "n": 1934, "na": 4243, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 410, "absent": 1524 } }, "referrer_policy": { "n": 1934, "na": 4243, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 241, "absent": 1693 } }, "secure_by_default": { "n": 1466, "na": 4711, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 10, "not_all": 1456 } }, "ipv6": { "n": 6177, "na": 0, "states": { "aaaa": 1484, "none": 4693 } } } }, "properties": { "graded": 12108, "checks": { "dmarc": { "n": 12108, "na": 0, "states": { "absent": 9575, "none": 958, "quarantine": 1092, "reject": 483, "invalid": 0 }, "rua_present": 1491 }, "spf": { "n": 12108, "na": 0, "states": { "absent": 7302, "hardfail": 1750, "softfail": 2893, "neutral": 132, "plus_all": 0, "invalid": 31 } }, "dkim": { "n": 3292, "na": 8816, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1145, "none_observed": 2147 } }, "mx": { "n": 12108, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6041, "absent": 6067 } }, "reverse_dns": { "n": 6041, "na": 6067, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5188, "none": 853 } }, "caa": { "n": 11818, "na": 290, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 236, "absent": 11582 } }, "dnssec": { "n": 12108, "na": 0, "states": { "signed_valid": 701, "signed_broken": 3, "unsigned": 11404 } }, "https": { "n": 12108, "na": 0, "states": { "https": 5433, "redirects": 0, "http_only": 6675 } }, "tls": { "n": 5433, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5243, "tls12": 190, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5433, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4988, "invalid": 445 } }, "hsts": { "n": 5433, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1056, "absent": 4377 } }, "csp": { "n": 3552, "na": 8556, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 299, "weak": 0, "absent": 3253 } }, "clickjacking": { "n": 3552, "na": 8556, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 517, "absent": 3035 } }, "mime_sniffing": { "n": 3552, "na": 8556, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 635, "absent": 2917 } }, "referrer_policy": { "n": 3552, "na": 8556, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 287, "absent": 3265 } }, "secure_by_default": { "n": 2914, "na": 9194, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 44, "not_all": 2870 } }, "ipv6": { "n": 12108, "na": 0, "states": { "aaaa": 1323, "none": 10785 } } } }, "ps": { "graded": 7042, "checks": { "dmarc": { "n": 7042, "na": 0, "states": { "absent": 3885, "none": 2076, "quarantine": 530, "reject": 550, "invalid": 1 }, "rua_present": 1029 }, "spf": { "n": 7042, "na": 0, "states": { "absent": 1807, "hardfail": 1254, "softfail": 3884, "neutral": 75, "plus_all": 2, "invalid": 20 } }, "dkim": { "n": 4509, "na": 2533, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3470, "none_observed": 1039 } }, "mx": { "n": 7042, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5709, "absent": 1333 } }, "reverse_dns": { "n": 5702, "na": 1340, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4779, "none": 923 } }, "caa": { "n": 7019, "na": 23, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 136, "absent": 6883 } }, "dnssec": { "n": 7042, "na": 0, "states": { "signed_valid": 19, "signed_broken": 2, "unsigned": 7021 } }, "https": { "n": 7042, "na": 0, "states": { "https": 6331, "redirects": 0, "http_only": 711 } }, "tls": { "n": 6331, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6040, "tls12": 291, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6331, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5833, "invalid": 498 } }, "hsts": { "n": 6331, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1138, "absent": 5193 } }, "csp": { "n": 4053, "na": 2989, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 386, "weak": 0, "absent": 3667 } }, "clickjacking": { "n": 4053, "na": 2989, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 739, "absent": 3314 } }, "mime_sniffing": { "n": 4053, "na": 2989, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 798, "absent": 3255 } }, "referrer_policy": { "n": 4053, "na": 2989, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 450, "absent": 3603 } }, "secure_by_default": { "n": 3993, "na": 3049, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 39, "not_all": 3954 } }, "ipv6": { "n": 7042, "na": 0, "states": { "aaaa": 1790, "none": 5252 } } } }, "pt": { "graded": 308532, "checks": { "dmarc": { "n": 308532, "na": 0, "states": { "absent": 169033, "none": 98908, "quarantine": 17022, "reject": 23500, "invalid": 69 }, "rua_present": 36936 }, "spf": { "n": 308532, "na": 0, "states": { "absent": 68235, "hardfail": 67662, "softfail": 167156, "neutral": 2178, "plus_all": 75, "invalid": 3226 } }, "dkim": { "n": 169797, "na": 138735, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 139207, "none_observed": 30590 } }, "mx": { "n": 308532, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 254390, "absent": 54142 } }, "reverse_dns": { "n": 256401, "na": 52131, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 204261, "none": 52140 } }, "caa": { "n": 307824, "na": 708, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 5470, "absent": 302354 } }, "dnssec": { "n": 308532, "na": 0, "states": { "signed_valid": 10890, "signed_broken": 147, "unsigned": 297495 } }, "https": { "n": 308532, "na": 0, "states": { "https": 285515, "redirects": 0, "http_only": 23017 } }, "tls": { "n": 285515, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 249299, "tls12": 36216, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 285515, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 267500, "invalid": 18015 } }, "hsts": { "n": 285515, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 61205, "absent": 224310 } }, "csp": { "n": 161812, "na": 146720, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 19020, "weak": 0, "absent": 142792 } }, "clickjacking": { "n": 161812, "na": 146720, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 22859, "absent": 138953 } }, "mime_sniffing": { "n": 161812, "na": 146720, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 35144, "absent": 126668 } }, "referrer_policy": { "n": 161812, "na": 146720, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 22723, "absent": 139089 } }, "secure_by_default": { "n": 159994, "na": 148538, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 2114, "not_all": 157880 } }, "ipv6": { "n": 308532, "na": 0, "states": { "aaaa": 54551, "none": 253981 } } } }, "pub": { "graded": 15371, "checks": { "dmarc": { "n": 15371, "na": 0, "states": { "absent": 13002, "none": 1072, "quarantine": 511, "reject": 785, "invalid": 1 }, "rua_present": 1042 }, "spf": { "n": 15371, "na": 0, "states": { "absent": 10526, "hardfail": 1770, "softfail": 2810, "neutral": 208, "plus_all": 2, "invalid": 55 } }, "dkim": { "n": 2252, "na": 13119, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1128, "none_observed": 1124 } }, "mx": { "n": 15371, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5788, "absent": 9583 } }, "reverse_dns": { "n": 5787, "na": 9584, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4412, "none": 1375 } }, "caa": { "n": 15151, "na": 220, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 228, "absent": 14923 } }, "dnssec": { "n": 15371, "na": 0, "states": { "signed_valid": 946, "signed_broken": 12, "unsigned": 14413 } }, "https": { "n": 15371, "na": 0, "states": { "https": 7304, "redirects": 0, "http_only": 8067 } }, "tls": { "n": 7304, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6796, "tls12": 508, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7304, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6300, "invalid": 1004 } }, "hsts": { "n": 7304, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2026, "absent": 5278 } }, "csp": { "n": 5044, "na": 10327, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 363, "weak": 0, "absent": 4681 } }, "clickjacking": { "n": 5044, "na": 10327, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 806, "absent": 4238 } }, "mime_sniffing": { "n": 5044, "na": 10327, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 941, "absent": 4103 } }, "referrer_policy": { "n": 5044, "na": 10327, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 533, "absent": 4511 } }, "secure_by_default": { "n": 3945, "na": 11426, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 69, "not_all": 3876 } }, "ipv6": { "n": 15371, "na": 0, "states": { "aaaa": 2220, "none": 13151 } } } }, "pw": { "graded": 56277, "checks": { "dmarc": { "n": 56277, "na": 0, "states": { "absent": 50410, "none": 2520, "quarantine": 2365, "reject": 977, "invalid": 5 }, "rua_present": 3311 }, "spf": { "n": 56277, "na": 0, "states": { "absent": 42416, "hardfail": 3653, "softfail": 8219, "neutral": 306, "plus_all": 5, "invalid": 1678 } }, "dkim": { "n": 5320, "na": 50957, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3245, "none_observed": 2075 } }, "mx": { "n": 56277, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 14822, "absent": 41455 } }, "reverse_dns": { "n": 14806, "na": 41471, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 11097, "none": 3709 } }, "caa": { "n": 55710, "na": 567, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1002, "absent": 54708 } }, "dnssec": { "n": 56277, "na": 0, "states": { "signed_valid": 10590, "signed_broken": 15, "unsigned": 45672 } }, "https": { "n": 56277, "na": 0, "states": { "https": 44766, "redirects": 0, "http_only": 11511 } }, "tls": { "n": 44766, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 42671, "tls12": 2095, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 44766, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 42006, "invalid": 2760 } }, "hsts": { "n": 44766, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5980, "absent": 38786 } }, "csp": { "n": 18912, "na": 37365, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1129, "weak": 0, "absent": 17783 } }, "clickjacking": { "n": 18912, "na": 37365, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1509, "absent": 17403 } }, "mime_sniffing": { "n": 18912, "na": 37365, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1966, "absent": 16946 } }, "referrer_policy": { "n": 18912, "na": 37365, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1345, "absent": 17567 } }, "secure_by_default": { "n": 17760, "na": 38517, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 198, "not_all": 17562 } }, "ipv6": { "n": 56277, "na": 0, "states": { "aaaa": 12968, "none": 43309 } } } }, "py": { "graded": 25929, "checks": { "dmarc": { "n": 25929, "na": 0, "states": { "absent": 11704, "none": 9715, "quarantine": 2251, "reject": 2256, "invalid": 3 }, "rua_present": 3436 }, "spf": { "n": 25929, "na": 0, "states": { "absent": 4823, "hardfail": 5683, "softfail": 15061, "neutral": 290, "plus_all": 4, "invalid": 68 } }, "dkim": { "n": 17602, "na": 8327, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 13933, "none_observed": 3669 } }, "mx": { "n": 25929, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 22233, "absent": 3696 } }, "reverse_dns": { "n": 22119, "na": 3810, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 17582, "none": 4537 } }, "caa": { "n": 25865, "na": 64, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 659, "absent": 25206 } }, "dnssec": { "n": 25929, "na": 0, "states": { "signed_valid": 28, "signed_broken": 0, "unsigned": 25901 } }, "https": { "n": 25929, "na": 0, "states": { "https": 23807, "redirects": 0, "http_only": 2122 } }, "tls": { "n": 23807, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 22627, "tls12": 1180, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 23807, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 22622, "invalid": 1185 } }, "hsts": { "n": 23807, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3585, "absent": 20222 } }, "csp": { "n": 16091, "na": 9838, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1791, "weak": 0, "absent": 14300 } }, "clickjacking": { "n": 16091, "na": 9838, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3588, "absent": 12503 } }, "mime_sniffing": { "n": 16091, "na": 9838, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3929, "absent": 12162 } }, "referrer_policy": { "n": 16091, "na": 9838, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2738, "absent": 13353 } }, "secure_by_default": { "n": 15966, "na": 9963, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 108, "not_all": 15858 } }, "ipv6": { "n": 25929, "na": 0, "states": { "aaaa": 5233, "none": 20696 } } } }, "qa": { "graded": 13335, "checks": { "dmarc": { "n": 13335, "na": 0, "states": { "absent": 8624, "none": 3175, "quarantine": 733, "reject": 801, "invalid": 2 }, "rua_present": 1731 }, "spf": { "n": 13335, "na": 0, "states": { "absent": 4999, "hardfail": 3049, "softfail": 5072, "neutral": 128, "plus_all": 1, "invalid": 86 } }, "dkim": { "n": 6636, "na": 6699, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3927, "none_observed": 2709 } }, "mx": { "n": 13335, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9328, "absent": 4007 } }, "reverse_dns": { "n": 9345, "na": 3990, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7473, "none": 1872 } }, "caa": { "n": 13277, "na": 58, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 356, "absent": 12921 } }, "dnssec": { "n": 13335, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 13335 } }, "https": { "n": 13335, "na": 0, "states": { "https": 11587, "redirects": 0, "http_only": 1748 } }, "tls": { "n": 11587, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 10992, "tls12": 595, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 11587, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 10750, "invalid": 837 } }, "hsts": { "n": 11587, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2005, "absent": 9582 } }, "csp": { "n": 5933, "na": 7402, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1360, "weak": 0, "absent": 4573 } }, "clickjacking": { "n": 5933, "na": 7402, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1134, "absent": 4799 } }, "mime_sniffing": { "n": 5933, "na": 7402, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1286, "absent": 4647 } }, "referrer_policy": { "n": 5933, "na": 7402, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 615, "absent": 5318 } }, "secure_by_default": { "n": 5795, "na": 7540, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 89, "not_all": 5706 } }, "ipv6": { "n": 13335, "na": 0, "states": { "aaaa": 2974, "none": 10361 } } } }, "qpon": { "graded": 57072, "checks": { "dmarc": { "n": 57072, "na": 0, "states": { "absent": 56846, "none": 131, "quarantine": 13, "reject": 82, "invalid": 0 }, "rua_present": 111 }, "spf": { "n": 57072, "na": 0, "states": { "absent": 56370, "hardfail": 502, "softfail": 188, "neutral": 1, "plus_all": 0, "invalid": 11 } }, "dkim": { "n": 100, "na": 56972, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 80, "none_observed": 20 } }, "mx": { "n": 57072, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 971, "absent": 56101 } }, "reverse_dns": { "n": 971, "na": 56101, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 772, "none": 199 } }, "caa": { "n": 55010, "na": 2062, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 67, "absent": 54943 } }, "dnssec": { "n": 57072, "na": 0, "states": { "signed_valid": 19, "signed_broken": 165, "unsigned": 56888 } }, "https": { "n": 57072, "na": 0, "states": { "https": 42285, "redirects": 0, "http_only": 14787 } }, "tls": { "n": 42285, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 40194, "tls12": 2091, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 42285, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 37033, "invalid": 5252 } }, "hsts": { "n": 42285, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4015, "absent": 38270 } }, "csp": { "n": 15369, "na": 41703, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 50, "weak": 0, "absent": 15319 } }, "clickjacking": { "n": 15369, "na": 41703, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1018, "absent": 14351 } }, "mime_sniffing": { "n": 15369, "na": 41703, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1068, "absent": 14301 } }, "referrer_policy": { "n": 15369, "na": 41703, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 759, "absent": 14610 } }, "secure_by_default": { "n": 13535, "na": 43537, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 5, "not_all": 13530 } }, "ipv6": { "n": 57072, "na": 0, "states": { "aaaa": 12614, "none": 44458 } } } }, "quebec": { "graded": 5075, "checks": { "dmarc": { "n": 5075, "na": 0, "states": { "absent": 3846, "none": 659, "quarantine": 310, "reject": 260, "invalid": 0 }, "rua_present": 550 }, "spf": { "n": 5075, "na": 0, "states": { "absent": 2705, "hardfail": 871, "softfail": 1372, "neutral": 114, "plus_all": 0, "invalid": 13 } }, "dkim": { "n": 1700, "na": 3375, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 858, "none_observed": 842 } }, "mx": { "n": 5075, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2800, "absent": 2275 } }, "reverse_dns": { "n": 2796, "na": 2279, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2442, "none": 354 } }, "caa": { "n": 5056, "na": 19, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 105, "absent": 4951 } }, "dnssec": { "n": 5075, "na": 0, "states": { "signed_valid": 164, "signed_broken": 2, "unsigned": 4909 } }, "https": { "n": 5075, "na": 0, "states": { "https": 2709, "redirects": 0, "http_only": 2366 } }, "tls": { "n": 2709, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2466, "tls12": 243, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2709, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2356, "invalid": 353 } }, "hsts": { "n": 2709, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 380, "absent": 2329 } }, "csp": { "n": 1456, "na": 3619, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 116, "weak": 0, "absent": 1340 } }, "clickjacking": { "n": 1456, "na": 3619, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 156, "absent": 1300 } }, "mime_sniffing": { "n": 1456, "na": 3619, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 197, "absent": 1259 } }, "referrer_policy": { "n": 1456, "na": 3619, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 92, "absent": 1364 } }, "secure_by_default": { "n": 1204, "na": 3871, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 21, "not_all": 1183 } }, "ipv6": { "n": 5075, "na": 0, "states": { "aaaa": 595, "none": 4480 } } } }, "quest": { "graded": 54539, "checks": { "dmarc": { "n": 54539, "na": 0, "states": { "absent": 47523, "none": 2762, "quarantine": 2810, "reject": 1444, "invalid": 0 }, "rua_present": 4104 }, "spf": { "n": 54539, "na": 0, "states": { "absent": 40797, "hardfail": 2508, "softfail": 10928, "neutral": 238, "plus_all": 1, "invalid": 67 } }, "dkim": { "n": 6061, "na": 48478, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2107, "none_observed": 3954 } }, "mx": { "n": 54539, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 15693, "absent": 38846 } }, "reverse_dns": { "n": 15688, "na": 38851, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12297, "none": 3391 } }, "caa": { "n": 54065, "na": 474, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 734, "absent": 53331 } }, "dnssec": { "n": 54539, "na": 0, "states": { "signed_valid": 2267, "signed_broken": 7, "unsigned": 52265 } }, "https": { "n": 54539, "na": 0, "states": { "https": 32340, "redirects": 0, "http_only": 22199 } }, "tls": { "n": 32340, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 31430, "tls12": 910, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 32340, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 30687, "invalid": 1653 } }, "hsts": { "n": 32340, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5015, "absent": 27325 } }, "csp": { "n": 18490, "na": 36049, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1644, "weak": 0, "absent": 16846 } }, "clickjacking": { "n": 18490, "na": 36049, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2477, "absent": 16013 } }, "mime_sniffing": { "n": 18490, "na": 36049, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2776, "absent": 15714 } }, "referrer_policy": { "n": 18490, "na": 36049, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2225, "absent": 16265 } }, "secure_by_default": { "n": 15759, "na": 38780, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 281, "not_all": 15478 } }, "ipv6": { "n": 54539, "na": 0, "states": { "aaaa": 20265, "none": 34274 } } } }, "re": { "graded": 26309, "checks": { "dmarc": { "n": 26309, "na": 0, "states": { "absent": 17314, "none": 4925, "quarantine": 2769, "reject": 1296, "invalid": 5 }, "rua_present": 2608 }, "spf": { "n": 26309, "na": 0, "states": { "absent": 6186, "hardfail": 9645, "softfail": 9382, "neutral": 996, "plus_all": 11, "invalid": 89 } }, "dkim": { "n": 7910, "na": 18399, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 6033, "none_observed": 1877 } }, "mx": { "n": 26309, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 21916, "absent": 4393 } }, "reverse_dns": { "n": 21933, "na": 4376, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 18176, "none": 3757 } }, "caa": { "n": 26242, "na": 67, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 598, "absent": 25644 } }, "dnssec": { "n": 26309, "na": 0, "states": { "signed_valid": 6390, "signed_broken": 8, "unsigned": 19911 } }, "https": { "n": 26309, "na": 0, "states": { "https": 22091, "redirects": 0, "http_only": 4218 } }, "tls": { "n": 22091, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 21065, "tls12": 1026, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 22091, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 20725, "invalid": 1366 } }, "hsts": { "n": 22091, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4317, "absent": 17774 } }, "csp": { "n": 13441, "na": 12868, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1738, "weak": 0, "absent": 11703 } }, "clickjacking": { "n": 13441, "na": 12868, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1912, "absent": 11529 } }, "mime_sniffing": { "n": 13441, "na": 12868, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2340, "absent": 11101 } }, "referrer_policy": { "n": 13441, "na": 12868, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1370, "absent": 12071 } }, "secure_by_default": { "n": 12975, "na": 13334, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 257, "not_all": 12718 } }, "ipv6": { "n": 26309, "na": 0, "states": { "aaaa": 8896, "none": 17413 } } } }, "realestate": { "graded": 13231, "checks": { "dmarc": { "n": 13231, "na": 0, "states": { "absent": 11929, "none": 410, "quarantine": 672, "reject": 219, "invalid": 1 }, "rua_present": 929 }, "spf": { "n": 13231, "na": 0, "states": { "absent": 10891, "hardfail": 622, "softfail": 1673, "neutral": 29, "plus_all": 0, "invalid": 16 } }, "dkim": { "n": 2220, "na": 11011, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 323, "none_observed": 1897 } }, "mx": { "n": 13231, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2599, "absent": 10632 } }, "reverse_dns": { "n": 2599, "na": 10632, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2375, "none": 224 } }, "caa": { "n": 13198, "na": 33, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 36, "absent": 13162 } }, "dnssec": { "n": 13231, "na": 0, "states": { "signed_valid": 21, "signed_broken": 0, "unsigned": 13210 } }, "https": { "n": 13231, "na": 0, "states": { "https": 5905, "redirects": 0, "http_only": 7326 } }, "tls": { "n": 5905, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5735, "tls12": 170, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5905, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5114, "invalid": 791 } }, "hsts": { "n": 5905, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3245, "absent": 2660 } }, "csp": { "n": 1899, "na": 11332, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 598, "weak": 0, "absent": 1301 } }, "clickjacking": { "n": 1899, "na": 11332, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 924, "absent": 975 } }, "mime_sniffing": { "n": 1899, "na": 11332, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 984, "absent": 915 } }, "referrer_policy": { "n": 1899, "na": 11332, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 111, "absent": 1788 } }, "secure_by_default": { "n": 1819, "na": 11412, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 18, "not_all": 1801 } }, "ipv6": { "n": 13231, "na": 0, "states": { "aaaa": 396, "none": 12835 } } } }, "realtor": { "graded": 22623, "checks": { "dmarc": { "n": 22623, "na": 0, "states": { "absent": 22285, "none": 285, "quarantine": 31, "reject": 22, "invalid": 0 }, "rua_present": 85 }, "spf": { "n": 22623, "na": 0, "states": { "absent": 17201, "hardfail": 138, "softfail": 5258, "neutral": 17, "plus_all": 1, "invalid": 8 } }, "dkim": { "n": 5886, "na": 16737, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 218, "none_observed": 5668 } }, "mx": { "n": 22623, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6013, "absent": 16610 } }, "reverse_dns": { "n": 6013, "na": 16610, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5914, "none": 99 } }, "caa": { "n": 22550, "na": 73, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 10, "absent": 22540 } }, "dnssec": { "n": 22623, "na": 0, "states": { "signed_valid": 2, "signed_broken": 0, "unsigned": 22621 } }, "https": { "n": 22623, "na": 0, "states": { "https": 7117, "redirects": 0, "http_only": 15506 } }, "tls": { "n": 7117, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6725, "tls12": 392, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7117, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4651, "invalid": 2466 } }, "hsts": { "n": 7117, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3664, "absent": 3453 } }, "csp": { "n": 5085, "na": 17538, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2435, "weak": 0, "absent": 2650 } }, "clickjacking": { "n": 5085, "na": 17538, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 4431, "absent": 654 } }, "mime_sniffing": { "n": 5085, "na": 17538, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4553, "absent": 532 } }, "referrer_policy": { "n": 5085, "na": 17538, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 71, "absent": 5014 } }, "secure_by_default": { "n": 5068, "na": 17555, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 2, "not_all": 5066 } }, "ipv6": { "n": 22623, "na": 0, "states": { "aaaa": 171, "none": 22452 } } } }, "red": { "graded": 16445, "checks": { "dmarc": { "n": 16445, "na": 0, "states": { "absent": 13125, "none": 1449, "quarantine": 1029, "reject": 842, "invalid": 0 }, "rua_present": 1474 }, "spf": { "n": 16445, "na": 0, "states": { "absent": 9631, "hardfail": 2131, "softfail": 4262, "neutral": 252, "plus_all": 1, "invalid": 168 } }, "dkim": { "n": 2692, "na": 13753, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1469, "none_observed": 1223 } }, "mx": { "n": 16445, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7772, "absent": 8673 } }, "reverse_dns": { "n": 7767, "na": 8678, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6148, "none": 1619 } }, "caa": { "n": 16221, "na": 224, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 445, "absent": 15776 } }, "dnssec": { "n": 16445, "na": 0, "states": { "signed_valid": 1324, "signed_broken": 13, "unsigned": 15108 } }, "https": { "n": 16445, "na": 0, "states": { "https": 8806, "redirects": 0, "http_only": 7639 } }, "tls": { "n": 8806, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8229, "tls12": 577, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8806, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7592, "invalid": 1214 } }, "hsts": { "n": 8806, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1686, "absent": 7120 } }, "csp": { "n": 6050, "na": 10395, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 490, "weak": 0, "absent": 5560 } }, "clickjacking": { "n": 6050, "na": 10395, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 887, "absent": 5163 } }, "mime_sniffing": { "n": 6050, "na": 10395, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1021, "absent": 5029 } }, "referrer_policy": { "n": 6050, "na": 10395, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 609, "absent": 5441 } }, "secure_by_default": { "n": 5021, "na": 11424, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 87, "not_all": 4934 } }, "ipv6": { "n": 16445, "na": 0, "states": { "aaaa": 3448, "none": 12997 } } } }, "ren": { "graded": 10340, "checks": { "dmarc": { "n": 10340, "na": 0, "states": { "absent": 10150, "none": 104, "quarantine": 56, "reject": 30, "invalid": 0 }, "rua_present": 124 }, "spf": { "n": 10340, "na": 0, "states": { "absent": 9553, "hardfail": 383, "softfail": 393, "neutral": 2, "plus_all": 2, "invalid": 7 } }, "dkim": { "n": 157, "na": 10183, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 128, "none_observed": 29 } }, "mx": { "n": 10340, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1158, "absent": 9182 } }, "reverse_dns": { "n": 1157, "na": 9183, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 262, "none": 895 } }, "caa": { "n": 10087, "na": 253, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 39, "absent": 10048 } }, "dnssec": { "n": 10340, "na": 0, "states": { "signed_valid": 41, "signed_broken": 1, "unsigned": 10298 } }, "https": { "n": 10340, "na": 0, "states": { "https": 4368, "redirects": 0, "http_only": 5972 } }, "tls": { "n": 4368, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3754, "tls12": 614, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4368, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3314, "invalid": 1054 } }, "hsts": { "n": 4368, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1067, "absent": 3301 } }, "csp": { "n": 3080, "na": 7260, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 83, "weak": 0, "absent": 2997 } }, "clickjacking": { "n": 3080, "na": 7260, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 219, "absent": 2861 } }, "mime_sniffing": { "n": 3080, "na": 7260, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 248, "absent": 2832 } }, "referrer_policy": { "n": 3080, "na": 7260, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 165, "absent": 2915 } }, "secure_by_default": { "n": 2293, "na": 8047, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 48, "not_all": 2245 } }, "ipv6": { "n": 10340, "na": 0, "states": { "aaaa": 482, "none": 9858 } } } }, "rent": { "graded": 9665, "checks": { "dmarc": { "n": 9665, "na": 0, "states": { "absent": 6596, "none": 701, "quarantine": 1881, "reject": 486, "invalid": 1 }, "rua_present": 2328 }, "spf": { "n": 9665, "na": 0, "states": { "absent": 6065, "hardfail": 1386, "softfail": 2022, "neutral": 77, "plus_all": 1, "invalid": 114 } }, "dkim": { "n": 1464, "na": 8201, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 674, "none_observed": 790 } }, "mx": { "n": 9665, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4058, "absent": 5607 } }, "reverse_dns": { "n": 4123, "na": 5542, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3170, "none": 953 } }, "caa": { "n": 9604, "na": 61, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 115, "absent": 9489 } }, "dnssec": { "n": 9665, "na": 0, "states": { "signed_valid": 568, "signed_broken": 4, "unsigned": 9093 } }, "https": { "n": 9665, "na": 0, "states": { "https": 5548, "redirects": 0, "http_only": 4117 } }, "tls": { "n": 5548, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5337, "tls12": 211, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5548, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5151, "invalid": 397 } }, "hsts": { "n": 5548, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1246, "absent": 4302 } }, "csp": { "n": 3673, "na": 5992, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 582, "weak": 0, "absent": 3091 } }, "clickjacking": { "n": 3673, "na": 5992, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 850, "absent": 2823 } }, "mime_sniffing": { "n": 3673, "na": 5992, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 728, "absent": 2945 } }, "referrer_policy": { "n": 3673, "na": 5992, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 543, "absent": 3130 } }, "secure_by_default": { "n": 3115, "na": 6550, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 124, "not_all": 2991 } }, "ipv6": { "n": 9665, "na": 0, "states": { "aaaa": 1455, "none": 8210 } } } }, "rentals": { "graded": 11924, "checks": { "dmarc": { "n": 11924, "na": 0, "states": { "absent": 9496, "none": 834, "quarantine": 1025, "reject": 569, "invalid": 0 }, "rua_present": 1480 }, "spf": { "n": 11924, "na": 0, "states": { "absent": 7654, "hardfail": 1510, "softfail": 2576, "neutral": 157, "plus_all": 1, "invalid": 26 } }, "dkim": { "n": 2578, "na": 9346, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 802, "none_observed": 1776 } }, "mx": { "n": 11924, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5625, "absent": 6299 } }, "reverse_dns": { "n": 5635, "na": 6289, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4706, "none": 929 } }, "caa": { "n": 11878, "na": 46, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 234, "absent": 11644 } }, "dnssec": { "n": 11924, "na": 0, "states": { "signed_valid": 722, "signed_broken": 2, "unsigned": 11200 } }, "https": { "n": 11924, "na": 0, "states": { "https": 5691, "redirects": 0, "http_only": 6233 } }, "tls": { "n": 5691, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5483, "tls12": 208, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5691, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5214, "invalid": 477 } }, "hsts": { "n": 5691, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1151, "absent": 4540 } }, "csp": { "n": 3347, "na": 8577, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 321, "weak": 0, "absent": 3026 } }, "clickjacking": { "n": 3347, "na": 8577, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 585, "absent": 2762 } }, "mime_sniffing": { "n": 3347, "na": 8577, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 640, "absent": 2707 } }, "referrer_policy": { "n": 3347, "na": 8577, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 329, "absent": 3018 } }, "secure_by_default": { "n": 2761, "na": 9163, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 53, "not_all": 2708 } }, "ipv6": { "n": 11924, "na": 0, "states": { "aaaa": 1204, "none": 10720 } } } }, "repair": { "graded": 7821, "checks": { "dmarc": { "n": 7821, "na": 0, "states": { "absent": 5671, "none": 1219, "quarantine": 525, "reject": 406, "invalid": 0 }, "rua_present": 865 }, "spf": { "n": 7821, "na": 0, "states": { "absent": 4346, "hardfail": 932, "softfail": 2449, "neutral": 65, "plus_all": 0, "invalid": 29 } }, "dkim": { "n": 1954, "na": 5867, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1066, "none_observed": 888 } }, "mx": { "n": 7821, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4195, "absent": 3626 } }, "reverse_dns": { "n": 4197, "na": 3624, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2927, "none": 1270 } }, "caa": { "n": 7776, "na": 45, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 160, "absent": 7616 } }, "dnssec": { "n": 7821, "na": 0, "states": { "signed_valid": 503, "signed_broken": 0, "unsigned": 7318 } }, "https": { "n": 7821, "na": 0, "states": { "https": 4389, "redirects": 0, "http_only": 3432 } }, "tls": { "n": 4389, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4269, "tls12": 120, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4389, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4037, "invalid": 352 } }, "hsts": { "n": 4389, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 895, "absent": 3494 } }, "csp": { "n": 3007, "na": 4814, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 297, "weak": 0, "absent": 2710 } }, "clickjacking": { "n": 3007, "na": 4814, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 425, "absent": 2582 } }, "mime_sniffing": { "n": 3007, "na": 4814, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 543, "absent": 2464 } }, "referrer_policy": { "n": 3007, "na": 4814, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 324, "absent": 2683 } }, "secure_by_default": { "n": 2503, "na": 5318, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 41, "not_all": 2462 } }, "ipv6": { "n": 7821, "na": 0, "states": { "aaaa": 1727, "none": 6094 } } } }, "report": { "graded": 10651, "checks": { "dmarc": { "n": 10651, "na": 0, "states": { "absent": 8428, "none": 915, "quarantine": 737, "reject": 571, "invalid": 0 }, "rua_present": 1211 }, "spf": { "n": 10651, "na": 0, "states": { "absent": 6266, "hardfail": 1152, "softfail": 3074, "neutral": 123, "plus_all": 2, "invalid": 34 } }, "dkim": { "n": 1374, "na": 9277, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 713, "none_observed": 661 } }, "mx": { "n": 10651, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4887, "absent": 5764 } }, "reverse_dns": { "n": 4888, "na": 5763, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4131, "none": 757 } }, "caa": { "n": 10575, "na": 76, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 391, "absent": 10184 } }, "dnssec": { "n": 10651, "na": 0, "states": { "signed_valid": 893, "signed_broken": 9, "unsigned": 9749 } }, "https": { "n": 10651, "na": 0, "states": { "https": 5740, "redirects": 0, "http_only": 4911 } }, "tls": { "n": 5740, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5449, "tls12": 291, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5740, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5201, "invalid": 539 } }, "hsts": { "n": 5740, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1410, "absent": 4330 } }, "csp": { "n": 3804, "na": 6847, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 330, "weak": 0, "absent": 3474 } }, "clickjacking": { "n": 3804, "na": 6847, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 720, "absent": 3084 } }, "mime_sniffing": { "n": 3804, "na": 6847, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 927, "absent": 2877 } }, "referrer_policy": { "n": 3804, "na": 6847, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 641, "absent": 3163 } }, "secure_by_default": { "n": 3145, "na": 7506, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 83, "not_all": 3062 } }, "ipv6": { "n": 10651, "na": 0, "states": { "aaaa": 2028, "none": 8623 } } } }, "rest": { "graded": 97941, "checks": { "dmarc": { "n": 97941, "na": 0, "states": { "absent": 92326, "none": 1585, "quarantine": 3606, "reject": 423, "invalid": 1 }, "rua_present": 4084 }, "spf": { "n": 97941, "na": 0, "states": { "absent": 76126, "hardfail": 2648, "softfail": 18774, "neutral": 90, "plus_all": 0, "invalid": 303 } }, "dkim": { "n": 2113, "na": 95828, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1494, "none_observed": 619 } }, "mx": { "n": 97941, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 22767, "absent": 75174 } }, "reverse_dns": { "n": 22764, "na": 75177, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 20145, "none": 2619 } }, "caa": { "n": 97184, "na": 757, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 241, "absent": 96943 } }, "dnssec": { "n": 97941, "na": 0, "states": { "signed_valid": 7813, "signed_broken": 23, "unsigned": 90105 } }, "https": { "n": 97941, "na": 0, "states": { "https": 50396, "redirects": 0, "http_only": 47545 } }, "tls": { "n": 50396, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 47308, "tls12": 3088, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 50396, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 48978, "invalid": 1418 } }, "hsts": { "n": 50396, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2847, "absent": 47549 } }, "csp": { "n": 22190, "na": 75751, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 4005, "weak": 0, "absent": 18185 } }, "clickjacking": { "n": 22190, "na": 75751, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 5872, "absent": 16318 } }, "mime_sniffing": { "n": 22190, "na": 75751, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 6090, "absent": 16100 } }, "referrer_policy": { "n": 22190, "na": 75751, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 5538, "absent": 16652 } }, "secure_by_default": { "n": 15118, "na": 82823, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 101, "not_all": 15017 } }, "ipv6": { "n": 97941, "na": 0, "states": { "aaaa": 35711, "none": 62230 } } } }, "restaurant": { "graded": 7706, "checks": { "dmarc": { "n": 7706, "na": 0, "states": { "absent": 5590, "none": 1007, "quarantine": 603, "reject": 504, "invalid": 2 }, "rua_present": 867 }, "spf": { "n": 7706, "na": 0, "states": { "absent": 4403, "hardfail": 973, "softfail": 2138, "neutral": 126, "plus_all": 0, "invalid": 66 } }, "dkim": { "n": 1415, "na": 6291, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 679, "none_observed": 736 } }, "mx": { "n": 7706, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4034, "absent": 3672 } }, "reverse_dns": { "n": 4035, "na": 3671, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3468, "none": 567 } }, "caa": { "n": 7663, "na": 43, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 315, "absent": 7348 } }, "dnssec": { "n": 7706, "na": 0, "states": { "signed_valid": 553, "signed_broken": 4, "unsigned": 7149 } }, "https": { "n": 7706, "na": 0, "states": { "https": 4305, "redirects": 0, "http_only": 3401 } }, "tls": { "n": 4305, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4141, "tls12": 164, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4305, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3839, "invalid": 466 } }, "hsts": { "n": 4305, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 900, "absent": 3405 } }, "csp": { "n": 2688, "na": 5018, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 307, "weak": 0, "absent": 2381 } }, "clickjacking": { "n": 2688, "na": 5018, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 409, "absent": 2279 } }, "mime_sniffing": { "n": 2688, "na": 5018, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 504, "absent": 2184 } }, "referrer_policy": { "n": 2688, "na": 5018, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 271, "absent": 2417 } }, "secure_by_default": { "n": 2107, "na": 5599, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 43, "not_all": 2064 } }, "ipv6": { "n": 7706, "na": 0, "states": { "aaaa": 1835, "none": 5871 } } } }, "review": { "graded": 6548, "checks": { "dmarc": { "n": 6548, "na": 0, "states": { "absent": 5548, "none": 302, "quarantine": 216, "reject": 482, "invalid": 0 }, "rua_present": 579 }, "spf": { "n": 6548, "na": 0, "states": { "absent": 4181, "hardfail": 618, "softfail": 1655, "neutral": 70, "plus_all": 0, "invalid": 24 } }, "dkim": { "n": 543, "na": 6005, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 308, "none_observed": 235 } }, "mx": { "n": 6548, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2509, "absent": 4039 } }, "reverse_dns": { "n": 2513, "na": 4035, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2010, "none": 503 } }, "caa": { "n": 6470, "na": 78, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 118, "absent": 6352 } }, "dnssec": { "n": 6548, "na": 0, "states": { "signed_valid": 342, "signed_broken": 5, "unsigned": 6201 } }, "https": { "n": 6548, "na": 0, "states": { "https": 3297, "redirects": 0, "http_only": 3251 } }, "tls": { "n": 3297, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3212, "tls12": 85, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3297, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3067, "invalid": 230 } }, "hsts": { "n": 3297, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 563, "absent": 2734 } }, "csp": { "n": 1940, "na": 4608, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 230, "weak": 0, "absent": 1710 } }, "clickjacking": { "n": 1940, "na": 4608, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 493, "absent": 1447 } }, "mime_sniffing": { "n": 1940, "na": 4608, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 490, "absent": 1450 } }, "referrer_policy": { "n": 1940, "na": 4608, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 254, "absent": 1686 } }, "secure_by_default": { "n": 1357, "na": 5191, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 17, "not_all": 1340 } }, "ipv6": { "n": 6548, "na": 0, "states": { "aaaa": 1807, "none": 4741 } } } }, "reviews": { "graded": 9882, "checks": { "dmarc": { "n": 9882, "na": 0, "states": { "absent": 8062, "none": 392, "quarantine": 484, "reject": 944, "invalid": 0 }, "rua_present": 1072 }, "spf": { "n": 9882, "na": 0, "states": { "absent": 7294, "hardfail": 1264, "softfail": 1170, "neutral": 125, "plus_all": 1, "invalid": 28 } }, "dkim": { "n": 1453, "na": 8429, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 353, "none_observed": 1100 } }, "mx": { "n": 9882, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3273, "absent": 6609 } }, "reverse_dns": { "n": 3276, "na": 6606, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2423, "none": 853 } }, "caa": { "n": 9831, "na": 51, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 199, "absent": 9632 } }, "dnssec": { "n": 9882, "na": 0, "states": { "signed_valid": 451, "signed_broken": 7, "unsigned": 9424 } }, "https": { "n": 9882, "na": 0, "states": { "https": 4850, "redirects": 0, "http_only": 5032 } }, "tls": { "n": 4850, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4713, "tls12": 137, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4850, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4471, "invalid": 379 } }, "hsts": { "n": 4850, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 932, "absent": 3918 } }, "csp": { "n": 3390, "na": 6492, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 328, "weak": 0, "absent": 3062 } }, "clickjacking": { "n": 3390, "na": 6492, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 540, "absent": 2850 } }, "mime_sniffing": { "n": 3390, "na": 6492, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 542, "absent": 2848 } }, "referrer_policy": { "n": 3390, "na": 6492, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 257, "absent": 3133 } }, "secure_by_default": { "n": 2624, "na": 7258, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 22, "not_all": 2602 } }, "ipv6": { "n": 9882, "na": 0, "states": { "aaaa": 1520, "none": 8362 } } } }, "rip": { "graded": 10007, "checks": { "dmarc": { "n": 10007, "na": 0, "states": { "absent": 8557, "none": 543, "quarantine": 402, "reject": 505, "invalid": 0 }, "rua_present": 531 }, "spf": { "n": 10007, "na": 0, "states": { "absent": 6895, "hardfail": 950, "softfail": 1992, "neutral": 134, "plus_all": 1, "invalid": 35 } }, "dkim": { "n": 1098, "na": 8909, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 673, "none_observed": 425 } }, "mx": { "n": 10007, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3217, "absent": 6790 } }, "reverse_dns": { "n": 3214, "na": 6793, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2895, "none": 319 } }, "caa": { "n": 9919, "na": 88, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 446, "absent": 9473 } }, "dnssec": { "n": 10007, "na": 0, "states": { "signed_valid": 1009, "signed_broken": 7, "unsigned": 8991 } }, "https": { "n": 10007, "na": 0, "states": { "https": 6207, "redirects": 0, "http_only": 3800 } }, "tls": { "n": 6207, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5955, "tls12": 252, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6207, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5320, "invalid": 887 } }, "hsts": { "n": 6207, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1236, "absent": 4971 } }, "csp": { "n": 3749, "na": 6258, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 296, "weak": 0, "absent": 3453 } }, "clickjacking": { "n": 3749, "na": 6258, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 647, "absent": 3102 } }, "mime_sniffing": { "n": 3749, "na": 6258, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 792, "absent": 2957 } }, "referrer_policy": { "n": 3749, "na": 6258, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 537, "absent": 3212 } }, "secure_by_default": { "n": 3187, "na": 6820, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 47, "not_all": 3140 } }, "ipv6": { "n": 10007, "na": 0, "states": { "aaaa": 2167, "none": 7840 } } } }, "ro": { "graded": 487810, "checks": { "dmarc": { "n": 487810, "na": 0, "states": { "absent": 263521, "none": 170201, "quarantine": 23336, "reject": 30720, "invalid": 32 }, "rua_present": 46832 }, "spf": { "n": 487810, "na": 0, "states": { "absent": 101795, "hardfail": 97420, "softfail": 280157, "neutral": 6816, "plus_all": 110, "invalid": 1512 } }, "dkim": { "n": 336168, "na": 151642, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 300994, "none_observed": 35174 } }, "mx": { "n": 487810, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 418322, "absent": 69488 } }, "reverse_dns": { "n": 417294, "na": 70516, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 344265, "none": 73029 } }, "caa": { "n": 485650, "na": 2160, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 11697, "absent": 473953 } }, "dnssec": { "n": 487810, "na": 0, "states": { "signed_valid": 4973, "signed_broken": 47, "unsigned": 482790 } }, "https": { "n": 487810, "na": 0, "states": { "https": 463148, "redirects": 0, "http_only": 24662 } }, "tls": { "n": 463148, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 447290, "tls12": 15858, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 463148, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 445195, "invalid": 17953 } }, "hsts": { "n": 463148, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 63429, "absent": 399719 } }, "csp": { "n": 292037, "na": 195773, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 20120, "weak": 0, "absent": 271917 } }, "clickjacking": { "n": 292037, "na": 195773, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 38513, "absent": 253524 } }, "mime_sniffing": { "n": 292037, "na": 195773, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 78135, "absent": 213902 } }, "referrer_policy": { "n": 292037, "na": 195773, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 27997, "absent": 264040 } }, "secure_by_default": { "n": 289451, "na": 198359, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 4070, "not_all": 285381 } }, "ipv6": { "n": 487810, "na": 0, "states": { "aaaa": 93089, "none": 394721 } } } }, "rocks": { "graded": 49279, "checks": { "dmarc": { "n": 49279, "na": 0, "states": { "absent": 38362, "none": 5275, "quarantine": 2616, "reject": 3024, "invalid": 2 }, "rua_present": 4082 }, "spf": { "n": 49279, "na": 0, "states": { "absent": 27580, "hardfail": 5920, "softfail": 14215, "neutral": 922, "plus_all": 7, "invalid": 635 } }, "dkim": { "n": 11469, "na": 37810, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4263, "none_observed": 7206 } }, "mx": { "n": 49279, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 28113, "absent": 21166 } }, "reverse_dns": { "n": 28116, "na": 21163, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 25188, "none": 2928 } }, "caa": { "n": 49063, "na": 216, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1160, "absent": 47903 } }, "dnssec": { "n": 49279, "na": 0, "states": { "signed_valid": 3424, "signed_broken": 26, "unsigned": 45829 } }, "https": { "n": 49279, "na": 0, "states": { "https": 25617, "redirects": 0, "http_only": 23662 } }, "tls": { "n": 25617, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 24371, "tls12": 1246, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 25617, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 22101, "invalid": 3516 } }, "hsts": { "n": 25617, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5994, "absent": 19623 } }, "csp": { "n": 15989, "na": 33290, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1543, "weak": 0, "absent": 14446 } }, "clickjacking": { "n": 15989, "na": 33290, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2741, "absent": 13248 } }, "mime_sniffing": { "n": 15989, "na": 33290, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2641, "absent": 13348 } }, "referrer_policy": { "n": 15989, "na": 33290, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1360, "absent": 14629 } }, "secure_by_default": { "n": 12838, "na": 36441, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 332, "not_all": 12506 } }, "ipv6": { "n": 49279, "na": 0, "states": { "aaaa": 9750, "none": 39529 } } } }, "rs": { "graded": 126476, "checks": { "dmarc": { "n": 126476, "na": 0, "states": { "absent": 87923, "none": 30482, "quarantine": 4968, "reject": 3099, "invalid": 4 }, "rua_present": 9092 }, "spf": { "n": 126476, "na": 0, "states": { "absent": 33617, "hardfail": 24120, "softfail": 65774, "neutral": 2177, "plus_all": 18, "invalid": 770 } }, "dkim": { "n": 73675, "na": 52801, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 65994, "none_observed": 7681 } }, "mx": { "n": 126476, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 102809, "absent": 23667 } }, "reverse_dns": { "n": 103305, "na": 23171, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 93273, "none": 10032 } }, "caa": { "n": 126220, "na": 256, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2366, "absent": 123854 } }, "dnssec": { "n": 126476, "na": 0, "states": { "signed_valid": 18388, "signed_broken": 8, "unsigned": 108080 } }, "https": { "n": 126476, "na": 0, "states": { "https": 119438, "redirects": 0, "http_only": 7038 } }, "tls": { "n": 119438, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 113199, "tls12": 6239, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 119438, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 115090, "invalid": 4348 } }, "hsts": { "n": 119438, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 15642, "absent": 103796 } }, "csp": { "n": 81024, "na": 45452, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 3866, "weak": 0, "absent": 77158 } }, "clickjacking": { "n": 81024, "na": 45452, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 8619, "absent": 72405 } }, "mime_sniffing": { "n": 81024, "na": 45452, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 10476, "absent": 70548 } }, "referrer_policy": { "n": 81024, "na": 45452, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 6660, "absent": 74364 } }, "secure_by_default": { "n": 78749, "na": 47727, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 637, "not_all": 78112 } }, "ipv6": { "n": 126476, "na": 0, "states": { "aaaa": 23933, "none": 102543 } } } }, "ru": { "graded": 4498188, "checks": { "dmarc": { "n": 4498188, "na": 0, "states": { "absent": 4090744, "none": 279978, "quarantine": 62869, "reject": 64390, "invalid": 207 }, "rua_present": 113376 }, "spf": { "n": 4498188, "na": 0, "states": { "absent": 2293227, "hardfail": 133974, "softfail": 1017792, "neutral": 40447, "plus_all": 479, "invalid": 1012269 } }, "dkim": { "n": 762663, "na": 3735525, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 733660, "none_observed": 29003 } }, "mx": { "n": 4498188, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2825918, "absent": 1672270 } }, "reverse_dns": { "n": 2780354, "na": 1717834, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2552563, "none": 227791 } }, "caa": { "n": 4451858, "na": 46330, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 109728, "absent": 4342130 } }, "dnssec": { "n": 4498188, "na": 0, "states": { "signed_valid": 8588, "signed_broken": 325, "unsigned": 4489275 } }, "https": { "n": 4498188, "na": 0, "states": { "https": 3270224, "redirects": 0, "http_only": 1227964 } }, "tls": { "n": 3270224, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2604180, "tls12": 666044, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3270224, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2669966, "invalid": 600258 } }, "hsts": { "n": 3270224, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 399300, "absent": 2870924 } }, "csp": { "n": 2394873, "na": 2103315, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 68999, "weak": 0, "absent": 2325874 } }, "clickjacking": { "n": 2394873, "na": 2103315, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 510756, "absent": 1884117 } }, "mime_sniffing": { "n": 2394873, "na": 2103315, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 225360, "absent": 2169513 } }, "referrer_policy": { "n": 2394873, "na": 2103315, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 122366, "absent": 2272507 } }, "secure_by_default": { "n": 2183998, "na": 2314190, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 9097, "not_all": 2174901 } }, "ipv6": { "n": 4498188, "na": 0, "states": { "aaaa": 650081, "none": 3848107 } } } }, "run": { "graded": 130176, "checks": { "dmarc": { "n": 130176, "na": 0, "states": { "absent": 123137, "none": 2909, "quarantine": 2692, "reject": 1432, "invalid": 6 }, "rua_present": 4077 }, "spf": { "n": 130176, "na": 0, "states": { "absent": 115419, "hardfail": 5665, "softfail": 8485, "neutral": 347, "plus_all": 7, "invalid": 253 } }, "dkim": { "n": 4407, "na": 125769, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2444, "none_observed": 1963 } }, "mx": { "n": 130176, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 16230, "absent": 113946 } }, "reverse_dns": { "n": 16219, "na": 113957, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12931, "none": 3288 } }, "caa": { "n": 128604, "na": 1572, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1814, "absent": 126790 } }, "dnssec": { "n": 130176, "na": 0, "states": { "signed_valid": 14432, "signed_broken": 81, "unsigned": 115663 } }, "https": { "n": 130176, "na": 0, "states": { "https": 34305, "redirects": 0, "http_only": 95871 } }, "tls": { "n": 34305, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 33172, "tls12": 1133, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 34305, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 31269, "invalid": 3036 } }, "hsts": { "n": 34305, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 6577, "absent": 27728 } }, "csp": { "n": 32537, "na": 97639, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 12333, "weak": 0, "absent": 20204 } }, "clickjacking": { "n": 32537, "na": 97639, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 13616, "absent": 18921 } }, "mime_sniffing": { "n": 32537, "na": 97639, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 14446, "absent": 18091 } }, "referrer_policy": { "n": 32537, "na": 97639, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 13436, "absent": 19101 } }, "secure_by_default": { "n": 19158, "na": 111018, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 312, "not_all": 18846 } }, "ipv6": { "n": 130176, "na": 0, "states": { "aaaa": 17615, "none": 112561 } } } }, "rw": { "graded": 6927, "checks": { "dmarc": { "n": 6927, "na": 0, "states": { "absent": 4484, "none": 1884, "quarantine": 324, "reject": 234, "invalid": 1 }, "rua_present": 772 }, "spf": { "n": 6927, "na": 0, "states": { "absent": 2113, "hardfail": 1528, "softfail": 3238, "neutral": 35, "plus_all": 1, "invalid": 12 } }, "dkim": { "n": 2912, "na": 4015, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2367, "none_observed": 545 } }, "mx": { "n": 6927, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5142, "absent": 1785 } }, "reverse_dns": { "n": 5141, "na": 1786, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3500, "none": 1641 } }, "caa": { "n": 6903, "na": 24, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 398, "absent": 6505 } }, "dnssec": { "n": 6927, "na": 0, "states": { "signed_valid": 13, "signed_broken": 0, "unsigned": 6914 } }, "https": { "n": 6927, "na": 0, "states": { "https": 6424, "redirects": 0, "http_only": 503 } }, "tls": { "n": 6424, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6181, "tls12": 243, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6424, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5952, "invalid": 472 } }, "hsts": { "n": 6424, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1429, "absent": 4995 } }, "csp": { "n": 4276, "na": 2651, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 277, "weak": 0, "absent": 3999 } }, "clickjacking": { "n": 4276, "na": 2651, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 588, "absent": 3688 } }, "mime_sniffing": { "n": 4276, "na": 2651, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 796, "absent": 3480 } }, "referrer_policy": { "n": 4276, "na": 2651, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 411, "absent": 3865 } }, "secure_by_default": { "n": 4258, "na": 2669, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 27, "not_all": 4231 } }, "ipv6": { "n": 6927, "na": 0, "states": { "aaaa": 1417, "none": 5510 } } } }, "sa": { "graded": 60944, "checks": { "dmarc": { "n": 60944, "na": 0, "states": { "absent": 36277, "none": 17952, "quarantine": 3422, "reject": 3277, "invalid": 16 }, "rua_present": 8301 }, "spf": { "n": 60944, "na": 0, "states": { "absent": 16744, "hardfail": 14631, "softfail": 28829, "neutral": 450, "plus_all": 14, "invalid": 276 } }, "dkim": { "n": 37855, "na": 23089, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 21537, "none_observed": 16318 } }, "mx": { "n": 60944, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 49649, "absent": 11295 } }, "reverse_dns": { "n": 49552, "na": 11392, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 40058, "none": 9494 } }, "caa": { "n": 60817, "na": 127, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1341, "absent": 59476 } }, "dnssec": { "n": 60944, "na": 0, "states": { "signed_valid": 1333, "signed_broken": 13, "unsigned": 59598 } }, "https": { "n": 60944, "na": 0, "states": { "https": 54665, "redirects": 0, "http_only": 6279 } }, "tls": { "n": 54665, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 52185, "tls12": 2480, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 54665, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 52658, "invalid": 2007 } }, "hsts": { "n": 54665, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 12272, "absent": 42393 } }, "csp": { "n": 35670, "na": 25274, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 8027, "weak": 0, "absent": 27643 } }, "clickjacking": { "n": 35670, "na": 25274, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 6098, "absent": 29572 } }, "mime_sniffing": { "n": 35670, "na": 25274, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 7527, "absent": 28143 } }, "referrer_policy": { "n": 35670, "na": 25274, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4451, "absent": 31219 } }, "secure_by_default": { "n": 35472, "na": 25472, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 882, "not_all": 34590 } }, "ipv6": { "n": 60944, "na": 0, "states": { "aaaa": 21105, "none": 39839 } } } }, "sale": { "graded": 12734, "checks": { "dmarc": { "n": 12734, "na": 0, "states": { "absent": 10274, "none": 952, "quarantine": 544, "reject": 964, "invalid": 0 }, "rua_present": 1003 }, "spf": { "n": 12734, "na": 0, "states": { "absent": 8670, "hardfail": 1622, "softfail": 2221, "neutral": 134, "plus_all": 0, "invalid": 87 } }, "dkim": { "n": 1111, "na": 11623, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 655, "none_observed": 456 } }, "mx": { "n": 12734, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4302, "absent": 8432 } }, "reverse_dns": { "n": 4298, "na": 8436, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3106, "none": 1192 } }, "caa": { "n": 12306, "na": 428, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 334, "absent": 11972 } }, "dnssec": { "n": 12734, "na": 0, "states": { "signed_valid": 579, "signed_broken": 7, "unsigned": 12148 } }, "https": { "n": 12734, "na": 0, "states": { "https": 6941, "redirects": 0, "http_only": 5793 } }, "tls": { "n": 6941, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6543, "tls12": 398, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6941, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6105, "invalid": 836 } }, "hsts": { "n": 6941, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1830, "absent": 5111 } }, "csp": { "n": 4730, "na": 8004, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 580, "weak": 0, "absent": 4150 } }, "clickjacking": { "n": 4730, "na": 8004, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 777, "absent": 3953 } }, "mime_sniffing": { "n": 4730, "na": 8004, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 998, "absent": 3732 } }, "referrer_policy": { "n": 4730, "na": 8004, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 663, "absent": 4067 } }, "secure_by_default": { "n": 3575, "na": 9159, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 54, "not_all": 3521 } }, "ipv6": { "n": 12734, "na": 0, "states": { "aaaa": 2572, "none": 10162 } } } }, "sbs": { "graded": 970378, "checks": { "dmarc": { "n": 970378, "na": 0, "states": { "absent": 928866, "none": 30083, "quarantine": 1621, "reject": 9808, "invalid": 0 }, "rua_present": 4340 }, "spf": { "n": 970378, "na": 0, "states": { "absent": 835175, "hardfail": 65038, "softfail": 69241, "neutral": 649, "plus_all": 7, "invalid": 268 } }, "dkim": { "n": 18825, "na": 951553, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 15334, "none_observed": 3491 } }, "mx": { "n": 970378, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 135008, "absent": 835370 } }, "reverse_dns": { "n": 134885, "na": 835493, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 88152, "none": 46733 } }, "caa": { "n": 956278, "na": 14100, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1363, "absent": 954915 } }, "dnssec": { "n": 970378, "na": 0, "states": { "signed_valid": 37916, "signed_broken": 253, "unsigned": 932209 } }, "https": { "n": 970378, "na": 0, "states": { "https": 388032, "redirects": 0, "http_only": 582346 } }, "tls": { "n": 388032, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 378071, "tls12": 9961, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 388032, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 354620, "invalid": 33412 } }, "hsts": { "n": 388032, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 37356, "absent": 350676 } }, "csp": { "n": 205804, "na": 764574, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 11134, "weak": 0, "absent": 194670 } }, "clickjacking": { "n": 205804, "na": 764574, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 31112, "absent": 174692 } }, "mime_sniffing": { "n": 205804, "na": 764574, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 33303, "absent": 172501 } }, "referrer_policy": { "n": 205804, "na": 764574, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 13718, "absent": 192086 } }, "secure_by_default": { "n": 179569, "na": 790809, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 449, "not_all": 179120 } }, "ipv6": { "n": 970378, "na": 0, "states": { "aaaa": 264667, "none": 705711 } } } }, "school": { "graded": 22681, "checks": { "dmarc": { "n": 22681, "na": 0, "states": { "absent": 17485, "none": 2804, "quarantine": 1358, "reject": 1033, "invalid": 1 }, "rua_present": 2367 }, "spf": { "n": 22681, "na": 0, "states": { "absent": 12392, "hardfail": 3459, "softfail": 6301, "neutral": 257, "plus_all": 3, "invalid": 269 } }, "dkim": { "n": 5754, "na": 16927, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2620, "none_observed": 3134 } }, "mx": { "n": 22681, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12356, "absent": 10325 } }, "reverse_dns": { "n": 12351, "na": 10330, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 10046, "none": 2305 } }, "caa": { "n": 22052, "na": 629, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 596, "absent": 21456 } }, "dnssec": { "n": 22681, "na": 0, "states": { "signed_valid": 1487, "signed_broken": 15, "unsigned": 21179 } }, "https": { "n": 22681, "na": 0, "states": { "https": 13322, "redirects": 0, "http_only": 9359 } }, "tls": { "n": 13322, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 12751, "tls12": 571, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 13322, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 12160, "invalid": 1162 } }, "hsts": { "n": 13322, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3308, "absent": 10014 } }, "csp": { "n": 9080, "na": 13601, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1017, "weak": 0, "absent": 8063 } }, "clickjacking": { "n": 9080, "na": 13601, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1847, "absent": 7233 } }, "mime_sniffing": { "n": 9080, "na": 13601, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1636, "absent": 7444 } }, "referrer_policy": { "n": 9080, "na": 13601, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 875, "absent": 8205 } }, "secure_by_default": { "n": 7744, "na": 14937, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 135, "not_all": 7609 } }, "ipv6": { "n": 22681, "na": 0, "states": { "aaaa": 3736, "none": 18945 } } } }, "science": { "graded": 10811, "checks": { "dmarc": { "n": 10811, "na": 0, "states": { "absent": 8696, "none": 842, "quarantine": 579, "reject": 693, "invalid": 1 }, "rua_present": 980 }, "spf": { "n": 10811, "na": 0, "states": { "absent": 5657, "hardfail": 1366, "softfail": 3330, "neutral": 391, "plus_all": 2, "invalid": 65 } }, "dkim": { "n": 1766, "na": 9045, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 982, "none_observed": 784 } }, "mx": { "n": 10811, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5747, "absent": 5064 } }, "reverse_dns": { "n": 5747, "na": 5064, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4835, "none": 912 } }, "caa": { "n": 10751, "na": 60, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 211, "absent": 10540 } }, "dnssec": { "n": 10811, "na": 0, "states": { "signed_valid": 1010, "signed_broken": 43, "unsigned": 9758 } }, "https": { "n": 10811, "na": 0, "states": { "https": 5348, "redirects": 0, "http_only": 5463 } }, "tls": { "n": 5348, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5132, "tls12": 216, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5348, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4735, "invalid": 613 } }, "hsts": { "n": 5348, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1327, "absent": 4021 } }, "csp": { "n": 3959, "na": 6852, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 406, "weak": 0, "absent": 3553 } }, "clickjacking": { "n": 3959, "na": 6852, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 677, "absent": 3282 } }, "mime_sniffing": { "n": 3959, "na": 6852, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 781, "absent": 3178 } }, "referrer_policy": { "n": 3959, "na": 6852, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 456, "absent": 3503 } }, "secure_by_default": { "n": 3064, "na": 7747, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 61, "not_all": 3003 } }, "ipv6": { "n": 10811, "na": 0, "states": { "aaaa": 1906, "none": 8905 } } } }, "scot": { "graded": 12278, "checks": { "dmarc": { "n": 12278, "na": 0, "states": { "absent": 6729, "none": 4034, "quarantine": 662, "reject": 849, "invalid": 4 }, "rua_present": 1454 }, "spf": { "n": 12278, "na": 0, "states": { "absent": 4331, "hardfail": 2318, "softfail": 5342, "neutral": 198, "plus_all": 0, "invalid": 89 } }, "dkim": { "n": 3706, "na": 8572, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2078, "none_observed": 1628 } }, "mx": { "n": 12278, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9276, "absent": 3002 } }, "reverse_dns": { "n": 9271, "na": 3007, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8657, "none": 614 } }, "caa": { "n": 12219, "na": 59, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 130, "absent": 12089 } }, "dnssec": { "n": 12278, "na": 0, "states": { "signed_valid": 180, "signed_broken": 5, "unsigned": 12093 } }, "https": { "n": 12278, "na": 0, "states": { "https": 7059, "redirects": 0, "http_only": 5219 } }, "tls": { "n": 7059, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6671, "tls12": 388, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7059, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6153, "invalid": 906 } }, "hsts": { "n": 7059, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1399, "absent": 5660 } }, "csp": { "n": 5923, "na": 6355, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 375, "weak": 0, "absent": 5548 } }, "clickjacking": { "n": 5923, "na": 6355, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 779, "absent": 5144 } }, "mime_sniffing": { "n": 5923, "na": 6355, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 635, "absent": 5288 } }, "referrer_policy": { "n": 5923, "na": 6355, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 283, "absent": 5640 } }, "secure_by_default": { "n": 3769, "na": 8509, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 55, "not_all": 3714 } }, "ipv6": { "n": 12278, "na": 0, "states": { "aaaa": 3849, "none": 8429 } } } }, "se": { "graded": 1267979, "checks": { "dmarc": { "n": 1267979, "na": 0, "states": { "absent": 1004890, "none": 136091, "quarantine": 42672, "reject": 84032, "invalid": 294 }, "rua_present": 92722 }, "spf": { "n": 1267979, "na": 0, "states": { "absent": 687226, "hardfail": 354526, "softfail": 178788, "neutral": 42935, "plus_all": 133, "invalid": 4371 } }, "dkim": { "n": 291762, "na": 976217, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 155265, "none_observed": 136497 } }, "mx": { "n": 1267979, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 847556, "absent": 420423 } }, "reverse_dns": { "n": 847138, "na": 420841, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 707617, "none": 139521 } }, "caa": { "n": 1265563, "na": 2416, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 23102, "absent": 1242461 } }, "dnssec": { "n": 1267979, "na": 0, "states": { "signed_valid": 796436, "signed_broken": 2470, "unsigned": 469073 } }, "https": { "n": 1267979, "na": 0, "states": { "https": 1039495, "redirects": 0, "http_only": 228484 } }, "tls": { "n": 1039495, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1002771, "tls12": 36724, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1039495, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 919023, "invalid": 120472 } }, "hsts": { "n": 1039495, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 128409, "absent": 911086 } }, "csp": { "n": 645649, "na": 622330, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 23951, "weak": 0, "absent": 621698 } }, "clickjacking": { "n": 645649, "na": 622330, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 48320, "absent": 597329 } }, "mime_sniffing": { "n": 645649, "na": 622330, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 86260, "absent": 559389 } }, "referrer_policy": { "n": 645649, "na": 622330, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 40708, "absent": 604941 } }, "secure_by_default": { "n": 585887, "na": 682092, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 3397, "not_all": 582490 } }, "ipv6": { "n": 1267979, "na": 0, "states": { "aaaa": 421545, "none": 846434 } } } }, "services": { "graded": 79481, "checks": { "dmarc": { "n": 79481, "na": 0, "states": { "absent": 54362, "none": 7561, "quarantine": 11406, "reject": 6143, "invalid": 9 }, "rua_present": 16916 }, "spf": { "n": 79481, "na": 0, "states": { "absent": 41608, "hardfail": 16599, "softfail": 20346, "neutral": 672, "plus_all": 6, "invalid": 250 } }, "dkim": { "n": 19593, "na": 59888, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 8971, "none_observed": 10622 } }, "mx": { "n": 79481, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 42073, "absent": 37408 } }, "reverse_dns": { "n": 42081, "na": 37400, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 31477, "none": 10604 } }, "caa": { "n": 77196, "na": 2285, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1256, "absent": 75940 } }, "dnssec": { "n": 79481, "na": 0, "states": { "signed_valid": 4860, "signed_broken": 38, "unsigned": 74583 } }, "https": { "n": 79481, "na": 0, "states": { "https": 39599, "redirects": 0, "http_only": 39882 } }, "tls": { "n": 39599, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 38223, "tls12": 1376, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 39599, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 36306, "invalid": 3293 } }, "hsts": { "n": 39599, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 6855, "absent": 32744 } }, "csp": { "n": 27129, "na": 52352, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2862, "weak": 0, "absent": 24267 } }, "clickjacking": { "n": 27129, "na": 52352, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3754, "absent": 23375 } }, "mime_sniffing": { "n": 27129, "na": 52352, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4276, "absent": 22853 } }, "referrer_policy": { "n": 27129, "na": 52352, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2608, "absent": 24521 } }, "secure_by_default": { "n": 22794, "na": 56687, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 277, "not_all": 22517 } }, "ipv6": { "n": 79481, "na": 0, "states": { "aaaa": 11683, "none": 67798 } } } }, "sex": { "graded": 5681, "checks": { "dmarc": { "n": 5681, "na": 0, "states": { "absent": 4542, "none": 141, "quarantine": 286, "reject": 712, "invalid": 0 }, "rua_present": 725 }, "spf": { "n": 5681, "na": 0, "states": { "absent": 3694, "hardfail": 1223, "softfail": 650, "neutral": 92, "plus_all": 0, "invalid": 22 } }, "dkim": { "n": 313, "na": 5368, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 96, "none_observed": 217 } }, "mx": { "n": 5681, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2532, "absent": 3149 } }, "reverse_dns": { "n": 2530, "na": 3151, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1446, "none": 1084 } }, "caa": { "n": 5647, "na": 34, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 104, "absent": 5543 } }, "dnssec": { "n": 5681, "na": 0, "states": { "signed_valid": 287, "signed_broken": 1, "unsigned": 5393 } }, "https": { "n": 5681, "na": 0, "states": { "https": 2075, "redirects": 0, "http_only": 3606 } }, "tls": { "n": 2075, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1943, "tls12": 132, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2075, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1793, "invalid": 282 } }, "hsts": { "n": 2075, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 243, "absent": 1832 } }, "csp": { "n": 2098, "na": 3583, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 505, "weak": 0, "absent": 1593 } }, "clickjacking": { "n": 2098, "na": 3583, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 489, "absent": 1609 } }, "mime_sniffing": { "n": 2098, "na": 3583, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 491, "absent": 1607 } }, "referrer_policy": { "n": 2098, "na": 3583, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 388, "absent": 1710 } }, "secure_by_default": { "n": 962, "na": 4719, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 22, "not_all": 940 } }, "ipv6": { "n": 5681, "na": 0, "states": { "aaaa": 539, "none": 5142 } } } }, "sg": { "graded": 113511, "checks": { "dmarc": { "n": 113511, "na": 0, "states": { "absent": 70244, "none": 23455, "quarantine": 11068, "reject": 8722, "invalid": 22 }, "rua_present": 18331 }, "spf": { "n": 113511, "na": 0, "states": { "absent": 39103, "hardfail": 29545, "softfail": 42862, "neutral": 1413, "plus_all": 9, "invalid": 579 } }, "dkim": { "n": 64100, "na": 49411, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 36521, "none_observed": 27579 } }, "mx": { "n": 113511, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 90190, "absent": 23321 } }, "reverse_dns": { "n": 90120, "na": 23391, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 76567, "none": 13553 } }, "caa": { "n": 113240, "na": 271, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2121, "absent": 111119 } }, "dnssec": { "n": 113511, "na": 0, "states": { "signed_valid": 2581, "signed_broken": 32, "unsigned": 110898 } }, "https": { "n": 113511, "na": 0, "states": { "https": 94583, "redirects": 0, "http_only": 18928 } }, "tls": { "n": 94583, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 87726, "tls12": 6857, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 94583, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 88171, "invalid": 6412 } }, "hsts": { "n": 94583, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 25934, "absent": 68649 } }, "csp": { "n": 47413, "na": 66098, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 7352, "weak": 0, "absent": 40061 } }, "clickjacking": { "n": 47413, "na": 66098, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 8777, "absent": 38636 } }, "mime_sniffing": { "n": 47413, "na": 66098, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 10600, "absent": 36813 } }, "referrer_policy": { "n": 47413, "na": 66098, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4735, "absent": 42678 } }, "secure_by_default": { "n": 46009, "na": 67502, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1206, "not_all": 44803 } }, "ipv6": { "n": 113511, "na": 0, "states": { "aaaa": 19222, "none": 94289 } } } }, "sh": { "graded": 33992, "checks": { "dmarc": { "n": 33992, "na": 0, "states": { "absent": 26025, "none": 3410, "quarantine": 2595, "reject": 1959, "invalid": 3 }, "rua_present": 3859 }, "spf": { "n": 33992, "na": 0, "states": { "absent": 18952, "hardfail": 3509, "softfail": 10655, "neutral": 727, "plus_all": 7, "invalid": 142 } }, "dkim": { "n": 7023, "na": 26969, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3868, "none_observed": 3155 } }, "mx": { "n": 33992, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 16372, "absent": 17620 } }, "reverse_dns": { "n": 16369, "na": 17623, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 15208, "none": 1161 } }, "caa": { "n": 33746, "na": 246, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3768, "absent": 29978 } }, "dnssec": { "n": 33992, "na": 0, "states": { "signed_valid": 2793, "signed_broken": 17, "unsigned": 31182 } }, "https": { "n": 33992, "na": 0, "states": { "https": 23335, "redirects": 0, "http_only": 10657 } }, "tls": { "n": 23335, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 22813, "tls12": 522, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 23335, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 22305, "invalid": 1030 } }, "hsts": { "n": 23335, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 6768, "absent": 16567 } }, "csp": { "n": 14529, "na": 19463, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1061, "weak": 0, "absent": 13468 } }, "clickjacking": { "n": 14529, "na": 19463, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2616, "absent": 11913 } }, "mime_sniffing": { "n": 14529, "na": 19463, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3712, "absent": 10817 } }, "referrer_policy": { "n": 14529, "na": 19463, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3121, "absent": 11408 } }, "secure_by_default": { "n": 13602, "na": 20390, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 593, "not_all": 13009 } }, "ipv6": { "n": 33992, "na": 0, "states": { "aaaa": 10454, "none": 23538 } } } }, "shop": { "graded": 3835959, "checks": { "dmarc": { "n": 3835959, "na": 0, "states": { "absent": 2995140, "none": 407220, "quarantine": 348030, "reject": 85526, "invalid": 43 }, "rua_present": 434685 }, "spf": { "n": 3835959, "na": 0, "states": { "absent": 2922056, "hardfail": 201613, "softfail": 698059, "neutral": 8549, "plus_all": 127, "invalid": 5555 } }, "dkim": { "n": 358603, "na": 3477356, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 285764, "none_observed": 72839 } }, "mx": { "n": 3835959, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 993652, "absent": 2842307 } }, "reverse_dns": { "n": 993233, "na": 2842726, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 696632, "none": 296601 } }, "caa": { "n": 3773403, "na": 62556, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 27044, "absent": 3746359 } }, "dnssec": { "n": 3835959, "na": 0, "states": { "signed_valid": 406433, "signed_broken": 4208, "unsigned": 3425318 } }, "https": { "n": 3835959, "na": 0, "states": { "https": 2144332, "redirects": 0, "http_only": 1691627 } }, "tls": { "n": 2144332, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2062823, "tls12": 81509, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2144332, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1852813, "invalid": 291519 } }, "hsts": { "n": 2144332, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 383497, "absent": 1760835 } }, "csp": { "n": 1587112, "na": 2248847, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 324099, "weak": 0, "absent": 1263013 } }, "clickjacking": { "n": 1587112, "na": 2248847, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 492469, "absent": 1094643 } }, "mime_sniffing": { "n": 1587112, "na": 2248847, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 514938, "absent": 1072174 } }, "referrer_policy": { "n": 1587112, "na": 2248847, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 364352, "absent": 1222760 } }, "secure_by_default": { "n": 1281888, "na": 2554071, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 4714, "not_all": 1277174 } }, "ipv6": { "n": 3835959, "na": 0, "states": { "aaaa": 943686, "none": 2892273 } } } }, "shopping": { "graded": 6671, "checks": { "dmarc": { "n": 6671, "na": 0, "states": { "absent": 5215, "none": 587, "quarantine": 202, "reject": 667, "invalid": 0 }, "rua_present": 704 }, "spf": { "n": 6671, "na": 0, "states": { "absent": 4296, "hardfail": 1044, "softfail": 1199, "neutral": 63, "plus_all": 1, "invalid": 68 } }, "dkim": { "n": 594, "na": 6077, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 318, "none_observed": 276 } }, "mx": { "n": 6671, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2786, "absent": 3885 } }, "reverse_dns": { "n": 2788, "na": 3883, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1912, "none": 876 } }, "caa": { "n": 6602, "na": 69, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 183, "absent": 6419 } }, "dnssec": { "n": 6671, "na": 0, "states": { "signed_valid": 352, "signed_broken": 5, "unsigned": 6314 } }, "https": { "n": 6671, "na": 0, "states": { "https": 3065, "redirects": 0, "http_only": 3606 } }, "tls": { "n": 3065, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2896, "tls12": 169, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3065, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2482, "invalid": 583 } }, "hsts": { "n": 3065, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 743, "absent": 2322 } }, "csp": { "n": 2211, "na": 4460, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 375, "weak": 0, "absent": 1836 } }, "clickjacking": { "n": 2211, "na": 4460, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 544, "absent": 1667 } }, "mime_sniffing": { "n": 2211, "na": 4460, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 490, "absent": 1721 } }, "referrer_policy": { "n": 2211, "na": 4460, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 225, "absent": 1986 } }, "secure_by_default": { "n": 1564, "na": 5107, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 115, "not_all": 1449 } }, "ipv6": { "n": 6671, "na": 0, "states": { "aaaa": 1234, "none": 5437 } } } }, "show": { "graded": 17185, "checks": { "dmarc": { "n": 17185, "na": 0, "states": { "absent": 13428, "none": 1207, "quarantine": 1707, "reject": 840, "invalid": 3 }, "rua_present": 2290 }, "spf": { "n": 17185, "na": 0, "states": { "absent": 11155, "hardfail": 2197, "softfail": 3597, "neutral": 158, "plus_all": 0, "invalid": 78 } }, "dkim": { "n": 2062, "na": 15123, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1016, "none_observed": 1046 } }, "mx": { "n": 17185, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6637, "absent": 10548 } }, "reverse_dns": { "n": 6638, "na": 10547, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5176, "none": 1462 } }, "caa": { "n": 16993, "na": 192, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 516, "absent": 16477 } }, "dnssec": { "n": 17185, "na": 0, "states": { "signed_valid": 935, "signed_broken": 17, "unsigned": 16233 } }, "https": { "n": 17185, "na": 0, "states": { "https": 9150, "redirects": 0, "http_only": 8035 } }, "tls": { "n": 9150, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8758, "tls12": 392, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9150, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8291, "invalid": 859 } }, "hsts": { "n": 9150, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1981, "absent": 7169 } }, "csp": { "n": 6001, "na": 11184, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 488, "weak": 0, "absent": 5513 } }, "clickjacking": { "n": 6001, "na": 11184, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1151, "absent": 4850 } }, "mime_sniffing": { "n": 6001, "na": 11184, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1249, "absent": 4752 } }, "referrer_policy": { "n": 6001, "na": 11184, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 728, "absent": 5273 } }, "secure_by_default": { "n": 5049, "na": 12136, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 116, "not_all": 4933 } }, "ipv6": { "n": 17185, "na": 0, "states": { "aaaa": 2735, "none": 14450 } } } }, "si": { "graded": 132526, "checks": { "dmarc": { "n": 132526, "na": 0, "states": { "absent": 74397, "none": 48837, "quarantine": 5387, "reject": 3892, "invalid": 13 }, "rua_present": 11059 }, "spf": { "n": 132526, "na": 0, "states": { "absent": 30818, "hardfail": 29761, "softfail": 69434, "neutral": 1942, "plus_all": 24, "invalid": 547 } }, "dkim": { "n": 70110, "na": 62416, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 59216, "none_observed": 10894 } }, "mx": { "n": 132526, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 106599, "absent": 25927 } }, "reverse_dns": { "n": 107064, "na": 25462, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 93107, "none": 13957 } }, "caa": { "n": 132244, "na": 282, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2134, "absent": 130110 } }, "dnssec": { "n": 132526, "na": 0, "states": { "signed_valid": 1049, "signed_broken": 5, "unsigned": 131472 } }, "https": { "n": 132526, "na": 0, "states": { "https": 124101, "redirects": 0, "http_only": 8425 } }, "tls": { "n": 124101, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 118013, "tls12": 6088, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 124101, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 116111, "invalid": 7990 } }, "hsts": { "n": 124101, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 18461, "absent": 105640 } }, "csp": { "n": 70117, "na": 62409, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 6841, "weak": 0, "absent": 63276 } }, "clickjacking": { "n": 70117, "na": 62409, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 10223, "absent": 59894 } }, "mime_sniffing": { "n": 70117, "na": 62409, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 12528, "absent": 57589 } }, "referrer_policy": { "n": 70117, "na": 62409, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 8770, "absent": 61347 } }, "secure_by_default": { "n": 69364, "na": 63162, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 4296, "not_all": 65068 } }, "ipv6": { "n": 132526, "na": 0, "states": { "aaaa": 17159, "none": 115367 } } } }, "site": { "graded": 1606341, "checks": { "dmarc": { "n": 1606341, "na": 0, "states": { "absent": 1308102, "none": 173934, "quarantine": 79374, "reject": 44921, "invalid": 10 }, "rua_present": 96142 }, "spf": { "n": 1606341, "na": 0, "states": { "absent": 1083001, "hardfail": 119884, "softfail": 391710, "neutral": 4170, "plus_all": 66, "invalid": 7510 } }, "dkim": { "n": 149853, "na": 1456488, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 128559, "none_observed": 21294 } }, "mx": { "n": 1606341, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 553982, "absent": 1052359 } }, "reverse_dns": { "n": 553454, "na": 1052887, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 345263, "none": 208191 } }, "caa": { "n": 1581918, "na": 24423, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 29514, "absent": 1552404 } }, "dnssec": { "n": 1606341, "na": 0, "states": { "signed_valid": 34638, "signed_broken": 1589, "unsigned": 1570114 } }, "https": { "n": 1606341, "na": 0, "states": { "https": 1121070, "redirects": 0, "http_only": 485271 } }, "tls": { "n": 1121070, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1085685, "tls12": 35385, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1121070, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1015643, "invalid": 105427 } }, "hsts": { "n": 1121070, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 156485, "absent": 964585 } }, "csp": { "n": 781631, "na": 824710, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 81660, "weak": 0, "absent": 699971 } }, "clickjacking": { "n": 781631, "na": 824710, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 97140, "absent": 684491 } }, "mime_sniffing": { "n": 781631, "na": 824710, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 141842, "absent": 639789 } }, "referrer_policy": { "n": 781631, "na": 824710, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 105316, "absent": 676315 } }, "secure_by_default": { "n": 684601, "na": 921740, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 4292, "not_all": 680309 } }, "ipv6": { "n": 1606341, "na": 0, "states": { "aaaa": 611122, "none": 995219 } } } }, "sk": { "graded": 401821, "checks": { "dmarc": { "n": 401821, "na": 0, "states": { "absent": 258914, "none": 71695, "quarantine": 35175, "reject": 36018, "invalid": 19 }, "rua_present": 37271 }, "spf": { "n": 401821, "na": 0, "states": { "absent": 94466, "hardfail": 128202, "softfail": 45283, "neutral": 129514, "plus_all": 34, "invalid": 4322 } }, "dkim": { "n": 189492, "na": 212329, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 172050, "none_observed": 17442 } }, "mx": { "n": 401821, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 337133, "absent": 64688 } }, "reverse_dns": { "n": 336953, "na": 64868, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 238073, "none": 98880 } }, "caa": { "n": 401450, "na": 371, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 7095, "absent": 394355 } }, "dnssec": { "n": 401821, "na": 0, "states": { "signed_valid": 234209, "signed_broken": 1449, "unsigned": 166163 } }, "https": { "n": 401821, "na": 0, "states": { "https": 366549, "redirects": 0, "http_only": 35272 } }, "tls": { "n": 366549, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 325936, "tls12": 40613, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 366549, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 274272, "invalid": 92277 } }, "hsts": { "n": 366549, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 42218, "absent": 324331 } }, "csp": { "n": 182944, "na": 218877, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 6206, "weak": 0, "absent": 176738 } }, "clickjacking": { "n": 182944, "na": 218877, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 16517, "absent": 166427 } }, "mime_sniffing": { "n": 182944, "na": 218877, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 24498, "absent": 158446 } }, "referrer_policy": { "n": 182944, "na": 218877, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 10367, "absent": 172577 } }, "secure_by_default": { "n": 173986, "na": 227835, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 965, "not_all": 173021 } }, "ipv6": { "n": 401821, "na": 0, "states": { "aaaa": 171048, "none": 230773 } } } }, "ski": { "graded": 5842, "checks": { "dmarc": { "n": 5842, "na": 0, "states": { "absent": 4384, "none": 633, "quarantine": 433, "reject": 392, "invalid": 0 }, "rua_present": 675 }, "spf": { "n": 5842, "na": 0, "states": { "absent": 3085, "hardfail": 881, "softfail": 1587, "neutral": 244, "plus_all": 2, "invalid": 43 } }, "dkim": { "n": 1439, "na": 4403, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 751, "none_observed": 688 } }, "mx": { "n": 5842, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3442, "absent": 2400 } }, "reverse_dns": { "n": 3440, "na": 2402, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3109, "none": 331 } }, "caa": { "n": 5820, "na": 22, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 180, "absent": 5640 } }, "dnssec": { "n": 5842, "na": 0, "states": { "signed_valid": 807, "signed_broken": 7, "unsigned": 5028 } }, "https": { "n": 5842, "na": 0, "states": { "https": 3103, "redirects": 0, "http_only": 2739 } }, "tls": { "n": 3103, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2915, "tls12": 188, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3103, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2591, "invalid": 512 } }, "hsts": { "n": 3103, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 737, "absent": 2366 } }, "csp": { "n": 2053, "na": 3789, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 355, "weak": 0, "absent": 1698 } }, "clickjacking": { "n": 2053, "na": 3789, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 464, "absent": 1589 } }, "mime_sniffing": { "n": 2053, "na": 3789, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 475, "absent": 1578 } }, "referrer_policy": { "n": 2053, "na": 3789, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 257, "absent": 1796 } }, "secure_by_default": { "n": 1498, "na": 4344, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 19, "not_all": 1479 } }, "ipv6": { "n": 5842, "na": 0, "states": { "aaaa": 1144, "none": 4698 } } } }, "skin": { "graded": 165973, "checks": { "dmarc": { "n": 165973, "na": 0, "states": { "absent": 163037, "none": 953, "quarantine": 1424, "reject": 559, "invalid": 0 }, "rua_present": 1966 }, "spf": { "n": 165973, "na": 0, "states": { "absent": 159668, "hardfail": 1709, "softfail": 4514, "neutral": 44, "plus_all": 2, "invalid": 36 } }, "dkim": { "n": 3452, "na": 162521, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 836, "none_observed": 2616 } }, "mx": { "n": 165973, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7503, "absent": 158470 } }, "reverse_dns": { "n": 7498, "na": 158475, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5893, "none": 1605 } }, "caa": { "n": 164099, "na": 1874, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 189, "absent": 163910 } }, "dnssec": { "n": 165973, "na": 0, "states": { "signed_valid": 53152, "signed_broken": 109, "unsigned": 112712 } }, "https": { "n": 165973, "na": 0, "states": { "https": 15447, "redirects": 0, "http_only": 150526 } }, "tls": { "n": 15447, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 14301, "tls12": 1146, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 15447, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 13679, "invalid": 1768 } }, "hsts": { "n": 15447, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3060, "absent": 12387 } }, "csp": { "n": 61303, "na": 104670, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 51667, "weak": 0, "absent": 9636 } }, "clickjacking": { "n": 61303, "na": 104670, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 52358, "absent": 8945 } }, "mime_sniffing": { "n": 61303, "na": 104670, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 52638, "absent": 8665 } }, "referrer_policy": { "n": 61303, "na": 104670, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 51899, "absent": 9404 } }, "secure_by_default": { "n": 6841, "na": 159132, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 188, "not_all": 6653 } }, "ipv6": { "n": 165973, "na": 0, "states": { "aaaa": 9007, "none": 156966 } } } }, "sn": { "graded": 7464, "checks": { "dmarc": { "n": 7464, "na": 0, "states": { "absent": 4810, "none": 1612, "quarantine": 533, "reject": 507, "invalid": 2 }, "rua_present": 768 }, "spf": { "n": 7464, "na": 0, "states": { "absent": 1560, "hardfail": 2572, "softfail": 3041, "neutral": 132, "plus_all": 6, "invalid": 153 } }, "dkim": { "n": 2542, "na": 4922, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1810, "none_observed": 732 } }, "mx": { "n": 7464, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6417, "absent": 1047 } }, "reverse_dns": { "n": 6416, "na": 1048, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5372, "none": 1044 } }, "caa": { "n": 7429, "na": 35, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 174, "absent": 7255 } }, "dnssec": { "n": 7464, "na": 0, "states": { "signed_valid": 1148, "signed_broken": 3, "unsigned": 6313 } }, "https": { "n": 7464, "na": 0, "states": { "https": 6507, "redirects": 0, "http_only": 957 } }, "tls": { "n": 6507, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6292, "tls12": 215, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6507, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6102, "invalid": 405 } }, "hsts": { "n": 6507, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1375, "absent": 5132 } }, "csp": { "n": 4254, "na": 3210, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 471, "weak": 0, "absent": 3783 } }, "clickjacking": { "n": 4254, "na": 3210, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 614, "absent": 3640 } }, "mime_sniffing": { "n": 4254, "na": 3210, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 740, "absent": 3514 } }, "referrer_policy": { "n": 4254, "na": 3210, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 466, "absent": 3788 } }, "secure_by_default": { "n": 4122, "na": 3342, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 62, "not_all": 4060 } }, "ipv6": { "n": 7464, "na": 0, "states": { "aaaa": 2213, "none": 5251 } } } }, "so": { "graded": 18146, "checks": { "dmarc": { "n": 18146, "na": 0, "states": { "absent": 13843, "none": 3192, "quarantine": 479, "reject": 627, "invalid": 5 }, "rua_present": 1673 }, "spf": { "n": 18146, "na": 0, "states": { "absent": 7322, "hardfail": 2664, "softfail": 7959, "neutral": 151, "plus_all": 2, "invalid": 48 } }, "dkim": { "n": 5656, "na": 12490, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3506, "none_observed": 2150 } }, "mx": { "n": 18146, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12508, "absent": 5638 } }, "reverse_dns": { "n": 12506, "na": 5640, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 10468, "none": 2038 } }, "caa": { "n": 18097, "na": 49, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 581, "absent": 17516 } }, "dnssec": { "n": 18146, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 18146 } }, "https": { "n": 18146, "na": 0, "states": { "https": 13826, "redirects": 0, "http_only": 4320 } }, "tls": { "n": 13826, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 13559, "tls12": 267, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 13826, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 13332, "invalid": 494 } }, "hsts": { "n": 13826, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4892, "absent": 8934 } }, "csp": { "n": 9196, "na": 8950, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1645, "weak": 0, "absent": 7551 } }, "clickjacking": { "n": 9196, "na": 8950, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2381, "absent": 6815 } }, "mime_sniffing": { "n": 9196, "na": 8950, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2729, "absent": 6467 } }, "referrer_policy": { "n": 9196, "na": 8950, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2260, "absent": 6936 } }, "secure_by_default": { "n": 8771, "na": 9375, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1210, "not_all": 7561 } }, "ipv6": { "n": 18146, "na": 0, "states": { "aaaa": 4124, "none": 14022 } } } }, "social": { "graded": 44516, "checks": { "dmarc": { "n": 44516, "na": 0, "states": { "absent": 34581, "none": 4042, "quarantine": 2874, "reject": 3017, "invalid": 2 }, "rua_present": 4634 }, "spf": { "n": 44516, "na": 0, "states": { "absent": 26134, "hardfail": 5940, "softfail": 11649, "neutral": 655, "plus_all": 5, "invalid": 133 } }, "dkim": { "n": 6998, "na": 37518, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3615, "none_observed": 3383 } }, "mx": { "n": 44516, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 20093, "absent": 24423 } }, "reverse_dns": { "n": 20088, "na": 24428, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 16953, "none": 3135 } }, "caa": { "n": 43161, "na": 1355, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1394, "absent": 41767 } }, "dnssec": { "n": 44516, "na": 0, "states": { "signed_valid": 3692, "signed_broken": 29, "unsigned": 40795 } }, "https": { "n": 44516, "na": 0, "states": { "https": 25273, "redirects": 0, "http_only": 19243 } }, "tls": { "n": 25273, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 24673, "tls12": 600, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 25273, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 23229, "invalid": 2044 } }, "hsts": { "n": 25273, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 8404, "absent": 16869 } }, "csp": { "n": 17429, "na": 27087, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 3286, "weak": 0, "absent": 14143 } }, "clickjacking": { "n": 17429, "na": 27087, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 5106, "absent": 12323 } }, "mime_sniffing": { "n": 17429, "na": 27087, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 5270, "absent": 12159 } }, "referrer_policy": { "n": 17429, "na": 27087, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3580, "absent": 13849 } }, "secure_by_default": { "n": 14824, "na": 29692, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1683, "not_all": 13141 } }, "ipv6": { "n": 44516, "na": 0, "states": { "aaaa": 8765, "none": 35751 } } } }, "software": { "graded": 24197, "checks": { "dmarc": { "n": 24197, "na": 0, "states": { "absent": 17491, "none": 2856, "quarantine": 1900, "reject": 1948, "invalid": 2 }, "rua_present": 3194 }, "spf": { "n": 24197, "na": 0, "states": { "absent": 12781, "hardfail": 3508, "softfail": 7291, "neutral": 501, "plus_all": 3, "invalid": 113 } }, "dkim": { "n": 5235, "na": 18962, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2594, "none_observed": 2641 } }, "mx": { "n": 24197, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 13117, "absent": 11080 } }, "reverse_dns": { "n": 13115, "na": 11082, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 11742, "none": 1373 } }, "caa": { "n": 24088, "na": 109, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 844, "absent": 23244 } }, "dnssec": { "n": 24197, "na": 0, "states": { "signed_valid": 2002, "signed_broken": 21, "unsigned": 22174 } }, "https": { "n": 24197, "na": 0, "states": { "https": 12976, "redirects": 0, "http_only": 11221 } }, "tls": { "n": 12976, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 12410, "tls12": 566, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 12976, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 11341, "invalid": 1635 } }, "hsts": { "n": 12976, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3348, "absent": 9628 } }, "csp": { "n": 8787, "na": 15410, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 756, "weak": 0, "absent": 8031 } }, "clickjacking": { "n": 8787, "na": 15410, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1516, "absent": 7271 } }, "mime_sniffing": { "n": 8787, "na": 15410, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1921, "absent": 6866 } }, "referrer_policy": { "n": 8787, "na": 15410, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1281, "absent": 7506 } }, "secure_by_default": { "n": 7153, "na": 17044, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 180, "not_all": 6973 } }, "ipv6": { "n": 24197, "na": 0, "states": { "aaaa": 5356, "none": 18841 } } } }, "solar": { "graded": 8730, "checks": { "dmarc": { "n": 8730, "na": 0, "states": { "absent": 6699, "none": 1164, "quarantine": 381, "reject": 485, "invalid": 1 }, "rua_present": 690 }, "spf": { "n": 8730, "na": 0, "states": { "absent": 4852, "hardfail": 1283, "softfail": 2389, "neutral": 159, "plus_all": 0, "invalid": 47 } }, "dkim": { "n": 2445, "na": 6285, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 885, "none_observed": 1560 } }, "mx": { "n": 8730, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5119, "absent": 3611 } }, "reverse_dns": { "n": 5120, "na": 3610, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4368, "none": 752 } }, "caa": { "n": 8502, "na": 228, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 232, "absent": 8270 } }, "dnssec": { "n": 8730, "na": 0, "states": { "signed_valid": 729, "signed_broken": 10, "unsigned": 7991 } }, "https": { "n": 8730, "na": 0, "states": { "https": 4868, "redirects": 0, "http_only": 3862 } }, "tls": { "n": 4868, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4653, "tls12": 215, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4868, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4243, "invalid": 625 } }, "hsts": { "n": 4868, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1058, "absent": 3810 } }, "csp": { "n": 3123, "na": 5607, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 291, "weak": 0, "absent": 2832 } }, "clickjacking": { "n": 3123, "na": 5607, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 518, "absent": 2605 } }, "mime_sniffing": { "n": 3123, "na": 5607, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 624, "absent": 2499 } }, "referrer_policy": { "n": 3123, "na": 5607, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 297, "absent": 2826 } }, "secure_by_default": { "n": 2474, "na": 6256, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 74, "not_all": 2400 } }, "ipv6": { "n": 8730, "na": 0, "states": { "aaaa": 1662, "none": 7068 } } } }, "solutions": { "graded": 93339, "checks": { "dmarc": { "n": 93339, "na": 0, "states": { "absent": 61635, "none": 12040, "quarantine": 12715, "reject": 6937, "invalid": 12 }, "rua_present": 18947 }, "spf": { "n": 93339, "na": 0, "states": { "absent": 50357, "hardfail": 17009, "softfail": 24502, "neutral": 1106, "plus_all": 5, "invalid": 360 } }, "dkim": { "n": 30022, "na": 63317, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 11698, "none_observed": 18324 } }, "mx": { "n": 93339, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 51501, "absent": 41838 } }, "reverse_dns": { "n": 51508, "na": 41831, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 43556, "none": 7952 } }, "caa": { "n": 92937, "na": 402, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1696, "absent": 91241 } }, "dnssec": { "n": 93339, "na": 0, "states": { "signed_valid": 5447, "signed_broken": 55, "unsigned": 87837 } }, "https": { "n": 93339, "na": 0, "states": { "https": 48066, "redirects": 0, "http_only": 45273 } }, "tls": { "n": 48066, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 46101, "tls12": 1965, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 48066, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 43456, "invalid": 4610 } }, "hsts": { "n": 48066, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 11578, "absent": 36488 } }, "csp": { "n": 30675, "na": 62664, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 3138, "weak": 0, "absent": 27537 } }, "clickjacking": { "n": 30675, "na": 62664, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 5090, "absent": 25585 } }, "mime_sniffing": { "n": 30675, "na": 62664, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 6030, "absent": 24645 } }, "referrer_policy": { "n": 30675, "na": 62664, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3058, "absent": 27617 } }, "secure_by_default": { "n": 26042, "na": 67297, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 487, "not_all": 25555 } }, "ipv6": { "n": 93339, "na": 0, "states": { "aaaa": 15172, "none": 78167 } } } }, "space": { "graded": 508767, "checks": { "dmarc": { "n": 508767, "na": 0, "states": { "absent": 428239, "none": 43655, "quarantine": 25075, "reject": 11787, "invalid": 11 }, "rua_present": 32294 }, "spf": { "n": 508767, "na": 0, "states": { "absent": 334823, "hardfail": 28240, "softfail": 137143, "neutral": 4556, "plus_all": 32, "invalid": 3973 } }, "dkim": { "n": 52610, "na": 456157, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 35342, "none_observed": 17268 } }, "mx": { "n": 508767, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 191638, "absent": 317129 } }, "reverse_dns": { "n": 191584, "na": 317183, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 152265, "none": 39319 } }, "caa": { "n": 504115, "na": 4652, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 16658, "absent": 487457 } }, "dnssec": { "n": 508767, "na": 0, "states": { "signed_valid": 17730, "signed_broken": 648, "unsigned": 490389 } }, "https": { "n": 508767, "na": 0, "states": { "https": 339212, "redirects": 0, "http_only": 169555 } }, "tls": { "n": 339212, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 326743, "tls12": 12469, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 339212, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 308711, "invalid": 30501 } }, "hsts": { "n": 339212, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 57881, "absent": 281331 } }, "csp": { "n": 219145, "na": 289622, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 18945, "weak": 0, "absent": 200200 } }, "clickjacking": { "n": 219145, "na": 289622, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 26514, "absent": 192631 } }, "mime_sniffing": { "n": 219145, "na": 289622, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 33559, "absent": 185586 } }, "referrer_policy": { "n": 219145, "na": 289622, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 22043, "absent": 197102 } }, "secure_by_default": { "n": 190323, "na": 318444, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1615, "not_all": 188708 } }, "ipv6": { "n": 508767, "na": 0, "states": { "aaaa": 180829, "none": 327938 } } } }, "srl": { "graded": 11999, "checks": { "dmarc": { "n": 11999, "na": 0, "states": { "absent": 3987, "none": 7624, "quarantine": 210, "reject": 178, "invalid": 0 }, "rua_present": 491 }, "spf": { "n": 11999, "na": 0, "states": { "absent": 1554, "hardfail": 1416, "softfail": 8948, "neutral": 58, "plus_all": 1, "invalid": 22 } }, "dkim": { "n": 1689, "na": 10310, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 929, "none_observed": 760 } }, "mx": { "n": 11999, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 11179, "absent": 820 } }, "reverse_dns": { "n": 11179, "na": 820, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 10968, "none": 211 } }, "caa": { "n": 11958, "na": 41, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 69, "absent": 11889 } }, "dnssec": { "n": 11999, "na": 0, "states": { "signed_valid": 185, "signed_broken": 3, "unsigned": 11811 } }, "https": { "n": 11999, "na": 0, "states": { "https": 5544, "redirects": 0, "http_only": 6455 } }, "tls": { "n": 5544, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4041, "tls12": 1503, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5544, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3755, "invalid": 1789 } }, "hsts": { "n": 5544, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 577, "absent": 4967 } }, "csp": { "n": 6861, "na": 5138, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 113, "weak": 0, "absent": 6748 } }, "clickjacking": { "n": 6861, "na": 5138, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 190, "absent": 6671 } }, "mime_sniffing": { "n": 6861, "na": 5138, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 255, "absent": 6606 } }, "referrer_policy": { "n": 6861, "na": 5138, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 92, "absent": 6769 } }, "secure_by_default": { "n": 1721, "na": 10278, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 13, "not_all": 1708 } }, "ipv6": { "n": 11999, "na": 0, "states": { "aaaa": 5835, "none": 6164 } } } }, "st": { "graded": 19731, "checks": { "dmarc": { "n": 19731, "na": 0, "states": { "absent": 17366, "none": 1157, "quarantine": 650, "reject": 557, "invalid": 1 }, "rua_present": 900 }, "spf": { "n": 19731, "na": 0, "states": { "absent": 14795, "hardfail": 1718, "softfail": 2209, "neutral": 503, "plus_all": 1, "invalid": 505 } }, "dkim": { "n": 1932, "na": 17799, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1268, "none_observed": 664 } }, "mx": { "n": 19731, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5791, "absent": 13940 } }, "reverse_dns": { "n": 5861, "na": 13870, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4713, "none": 1148 } }, "caa": { "n": 19600, "na": 131, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 368, "absent": 19232 } }, "dnssec": { "n": 19731, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 19731 } }, "https": { "n": 19731, "na": 0, "states": { "https": 16883, "redirects": 0, "http_only": 2848 } }, "tls": { "n": 16883, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 15265, "tls12": 1618, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 16883, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 15274, "invalid": 1609 } }, "hsts": { "n": 16883, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2619, "absent": 14264 } }, "csp": { "n": 8462, "na": 11269, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 564, "weak": 0, "absent": 7898 } }, "clickjacking": { "n": 8462, "na": 11269, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1246, "absent": 7216 } }, "mime_sniffing": { "n": 8462, "na": 11269, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1420, "absent": 7042 } }, "referrer_policy": { "n": 8462, "na": 11269, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1176, "absent": 7286 } }, "secure_by_default": { "n": 7793, "na": 11938, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 197, "not_all": 7596 } }, "ipv6": { "n": 19731, "na": 0, "states": { "aaaa": 4177, "none": 15554 } } } }, "store": { "graded": 1830978, "checks": { "dmarc": { "n": 1830978, "na": 0, "states": { "absent": 1202684, "none": 317725, "quarantine": 246387, "reject": 64147, "invalid": 35 }, "rua_present": 283774 }, "spf": { "n": 1830978, "na": 0, "states": { "absent": 1146210, "hardfail": 122180, "softfail": 483783, "neutral": 6327, "plus_all": 68, "invalid": 72410 } }, "dkim": { "n": 107394, "na": 1723584, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 68300, "none_observed": 39094 } }, "mx": { "n": 1830978, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 733008, "absent": 1097970 } }, "reverse_dns": { "n": 733085, "na": 1097893, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 591176, "none": 141909 } }, "caa": { "n": 1803645, "na": 27333, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 20367, "absent": 1783278 } }, "dnssec": { "n": 1830978, "na": 0, "states": { "signed_valid": 54036, "signed_broken": 2283, "unsigned": 1774659 } }, "https": { "n": 1830978, "na": 0, "states": { "https": 1051022, "redirects": 0, "http_only": 779956 } }, "tls": { "n": 1051022, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1013462, "tls12": 37560, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1051022, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 771747, "invalid": 279275 } }, "hsts": { "n": 1051022, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 208519, "absent": 842503 } }, "csp": { "n": 748057, "na": 1082921, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 110766, "weak": 0, "absent": 637291 } }, "clickjacking": { "n": 748057, "na": 1082921, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 132586, "absent": 615471 } }, "mime_sniffing": { "n": 748057, "na": 1082921, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 137376, "absent": 610681 } }, "referrer_policy": { "n": 748057, "na": 1082921, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 39802, "absent": 708255 } }, "secure_by_default": { "n": 500966, "na": 1330012, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 2874, "not_all": 498092 } }, "ipv6": { "n": 1830978, "na": 0, "states": { "aaaa": 688893, "none": 1142085 } } } }, "stream": { "graded": 14603, "checks": { "dmarc": { "n": 14603, "na": 0, "states": { "absent": 12503, "none": 902, "quarantine": 502, "reject": 696, "invalid": 0 }, "rua_present": 1101 }, "spf": { "n": 14603, "na": 0, "states": { "absent": 9109, "hardfail": 1293, "softfail": 3915, "neutral": 238, "plus_all": 0, "invalid": 48 } }, "dkim": { "n": 1475, "na": 13128, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1024, "none_observed": 451 } }, "mx": { "n": 14603, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5668, "absent": 8935 } }, "reverse_dns": { "n": 5679, "na": 8924, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4814, "none": 865 } }, "caa": { "n": 14458, "na": 145, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 225, "absent": 14233 } }, "dnssec": { "n": 14603, "na": 0, "states": { "signed_valid": 1378, "signed_broken": 6, "unsigned": 13219 } }, "https": { "n": 14603, "na": 0, "states": { "https": 7867, "redirects": 0, "http_only": 6736 } }, "tls": { "n": 7867, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7622, "tls12": 245, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7867, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7116, "invalid": 751 } }, "hsts": { "n": 7867, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1128, "absent": 6739 } }, "csp": { "n": 4551, "na": 10052, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 433, "weak": 0, "absent": 4118 } }, "clickjacking": { "n": 4551, "na": 10052, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 964, "absent": 3587 } }, "mime_sniffing": { "n": 4551, "na": 10052, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1139, "absent": 3412 } }, "referrer_policy": { "n": 4551, "na": 10052, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 829, "absent": 3722 } }, "secure_by_default": { "n": 3768, "na": 10835, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 94, "not_all": 3674 } }, "ipv6": { "n": 14603, "na": 0, "states": { "aaaa": 4456, "none": 10147 } } } }, "studio": { "graded": 192097, "checks": { "dmarc": { "n": 192097, "na": 0, "states": { "absent": 127496, "none": 26876, "quarantine": 14958, "reject": 22748, "invalid": 19 }, "rua_present": 23039 }, "spf": { "n": 192097, "na": 0, "states": { "absent": 88905, "hardfail": 33431, "softfail": 66276, "neutral": 2061, "plus_all": 6, "invalid": 1418 } }, "dkim": { "n": 59363, "na": 132734, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 28326, "none_observed": 31037 } }, "mx": { "n": 192097, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 109392, "absent": 82705 } }, "reverse_dns": { "n": 109370, "na": 82727, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 99736, "none": 9634 } }, "caa": { "n": 191130, "na": 967, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 7707, "absent": 183423 } }, "dnssec": { "n": 192097, "na": 0, "states": { "signed_valid": 24977, "signed_broken": 159, "unsigned": 166961 } }, "https": { "n": 192097, "na": 0, "states": { "https": 133707, "redirects": 0, "http_only": 58390 } }, "tls": { "n": 133707, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 127951, "tls12": 5756, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 133707, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 126341, "invalid": 7366 } }, "hsts": { "n": 133707, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 57279, "absent": 76428 } }, "csp": { "n": 83282, "na": 108815, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 7951, "weak": 0, "absent": 75331 } }, "clickjacking": { "n": 83282, "na": 108815, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 22601, "absent": 60681 } }, "mime_sniffing": { "n": 83282, "na": 108815, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 28635, "absent": 54647 } }, "referrer_policy": { "n": 83282, "na": 108815, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 9132, "absent": 74150 } }, "secure_by_default": { "n": 73987, "na": 118110, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 858, "not_all": 73129 } }, "ipv6": { "n": 192097, "na": 0, "states": { "aaaa": 33680, "none": 158417 } } } }, "study": { "graded": 12334, "checks": { "dmarc": { "n": 12334, "na": 0, "states": { "absent": 10571, "none": 920, "quarantine": 525, "reject": 318, "invalid": 0 }, "rua_present": 1066 }, "spf": { "n": 12334, "na": 0, "states": { "absent": 9100, "hardfail": 477, "softfail": 2685, "neutral": 42, "plus_all": 2, "invalid": 28 } }, "dkim": { "n": 1239, "na": 11095, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 772, "none_observed": 467 } }, "mx": { "n": 12334, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3677, "absent": 8657 } }, "reverse_dns": { "n": 3677, "na": 8657, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3298, "none": 379 } }, "caa": { "n": 12264, "na": 70, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 262, "absent": 12002 } }, "dnssec": { "n": 12334, "na": 0, "states": { "signed_valid": 921, "signed_broken": 1, "unsigned": 11412 } }, "https": { "n": 12334, "na": 0, "states": { "https": 8265, "redirects": 0, "http_only": 4069 } }, "tls": { "n": 8265, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7901, "tls12": 364, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8265, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7882, "invalid": 383 } }, "hsts": { "n": 8265, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1622, "absent": 6643 } }, "csp": { "n": 4156, "na": 8178, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 371, "weak": 0, "absent": 3785 } }, "clickjacking": { "n": 4156, "na": 8178, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 790, "absent": 3366 } }, "mime_sniffing": { "n": 4156, "na": 8178, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1058, "absent": 3098 } }, "referrer_policy": { "n": 4156, "na": 8178, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 956, "absent": 3200 } }, "secure_by_default": { "n": 3637, "na": 8697, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 76, "not_all": 3561 } }, "ipv6": { "n": 12334, "na": 0, "states": { "aaaa": 4698, "none": 7636 } } } }, "style": { "graded": 10487, "checks": { "dmarc": { "n": 10487, "na": 0, "states": { "absent": 7860, "none": 1257, "quarantine": 714, "reject": 656, "invalid": 0 }, "rua_present": 1152 }, "spf": { "n": 10487, "na": 0, "states": { "absent": 5552, "hardfail": 1203, "softfail": 3488, "neutral": 132, "plus_all": 0, "invalid": 112 } }, "dkim": { "n": 1908, "na": 8579, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 819, "none_observed": 1089 } }, "mx": { "n": 10487, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5723, "absent": 4764 } }, "reverse_dns": { "n": 5721, "na": 4766, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4663, "none": 1058 } }, "caa": { "n": 10423, "na": 64, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 350, "absent": 10073 } }, "dnssec": { "n": 10487, "na": 0, "states": { "signed_valid": 599, "signed_broken": 5, "unsigned": 9883 } }, "https": { "n": 10487, "na": 0, "states": { "https": 6497, "redirects": 0, "http_only": 3990 } }, "tls": { "n": 6497, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6194, "tls12": 303, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6497, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5814, "invalid": 683 } }, "hsts": { "n": 6497, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1618, "absent": 4879 } }, "csp": { "n": 4282, "na": 6205, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 484, "weak": 0, "absent": 3798 } }, "clickjacking": { "n": 4282, "na": 6205, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 816, "absent": 3466 } }, "mime_sniffing": { "n": 4282, "na": 6205, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 938, "absent": 3344 } }, "referrer_policy": { "n": 4282, "na": 6205, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 394, "absent": 3888 } }, "secure_by_default": { "n": 3654, "na": 6833, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 55, "not_all": 3599 } }, "ipv6": { "n": 10487, "na": 0, "states": { "aaaa": 1784, "none": 8703 } } } }, "su": { "graded": 82553, "checks": { "dmarc": { "n": 82553, "na": 0, "states": { "absent": 73286, "none": 5442, "quarantine": 1567, "reject": 2253, "invalid": 5 }, "rua_present": 3019 }, "spf": { "n": 82553, "na": 0, "states": { "absent": 42131, "hardfail": 4747, "softfail": 18345, "neutral": 1175, "plus_all": 15, "invalid": 16140 } }, "dkim": { "n": 13171, "na": 69382, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 12181, "none_observed": 990 } }, "mx": { "n": 82553, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 48084, "absent": 34469 } }, "reverse_dns": { "n": 47794, "na": 34759, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 42186, "none": 5608 } }, "caa": { "n": 81972, "na": 581, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2454, "absent": 79518 } }, "dnssec": { "n": 82553, "na": 0, "states": { "signed_valid": 401, "signed_broken": 11, "unsigned": 82141 } }, "https": { "n": 82553, "na": 0, "states": { "https": 59298, "redirects": 0, "http_only": 23255 } }, "tls": { "n": 59298, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 48416, "tls12": 10882, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 59298, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 47135, "invalid": 12163 } }, "hsts": { "n": 59298, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 7698, "absent": 51600 } }, "csp": { "n": 43966, "na": 38587, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1454, "weak": 0, "absent": 42512 } }, "clickjacking": { "n": 43966, "na": 38587, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 8139, "absent": 35827 } }, "mime_sniffing": { "n": 43966, "na": 38587, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3741, "absent": 40225 } }, "referrer_policy": { "n": 43966, "na": 38587, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1855, "absent": 42111 } }, "secure_by_default": { "n": 37472, "na": 45081, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 236, "not_all": 37236 } }, "ipv6": { "n": 82553, "na": 0, "states": { "aaaa": 11482, "none": 71071 } } } }, "sucks": { "graded": 6444, "checks": { "dmarc": { "n": 6444, "na": 0, "states": { "absent": 3844, "none": 84, "quarantine": 965, "reject": 1551, "invalid": 0 }, "rua_present": 2319 }, "spf": { "n": 6444, "na": 0, "states": { "absent": 4770, "hardfail": 1360, "softfail": 232, "neutral": 75, "plus_all": 1, "invalid": 6 } }, "dkim": { "n": 112, "na": 6332, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 33, "none_observed": 79 } }, "mx": { "n": 6444, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1763, "absent": 4681 } }, "reverse_dns": { "n": 1764, "na": 4680, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 722, "none": 1042 } }, "caa": { "n": 6409, "na": 35, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 154, "absent": 6255 } }, "dnssec": { "n": 6444, "na": 0, "states": { "signed_valid": 62, "signed_broken": 0, "unsigned": 6382 } }, "https": { "n": 6444, "na": 0, "states": { "https": 1268, "redirects": 0, "http_only": 5176 } }, "tls": { "n": 1268, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 1211, "tls12": 57, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 1268, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 1159, "invalid": 109 } }, "hsts": { "n": 1268, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 247, "absent": 1021 } }, "csp": { "n": 2011, "na": 4433, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 399, "weak": 0, "absent": 1612 } }, "clickjacking": { "n": 2011, "na": 4433, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 469, "absent": 1542 } }, "mime_sniffing": { "n": 2011, "na": 4433, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 314, "absent": 1697 } }, "referrer_policy": { "n": 2011, "na": 4433, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 201, "absent": 1810 } }, "secure_by_default": { "n": 560, "na": 5884, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 11, "not_all": 549 } }, "ipv6": { "n": 6444, "na": 0, "states": { "aaaa": 223, "none": 6221 } } } }, "supply": { "graded": 7296, "checks": { "dmarc": { "n": 7296, "na": 0, "states": { "absent": 5750, "none": 658, "quarantine": 481, "reject": 407, "invalid": 0 }, "rua_present": 752 }, "spf": { "n": 7296, "na": 0, "states": { "absent": 4523, "hardfail": 813, "softfail": 1848, "neutral": 81, "plus_all": 1, "invalid": 30 } }, "dkim": { "n": 1636, "na": 5660, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 654, "none_observed": 982 } }, "mx": { "n": 7296, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3367, "absent": 3929 } }, "reverse_dns": { "n": 3368, "na": 3928, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2932, "none": 436 } }, "caa": { "n": 7269, "na": 27, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 169, "absent": 7100 } }, "dnssec": { "n": 7296, "na": 0, "states": { "signed_valid": 732, "signed_broken": 4, "unsigned": 6560 } }, "https": { "n": 7296, "na": 0, "states": { "https": 3746, "redirects": 0, "http_only": 3550 } }, "tls": { "n": 3746, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3642, "tls12": 104, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3746, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3391, "invalid": 355 } }, "hsts": { "n": 3746, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1313, "absent": 2433 } }, "csp": { "n": 2336, "na": 4960, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 368, "weak": 0, "absent": 1968 } }, "clickjacking": { "n": 2336, "na": 4960, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 683, "absent": 1653 } }, "mime_sniffing": { "n": 2336, "na": 4960, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 827, "absent": 1509 } }, "referrer_policy": { "n": 2336, "na": 4960, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 286, "absent": 2050 } }, "secure_by_default": { "n": 1889, "na": 5407, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 36, "not_all": 1853 } }, "ipv6": { "n": 7296, "na": 0, "states": { "aaaa": 1083, "none": 6213 } } } }, "support": { "graded": 35833, "checks": { "dmarc": { "n": 35833, "na": 0, "states": { "absent": 25728, "none": 3905, "quarantine": 3140, "reject": 3058, "invalid": 2 }, "rua_present": 5533 }, "spf": { "n": 35833, "na": 0, "states": { "absent": 20250, "hardfail": 6007, "softfail": 8825, "neutral": 542, "plus_all": 11, "invalid": 198 } }, "dkim": { "n": 7485, "na": 28348, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3598, "none_observed": 3887 } }, "mx": { "n": 35833, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 17799, "absent": 18034 } }, "reverse_dns": { "n": 17809, "na": 18024, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 14604, "none": 3205 } }, "caa": { "n": 34856, "na": 977, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 606, "absent": 34250 } }, "dnssec": { "n": 35833, "na": 0, "states": { "signed_valid": 2985, "signed_broken": 29, "unsigned": 32819 } }, "https": { "n": 35833, "na": 0, "states": { "https": 16924, "redirects": 0, "http_only": 18909 } }, "tls": { "n": 16924, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 16031, "tls12": 893, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 16924, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 14483, "invalid": 2441 } }, "hsts": { "n": 16924, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2949, "absent": 13975 } }, "csp": { "n": 10905, "na": 24928, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1404, "weak": 0, "absent": 9501 } }, "clickjacking": { "n": 10905, "na": 24928, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2148, "absent": 8757 } }, "mime_sniffing": { "n": 10905, "na": 24928, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2175, "absent": 8730 } }, "referrer_policy": { "n": 10905, "na": 24928, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1239, "absent": 9666 } }, "secure_by_default": { "n": 8165, "na": 27668, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 171, "not_all": 7994 } }, "ipv6": { "n": 35833, "na": 0, "states": { "aaaa": 6950, "none": 28883 } } } }, "surf": { "graded": 49955, "checks": { "dmarc": { "n": 49955, "na": 0, "states": { "absent": 48385, "none": 756, "quarantine": 538, "reject": 276, "invalid": 0 }, "rua_present": 835 }, "spf": { "n": 49955, "na": 0, "states": { "absent": 45980, "hardfail": 860, "softfail": 2994, "neutral": 81, "plus_all": 0, "invalid": 40 } }, "dkim": { "n": 1124, "na": 48831, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 510, "none_observed": 614 } }, "mx": { "n": 49955, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4474, "absent": 45481 } }, "reverse_dns": { "n": 4475, "na": 45480, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3753, "none": 722 } }, "caa": { "n": 49128, "na": 827, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 155, "absent": 48973 } }, "dnssec": { "n": 49955, "na": 0, "states": { "signed_valid": 13358, "signed_broken": 92, "unsigned": 36505 } }, "https": { "n": 49955, "na": 0, "states": { "https": 19018, "redirects": 0, "http_only": 30937 } }, "tls": { "n": 19018, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 18606, "tls12": 412, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 19018, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 13066, "invalid": 5952 } }, "hsts": { "n": 19018, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1605, "absent": 17413 } }, "csp": { "n": 15408, "na": 34547, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1155, "weak": 0, "absent": 14253 } }, "clickjacking": { "n": 15408, "na": 34547, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1845, "absent": 13563 } }, "mime_sniffing": { "n": 15408, "na": 34547, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2282, "absent": 13126 } }, "referrer_policy": { "n": 15408, "na": 34547, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1834, "absent": 13574 } }, "secure_by_default": { "n": 10911, "na": 39044, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 68, "not_all": 10843 } }, "ipv6": { "n": 49955, "na": 0, "states": { "aaaa": 5791, "none": 44164 } } } }, "sv": { "graded": 5748, "checks": { "dmarc": { "n": 5748, "na": 0, "states": { "absent": 3146, "none": 1383, "quarantine": 522, "reject": 695, "invalid": 2 }, "rua_present": 1290 }, "spf": { "n": 5748, "na": 0, "states": { "absent": 1546, "hardfail": 1494, "softfail": 2599, "neutral": 69, "plus_all": 0, "invalid": 40 } }, "dkim": { "n": 3303, "na": 2445, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2213, "none_observed": 1090 } }, "mx": { "n": 5748, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4384, "absent": 1364 } }, "reverse_dns": { "n": 4383, "na": 1365, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3410, "none": 973 } }, "caa": { "n": 5602, "na": 146, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 150, "absent": 5452 } }, "dnssec": { "n": 5748, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 5748 } }, "https": { "n": 5748, "na": 0, "states": { "https": 4666, "redirects": 0, "http_only": 1082 } }, "tls": { "n": 4666, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4320, "tls12": 346, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4666, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4370, "invalid": 296 } }, "hsts": { "n": 4666, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 834, "absent": 3832 } }, "csp": { "n": 2732, "na": 3016, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 437, "weak": 0, "absent": 2295 } }, "clickjacking": { "n": 2732, "na": 3016, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 362, "absent": 2370 } }, "mime_sniffing": { "n": 2732, "na": 3016, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 413, "absent": 2319 } }, "referrer_policy": { "n": 2732, "na": 3016, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 228, "absent": 2504 } }, "secure_by_default": { "n": 2652, "na": 3096, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 51, "not_all": 2601 } }, "ipv6": { "n": 5748, "na": 0, "states": { "aaaa": 1222, "none": 4526 } } } }, "swiss": { "graded": 21121, "checks": { "dmarc": { "n": 21121, "na": 0, "states": { "absent": 15106, "none": 1296, "quarantine": 2116, "reject": 2601, "invalid": 2 }, "rua_present": 1480 }, "spf": { "n": 21121, "na": 0, "states": { "absent": 6083, "hardfail": 6894, "softfail": 3295, "neutral": 662, "plus_all": 0, "invalid": 4187 } }, "dkim": { "n": 4662, "na": 16459, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2757, "none_observed": 1905 } }, "mx": { "n": 21121, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 15690, "absent": 5431 } }, "reverse_dns": { "n": 15689, "na": 5432, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 14712, "none": 977 } }, "caa": { "n": 20823, "na": 298, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 386, "absent": 20437 } }, "dnssec": { "n": 21121, "na": 0, "states": { "signed_valid": 4445, "signed_broken": 30, "unsigned": 16646 } }, "https": { "n": 21121, "na": 0, "states": { "https": 12970, "redirects": 0, "http_only": 8151 } }, "tls": { "n": 12970, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 11727, "tls12": 1243, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 12970, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8936, "invalid": 4034 } }, "hsts": { "n": 12970, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3756, "absent": 9214 } }, "csp": { "n": 6875, "na": 14246, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 333, "weak": 0, "absent": 6542 } }, "clickjacking": { "n": 6875, "na": 14246, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1836, "absent": 5039 } }, "mime_sniffing": { "n": 6875, "na": 14246, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 619, "absent": 6256 } }, "referrer_policy": { "n": 6875, "na": 14246, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 293, "absent": 6582 } }, "secure_by_default": { "n": 4911, "na": 16210, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 52, "not_all": 4859 } }, "ipv6": { "n": 21121, "na": 0, "states": { "aaaa": 7832, "none": 13289 } } } }, "systems": { "graded": 41620, "checks": { "dmarc": { "n": 41620, "na": 0, "states": { "absent": 30555, "none": 4392, "quarantine": 3544, "reject": 3127, "invalid": 2 }, "rua_present": 5549 }, "spf": { "n": 41620, "na": 0, "states": { "absent": 22236, "hardfail": 6685, "softfail": 11599, "neutral": 817, "plus_all": 7, "invalid": 276 } }, "dkim": { "n": 10674, "na": 30946, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 5338, "none_observed": 5336 } }, "mx": { "n": 41620, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 23032, "absent": 18588 } }, "reverse_dns": { "n": 23020, "na": 18600, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 20361, "none": 2659 } }, "caa": { "n": 40518, "na": 1102, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1348, "absent": 39170 } }, "dnssec": { "n": 41620, "na": 0, "states": { "signed_valid": 3809, "signed_broken": 35, "unsigned": 37776 } }, "https": { "n": 41620, "na": 0, "states": { "https": 20072, "redirects": 0, "http_only": 21548 } }, "tls": { "n": 20072, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 19060, "tls12": 1012, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 20072, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 17524, "invalid": 2548 } }, "hsts": { "n": 20072, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5073, "absent": 14999 } }, "csp": { "n": 13989, "na": 27631, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1171, "weak": 0, "absent": 12818 } }, "clickjacking": { "n": 13989, "na": 27631, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2633, "absent": 11356 } }, "mime_sniffing": { "n": 13989, "na": 27631, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3335, "absent": 10654 } }, "referrer_policy": { "n": 13989, "na": 27631, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1995, "absent": 11994 } }, "secure_by_default": { "n": 11110, "na": 30510, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 272, "not_all": 10838 } }, "ipv6": { "n": 41620, "na": 0, "states": { "aaaa": 8083, "none": 33537 } } } }, "tattoo": { "graded": 7006, "checks": { "dmarc": { "n": 7006, "na": 0, "states": { "absent": 6110, "none": 496, "quarantine": 287, "reject": 113, "invalid": 0 }, "rua_present": 405 }, "spf": { "n": 7006, "na": 0, "states": { "absent": 4644, "hardfail": 698, "softfail": 1576, "neutral": 62, "plus_all": 1, "invalid": 25 } }, "dkim": { "n": 803, "na": 6203, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 265, "none_observed": 538 } }, "mx": { "n": 7006, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2563, "absent": 4443 } }, "reverse_dns": { "n": 2569, "na": 4437, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2048, "none": 521 } }, "caa": { "n": 6976, "na": 30, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 55, "absent": 6921 } }, "dnssec": { "n": 7006, "na": 0, "states": { "signed_valid": 2028, "signed_broken": 2, "unsigned": 4976 } }, "https": { "n": 7006, "na": 0, "states": { "https": 3345, "redirects": 0, "http_only": 3661 } }, "tls": { "n": 3345, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3163, "tls12": 182, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3345, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2712, "invalid": 633 } }, "hsts": { "n": 3345, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 631, "absent": 2714 } }, "csp": { "n": 2930, "na": 4076, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1014, "weak": 0, "absent": 1916 } }, "clickjacking": { "n": 2930, "na": 4076, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1175, "absent": 1755 } }, "mime_sniffing": { "n": 2930, "na": 4076, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1161, "absent": 1769 } }, "referrer_policy": { "n": 2930, "na": 4076, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1047, "absent": 1883 } }, "secure_by_default": { "n": 1721, "na": 5285, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 44, "not_all": 1677 } }, "ipv6": { "n": 7006, "na": 0, "states": { "aaaa": 1299, "none": 5707 } } } }, "tax": { "graded": 14904, "checks": { "dmarc": { "n": 14904, "na": 0, "states": { "absent": 11000, "none": 1596, "quarantine": 1240, "reject": 1067, "invalid": 1 }, "rua_present": 1847 }, "spf": { "n": 14904, "na": 0, "states": { "absent": 7722, "hardfail": 3136, "softfail": 3811, "neutral": 186, "plus_all": 0, "invalid": 49 } }, "dkim": { "n": 3671, "na": 11233, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1518, "none_observed": 2153 } }, "mx": { "n": 14904, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8556, "absent": 6348 } }, "reverse_dns": { "n": 8553, "na": 6351, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7337, "none": 1216 } }, "caa": { "n": 14698, "na": 206, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 365, "absent": 14333 } }, "dnssec": { "n": 14904, "na": 0, "states": { "signed_valid": 1124, "signed_broken": 8, "unsigned": 13772 } }, "https": { "n": 14904, "na": 0, "states": { "https": 7483, "redirects": 0, "http_only": 7421 } }, "tls": { "n": 7483, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7047, "tls12": 436, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7483, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6544, "invalid": 939 } }, "hsts": { "n": 7483, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1660, "absent": 5823 } }, "csp": { "n": 5119, "na": 9785, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 454, "weak": 0, "absent": 4665 } }, "clickjacking": { "n": 5119, "na": 9785, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 842, "absent": 4277 } }, "mime_sniffing": { "n": 5119, "na": 9785, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 986, "absent": 4133 } }, "referrer_policy": { "n": 5119, "na": 9785, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 583, "absent": 4536 } }, "secure_by_default": { "n": 3966, "na": 10938, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 79, "not_all": 3887 } }, "ipv6": { "n": 14904, "na": 0, "states": { "aaaa": 2728, "none": 12176 } } } }, "taxi": { "graded": 6349, "checks": { "dmarc": { "n": 6349, "na": 0, "states": { "absent": 4634, "none": 896, "quarantine": 429, "reject": 390, "invalid": 0 }, "rua_present": 575 }, "spf": { "n": 6349, "na": 0, "states": { "absent": 3408, "hardfail": 900, "softfail": 1859, "neutral": 60, "plus_all": 0, "invalid": 122 } }, "dkim": { "n": 864, "na": 5485, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 530, "none_observed": 334 } }, "mx": { "n": 6349, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3603, "absent": 2746 } }, "reverse_dns": { "n": 3606, "na": 2743, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3028, "none": 578 } }, "caa": { "n": 6157, "na": 192, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 161, "absent": 5996 } }, "dnssec": { "n": 6349, "na": 0, "states": { "signed_valid": 519, "signed_broken": 3, "unsigned": 5827 } }, "https": { "n": 6349, "na": 0, "states": { "https": 3679, "redirects": 0, "http_only": 2670 } }, "tls": { "n": 3679, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3525, "tls12": 154, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3679, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3241, "invalid": 438 } }, "hsts": { "n": 3679, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 699, "absent": 2980 } }, "csp": { "n": 2882, "na": 3467, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 447, "weak": 0, "absent": 2435 } }, "clickjacking": { "n": 2882, "na": 3467, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 565, "absent": 2317 } }, "mime_sniffing": { "n": 2882, "na": 3467, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 505, "absent": 2377 } }, "referrer_policy": { "n": 2882, "na": 3467, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 376, "absent": 2506 } }, "secure_by_default": { "n": 2225, "na": 4124, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 57, "not_all": 2168 } }, "ipv6": { "n": 6349, "na": 0, "states": { "aaaa": 1631, "none": 4718 } } } }, "team": { "graded": 64901, "checks": { "dmarc": { "n": 64901, "na": 0, "states": { "absent": 49659, "none": 6687, "quarantine": 4239, "reject": 4316, "invalid": 0 }, "rua_present": 6881 }, "spf": { "n": 64901, "na": 0, "states": { "absent": 35885, "hardfail": 9221, "softfail": 18073, "neutral": 758, "plus_all": 26, "invalid": 938 } }, "dkim": { "n": 15537, "na": 49364, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 7148, "none_observed": 8389 } }, "mx": { "n": 64901, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 34792, "absent": 30109 } }, "reverse_dns": { "n": 34787, "na": 30114, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 28901, "none": 5886 } }, "caa": { "n": 64463, "na": 438, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1551, "absent": 62912 } }, "dnssec": { "n": 64901, "na": 0, "states": { "signed_valid": 5195, "signed_broken": 28, "unsigned": 59678 } }, "https": { "n": 64901, "na": 0, "states": { "https": 33330, "redirects": 0, "http_only": 31571 } }, "tls": { "n": 33330, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 30028, "tls12": 3302, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 33330, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 29957, "invalid": 3373 } }, "hsts": { "n": 33330, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 6078, "absent": 27252 } }, "csp": { "n": 21529, "na": 43372, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1541, "weak": 0, "absent": 19988 } }, "clickjacking": { "n": 21529, "na": 43372, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 5338, "absent": 16191 } }, "mime_sniffing": { "n": 21529, "na": 43372, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 5470, "absent": 16059 } }, "referrer_policy": { "n": 21529, "na": 43372, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 3996, "absent": 17533 } }, "secure_by_default": { "n": 17966, "na": 46935, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 272, "not_all": 17694 } }, "ipv6": { "n": 64901, "na": 0, "states": { "aaaa": 15105, "none": 49796 } } } }, "tech": { "graded": 507767, "checks": { "dmarc": { "n": 507767, "na": 0, "states": { "absent": 382717, "none": 70924, "quarantine": 31094, "reject": 22988, "invalid": 44 }, "rua_present": 49235 }, "spf": { "n": 507767, "na": 0, "states": { "absent": 272810, "hardfail": 70415, "softfail": 150418, "neutral": 7667, "plus_all": 31, "invalid": 6426 } }, "dkim": { "n": 96947, "na": 410820, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 53105, "none_observed": 43842 } }, "mx": { "n": 507767, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 268766, "absent": 239001 } }, "reverse_dns": { "n": 268679, "na": 239088, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 207073, "none": 61606 } }, "caa": { "n": 502674, "na": 5093, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 14286, "absent": 488388 } }, "dnssec": { "n": 507767, "na": 0, "states": { "signed_valid": 32602, "signed_broken": 862, "unsigned": 474303 } }, "https": { "n": 507767, "na": 0, "states": { "https": 298251, "redirects": 0, "http_only": 209516 } }, "tls": { "n": 298251, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 286135, "tls12": 12116, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 298251, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 259825, "invalid": 38426 } }, "hsts": { "n": 298251, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 82333, "absent": 215918 } }, "csp": { "n": 218366, "na": 289401, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 23386, "weak": 0, "absent": 194980 } }, "clickjacking": { "n": 218366, "na": 289401, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 30410, "absent": 187956 } }, "mime_sniffing": { "n": 218366, "na": 289401, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 38167, "absent": 180199 } }, "referrer_policy": { "n": 218366, "na": 289401, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 24178, "absent": 194188 } }, "secure_by_default": { "n": 185753, "na": 322014, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 2674, "not_all": 183079 } }, "ipv6": { "n": 507767, "na": 0, "states": { "aaaa": 114159, "none": 393608 } } } }, "technology": { "graded": 30703, "checks": { "dmarc": { "n": 30703, "na": 0, "states": { "absent": 22879, "none": 2644, "quarantine": 2742, "reject": 2437, "invalid": 1 }, "rua_present": 4531 }, "spf": { "n": 30703, "na": 0, "states": { "absent": 18476, "hardfail": 5095, "softfail": 6534, "neutral": 434, "plus_all": 4, "invalid": 160 } }, "dkim": { "n": 7229, "na": 23474, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2675, "none_observed": 4554 } }, "mx": { "n": 30703, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 15303, "absent": 15400 } }, "reverse_dns": { "n": 15309, "na": 15394, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 12693, "none": 2616 } }, "caa": { "n": 30535, "na": 168, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 631, "absent": 29904 } }, "dnssec": { "n": 30703, "na": 0, "states": { "signed_valid": 2344, "signed_broken": 25, "unsigned": 28334 } }, "https": { "n": 30703, "na": 0, "states": { "https": 13450, "redirects": 0, "http_only": 17253 } }, "tls": { "n": 13450, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 12794, "tls12": 656, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 13450, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 11808, "invalid": 1642 } }, "hsts": { "n": 13450, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2763, "absent": 10687 } }, "csp": { "n": 9053, "na": 21650, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1020, "weak": 0, "absent": 8033 } }, "clickjacking": { "n": 9053, "na": 21650, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1605, "absent": 7448 } }, "mime_sniffing": { "n": 9053, "na": 21650, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1807, "absent": 7246 } }, "referrer_policy": { "n": 9053, "na": 21650, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1007, "absent": 8046 } }, "secure_by_default": { "n": 6898, "na": 23805, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 172, "not_all": 6726 } }, "ipv6": { "n": 30703, "na": 0, "states": { "aaaa": 4404, "none": 26299 } } } }, "tel": { "graded": 33077, "checks": { "dmarc": { "n": 33077, "na": 0, "states": { "absent": 30192, "none": 788, "quarantine": 353, "reject": 1744, "invalid": 0 }, "rua_present": 1664 }, "spf": { "n": 33077, "na": 0, "states": { "absent": 26271, "hardfail": 3630, "softfail": 2622, "neutral": 373, "plus_all": 2, "invalid": 179 } }, "dkim": { "n": 1640, "na": 31437, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1018, "none_observed": 622 } }, "mx": { "n": 33077, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7473, "absent": 25604 } }, "reverse_dns": { "n": 7470, "na": 25607, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5597, "none": 1873 } }, "caa": { "n": 32978, "na": 99, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 408, "absent": 32570 } }, "dnssec": { "n": 33077, "na": 0, "states": { "signed_valid": 495, "signed_broken": 39, "unsigned": 32543 } }, "https": { "n": 33077, "na": 0, "states": { "https": 21598, "redirects": 0, "http_only": 11479 } }, "tls": { "n": 21598, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 21142, "tls12": 456, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 21598, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 20368, "invalid": 1230 } }, "hsts": { "n": 21598, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1389, "absent": 20209 } }, "csp": { "n": 19784, "na": 13293, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 861, "weak": 0, "absent": 18923 } }, "clickjacking": { "n": 19784, "na": 13293, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1170, "absent": 18614 } }, "mime_sniffing": { "n": 19784, "na": 13293, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1385, "absent": 18399 } }, "referrer_policy": { "n": 19784, "na": 13293, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 744, "absent": 19040 } }, "secure_by_default": { "n": 18272, "na": 14805, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 155, "not_all": 18117 } }, "ipv6": { "n": 33077, "na": 0, "states": { "aaaa": 2205, "none": 30872 } } } }, "th": { "graded": 66446, "checks": { "dmarc": { "n": 66446, "na": 0, "states": { "absent": 44267, "none": 12003, "quarantine": 7678, "reject": 2493, "invalid": 5 }, "rua_present": 11928 }, "spf": { "n": 66446, "na": 0, "states": { "absent": 16795, "hardfail": 16326, "softfail": 32627, "neutral": 368, "plus_all": 82, "invalid": 248 } }, "dkim": { "n": 28773, "na": 37673, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 13754, "none_observed": 15019 } }, "mx": { "n": 66446, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 54176, "absent": 12270 } }, "reverse_dns": { "n": 54053, "na": 12393, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 44731, "none": 9322 } }, "caa": { "n": 66301, "na": 145, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1436, "absent": 64865 } }, "dnssec": { "n": 66446, "na": 0, "states": { "signed_valid": 4797, "signed_broken": 18, "unsigned": 61631 } }, "https": { "n": 66446, "na": 0, "states": { "https": 52631, "redirects": 0, "http_only": 13815 } }, "tls": { "n": 52631, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 45033, "tls12": 7598, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 52631, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 45267, "invalid": 7364 } }, "hsts": { "n": 52631, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 7513, "absent": 45118 } }, "csp": { "n": 28860, "na": 37586, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1133, "weak": 0, "absent": 27727 } }, "clickjacking": { "n": 28860, "na": 37586, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3347, "absent": 25513 } }, "mime_sniffing": { "n": 28860, "na": 37586, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3833, "absent": 25027 } }, "referrer_policy": { "n": 28860, "na": 37586, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1992, "absent": 26868 } }, "secure_by_default": { "n": 28215, "na": 38231, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 160, "not_all": 28055 } }, "ipv6": { "n": 66446, "na": 0, "states": { "aaaa": 12995, "none": 53451 } } } }, "tips": { "graded": 17091, "checks": { "dmarc": { "n": 17091, "na": 0, "states": { "absent": 13179, "none": 1535, "quarantine": 937, "reject": 1439, "invalid": 1 }, "rua_present": 1354 }, "spf": { "n": 17091, "na": 0, "states": { "absent": 10216, "hardfail": 2291, "softfail": 4303, "neutral": 193, "plus_all": 5, "invalid": 83 } }, "dkim": { "n": 2610, "na": 14481, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 784, "none_observed": 1826 } }, "mx": { "n": 17091, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8942, "absent": 8149 } }, "reverse_dns": { "n": 8949, "na": 8142, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7484, "none": 1465 } }, "caa": { "n": 17020, "na": 71, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 490, "absent": 16530 } }, "dnssec": { "n": 17091, "na": 0, "states": { "signed_valid": 1120, "signed_broken": 7, "unsigned": 15964 } }, "https": { "n": 17091, "na": 0, "states": { "https": 8265, "redirects": 0, "http_only": 8826 } }, "tls": { "n": 8265, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7833, "tls12": 432, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8265, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7155, "invalid": 1110 } }, "hsts": { "n": 8265, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1457, "absent": 6808 } }, "csp": { "n": 5582, "na": 11509, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 396, "weak": 0, "absent": 5186 } }, "clickjacking": { "n": 5582, "na": 11509, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 829, "absent": 4753 } }, "mime_sniffing": { "n": 5582, "na": 11509, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 951, "absent": 4631 } }, "referrer_policy": { "n": 5582, "na": 11509, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 527, "absent": 5055 } }, "secure_by_default": { "n": 4135, "na": 12956, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 57, "not_all": 4078 } }, "ipv6": { "n": 17091, "na": 0, "states": { "aaaa": 4032, "none": 13059 } } } }, "tirol": { "graded": 7537, "checks": { "dmarc": { "n": 7537, "na": 0, "states": { "absent": 5368, "none": 1631, "quarantine": 223, "reject": 315, "invalid": 0 }, "rua_present": 421 }, "spf": { "n": 7537, "na": 0, "states": { "absent": 3037, "hardfail": 2415, "softfail": 1740, "neutral": 176, "plus_all": 0, "invalid": 169 } }, "dkim": { "n": 1281, "na": 6256, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 679, "none_observed": 602 } }, "mx": { "n": 7537, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6427, "absent": 1110 } }, "reverse_dns": { "n": 6439, "na": 1098, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5739, "none": 700 } }, "caa": { "n": 7525, "na": 12, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 96, "absent": 7429 } }, "dnssec": { "n": 7537, "na": 0, "states": { "signed_valid": 209, "signed_broken": 1, "unsigned": 7327 } }, "https": { "n": 7537, "na": 0, "states": { "https": 4932, "redirects": 0, "http_only": 2605 } }, "tls": { "n": 4932, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4605, "tls12": 327, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4932, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3375, "invalid": 1557 } }, "hsts": { "n": 4932, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1101, "absent": 3831 } }, "csp": { "n": 2440, "na": 5097, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 73, "weak": 0, "absent": 2367 } }, "clickjacking": { "n": 2440, "na": 5097, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 214, "absent": 2226 } }, "mime_sniffing": { "n": 2440, "na": 5097, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 250, "absent": 2190 } }, "referrer_policy": { "n": 2440, "na": 5097, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 102, "absent": 2338 } }, "secure_by_default": { "n": 1623, "na": 5914, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 15, "not_all": 1608 } }, "ipv6": { "n": 7537, "na": 0, "states": { "aaaa": 962, "none": 6575 } } } }, "tk": { "graded": 21340, "checks": { "dmarc": { "n": 21340, "na": 0, "states": { "absent": 19999, "none": 679, "quarantine": 226, "reject": 436, "invalid": 0 }, "rua_present": 638 }, "spf": { "n": 21340, "na": 0, "states": { "absent": 17594, "hardfail": 1100, "softfail": 2415, "neutral": 89, "plus_all": 2, "invalid": 140 } }, "dkim": { "n": 1280, "na": 20060, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 792, "none_observed": 488 } }, "mx": { "n": 21340, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5017, "absent": 16323 } }, "reverse_dns": { "n": 5013, "na": 16327, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4242, "none": 771 } }, "caa": { "n": 21162, "na": 178, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 318, "absent": 20844 } }, "dnssec": { "n": 21340, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 21340 } }, "https": { "n": 21340, "na": 0, "states": { "https": 10818, "redirects": 0, "http_only": 10522 } }, "tls": { "n": 10818, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8084, "tls12": 2734, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10818, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7480, "invalid": 3338 } }, "hsts": { "n": 10818, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1126, "absent": 9692 } }, "csp": { "n": 3538, "na": 17802, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 104, "weak": 0, "absent": 3434 } }, "clickjacking": { "n": 3538, "na": 17802, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 372, "absent": 3166 } }, "mime_sniffing": { "n": 3538, "na": 17802, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 570, "absent": 2968 } }, "referrer_policy": { "n": 3538, "na": 17802, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 286, "absent": 3252 } }, "secure_by_default": { "n": 3398, "na": 17942, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 31, "not_all": 3367 } }, "ipv6": { "n": 21340, "na": 0, "states": { "aaaa": 6032, "none": 15308 } } } }, "tn": { "graded": 23438, "checks": { "dmarc": { "n": 23438, "na": 0, "states": { "absent": 17454, "none": 3761, "quarantine": 1619, "reject": 598, "invalid": 6 }, "rua_present": 2180 }, "spf": { "n": 23438, "na": 0, "states": { "absent": 9410, "hardfail": 3617, "softfail": 10153, "neutral": 121, "plus_all": 6, "invalid": 131 } }, "dkim": { "n": 7226, "na": 16212, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 6270, "none_observed": 956 } }, "mx": { "n": 23438, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 19119, "absent": 4319 } }, "reverse_dns": { "n": 19054, "na": 4384, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 13320, "none": 5734 } }, "caa": { "n": 23017, "na": 421, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2975, "absent": 20042 } }, "dnssec": { "n": 23438, "na": 0, "states": { "signed_valid": 653, "signed_broken": 0, "unsigned": 22785 } }, "https": { "n": 23438, "na": 0, "states": { "https": 17464, "redirects": 0, "http_only": 5974 } }, "tls": { "n": 17464, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 15051, "tls12": 2413, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 17464, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 15742, "invalid": 1722 } }, "hsts": { "n": 17464, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2578, "absent": 14886 } }, "csp": { "n": 10875, "na": 12563, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 840, "weak": 0, "absent": 10035 } }, "clickjacking": { "n": 10875, "na": 12563, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1298, "absent": 9577 } }, "mime_sniffing": { "n": 10875, "na": 12563, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1826, "absent": 9049 } }, "referrer_policy": { "n": 10875, "na": 12563, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1085, "absent": 9790 } }, "secure_by_default": { "n": 10536, "na": 12902, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 77, "not_all": 10459 } }, "ipv6": { "n": 23438, "na": 0, "states": { "aaaa": 5054, "none": 18384 } } } }, "to": { "graded": 60219, "checks": { "dmarc": { "n": 60219, "na": 0, "states": { "absent": 54278, "none": 3635, "quarantine": 1064, "reject": 1240, "invalid": 2 }, "rua_present": 2514 }, "spf": { "n": 60219, "na": 0, "states": { "absent": 28083, "hardfail": 20547, "softfail": 11115, "neutral": 349, "plus_all": 3, "invalid": 122 } }, "dkim": { "n": 5582, "na": 54637, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3452, "none_observed": 2130 } }, "mx": { "n": 60219, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 33742, "absent": 26477 } }, "reverse_dns": { "n": 33736, "na": 26483, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 14441, "none": 19295 } }, "caa": { "n": 60049, "na": 170, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 850, "absent": 59199 } }, "dnssec": { "n": 60219, "na": 0, "states": { "signed_valid": 781, "signed_broken": 20, "unsigned": 59418 } }, "https": { "n": 60219, "na": 0, "states": { "https": 51573, "redirects": 0, "http_only": 8646 } }, "tls": { "n": 51573, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 50708, "tls12": 865, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 51573, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 49422, "invalid": 2151 } }, "hsts": { "n": 51573, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5351, "absent": 46222 } }, "csp": { "n": 42452, "na": 17767, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1010, "weak": 0, "absent": 41442 } }, "clickjacking": { "n": 42452, "na": 17767, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2428, "absent": 40024 } }, "mime_sniffing": { "n": 42452, "na": 17767, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2970, "absent": 39482 } }, "referrer_policy": { "n": 42452, "na": 17767, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2211, "absent": 40241 } }, "secure_by_default": { "n": 39785, "na": 20434, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 360, "not_all": 39425 } }, "ipv6": { "n": 60219, "na": 0, "states": { "aaaa": 10608, "none": 49611 } } } }, "today": { "graded": 113052, "checks": { "dmarc": { "n": 113052, "na": 0, "states": { "absent": 95089, "none": 7451, "quarantine": 7021, "reject": 3488, "invalid": 3 }, "rua_present": 11200 }, "spf": { "n": 113052, "na": 0, "states": { "absent": 82319, "hardfail": 9722, "softfail": 20160, "neutral": 549, "plus_all": 1, "invalid": 301 } }, "dkim": { "n": 13707, "na": 99345, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 6354, "none_observed": 7353 } }, "mx": { "n": 113052, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 35846, "absent": 77206 } }, "reverse_dns": { "n": 35846, "na": 77206, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 27970, "none": 7876 } }, "caa": { "n": 111098, "na": 1954, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1784, "absent": 109314 } }, "dnssec": { "n": 113052, "na": 0, "states": { "signed_valid": 3540, "signed_broken": 42, "unsigned": 109470 } }, "https": { "n": 113052, "na": 0, "states": { "https": 73450, "redirects": 0, "http_only": 39602 } }, "tls": { "n": 73450, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 68212, "tls12": 5238, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 73450, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 69459, "invalid": 3991 } }, "hsts": { "n": 73450, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 9764, "absent": 63686 } }, "csp": { "n": 37944, "na": 75108, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2385, "weak": 0, "absent": 35559 } }, "clickjacking": { "n": 37944, "na": 75108, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3612, "absent": 34332 } }, "mime_sniffing": { "n": 37944, "na": 75108, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 5305, "absent": 32639 } }, "referrer_policy": { "n": 37944, "na": 75108, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 4138, "absent": 33806 } }, "secure_by_default": { "n": 32011, "na": 81041, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 406, "not_all": 31605 } }, "ipv6": { "n": 113052, "na": 0, "states": { "aaaa": 27243, "none": 85809 } } } }, "tokyo": { "graded": 73348, "checks": { "dmarc": { "n": 73348, "na": 0, "states": { "absent": 50482, "none": 17265, "quarantine": 943, "reject": 4655, "invalid": 3 }, "rua_present": 5353 }, "spf": { "n": 73348, "na": 0, "states": { "absent": 28050, "hardfail": 7362, "softfail": 36160, "neutral": 111, "plus_all": 2, "invalid": 1663 } }, "dkim": { "n": 13740, "na": 59608, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 10434, "none_observed": 3306 } }, "mx": { "n": 73348, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 50603, "absent": 22745 } }, "reverse_dns": { "n": 50534, "na": 22814, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 34615, "none": 15919 } }, "caa": { "n": 72290, "na": 1058, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 929, "absent": 71361 } }, "dnssec": { "n": 73348, "na": 0, "states": { "signed_valid": 169, "signed_broken": 2, "unsigned": 73177 } }, "https": { "n": 73348, "na": 0, "states": { "https": 48855, "redirects": 0, "http_only": 24493 } }, "tls": { "n": 48855, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 41838, "tls12": 7017, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 48855, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 35842, "invalid": 13013 } }, "hsts": { "n": 48855, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5851, "absent": 43004 } }, "csp": { "n": 36254, "na": 37094, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1147, "weak": 0, "absent": 35107 } }, "clickjacking": { "n": 36254, "na": 37094, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2153, "absent": 34101 } }, "mime_sniffing": { "n": 36254, "na": 37094, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4200, "absent": 32054 } }, "referrer_policy": { "n": 36254, "na": 37094, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1084, "absent": 35170 } }, "secure_by_default": { "n": 32705, "na": 40643, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 45, "not_all": 32660 } }, "ipv6": { "n": 73348, "na": 0, "states": { "aaaa": 6136, "none": 67212 } } } }, "tools": { "graded": 28381, "checks": { "dmarc": { "n": 28381, "na": 0, "states": { "absent": 22138, "none": 2789, "quarantine": 1663, "reject": 1788, "invalid": 3 }, "rua_present": 2820 }, "spf": { "n": 28381, "na": 0, "states": { "absent": 16408, "hardfail": 3123, "softfail": 8325, "neutral": 369, "plus_all": 6, "invalid": 150 } }, "dkim": { "n": 3800, "na": 24581, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2022, "none_observed": 1778 } }, "mx": { "n": 28381, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12988, "absent": 15393 } }, "reverse_dns": { "n": 12985, "na": 15396, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 11452, "none": 1533 } }, "caa": { "n": 28208, "na": 173, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1600, "absent": 26608 } }, "dnssec": { "n": 28381, "na": 0, "states": { "signed_valid": 2446, "signed_broken": 17, "unsigned": 25918 } }, "https": { "n": 28381, "na": 0, "states": { "https": 16163, "redirects": 0, "http_only": 12218 } }, "tls": { "n": 16163, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 15617, "tls12": 546, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 16163, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 14778, "invalid": 1385 } }, "hsts": { "n": 16163, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 4657, "absent": 11506 } }, "csp": { "n": 10784, "na": 17597, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1048, "weak": 0, "absent": 9736 } }, "clickjacking": { "n": 10784, "na": 17597, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2357, "absent": 8427 } }, "mime_sniffing": { "n": 10784, "na": 17597, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3226, "absent": 7558 } }, "referrer_policy": { "n": 10784, "na": 17597, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2323, "absent": 8461 } }, "secure_by_default": { "n": 9293, "na": 19088, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 250, "not_all": 9043 } }, "ipv6": { "n": 28381, "na": 0, "states": { "aaaa": 7030, "none": 21351 } } } }, "top": { "graded": 5343770, "checks": { "dmarc": { "n": 5343770, "na": 0, "states": { "absent": 5210695, "none": 46776, "quarantine": 72891, "reject": 13398, "invalid": 10 }, "rua_present": 86750 }, "spf": { "n": 5343770, "na": 0, "states": { "absent": 5084349, "hardfail": 109288, "softfail": 144664, "neutral": 3014, "plus_all": 39, "invalid": 2416 } }, "dkim": { "n": 56025, "na": 5287745, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 47782, "none_observed": 8243 } }, "mx": { "n": 5343770, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 285479, "absent": 5058291 } }, "reverse_dns": { "n": 285013, "na": 5058757, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 188010, "none": 97003 } }, "caa": { "n": 5223836, "na": 119934, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 7715, "absent": 5216121 } }, "dnssec": { "n": 5343770, "na": 0, "states": { "signed_valid": 252957, "signed_broken": 1455, "unsigned": 5089358 } }, "https": { "n": 5343770, "na": 0, "states": { "https": 2490493, "redirects": 0, "http_only": 2853277 } }, "tls": { "n": 2490493, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2383536, "tls12": 106957, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2490493, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2171863, "invalid": 318630 } }, "hsts": { "n": 2490493, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 275167, "absent": 2215326 } }, "csp": { "n": 1369662, "na": 3974108, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 43573, "weak": 0, "absent": 1326089 } }, "clickjacking": { "n": 1369662, "na": 3974108, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 70269, "absent": 1299393 } }, "mime_sniffing": { "n": 1369662, "na": 3974108, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 86562, "absent": 1283100 } }, "referrer_policy": { "n": 1369662, "na": 3974108, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 59253, "absent": 1310409 } }, "secure_by_default": { "n": 986132, "na": 4357638, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 7294, "not_all": 978838 } }, "ipv6": { "n": 5343770, "na": 0, "states": { "aaaa": 689554, "none": 4654216 } } } }, "tours": { "graded": 12259, "checks": { "dmarc": { "n": 12259, "na": 0, "states": { "absent": 9250, "none": 1454, "quarantine": 1046, "reject": 509, "invalid": 0 }, "rua_present": 1383 }, "spf": { "n": 12259, "na": 0, "states": { "absent": 7051, "hardfail": 1633, "softfail": 3402, "neutral": 110, "plus_all": 0, "invalid": 63 } }, "dkim": { "n": 2021, "na": 10238, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1076, "none_observed": 945 } }, "mx": { "n": 12259, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6000, "absent": 6259 } }, "reverse_dns": { "n": 6001, "na": 6258, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4563, "none": 1438 } }, "caa": { "n": 12158, "na": 101, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 319, "absent": 11839 } }, "dnssec": { "n": 12259, "na": 0, "states": { "signed_valid": 606, "signed_broken": 10, "unsigned": 11643 } }, "https": { "n": 12259, "na": 0, "states": { "https": 7077, "redirects": 0, "http_only": 5182 } }, "tls": { "n": 7077, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6829, "tls12": 248, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7077, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6546, "invalid": 531 } }, "hsts": { "n": 7077, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1495, "absent": 5582 } }, "csp": { "n": 5152, "na": 7107, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 552, "weak": 0, "absent": 4600 } }, "clickjacking": { "n": 5152, "na": 7107, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 888, "absent": 4264 } }, "mime_sniffing": { "n": 5152, "na": 7107, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 997, "absent": 4155 } }, "referrer_policy": { "n": 5152, "na": 7107, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 685, "absent": 4467 } }, "secure_by_default": { "n": 4282, "na": 7977, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 84, "not_all": 4198 } }, "ipv6": { "n": 12259, "na": 0, "states": { "aaaa": 2238, "none": 10021 } } } }, "town": { "graded": 6947, "checks": { "dmarc": { "n": 6947, "na": 0, "states": { "absent": 5880, "none": 462, "quarantine": 368, "reject": 237, "invalid": 0 }, "rua_present": 515 }, "spf": { "n": 6947, "na": 0, "states": { "absent": 4122, "hardfail": 717, "softfail": 1969, "neutral": 116, "plus_all": 2, "invalid": 21 } }, "dkim": { "n": 894, "na": 6053, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 477, "none_observed": 417 } }, "mx": { "n": 6947, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3232, "absent": 3715 } }, "reverse_dns": { "n": 3229, "na": 3718, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2710, "none": 519 } }, "caa": { "n": 6882, "na": 65, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 266, "absent": 6616 } }, "dnssec": { "n": 6947, "na": 0, "states": { "signed_valid": 620, "signed_broken": 4, "unsigned": 6323 } }, "https": { "n": 6947, "na": 0, "states": { "https": 3951, "redirects": 0, "http_only": 2996 } }, "tls": { "n": 3951, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3766, "tls12": 185, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3951, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3488, "invalid": 463 } }, "hsts": { "n": 3951, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 834, "absent": 3117 } }, "csp": { "n": 2683, "na": 4264, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 283, "weak": 0, "absent": 2400 } }, "clickjacking": { "n": 2683, "na": 4264, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 516, "absent": 2167 } }, "mime_sniffing": { "n": 2683, "na": 4264, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 602, "absent": 2081 } }, "referrer_policy": { "n": 2683, "na": 4264, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 433, "absent": 2250 } }, "secure_by_default": { "n": 2211, "na": 4736, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 86, "not_all": 2125 } }, "ipv6": { "n": 6947, "na": 0, "states": { "aaaa": 1481, "none": 5466 } } } }, "tr": { "graded": 530094, "checks": { "dmarc": { "n": 530094, "na": 0, "states": { "absent": 324540, "none": 119534, "quarantine": 66170, "reject": 19588, "invalid": 262 }, "rua_present": 50564 }, "spf": { "n": 530094, "na": 0, "states": { "absent": 135323, "hardfail": 131505, "softfail": 238696, "neutral": 3955, "plus_all": 525, "invalid": 20090 } }, "dkim": { "n": 222405, "na": 307689, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 191437, "none_observed": 30968 } }, "mx": { "n": 530094, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 414714, "absent": 115380 } }, "reverse_dns": { "n": 413111, "na": 116983, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 326793, "none": 86318 } }, "caa": { "n": 528569, "na": 1525, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 9593, "absent": 518976 } }, "dnssec": { "n": 530094, "na": 0, "states": { "signed_valid": 1074, "signed_broken": 7, "unsigned": 529013 } }, "https": { "n": 530094, "na": 0, "states": { "https": 477530, "redirects": 0, "http_only": 52564 } }, "tls": { "n": 477530, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 427724, "tls12": 49806, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 477530, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 447259, "invalid": 30271 } }, "hsts": { "n": 477530, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 68123, "absent": 409407 } }, "csp": { "n": 291542, "na": 238552, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 25750, "weak": 0, "absent": 265792 } }, "clickjacking": { "n": 291542, "na": 238552, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 38493, "absent": 253049 } }, "mime_sniffing": { "n": 291542, "na": 238552, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 46793, "absent": 244749 } }, "referrer_policy": { "n": 291542, "na": 238552, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 34012, "absent": 257530 } }, "secure_by_default": { "n": 281554, "na": 248540, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1926, "not_all": 279628 } }, "ipv6": { "n": 530094, "na": 0, "states": { "aaaa": 136724, "none": 393370 } } } }, "trade": { "graded": 23080, "checks": { "dmarc": { "n": 23080, "na": 0, "states": { "absent": 18621, "none": 1998, "quarantine": 1449, "reject": 1012, "invalid": 0 }, "rua_present": 2461 }, "spf": { "n": 23080, "na": 0, "states": { "absent": 13479, "hardfail": 2596, "softfail": 6681, "neutral": 204, "plus_all": 1, "invalid": 119 } }, "dkim": { "n": 3975, "na": 19105, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2541, "none_observed": 1434 } }, "mx": { "n": 23080, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 10289, "absent": 12791 } }, "reverse_dns": { "n": 10284, "na": 12796, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8270, "none": 2014 } }, "caa": { "n": 22865, "na": 215, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 422, "absent": 22443 } }, "dnssec": { "n": 23080, "na": 0, "states": { "signed_valid": 1457, "signed_broken": 8, "unsigned": 21615 } }, "https": { "n": 23080, "na": 0, "states": { "https": 14394, "redirects": 0, "http_only": 8686 } }, "tls": { "n": 14394, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 13940, "tls12": 454, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 14394, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 13185, "invalid": 1209 } }, "hsts": { "n": 14394, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3484, "absent": 10910 } }, "csp": { "n": 9096, "na": 13984, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 896, "weak": 0, "absent": 8200 } }, "clickjacking": { "n": 9096, "na": 13984, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1881, "absent": 7215 } }, "mime_sniffing": { "n": 9096, "na": 13984, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1969, "absent": 7127 } }, "referrer_policy": { "n": 9096, "na": 13984, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1551, "absent": 7545 } }, "secure_by_default": { "n": 7838, "na": 15242, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 321, "not_all": 7517 } }, "ipv6": { "n": 23080, "na": 0, "states": { "aaaa": 5280, "none": 17800 } } } }, "training": { "graded": 20605, "checks": { "dmarc": { "n": 20605, "na": 0, "states": { "absent": 14823, "none": 2641, "quarantine": 1462, "reject": 1677, "invalid": 2 }, "rua_present": 2363 }, "spf": { "n": 20605, "na": 0, "states": { "absent": 11939, "hardfail": 2867, "softfail": 5368, "neutral": 334, "plus_all": 3, "invalid": 94 } }, "dkim": { "n": 4318, "na": 16287, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1643, "none_observed": 2675 } }, "mx": { "n": 20605, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 10672, "absent": 9933 } }, "reverse_dns": { "n": 10674, "na": 9931, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 9386, "none": 1288 } }, "caa": { "n": 20541, "na": 64, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 372, "absent": 20169 } }, "dnssec": { "n": 20605, "na": 0, "states": { "signed_valid": 1418, "signed_broken": 13, "unsigned": 19174 } }, "https": { "n": 20605, "na": 0, "states": { "https": 10134, "redirects": 0, "http_only": 10471 } }, "tls": { "n": 10134, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9687, "tls12": 447, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10134, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8868, "invalid": 1266 } }, "hsts": { "n": 10134, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2430, "absent": 7704 } }, "csp": { "n": 6385, "na": 14220, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 627, "weak": 0, "absent": 5758 } }, "clickjacking": { "n": 6385, "na": 14220, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1174, "absent": 5211 } }, "mime_sniffing": { "n": 6385, "na": 14220, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1208, "absent": 5177 } }, "referrer_policy": { "n": 6385, "na": 14220, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 580, "absent": 5805 } }, "secure_by_default": { "n": 4830, "na": 15775, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 103, "not_all": 4727 } }, "ipv6": { "n": 20605, "na": 0, "states": { "aaaa": 3587, "none": 17018 } } } }, "travel": { "graded": 25583, "checks": { "dmarc": { "n": 25583, "na": 0, "states": { "absent": 17336, "none": 3431, "quarantine": 3192, "reject": 1622, "invalid": 2 }, "rua_present": 5308 }, "spf": { "n": 25583, "na": 0, "states": { "absent": 13325, "hardfail": 3904, "softfail": 7435, "neutral": 449, "plus_all": 5, "invalid": 465 } }, "dkim": { "n": 6428, "na": 19155, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3083, "none_observed": 3345 } }, "mx": { "n": 25583, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 14013, "absent": 11570 } }, "reverse_dns": { "n": 14011, "na": 11572, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 11572, "none": 2439 } }, "caa": { "n": 25410, "na": 173, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 571, "absent": 24839 } }, "dnssec": { "n": 25583, "na": 0, "states": { "signed_valid": 675, "signed_broken": 7, "unsigned": 24901 } }, "https": { "n": 25583, "na": 0, "states": { "https": 14965, "redirects": 0, "http_only": 10618 } }, "tls": { "n": 14965, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 13962, "tls12": 1003, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 14965, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 13077, "invalid": 1888 } }, "hsts": { "n": 14965, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3784, "absent": 11181 } }, "csp": { "n": 9317, "na": 16266, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1215, "weak": 0, "absent": 8102 } }, "clickjacking": { "n": 9317, "na": 16266, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1670, "absent": 7647 } }, "mime_sniffing": { "n": 9317, "na": 16266, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1670, "absent": 7647 } }, "referrer_policy": { "n": 9317, "na": 16266, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1035, "absent": 8282 } }, "secure_by_default": { "n": 7794, "na": 17789, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 116, "not_all": 7678 } }, "ipv6": { "n": 25583, "na": 0, "states": { "aaaa": 4141, "none": 21442 } } } }, "tv": { "graded": 246171, "checks": { "dmarc": { "n": 246171, "na": 0, "states": { "absent": 203312, "none": 20606, "quarantine": 13443, "reject": 8798, "invalid": 12 }, "rua_present": 22623 }, "spf": { "n": 246171, "na": 0, "states": { "absent": 159576, "hardfail": 34853, "softfail": 45507, "neutral": 4848, "plus_all": 30, "invalid": 1357 } }, "dkim": { "n": 57457, "na": 188714, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 18488, "none_observed": 38969 } }, "mx": { "n": 246171, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 116691, "absent": 129480 } }, "reverse_dns": { "n": 116597, "na": 129574, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 93428, "none": 23169 } }, "caa": { "n": 244974, "na": 1197, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2640, "absent": 242334 } }, "dnssec": { "n": 246171, "na": 0, "states": { "signed_valid": 6717, "signed_broken": 46, "unsigned": 239408 } }, "https": { "n": 246171, "na": 0, "states": { "https": 169268, "redirects": 0, "http_only": 76903 } }, "tls": { "n": 169268, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 157511, "tls12": 11757, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 169268, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 157402, "invalid": 11866 } }, "hsts": { "n": 169268, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 27972, "absent": 141296 } }, "csp": { "n": 92842, "na": 153329, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 5181, "weak": 0, "absent": 87661 } }, "clickjacking": { "n": 92842, "na": 153329, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 8088, "absent": 84754 } }, "mime_sniffing": { "n": 92842, "na": 153329, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 10753, "absent": 82089 } }, "referrer_policy": { "n": 92842, "na": 153329, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 7087, "absent": 85755 } }, "secure_by_default": { "n": 87029, "na": 159142, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1156, "not_all": 85873 } }, "ipv6": { "n": 246171, "na": 0, "states": { "aaaa": 42569, "none": 203602 } } } }, "tw": { "graded": 259582, "checks": { "dmarc": { "n": 259582, "na": 0, "states": { "absent": 209248, "none": 28078, "quarantine": 14161, "reject": 8069, "invalid": 26 }, "rua_present": 25162 }, "spf": { "n": 259582, "na": 0, "states": { "absent": 156095, "hardfail": 22468, "softfail": 65835, "neutral": 8831, "plus_all": 29, "invalid": 6324 } }, "dkim": { "n": 72697, "na": 186885, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 39535, "none_observed": 33162 } }, "mx": { "n": 259582, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 129003, "absent": 130579 } }, "reverse_dns": { "n": 128645, "na": 130937, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 109859, "none": 18786 } }, "caa": { "n": 258070, "na": 1512, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3769, "absent": 254301 } }, "dnssec": { "n": 259582, "na": 0, "states": { "signed_valid": 5807, "signed_broken": 261, "unsigned": 253514 } }, "https": { "n": 259582, "na": 0, "states": { "https": 193721, "redirects": 0, "http_only": 65861 } }, "tls": { "n": 193721, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 165072, "tls12": 28649, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 193721, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 168601, "invalid": 25120 } }, "hsts": { "n": 193721, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 39697, "absent": 154024 } }, "csp": { "n": 95949, "na": 163633, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 6348, "weak": 0, "absent": 89601 } }, "clickjacking": { "n": 95949, "na": 163633, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 16728, "absent": 79221 } }, "mime_sniffing": { "n": 95949, "na": 163633, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 18554, "absent": 77395 } }, "referrer_policy": { "n": 95949, "na": 163633, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 8775, "absent": 87174 } }, "secure_by_default": { "n": 90232, "na": 169350, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1664, "not_all": 88568 } }, "ipv6": { "n": 259582, "na": 0, "states": { "aaaa": 43878, "none": 215704 } } } }, "tz": { "graded": 32241, "checks": { "dmarc": { "n": 32241, "na": 0, "states": { "absent": 16859, "none": 11782, "quarantine": 2324, "reject": 1272, "invalid": 4 }, "rua_present": 3415 }, "spf": { "n": 32241, "na": 0, "states": { "absent": 5510, "hardfail": 3385, "softfail": 23056, "neutral": 216, "plus_all": 3, "invalid": 71 } }, "dkim": { "n": 20751, "na": 11490, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 18343, "none_observed": 2408 } }, "mx": { "n": 32241, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 29214, "absent": 3027 } }, "reverse_dns": { "n": 29194, "na": 3047, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 22525, "none": 6669 } }, "caa": { "n": 32103, "na": 138, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 802, "absent": 31301 } }, "dnssec": { "n": 32241, "na": 0, "states": { "signed_valid": 1180, "signed_broken": 5, "unsigned": 31056 } }, "https": { "n": 32241, "na": 0, "states": { "https": 30646, "redirects": 0, "http_only": 1595 } }, "tls": { "n": 30646, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 30135, "tls12": 511, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 30646, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 28904, "invalid": 1742 } }, "hsts": { "n": 30646, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3953, "absent": 26693 } }, "csp": { "n": 22376, "na": 9865, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1506, "weak": 0, "absent": 20870 } }, "clickjacking": { "n": 22376, "na": 9865, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3159, "absent": 19217 } }, "mime_sniffing": { "n": 22376, "na": 9865, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3551, "absent": 18825 } }, "referrer_policy": { "n": 22376, "na": 9865, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1843, "absent": 20533 } }, "secure_by_default": { "n": 22286, "na": 9955, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 129, "not_all": 22157 } }, "ipv6": { "n": 32241, "na": 0, "states": { "aaaa": 4944, "none": 27297 } } } }, "ua": { "graded": 349276, "checks": { "dmarc": { "n": 349276, "na": 0, "states": { "absent": 296501, "none": 37163, "quarantine": 8671, "reject": 6911, "invalid": 30 }, "rua_present": 19332 }, "spf": { "n": 349276, "na": 0, "states": { "absent": 158287, "hardfail": 16970, "softfail": 170060, "neutral": 1866, "plus_all": 85, "invalid": 2008 } }, "dkim": { "n": 72541, "na": 276735, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 51951, "none_observed": 20590 } }, "mx": { "n": 349276, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 252655, "absent": 96621 } }, "reverse_dns": { "n": 252358, "na": 96918, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 222437, "none": 29921 } }, "caa": { "n": 339752, "na": 9524, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3557, "absent": 336195 } }, "dnssec": { "n": 349276, "na": 0, "states": { "signed_valid": 1412, "signed_broken": 8, "unsigned": 347856 } }, "https": { "n": 349276, "na": 0, "states": { "https": 316015, "redirects": 0, "http_only": 33261 } }, "tls": { "n": 316015, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 289244, "tls12": 26771, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 316015, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 286322, "invalid": 29693 } }, "hsts": { "n": 316015, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 69816, "absent": 246199 } }, "csp": { "n": 201836, "na": 147440, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 12443, "weak": 0, "absent": 189393 } }, "clickjacking": { "n": 201836, "na": 147440, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 39058, "absent": 162778 } }, "mime_sniffing": { "n": 201836, "na": 147440, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 37809, "absent": 164027 } }, "referrer_policy": { "n": 201836, "na": 147440, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 10194, "absent": 191642 } }, "secure_by_default": { "n": 194077, "na": 155199, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 914, "not_all": 193163 } }, "ipv6": { "n": 349276, "na": 0, "states": { "aaaa": 150860, "none": 198416 } } } }, "ug": { "graded": 7836, "checks": { "dmarc": { "n": 7836, "na": 0, "states": { "absent": 4062, "none": 2616, "quarantine": 726, "reject": 431, "invalid": 1 }, "rua_present": 1300 }, "spf": { "n": 7836, "na": 0, "states": { "absent": 1620, "hardfail": 1179, "softfail": 4865, "neutral": 116, "plus_all": 5, "invalid": 51 } }, "dkim": { "n": 5036, "na": 2800, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4018, "none_observed": 1018 } }, "mx": { "n": 7836, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6549, "absent": 1287 } }, "reverse_dns": { "n": 6548, "na": 1288, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5050, "none": 1498 } }, "caa": { "n": 7806, "na": 30, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 280, "absent": 7526 } }, "dnssec": { "n": 7836, "na": 0, "states": { "signed_valid": 112, "signed_broken": 0, "unsigned": 7724 } }, "https": { "n": 7836, "na": 0, "states": { "https": 7239, "redirects": 0, "http_only": 597 } }, "tls": { "n": 7239, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7009, "tls12": 230, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7239, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6921, "invalid": 318 } }, "hsts": { "n": 7239, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1181, "absent": 6058 } }, "csp": { "n": 4934, "na": 2902, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 414, "weak": 0, "absent": 4520 } }, "clickjacking": { "n": 4934, "na": 2902, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 935, "absent": 3999 } }, "mime_sniffing": { "n": 4934, "na": 2902, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1032, "absent": 3902 } }, "referrer_policy": { "n": 4934, "na": 2902, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 427, "absent": 4507 } }, "secure_by_default": { "n": 4887, "na": 2949, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 35, "not_all": 4852 } }, "ipv6": { "n": 7836, "na": 0, "states": { "aaaa": 1790, "none": 6046 } } } }, "uk": { "graded": 7204602, "checks": { "dmarc": { "n": 7204602, "na": 0, "states": { "absent": 4815185, "none": 1340896, "quarantine": 612311, "reject": 435358, "invalid": 852 }, "rua_present": 1008233 }, "spf": { "n": 7204602, "na": 0, "states": { "absent": 3354133, "hardfail": 1616493, "softfail": 2132939, "neutral": 77256, "plus_all": 586, "invalid": 23195 } }, "dkim": { "n": 2306528, "na": 4898074, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1037916, "none_observed": 1268612 } }, "mx": { "n": 7204602, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4754653, "absent": 2449949 } }, "reverse_dns": { "n": 4754822, "na": 2449780, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4070331, "none": 684491 } }, "caa": { "n": 7183691, "na": 20911, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 77316, "absent": 7106375 } }, "dnssec": { "n": 7204602, "na": 0, "states": { "signed_valid": 245562, "signed_broken": 913, "unsigned": 6958127 } }, "https": { "n": 7204602, "na": 0, "states": { "https": 5346438, "redirects": 0, "http_only": 1858164 } }, "tls": { "n": 5346438, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5143460, "tls12": 202978, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5346438, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5015554, "invalid": 330884 } }, "hsts": { "n": 5346438, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1274286, "absent": 4072152 } }, "csp": { "n": 2949855, "na": 4254747, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 343474, "weak": 0, "absent": 2606381 } }, "clickjacking": { "n": 2949855, "na": 4254747, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 509776, "absent": 2440079 } }, "mime_sniffing": { "n": 2949855, "na": 4254747, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 625682, "absent": 2324173 } }, "referrer_policy": { "n": 2949855, "na": 4254747, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 251959, "absent": 2697896 } }, "secure_by_default": { "n": 2698210, "na": 4506392, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 27738, "not_all": 2670472 } }, "ipv6": { "n": 7204602, "na": 0, "states": { "aaaa": 1633180, "none": 5571422 } } } }, "university": { "graded": 7196, "checks": { "dmarc": { "n": 7196, "na": 0, "states": { "absent": 5641, "none": 682, "quarantine": 378, "reject": 495, "invalid": 0 }, "rua_present": 752 }, "spf": { "n": 7196, "na": 0, "states": { "absent": 4565, "hardfail": 806, "softfail": 1680, "neutral": 103, "plus_all": 0, "invalid": 42 } }, "dkim": { "n": 1283, "na": 5913, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 535, "none_observed": 748 } }, "mx": { "n": 7196, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3262, "absent": 3934 } }, "reverse_dns": { "n": 3262, "na": 3934, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2694, "none": 568 } }, "caa": { "n": 7012, "na": 184, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 188, "absent": 6824 } }, "dnssec": { "n": 7196, "na": 0, "states": { "signed_valid": 479, "signed_broken": 4, "unsigned": 6713 } }, "https": { "n": 7196, "na": 0, "states": { "https": 3406, "redirects": 0, "http_only": 3790 } }, "tls": { "n": 3406, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3248, "tls12": 158, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 3406, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3000, "invalid": 406 } }, "hsts": { "n": 3406, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 688, "absent": 2718 } }, "csp": { "n": 2281, "na": 4915, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 227, "weak": 0, "absent": 2054 } }, "clickjacking": { "n": 2281, "na": 4915, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 408, "absent": 1873 } }, "mime_sniffing": { "n": 2281, "na": 4915, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 439, "absent": 1842 } }, "referrer_policy": { "n": 2281, "na": 4915, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 196, "absent": 2085 } }, "secure_by_default": { "n": 1696, "na": 5500, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 15, "not_all": 1681 } }, "ipv6": { "n": 7196, "na": 0, "states": { "aaaa": 1082, "none": 6114 } } } }, "uno": { "graded": 22461, "checks": { "dmarc": { "n": 22461, "na": 0, "states": { "absent": 18707, "none": 1904, "quarantine": 1440, "reject": 409, "invalid": 1 }, "rua_present": 1862 }, "spf": { "n": 22461, "na": 0, "states": { "absent": 16100, "hardfail": 1365, "softfail": 4836, "neutral": 74, "plus_all": 9, "invalid": 77 } }, "dkim": { "n": 1729, "na": 20732, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1013, "none_observed": 716 } }, "mx": { "n": 22461, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 7334, "absent": 15127 } }, "reverse_dns": { "n": 7332, "na": 15129, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5668, "none": 1664 } }, "caa": { "n": 22048, "na": 413, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 330, "absent": 21718 } }, "dnssec": { "n": 22461, "na": 0, "states": { "signed_valid": 699, "signed_broken": 34, "unsigned": 21728 } }, "https": { "n": 22461, "na": 0, "states": { "https": 13675, "redirects": 0, "http_only": 8786 } }, "tls": { "n": 13675, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 13113, "tls12": 562, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 13675, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 10622, "invalid": 3053 } }, "hsts": { "n": 13675, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1619, "absent": 12056 } }, "csp": { "n": 8045, "na": 14416, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1388, "weak": 0, "absent": 6657 } }, "clickjacking": { "n": 8045, "na": 14416, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 992, "absent": 7053 } }, "mime_sniffing": { "n": 8045, "na": 14416, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1057, "absent": 6988 } }, "referrer_policy": { "n": 8045, "na": 14416, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 578, "absent": 7467 } }, "secure_by_default": { "n": 7094, "na": 15367, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 60, "not_all": 7034 } }, "ipv6": { "n": 22461, "na": 0, "states": { "aaaa": 6832, "none": 15629 } } } }, "us": { "graded": 1257155, "checks": { "dmarc": { "n": 1257155, "na": 0, "states": { "absent": 995876, "none": 109238, "quarantine": 99392, "reject": 52554, "invalid": 95 }, "rua_present": 156537 }, "spf": { "n": 1257155, "na": 0, "states": { "absent": 668285, "hardfail": 323086, "softfail": 244506, "neutral": 18441, "plus_all": 194, "invalid": 2643 } }, "dkim": { "n": 363979, "na": 893176, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 120516, "none_observed": 243463 } }, "mx": { "n": 1257155, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 729068, "absent": 528087 } }, "reverse_dns": { "n": 728861, "na": 528294, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 475875, "none": 252986 } }, "caa": { "n": 1254435, "na": 2720, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 12179, "absent": 1242256 } }, "dnssec": { "n": 1257155, "na": 0, "states": { "signed_valid": 35210, "signed_broken": 161, "unsigned": 1221784 } }, "https": { "n": 1257155, "na": 0, "states": { "https": 812672, "redirects": 0, "http_only": 444483 } }, "tls": { "n": 812672, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 789515, "tls12": 23157, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 812672, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 773359, "invalid": 39313 } }, "hsts": { "n": 812672, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 142869, "absent": 669803 } }, "csp": { "n": 502579, "na": 754576, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 72301, "weak": 0, "absent": 430278 } }, "clickjacking": { "n": 502579, "na": 754576, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 88544, "absent": 414035 } }, "mime_sniffing": { "n": 502579, "na": 754576, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 69933, "absent": 432646 } }, "referrer_policy": { "n": 502579, "na": 754576, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 32117, "absent": 470462 } }, "secure_by_default": { "n": 485488, "na": 771667, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 4413, "not_all": 481075 } }, "ipv6": { "n": 1257155, "na": 0, "states": { "aaaa": 173300, "none": 1083855 } } } }, "uy": { "graded": 54384, "checks": { "dmarc": { "n": 54384, "na": 0, "states": { "absent": 33143, "none": 16165, "quarantine": 3268, "reject": 1800, "invalid": 8 }, "rua_present": 5569 }, "spf": { "n": 54384, "na": 0, "states": { "absent": 16709, "hardfail": 9774, "softfail": 26982, "neutral": 773, "plus_all": 2, "invalid": 144 } }, "dkim": { "n": 31721, "na": 22663, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 24714, "none_observed": 7007 } }, "mx": { "n": 54384, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 41504, "absent": 12880 } }, "reverse_dns": { "n": 41482, "na": 12902, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 34051, "none": 7431 } }, "caa": { "n": 54258, "na": 126, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1404, "absent": 52854 } }, "dnssec": { "n": 54384, "na": 0, "states": { "signed_valid": 49, "signed_broken": 1, "unsigned": 54334 } }, "https": { "n": 54384, "na": 0, "states": { "https": 49035, "redirects": 0, "http_only": 5349 } }, "tls": { "n": 49035, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 45827, "tls12": 3208, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 49035, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 46323, "invalid": 2712 } }, "hsts": { "n": 49035, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 9380, "absent": 39655 } }, "csp": { "n": 28125, "na": 26259, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 3711, "weak": 0, "absent": 24414 } }, "clickjacking": { "n": 28125, "na": 26259, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3799, "absent": 24326 } }, "mime_sniffing": { "n": 28125, "na": 26259, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 4122, "absent": 24003 } }, "referrer_policy": { "n": 28125, "na": 26259, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2141, "absent": 25984 } }, "secure_by_default": { "n": 27855, "na": 26529, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 223, "not_all": 27632 } }, "ipv6": { "n": 54384, "na": 0, "states": { "aaaa": 10552, "none": 43832 } } } }, "uz": { "graded": 87954, "checks": { "dmarc": { "n": 87954, "na": 0, "states": { "absent": 57510, "none": 25565, "quarantine": 2600, "reject": 2278, "invalid": 1 }, "rua_present": 2954 }, "spf": { "n": 87954, "na": 0, "states": { "absent": 34708, "hardfail": 7698, "softfail": 37906, "neutral": 179, "plus_all": 7, "invalid": 7456 } }, "dkim": { "n": 30064, "na": 57890, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 28202, "none_observed": 1862 } }, "mx": { "n": 87954, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 59125, "absent": 28829 } }, "reverse_dns": { "n": 58925, "na": 29029, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 42912, "none": 16013 } }, "caa": { "n": 87114, "na": 840, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2217, "absent": 84897 } }, "dnssec": { "n": 87954, "na": 0, "states": { "signed_valid": 147, "signed_broken": 7, "unsigned": 87800 } }, "https": { "n": 87954, "na": 0, "states": { "https": 78190, "redirects": 0, "http_only": 9764 } }, "tls": { "n": 78190, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 74616, "tls12": 3574, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 78190, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 62326, "invalid": 15864 } }, "hsts": { "n": 78190, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 21503, "absent": 56687 } }, "csp": { "n": 54583, "na": 33371, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 4335, "weak": 0, "absent": 50248 } }, "clickjacking": { "n": 54583, "na": 33371, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 11187, "absent": 43396 } }, "mime_sniffing": { "n": 54583, "na": 33371, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 15909, "absent": 38674 } }, "referrer_policy": { "n": 54583, "na": 33371, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 5896, "absent": 48687 } }, "secure_by_default": { "n": 53794, "na": 34160, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 667, "not_all": 53127 } }, "ipv6": { "n": 87954, "na": 0, "states": { "aaaa": 11216, "none": 76738 } } } }, "vc": { "graded": 31717, "checks": { "dmarc": { "n": 31717, "na": 0, "states": { "absent": 24263, "none": 2757, "quarantine": 3244, "reject": 1448, "invalid": 5 }, "rua_present": 5280 }, "spf": { "n": 31717, "na": 0, "states": { "absent": 17018, "hardfail": 6672, "softfail": 7481, "neutral": 404, "plus_all": 0, "invalid": 142 } }, "dkim": { "n": 8431, "na": 23286, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3285, "none_observed": 5146 } }, "mx": { "n": 31717, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 16919, "absent": 14798 } }, "reverse_dns": { "n": 16933, "na": 14784, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 11836, "none": 5097 } }, "caa": { "n": 31618, "na": 99, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 540, "absent": 31078 } }, "dnssec": { "n": 31717, "na": 0, "states": { "signed_valid": 454, "signed_broken": 863, "unsigned": 30400 } }, "https": { "n": 31717, "na": 0, "states": { "https": 24048, "redirects": 0, "http_only": 7669 } }, "tls": { "n": 24048, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 23574, "tls12": 474, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 24048, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 23037, "invalid": 1011 } }, "hsts": { "n": 24048, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 7153, "absent": 16895 } }, "csp": { "n": 14400, "na": 17317, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2567, "weak": 0, "absent": 11833 } }, "clickjacking": { "n": 14400, "na": 17317, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3272, "absent": 11128 } }, "mime_sniffing": { "n": 14400, "na": 17317, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3090, "absent": 11310 } }, "referrer_policy": { "n": 14400, "na": 17317, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2411, "absent": 11989 } }, "secure_by_default": { "n": 14002, "na": 17715, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1368, "not_all": 12634 } }, "ipv6": { "n": 31717, "na": 0, "states": { "aaaa": 4178, "none": 27539 } } } }, "ve": { "graded": 11986, "checks": { "dmarc": { "n": 11986, "na": 0, "states": { "absent": 6975, "none": 3055, "quarantine": 792, "reject": 1160, "invalid": 4 }, "rua_present": 1917 }, "spf": { "n": 11986, "na": 0, "states": { "absent": 3566, "hardfail": 2313, "softfail": 5871, "neutral": 158, "plus_all": 11, "invalid": 67 } }, "dkim": { "n": 6264, "na": 5722, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4757, "none_observed": 1507 } }, "mx": { "n": 11986, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9086, "absent": 2900 } }, "reverse_dns": { "n": 9074, "na": 2912, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7521, "none": 1553 } }, "caa": { "n": 11947, "na": 39, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 371, "absent": 11576 } }, "dnssec": { "n": 11986, "na": 0, "states": { "signed_valid": 45, "signed_broken": 3, "unsigned": 11938 } }, "https": { "n": 11986, "na": 0, "states": { "https": 10236, "redirects": 0, "http_only": 1750 } }, "tls": { "n": 10236, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9346, "tls12": 890, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10236, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 9577, "invalid": 659 } }, "hsts": { "n": 10236, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1549, "absent": 8687 } }, "csp": { "n": 6181, "na": 5805, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 482, "weak": 0, "absent": 5699 } }, "clickjacking": { "n": 6181, "na": 5805, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 872, "absent": 5309 } }, "mime_sniffing": { "n": 6181, "na": 5805, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1252, "absent": 4929 } }, "referrer_policy": { "n": 6181, "na": 5805, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 617, "absent": 5564 } }, "secure_by_default": { "n": 6046, "na": 5940, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 48, "not_all": 5998 } }, "ipv6": { "n": 11986, "na": 0, "states": { "aaaa": 2342, "none": 9644 } } } }, "vegas": { "graded": 10636, "checks": { "dmarc": { "n": 10636, "na": 0, "states": { "absent": 8319, "none": 479, "quarantine": 1145, "reject": 693, "invalid": 0 }, "rua_present": 1854 }, "spf": { "n": 10636, "na": 0, "states": { "absent": 7615, "hardfail": 1387, "softfail": 1575, "neutral": 50, "plus_all": 0, "invalid": 9 } }, "dkim": { "n": 2431, "na": 8205, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 552, "none_observed": 1879 } }, "mx": { "n": 10636, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4246, "absent": 6390 } }, "reverse_dns": { "n": 4252, "na": 6384, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3298, "none": 954 } }, "caa": { "n": 10607, "na": 29, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 65, "absent": 10542 } }, "dnssec": { "n": 10636, "na": 0, "states": { "signed_valid": 143, "signed_broken": 3, "unsigned": 10490 } }, "https": { "n": 10636, "na": 0, "states": { "https": 5238, "redirects": 0, "http_only": 5398 } }, "tls": { "n": 5238, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4785, "tls12": 453, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5238, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4905, "invalid": 333 } }, "hsts": { "n": 5238, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 645, "absent": 4593 } }, "csp": { "n": 2455, "na": 8181, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 294, "weak": 0, "absent": 2161 } }, "clickjacking": { "n": 2455, "na": 8181, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 353, "absent": 2102 } }, "mime_sniffing": { "n": 2455, "na": 8181, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 281, "absent": 2174 } }, "referrer_policy": { "n": 2455, "na": 8181, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 159, "absent": 2296 } }, "secure_by_default": { "n": 2020, "na": 8616, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 22, "not_all": 1998 } }, "ipv6": { "n": 10636, "na": 0, "states": { "aaaa": 1085, "none": 9551 } } } }, "ventures": { "graded": 22745, "checks": { "dmarc": { "n": 22745, "na": 0, "states": { "absent": 17288, "none": 1710, "quarantine": 2506, "reject": 1239, "invalid": 2 }, "rua_present": 3635 }, "spf": { "n": 22745, "na": 0, "states": { "absent": 12482, "hardfail": 3315, "softfail": 6639, "neutral": 241, "plus_all": 1, "invalid": 67 } }, "dkim": { "n": 6998, "na": 15747, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2567, "none_observed": 4431 } }, "mx": { "n": 22745, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12562, "absent": 10183 } }, "reverse_dns": { "n": 12565, "na": 10180, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 10892, "none": 1673 } }, "caa": { "n": 22660, "na": 85, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 607, "absent": 22053 } }, "dnssec": { "n": 22745, "na": 0, "states": { "signed_valid": 1734, "signed_broken": 14, "unsigned": 20997 } }, "https": { "n": 22745, "na": 0, "states": { "https": 10838, "redirects": 0, "http_only": 11907 } }, "tls": { "n": 10838, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 10583, "tls12": 255, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10838, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 10028, "invalid": 810 } }, "hsts": { "n": 10838, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3565, "absent": 7273 } }, "csp": { "n": 7442, "na": 15303, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1263, "weak": 0, "absent": 6179 } }, "clickjacking": { "n": 7442, "na": 15303, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1898, "absent": 5544 } }, "mime_sniffing": { "n": 7442, "na": 15303, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1703, "absent": 5739 } }, "referrer_policy": { "n": 7442, "na": 15303, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 924, "absent": 6518 } }, "secure_by_default": { "n": 6266, "na": 16479, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 123, "not_all": 6143 } }, "ipv6": { "n": 22745, "na": 0, "states": { "aaaa": 2700, "none": 20045 } } } }, "vet": { "graded": 11044, "checks": { "dmarc": { "n": 11044, "na": 0, "states": { "absent": 7998, "none": 1345, "quarantine": 868, "reject": 833, "invalid": 0 }, "rua_present": 1516 }, "spf": { "n": 11044, "na": 0, "states": { "absent": 6088, "hardfail": 1706, "softfail": 2922, "neutral": 202, "plus_all": 3, "invalid": 123 } }, "dkim": { "n": 3081, "na": 7963, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1371, "none_observed": 1710 } }, "mx": { "n": 11044, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5925, "absent": 5119 } }, "reverse_dns": { "n": 5922, "na": 5122, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5409, "none": 513 } }, "caa": { "n": 10992, "na": 52, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 122, "absent": 10870 } }, "dnssec": { "n": 11044, "na": 0, "states": { "signed_valid": 973, "signed_broken": 10, "unsigned": 10061 } }, "https": { "n": 11044, "na": 0, "states": { "https": 6276, "redirects": 0, "http_only": 4768 } }, "tls": { "n": 6276, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5973, "tls12": 303, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6276, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5739, "invalid": 537 } }, "hsts": { "n": 6276, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1787, "absent": 4489 } }, "csp": { "n": 3537, "na": 7507, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 581, "weak": 0, "absent": 2956 } }, "clickjacking": { "n": 3537, "na": 7507, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1031, "absent": 2506 } }, "mime_sniffing": { "n": 3537, "na": 7507, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 896, "absent": 2641 } }, "referrer_policy": { "n": 3537, "na": 7507, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 398, "absent": 3139 } }, "secure_by_default": { "n": 2903, "na": 8141, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 50, "not_all": 2853 } }, "ipv6": { "n": 11044, "na": 0, "states": { "aaaa": 1729, "none": 9315 } } } }, "video": { "graded": 23114, "checks": { "dmarc": { "n": 23114, "na": 0, "states": { "absent": 18819, "none": 1884, "quarantine": 1017, "reject": 1393, "invalid": 1 }, "rua_present": 2006 }, "spf": { "n": 23114, "na": 0, "states": { "absent": 14558, "hardfail": 2808, "softfail": 5395, "neutral": 258, "plus_all": 1, "invalid": 94 } }, "dkim": { "n": 3185, "na": 19929, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1548, "none_observed": 1637 } }, "mx": { "n": 23114, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 9682, "absent": 13432 } }, "reverse_dns": { "n": 9689, "na": 13425, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8075, "none": 1614 } }, "caa": { "n": 22901, "na": 213, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 502, "absent": 22399 } }, "dnssec": { "n": 23114, "na": 0, "states": { "signed_valid": 1919, "signed_broken": 17, "unsigned": 21178 } }, "https": { "n": 23114, "na": 0, "states": { "https": 13031, "redirects": 0, "http_only": 10083 } }, "tls": { "n": 13031, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 12488, "tls12": 543, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 13031, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 11898, "invalid": 1133 } }, "hsts": { "n": 13031, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3347, "absent": 9684 } }, "csp": { "n": 8165, "na": 14949, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1175, "weak": 0, "absent": 6990 } }, "clickjacking": { "n": 8165, "na": 14949, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1924, "absent": 6241 } }, "mime_sniffing": { "n": 8165, "na": 14949, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2049, "absent": 6116 } }, "referrer_policy": { "n": 8165, "na": 14949, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1298, "absent": 6867 } }, "secure_by_default": { "n": 6595, "na": 16519, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 162, "not_all": 6433 } }, "ipv6": { "n": 23114, "na": 0, "states": { "aaaa": 5052, "none": 18062 } } } }, "villas": { "graded": 6103, "checks": { "dmarc": { "n": 6103, "na": 0, "states": { "absent": 5641, "none": 200, "quarantine": 145, "reject": 116, "invalid": 1 }, "rua_present": 201 }, "spf": { "n": 6103, "na": 0, "states": { "absent": 5290, "hardfail": 344, "softfail": 432, "neutral": 24, "plus_all": 0, "invalid": 13 } }, "dkim": { "n": 349, "na": 5754, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 153, "none_observed": 196 } }, "mx": { "n": 6103, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1061, "absent": 5042 } }, "reverse_dns": { "n": 1061, "na": 5042, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 931, "none": 130 } }, "caa": { "n": 6046, "na": 57, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 27, "absent": 6019 } }, "dnssec": { "n": 6103, "na": 0, "states": { "signed_valid": 107, "signed_broken": 0, "unsigned": 5996 } }, "https": { "n": 6103, "na": 0, "states": { "https": 4243, "redirects": 0, "http_only": 1860 } }, "tls": { "n": 4243, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 3946, "tls12": 297, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 4243, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 3148, "invalid": 1095 } }, "hsts": { "n": 4243, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 686, "absent": 3557 } }, "csp": { "n": 2296, "na": 3807, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 127, "weak": 0, "absent": 2169 } }, "clickjacking": { "n": 2296, "na": 3807, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 150, "absent": 2146 } }, "mime_sniffing": { "n": 2296, "na": 3807, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 148, "absent": 2148 } }, "referrer_policy": { "n": 2296, "na": 3807, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 106, "absent": 2190 } }, "secure_by_default": { "n": 1727, "na": 4376, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 4, "not_all": 1723 } }, "ipv6": { "n": 6103, "na": 0, "states": { "aaaa": 483, "none": 5620 } } } }, "vin": { "graded": 14628, "checks": { "dmarc": { "n": 14628, "na": 0, "states": { "absent": 13683, "none": 398, "quarantine": 297, "reject": 249, "invalid": 1 }, "rua_present": 491 }, "spf": { "n": 14628, "na": 0, "states": { "absent": 12362, "hardfail": 752, "softfail": 1299, "neutral": 171, "plus_all": 2, "invalid": 42 } }, "dkim": { "n": 739, "na": 13889, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 347, "none_observed": 392 } }, "mx": { "n": 14628, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3151, "absent": 11477 } }, "reverse_dns": { "n": 3151, "na": 11477, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2545, "none": 606 } }, "caa": { "n": 14528, "na": 100, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 179, "absent": 14349 } }, "dnssec": { "n": 14628, "na": 0, "states": { "signed_valid": 752, "signed_broken": 2, "unsigned": 13874 } }, "https": { "n": 14628, "na": 0, "states": { "https": 10785, "redirects": 0, "http_only": 3843 } }, "tls": { "n": 10785, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 10469, "tls12": 316, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10785, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 10177, "invalid": 608 } }, "hsts": { "n": 10785, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1358, "absent": 9427 } }, "csp": { "n": 9195, "na": 5433, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 612, "weak": 0, "absent": 8583 } }, "clickjacking": { "n": 9195, "na": 5433, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 510, "absent": 8685 } }, "mime_sniffing": { "n": 9195, "na": 5433, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 539, "absent": 8656 } }, "referrer_policy": { "n": 9195, "na": 5433, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 374, "absent": 8821 } }, "secure_by_default": { "n": 8454, "na": 6174, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 38, "not_all": 8416 } }, "ipv6": { "n": 14628, "na": 0, "states": { "aaaa": 8307, "none": 6321 } } } }, "vip": { "graded": 1637496, "checks": { "dmarc": { "n": 1637496, "na": 0, "states": { "absent": 1330972, "none": 17657, "quarantine": 282161, "reject": 6695, "invalid": 11 }, "rua_present": 294984 }, "spf": { "n": 1637496, "na": 0, "states": { "absent": 1537899, "hardfail": 51581, "softfail": 46756, "neutral": 652, "plus_all": 7, "invalid": 601 } }, "dkim": { "n": 20965, "na": 1616531, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 13606, "none_observed": 7359 } }, "mx": { "n": 1637496, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 108562, "absent": 1528934 } }, "reverse_dns": { "n": 108499, "na": 1528997, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 80008, "none": 28491 } }, "caa": { "n": 1604778, "na": 32718, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 4301, "absent": 1600477 } }, "dnssec": { "n": 1637496, "na": 0, "states": { "signed_valid": 16769, "signed_broken": 307, "unsigned": 1620420 } }, "https": { "n": 1637496, "na": 0, "states": { "https": 741605, "redirects": 0, "http_only": 895891 } }, "tls": { "n": 741605, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 676245, "tls12": 65360, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 741605, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 592733, "invalid": 148872 } }, "hsts": { "n": 741605, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 157935, "absent": 583670 } }, "csp": { "n": 412722, "na": 1224774, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 17273, "weak": 0, "absent": 395449 } }, "clickjacking": { "n": 412722, "na": 1224774, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 30868, "absent": 381854 } }, "mime_sniffing": { "n": 412722, "na": 1224774, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 33664, "absent": 379058 } }, "referrer_policy": { "n": 412722, "na": 1224774, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 22925, "absent": 389797 } }, "secure_by_default": { "n": 354998, "na": 1282498, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 1189, "not_all": 353809 } }, "ipv6": { "n": 1637496, "na": 0, "states": { "aaaa": 237500, "none": 1399996 } } } }, "vision": { "graded": 10675, "checks": { "dmarc": { "n": 10675, "na": 0, "states": { "absent": 8010, "none": 1425, "quarantine": 544, "reject": 695, "invalid": 1 }, "rua_present": 879 }, "spf": { "n": 10675, "na": 0, "states": { "absent": 5693, "hardfail": 1681, "softfail": 2989, "neutral": 213, "plus_all": 2, "invalid": 97 } }, "dkim": { "n": 2287, "na": 8388, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1108, "none_observed": 1179 } }, "mx": { "n": 10675, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6079, "absent": 4596 } }, "reverse_dns": { "n": 6079, "na": 4596, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 5116, "none": 963 } }, "caa": { "n": 10582, "na": 93, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 317, "absent": 10265 } }, "dnssec": { "n": 10675, "na": 0, "states": { "signed_valid": 878, "signed_broken": 10, "unsigned": 9787 } }, "https": { "n": 10675, "na": 0, "states": { "https": 6514, "redirects": 0, "http_only": 4161 } }, "tls": { "n": 6514, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6208, "tls12": 306, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6514, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5764, "invalid": 750 } }, "hsts": { "n": 6514, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1758, "absent": 4756 } }, "csp": { "n": 4442, "na": 6233, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 477, "weak": 0, "absent": 3965 } }, "clickjacking": { "n": 4442, "na": 6233, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 775, "absent": 3667 } }, "mime_sniffing": { "n": 4442, "na": 6233, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 831, "absent": 3611 } }, "referrer_policy": { "n": 4442, "na": 6233, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 434, "absent": 4008 } }, "secure_by_default": { "n": 3671, "na": 7004, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 81, "not_all": 3590 } }, "ipv6": { "n": 10675, "na": 0, "states": { "aaaa": 2219, "none": 8456 } } } }, "vn": { "graded": 386940, "checks": { "dmarc": { "n": 386940, "na": 0, "states": { "absent": 350163, "none": 21436, "quarantine": 6179, "reject": 9136, "invalid": 26 }, "rua_present": 17217 }, "spf": { "n": 386940, "na": 0, "states": { "absent": 243882, "hardfail": 39642, "softfail": 98762, "neutral": 2841, "plus_all": 25, "invalid": 1788 } }, "dkim": { "n": 79814, "na": 307126, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 39540, "none_observed": 40274 } }, "mx": { "n": 386940, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 204198, "absent": 182742 } }, "reverse_dns": { "n": 201189, "na": 185751, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 148149, "none": 53040 } }, "caa": { "n": 385596, "na": 1344, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3270, "absent": 382326 } }, "dnssec": { "n": 386940, "na": 0, "states": { "signed_valid": 9248, "signed_broken": 84, "unsigned": 377608 } }, "https": { "n": 386940, "na": 0, "states": { "https": 323140, "redirects": 0, "http_only": 63800 } }, "tls": { "n": 323140, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 270027, "tls12": 53113, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 323140, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 282320, "invalid": 40820 } }, "hsts": { "n": 323140, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 52995, "absent": 270145 } }, "csp": { "n": 227661, "na": 159279, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 22926, "weak": 0, "absent": 204735 } }, "clickjacking": { "n": 227661, "na": 159279, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 40272, "absent": 187389 } }, "mime_sniffing": { "n": 227661, "na": 159279, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 41549, "absent": 186112 } }, "referrer_policy": { "n": 227661, "na": 159279, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 21053, "absent": 206608 } }, "secure_by_default": { "n": 221747, "na": 165193, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 2303, "not_all": 219444 } }, "ipv6": { "n": 386940, "na": 0, "states": { "aaaa": 62491, "none": 324449 } } } }, "vote": { "graded": 5722, "checks": { "dmarc": { "n": 5722, "na": 0, "states": { "absent": 4026, "none": 411, "quarantine": 991, "reject": 294, "invalid": 0 }, "rua_present": 1262 }, "spf": { "n": 5722, "na": 0, "states": { "absent": 3845, "hardfail": 550, "softfail": 1281, "neutral": 41, "plus_all": 1, "invalid": 4 } }, "dkim": { "n": 764, "na": 4958, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 346, "none_observed": 418 } }, "mx": { "n": 5722, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2049, "absent": 3673 } }, "reverse_dns": { "n": 2050, "na": 3672, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1770, "none": 280 } }, "caa": { "n": 5678, "na": 44, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 319, "absent": 5359 } }, "dnssec": { "n": 5722, "na": 0, "states": { "signed_valid": 402, "signed_broken": 2, "unsigned": 5318 } }, "https": { "n": 5722, "na": 0, "states": { "https": 2749, "redirects": 0, "http_only": 2973 } }, "tls": { "n": 2749, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 2667, "tls12": 82, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 2749, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 2598, "invalid": 151 } }, "hsts": { "n": 2749, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 740, "absent": 2009 } }, "csp": { "n": 1686, "na": 4036, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 314, "weak": 0, "absent": 1372 } }, "clickjacking": { "n": 1686, "na": 4036, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 462, "absent": 1224 } }, "mime_sniffing": { "n": 1686, "na": 4036, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 390, "absent": 1296 } }, "referrer_policy": { "n": 1686, "na": 4036, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 272, "absent": 1414 } }, "secure_by_default": { "n": 1337, "na": 4385, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 34, "not_all": 1303 } }, "ipv6": { "n": 5722, "na": 0, "states": { "aaaa": 903, "none": 4819 } } } }, "vu": { "graded": 38682, "checks": { "dmarc": { "n": 38682, "na": 0, "states": { "absent": 36947, "none": 608, "quarantine": 934, "reject": 193, "invalid": 0 }, "rua_present": 1454 }, "spf": { "n": 38682, "na": 0, "states": { "absent": 36914, "hardfail": 708, "softfail": 1016, "neutral": 32, "plus_all": 0, "invalid": 12 } }, "dkim": { "n": 1190, "na": 37492, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 816, "none_observed": 374 } }, "mx": { "n": 38682, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 1900, "absent": 36782 } }, "reverse_dns": { "n": 1898, "na": 36784, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1687, "none": 211 } }, "caa": { "n": 38648, "na": 34, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 22, "absent": 38626 } }, "dnssec": { "n": 38682, "na": 0, "states": { "signed_valid": 56, "signed_broken": 0, "unsigned": 38626 } }, "https": { "n": 38682, "na": 0, "states": { "https": 37011, "redirects": 0, "http_only": 1671 } }, "tls": { "n": 37011, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 36722, "tls12": 289, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 37011, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 36364, "invalid": 647 } }, "hsts": { "n": 37011, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 11180, "absent": 25831 } }, "csp": { "n": 20552, "na": 18130, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 125, "weak": 0, "absent": 20427 } }, "clickjacking": { "n": 20552, "na": 18130, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1123, "absent": 19429 } }, "mime_sniffing": { "n": 20552, "na": 18130, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1555, "absent": 18997 } }, "referrer_policy": { "n": 20552, "na": 18130, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1452, "absent": 19100 } }, "secure_by_default": { "n": 20166, "na": 18516, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 15, "not_all": 20151 } }, "ipv6": { "n": 38682, "na": 0, "states": { "aaaa": 25435, "none": 13247 } } } }, "wales": { "graded": 12003, "checks": { "dmarc": { "n": 12003, "na": 0, "states": { "absent": 7811, "none": 2727, "quarantine": 817, "reject": 645, "invalid": 3 }, "rua_present": 1435 }, "spf": { "n": 12003, "na": 0, "states": { "absent": 5913, "hardfail": 2014, "softfail": 3916, "neutral": 116, "plus_all": 0, "invalid": 44 } }, "dkim": { "n": 2736, "na": 9267, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1321, "none_observed": 1415 } }, "mx": { "n": 12003, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8330, "absent": 3673 } }, "reverse_dns": { "n": 8325, "na": 3678, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7759, "none": 566 } }, "caa": { "n": 11975, "na": 28, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 116, "absent": 11859 } }, "dnssec": { "n": 12003, "na": 0, "states": { "signed_valid": 299, "signed_broken": 1, "unsigned": 11703 } }, "https": { "n": 12003, "na": 0, "states": { "https": 7125, "redirects": 0, "http_only": 4878 } }, "tls": { "n": 7125, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6857, "tls12": 268, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7125, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6417, "invalid": 708 } }, "hsts": { "n": 7125, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1340, "absent": 5785 } }, "csp": { "n": 5286, "na": 6717, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 461, "weak": 0, "absent": 4825 } }, "clickjacking": { "n": 5286, "na": 6717, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 698, "absent": 4588 } }, "mime_sniffing": { "n": 5286, "na": 6717, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 592, "absent": 4694 } }, "referrer_policy": { "n": 5286, "na": 6717, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 363, "absent": 4923 } }, "secure_by_default": { "n": 3368, "na": 8635, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 28, "not_all": 3340 } }, "ipv6": { "n": 12003, "na": 0, "states": { "aaaa": 3117, "none": 8886 } } } }, "wang": { "graded": 30480, "checks": { "dmarc": { "n": 30480, "na": 0, "states": { "absent": 29710, "none": 298, "quarantine": 199, "reject": 273, "invalid": 0 }, "rua_present": 512 }, "spf": { "n": 30480, "na": 0, "states": { "absent": 27498, "hardfail": 1517, "softfail": 1368, "neutral": 75, "plus_all": 0, "invalid": 22 } }, "dkim": { "n": 606, "na": 29874, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 434, "none_observed": 172 } }, "mx": { "n": 30480, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3722, "absent": 26758 } }, "reverse_dns": { "n": 3720, "na": 26760, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1647, "none": 2073 } }, "caa": { "n": 28492, "na": 1988, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 139, "absent": 28353 } }, "dnssec": { "n": 30480, "na": 0, "states": { "signed_valid": 151, "signed_broken": 3, "unsigned": 30326 } }, "https": { "n": 30480, "na": 0, "states": { "https": 10745, "redirects": 0, "http_only": 19735 } }, "tls": { "n": 10745, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 9560, "tls12": 1185, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 10745, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7228, "invalid": 3517 } }, "hsts": { "n": 10745, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2764, "absent": 7981 } }, "csp": { "n": 8792, "na": 21688, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 217, "weak": 0, "absent": 8575 } }, "clickjacking": { "n": 8792, "na": 21688, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 789, "absent": 8003 } }, "mime_sniffing": { "n": 8792, "na": 21688, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 915, "absent": 7877 } }, "referrer_policy": { "n": 8792, "na": 21688, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 660, "absent": 8132 } }, "secure_by_default": { "n": 5801, "na": 24679, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 66, "not_all": 5735 } }, "ipv6": { "n": 30480, "na": 0, "states": { "aaaa": 2225, "none": 28255 } } } }, "watch": { "graded": 13231, "checks": { "dmarc": { "n": 13231, "na": 0, "states": { "absent": 10679, "none": 974, "quarantine": 817, "reject": 760, "invalid": 1 }, "rua_present": 1246 }, "spf": { "n": 13231, "na": 0, "states": { "absent": 8062, "hardfail": 1756, "softfail": 3231, "neutral": 116, "plus_all": 1, "invalid": 65 } }, "dkim": { "n": 1319, "na": 11912, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 716, "none_observed": 603 } }, "mx": { "n": 13231, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5604, "absent": 7627 } }, "reverse_dns": { "n": 5613, "na": 7618, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 4335, "none": 1278 } }, "caa": { "n": 13136, "na": 95, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 379, "absent": 12757 } }, "dnssec": { "n": 13231, "na": 0, "states": { "signed_valid": 1201, "signed_broken": 18, "unsigned": 12012 } }, "https": { "n": 13231, "na": 0, "states": { "https": 8027, "redirects": 0, "http_only": 5204 } }, "tls": { "n": 8027, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7666, "tls12": 361, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 8027, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7257, "invalid": 770 } }, "hsts": { "n": 8027, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2086, "absent": 5941 } }, "csp": { "n": 5318, "na": 7913, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 875, "weak": 0, "absent": 4443 } }, "clickjacking": { "n": 5318, "na": 7913, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1311, "absent": 4007 } }, "mime_sniffing": { "n": 5318, "na": 7913, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1425, "absent": 3893 } }, "referrer_policy": { "n": 5318, "na": 7913, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1099, "absent": 4219 } }, "secure_by_default": { "n": 4419, "na": 8812, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 168, "not_all": 4251 } }, "ipv6": { "n": 13231, "na": 0, "states": { "aaaa": 3356, "none": 9875 } } } }, "website": { "graded": 211984, "checks": { "dmarc": { "n": 211984, "na": 0, "states": { "absent": 166369, "none": 25412, "quarantine": 14109, "reject": 6091, "invalid": 3 }, "rua_present": 19103 }, "spf": { "n": 211984, "na": 0, "states": { "absent": 131211, "hardfail": 14087, "softfail": 62614, "neutral": 2150, "plus_all": 17, "invalid": 1905 } }, "dkim": { "n": 24724, "na": 187260, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 18642, "none_observed": 6082 } }, "mx": { "n": 211984, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 89923, "absent": 122061 } }, "reverse_dns": { "n": 89872, "na": 122112, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 69600, "none": 20272 } }, "caa": { "n": 209253, "na": 2731, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3334, "absent": 205919 } }, "dnssec": { "n": 211984, "na": 0, "states": { "signed_valid": 7749, "signed_broken": 363, "unsigned": 203872 } }, "https": { "n": 211984, "na": 0, "states": { "https": 136313, "redirects": 0, "http_only": 75671 } }, "tls": { "n": 136313, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 130334, "tls12": 5979, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 136313, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 118012, "invalid": 18301 } }, "hsts": { "n": 136313, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 18721, "absent": 117592 } }, "csp": { "n": 91441, "na": 120543, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 9971, "weak": 0, "absent": 81470 } }, "clickjacking": { "n": 91441, "na": 120543, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 12356, "absent": 79085 } }, "mime_sniffing": { "n": 91441, "na": 120543, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 13447, "absent": 77994 } }, "referrer_policy": { "n": 91441, "na": 120543, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 8385, "absent": 83056 } }, "secure_by_default": { "n": 73870, "na": 138114, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 500, "not_all": 73370 } }, "ipv6": { "n": 211984, "na": 0, "states": { "aaaa": 70463, "none": 141521 } } } }, "wedding": { "graded": 11780, "checks": { "dmarc": { "n": 11780, "na": 0, "states": { "absent": 9496, "none": 925, "quarantine": 689, "reject": 670, "invalid": 0 }, "rua_present": 984 }, "spf": { "n": 11780, "na": 0, "states": { "absent": 7273, "hardfail": 2109, "softfail": 2229, "neutral": 139, "plus_all": 0, "invalid": 30 } }, "dkim": { "n": 1276, "na": 10504, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 633, "none_observed": 643 } }, "mx": { "n": 11780, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3868, "absent": 7912 } }, "reverse_dns": { "n": 3868, "na": 7912, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3319, "none": 549 } }, "caa": { "n": 11725, "na": 55, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1183, "absent": 10542 } }, "dnssec": { "n": 11780, "na": 0, "states": { "signed_valid": 561, "signed_broken": 5, "unsigned": 11214 } }, "https": { "n": 11780, "na": 0, "states": { "https": 9170, "redirects": 0, "http_only": 2610 } }, "tls": { "n": 9170, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 8994, "tls12": 176, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 9170, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 8673, "invalid": 497 } }, "hsts": { "n": 9170, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2539, "absent": 6631 } }, "csp": { "n": 4385, "na": 7395, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 515, "weak": 0, "absent": 3870 } }, "clickjacking": { "n": 4385, "na": 7395, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 985, "absent": 3400 } }, "mime_sniffing": { "n": 4385, "na": 7395, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1189, "absent": 3196 } }, "referrer_policy": { "n": 4385, "na": 7395, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 860, "absent": 3525 } }, "secure_by_default": { "n": 4031, "na": 7749, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 324, "not_all": 3707 } }, "ipv6": { "n": 11780, "na": 0, "states": { "aaaa": 2881, "none": 8899 } } } }, "wien": { "graded": 13026, "checks": { "dmarc": { "n": 13026, "na": 0, "states": { "absent": 9799, "none": 2371, "quarantine": 333, "reject": 523, "invalid": 0 }, "rua_present": 705 }, "spf": { "n": 13026, "na": 0, "states": { "absent": 6489, "hardfail": 3368, "softfail": 2688, "neutral": 401, "plus_all": 2, "invalid": 78 } }, "dkim": { "n": 1285, "na": 11741, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 742, "none_observed": 543 } }, "mx": { "n": 13026, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 10382, "absent": 2644 } }, "reverse_dns": { "n": 10380, "na": 2646, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 8717, "none": 1663 } }, "caa": { "n": 12984, "na": 42, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 363, "absent": 12621 } }, "dnssec": { "n": 13026, "na": 0, "states": { "signed_valid": 373, "signed_broken": 1, "unsigned": 12652 } }, "https": { "n": 13026, "na": 0, "states": { "https": 6969, "redirects": 0, "http_only": 6057 } }, "tls": { "n": 6969, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6353, "tls12": 616, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6969, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4518, "invalid": 2451 } }, "hsts": { "n": 6969, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1684, "absent": 5285 } }, "csp": { "n": 3827, "na": 9199, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 107, "weak": 0, "absent": 3720 } }, "clickjacking": { "n": 3827, "na": 9199, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 289, "absent": 3538 } }, "mime_sniffing": { "n": 3827, "na": 9199, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 376, "absent": 3451 } }, "referrer_policy": { "n": 3827, "na": 9199, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 175, "absent": 3652 } }, "secure_by_default": { "n": 2310, "na": 10716, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 16, "not_all": 2294 } }, "ipv6": { "n": 13026, "na": 0, "states": { "aaaa": 2103, "none": 10923 } } } }, "wiki": { "graded": 115515, "checks": { "dmarc": { "n": 115515, "na": 0, "states": { "absent": 109519, "none": 2675, "quarantine": 1863, "reject": 1458, "invalid": 0 }, "rua_present": 2944 }, "spf": { "n": 115515, "na": 0, "states": { "absent": 97301, "hardfail": 6135, "softfail": 11667, "neutral": 282, "plus_all": 6, "invalid": 124 } }, "dkim": { "n": 3360, "na": 112155, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2290, "none_observed": 1070 } }, "mx": { "n": 115515, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 19290, "absent": 96225 } }, "reverse_dns": { "n": 19287, "na": 96228, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 16428, "none": 2859 } }, "caa": { "n": 113979, "na": 1536, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1133, "absent": 112846 } }, "dnssec": { "n": 115515, "na": 0, "states": { "signed_valid": 8012, "signed_broken": 38, "unsigned": 107465 } }, "https": { "n": 115515, "na": 0, "states": { "https": 80494, "redirects": 0, "http_only": 35021 } }, "tls": { "n": 80494, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 79639, "tls12": 855, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 80494, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 74140, "invalid": 6354 } }, "hsts": { "n": 80494, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5674, "absent": 74820 } }, "csp": { "n": 65031, "na": 50484, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 2587, "weak": 0, "absent": 62444 } }, "clickjacking": { "n": 65031, "na": 50484, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 5210, "absent": 59821 } }, "mime_sniffing": { "n": 65031, "na": 50484, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 7714, "absent": 57317 } }, "referrer_policy": { "n": 65031, "na": 50484, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 6631, "absent": 58400 } }, "secure_by_default": { "n": 59553, "na": 55962, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 186, "not_all": 59367 } }, "ipv6": { "n": 115515, "na": 0, "states": { "aaaa": 48768, "none": 66747 } } } }, "win": { "graded": 148127, "checks": { "dmarc": { "n": 148127, "na": 0, "states": { "absent": 137547, "none": 3605, "quarantine": 4126, "reject": 2847, "invalid": 2 }, "rua_present": 6410 }, "spf": { "n": 148127, "na": 0, "states": { "absent": 129432, "hardfail": 4483, "softfail": 13613, "neutral": 331, "plus_all": 15, "invalid": 253 } }, "dkim": { "n": 4884, "na": 143243, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3284, "none_observed": 1600 } }, "mx": { "n": 148127, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 19546, "absent": 128581 } }, "reverse_dns": { "n": 19523, "na": 128604, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 16216, "none": 3307 } }, "caa": { "n": 147202, "na": 925, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 661, "absent": 146541 } }, "dnssec": { "n": 148127, "na": 0, "states": { "signed_valid": 9663, "signed_broken": 26, "unsigned": 138438 } }, "https": { "n": 148127, "na": 0, "states": { "https": 104397, "redirects": 0, "http_only": 43730 } }, "tls": { "n": 104397, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 99229, "tls12": 5168, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 104397, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 97073, "invalid": 7324 } }, "hsts": { "n": 104397, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 13879, "absent": 90518 } }, "csp": { "n": 79553, "na": 68574, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 4663, "weak": 0, "absent": 74890 } }, "clickjacking": { "n": 79553, "na": 68574, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 6549, "absent": 73004 } }, "mime_sniffing": { "n": 79553, "na": 68574, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 8925, "absent": 70628 } }, "referrer_policy": { "n": 79553, "na": 68574, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 7718, "absent": 71835 } }, "secure_by_default": { "n": 73244, "na": 74883, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 413, "not_all": 72831 } }, "ipv6": { "n": 148127, "na": 0, "states": { "aaaa": 76272, "none": 71855 } } } }, "wine": { "graded": 22434, "checks": { "dmarc": { "n": 22434, "na": 0, "states": { "absent": 18883, "none": 1821, "quarantine": 1013, "reject": 717, "invalid": 0 }, "rua_present": 1524 }, "spf": { "n": 22434, "na": 0, "states": { "absent": 15696, "hardfail": 2105, "softfail": 4161, "neutral": 347, "plus_all": 1, "invalid": 124 } }, "dkim": { "n": 3023, "na": 19411, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 1212, "none_observed": 1811 } }, "mx": { "n": 22434, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8786, "absent": 13648 } }, "reverse_dns": { "n": 8780, "na": 13654, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 7662, "none": 1118 } }, "caa": { "n": 22296, "na": 138, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 195, "absent": 22101 } }, "dnssec": { "n": 22434, "na": 0, "states": { "signed_valid": 1187, "signed_broken": 12, "unsigned": 21235 } }, "https": { "n": 22434, "na": 0, "states": { "https": 14711, "redirects": 0, "http_only": 7723 } }, "tls": { "n": 14711, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 14022, "tls12": 689, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 14711, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 13356, "invalid": 1355 } }, "hsts": { "n": 14711, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2088, "absent": 12623 } }, "csp": { "n": 11634, "na": 10800, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 835, "weak": 0, "absent": 10799 } }, "clickjacking": { "n": 11634, "na": 10800, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1123, "absent": 10511 } }, "mime_sniffing": { "n": 11634, "na": 10800, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 966, "absent": 10668 } }, "referrer_policy": { "n": 11634, "na": 10800, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 351, "absent": 11283 } }, "secure_by_default": { "n": 10490, "na": 11944, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 47, "not_all": 10443 } }, "ipv6": { "n": 22434, "na": 0, "states": { "aaaa": 8521, "none": 13913 } } } }, "work": { "graded": 323946, "checks": { "dmarc": { "n": 323946, "na": 0, "states": { "absent": 262715, "none": 20042, "quarantine": 32996, "reject": 8184, "invalid": 9 }, "rua_present": 40686 }, "spf": { "n": 323946, "na": 0, "states": { "absent": 243324, "hardfail": 19531, "softfail": 58791, "neutral": 1265, "plus_all": 22, "invalid": 1013 } }, "dkim": { "n": 32679, "na": 291267, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 15862, "none_observed": 16817 } }, "mx": { "n": 323946, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 93267, "absent": 230679 } }, "reverse_dns": { "n": 93209, "na": 230737, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 73441, "none": 19768 } }, "caa": { "n": 318660, "na": 5286, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 3102, "absent": 315558 } }, "dnssec": { "n": 323946, "na": 0, "states": { "signed_valid": 8836, "signed_broken": 65, "unsigned": 315045 } }, "https": { "n": 323946, "na": 0, "states": { "https": 158644, "redirects": 0, "http_only": 165302 } }, "tls": { "n": 158644, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 145223, "tls12": 13421, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 158644, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 144685, "invalid": 13959 } }, "hsts": { "n": 158644, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 47423, "absent": 111221 } }, "csp": { "n": 88119, "na": 235827, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 7421, "weak": 0, "absent": 80698 } }, "clickjacking": { "n": 88119, "na": 235827, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 14235, "absent": 73884 } }, "mime_sniffing": { "n": 88119, "na": 235827, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 20206, "absent": 67913 } }, "referrer_policy": { "n": 88119, "na": 235827, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 9591, "absent": 78528 } }, "secure_by_default": { "n": 80132, "na": 243814, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 791, "not_all": 79341 } }, "ipv6": { "n": 323946, "na": 0, "states": { "aaaa": 47359, "none": 276587 } } } }, "works": { "graded": 35884, "checks": { "dmarc": { "n": 35884, "na": 0, "states": { "absent": 26835, "none": 3949, "quarantine": 2957, "reject": 2139, "invalid": 4 }, "rua_present": 4425 }, "spf": { "n": 35884, "na": 0, "states": { "absent": 19011, "hardfail": 4590, "softfail": 11624, "neutral": 497, "plus_all": 5, "invalid": 157 } }, "dkim": { "n": 9211, "na": 26673, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 4468, "none_observed": 4743 } }, "mx": { "n": 35884, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 19452, "absent": 16432 } }, "reverse_dns": { "n": 19445, "na": 16439, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 17002, "none": 2443 } }, "caa": { "n": 35544, "na": 340, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1293, "absent": 34251 } }, "dnssec": { "n": 35884, "na": 0, "states": { "signed_valid": 3247, "signed_broken": 19, "unsigned": 32618 } }, "https": { "n": 35884, "na": 0, "states": { "https": 22948, "redirects": 0, "http_only": 12936 } }, "tls": { "n": 22948, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 21977, "tls12": 971, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 22948, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 21006, "invalid": 1942 } }, "hsts": { "n": 22948, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 6752, "absent": 16196 } }, "csp": { "n": 15074, "na": 20810, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1977, "weak": 0, "absent": 13097 } }, "clickjacking": { "n": 15074, "na": 20810, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 3373, "absent": 11701 } }, "mime_sniffing": { "n": 15074, "na": 20810, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3686, "absent": 11388 } }, "referrer_policy": { "n": 15074, "na": 20810, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1935, "absent": 13139 } }, "secure_by_default": { "n": 13161, "na": 22723, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 287, "not_all": 12874 } }, "ipv6": { "n": 35884, "na": 0, "states": { "aaaa": 7079, "none": 28805 } } } }, "world": { "graded": 383909, "checks": { "dmarc": { "n": 383909, "na": 0, "states": { "absent": 317798, "none": 16533, "quarantine": 34834, "reject": 14740, "invalid": 4 }, "rua_present": 43899 }, "spf": { "n": 383909, "na": 0, "states": { "absent": 277504, "hardfail": 41020, "softfail": 63048, "neutral": 1444, "plus_all": 12, "invalid": 881 } }, "dkim": { "n": 34511, "na": 349398, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 13979, "none_observed": 20532 } }, "mx": { "n": 383909, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 113815, "absent": 270094 } }, "reverse_dns": { "n": 113792, "na": 270117, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 87546, "none": 26246 } }, "caa": { "n": 378529, "na": 5380, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 2768, "absent": 375761 } }, "dnssec": { "n": 383909, "na": 0, "states": { "signed_valid": 15170, "signed_broken": 69, "unsigned": 368670 } }, "https": { "n": 383909, "na": 0, "states": { "https": 222082, "redirects": 0, "http_only": 161827 } }, "tls": { "n": 222082, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 215655, "tls12": 6427, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 222082, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 209089, "invalid": 12993 } }, "hsts": { "n": 222082, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 32700, "absent": 189382 } }, "csp": { "n": 126460, "na": 257449, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 15614, "weak": 0, "absent": 110846 } }, "clickjacking": { "n": 126460, "na": 257449, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 21837, "absent": 104623 } }, "mime_sniffing": { "n": 126460, "na": 257449, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 20806, "absent": 105654 } }, "referrer_policy": { "n": 126460, "na": 257449, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 14644, "absent": 111816 } }, "secure_by_default": { "n": 109646, "na": 274263, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 2866, "not_all": 106780 } }, "ipv6": { "n": 383909, "na": 0, "states": { "aaaa": 133989, "none": 249920 } } } }, "ws": { "graded": 78845, "checks": { "dmarc": { "n": 78845, "na": 0, "states": { "absent": 72376, "none": 3509, "quarantine": 1771, "reject": 1187, "invalid": 2 }, "rua_present": 3691 }, "spf": { "n": 78845, "na": 0, "states": { "absent": 53904, "hardfail": 16876, "softfail": 6545, "neutral": 495, "plus_all": 3, "invalid": 1022 } }, "dkim": { "n": 11436, "na": 67409, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 3141, "none_observed": 8295 } }, "mx": { "n": 78845, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 32149, "absent": 46696 } }, "reverse_dns": { "n": 32138, "na": 46707, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 18764, "none": 13374 } }, "caa": { "n": 78555, "na": 290, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 452, "absent": 78103 } }, "dnssec": { "n": 78845, "na": 0, "states": { "signed_valid": 170, "signed_broken": 4, "unsigned": 78671 } }, "https": { "n": 78845, "na": 0, "states": { "https": 66867, "redirects": 0, "http_only": 11978 } }, "tls": { "n": 66867, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 63539, "tls12": 3328, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 66867, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 53403, "invalid": 13464 } }, "hsts": { "n": 66867, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 9136, "absent": 57731 } }, "csp": { "n": 54036, "na": 24809, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 994, "weak": 0, "absent": 53042 } }, "clickjacking": { "n": 54036, "na": 24809, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1544, "absent": 52492 } }, "mime_sniffing": { "n": 54036, "na": 24809, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1575, "absent": 52461 } }, "referrer_policy": { "n": 54036, "na": 24809, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 821, "absent": 53215 } }, "secure_by_default": { "n": 53069, "na": 25776, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 147, "not_all": 52922 } }, "ipv6": { "n": 78845, "na": 0, "states": { "aaaa": 35890, "none": 42955 } } } }, "wtf": { "graded": 38476, "checks": { "dmarc": { "n": 38476, "na": 0, "states": { "absent": 31789, "none": 2216, "quarantine": 2751, "reject": 1718, "invalid": 2 }, "rua_present": 3653 }, "spf": { "n": 38476, "na": 0, "states": { "absent": 23459, "hardfail": 4180, "softfail": 10200, "neutral": 505, "plus_all": 1, "invalid": 131 } }, "dkim": { "n": 4742, "na": 33734, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2842, "none_observed": 1900 } }, "mx": { "n": 38476, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 16584, "absent": 21892 } }, "reverse_dns": { "n": 16577, "na": 21899, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 13574, "none": 3003 } }, "caa": { "n": 37383, "na": 1093, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1629, "absent": 35754 } }, "dnssec": { "n": 38476, "na": 0, "states": { "signed_valid": 3850, "signed_broken": 22, "unsigned": 34604 } }, "https": { "n": 38476, "na": 0, "states": { "https": 22468, "redirects": 0, "http_only": 16008 } }, "tls": { "n": 22468, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 21911, "tls12": 557, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 22468, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 19984, "invalid": 2484 } }, "hsts": { "n": 22468, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 5715, "absent": 16753 } }, "csp": { "n": 14628, "na": 23848, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1856, "weak": 0, "absent": 12772 } }, "clickjacking": { "n": 14628, "na": 23848, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 2665, "absent": 11963 } }, "mime_sniffing": { "n": 14628, "na": 23848, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 3030, "absent": 11598 } }, "referrer_policy": { "n": 14628, "na": 23848, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 2278, "absent": 12350 } }, "secure_by_default": { "n": 12179, "na": 26297, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 207, "not_all": 11972 } }, "ipv6": { "n": 38476, "na": 0, "states": { "aaaa": 8634, "none": 29842 } } } }, "xin": { "graded": 48792, "checks": { "dmarc": { "n": 48792, "na": 0, "states": { "absent": 48291, "none": 260, "quarantine": 147, "reject": 94, "invalid": 0 }, "rua_present": 366 }, "spf": { "n": 48792, "na": 0, "states": { "absent": 46442, "hardfail": 1554, "softfail": 792, "neutral": 1, "plus_all": 0, "invalid": 3 } }, "dkim": { "n": 353, "na": 48439, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 304, "none_observed": 49 } }, "mx": { "n": 48792, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 3526, "absent": 45266 } }, "reverse_dns": { "n": 3523, "na": 45269, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 1271, "none": 2252 } }, "caa": { "n": 46637, "na": 2155, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 55, "absent": 46582 } }, "dnssec": { "n": 48792, "na": 0, "states": { "signed_valid": 49, "signed_broken": 12, "unsigned": 48731 } }, "https": { "n": 48792, "na": 0, "states": { "https": 15157, "redirects": 0, "http_only": 33635 } }, "tls": { "n": 15157, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 14125, "tls12": 1032, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 15157, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 11086, "invalid": 4071 } }, "hsts": { "n": 15157, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3566, "absent": 11591 } }, "csp": { "n": 10390, "na": 38402, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 190, "weak": 0, "absent": 10200 } }, "clickjacking": { "n": 10390, "na": 38402, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 775, "absent": 9615 } }, "mime_sniffing": { "n": 10390, "na": 38402, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 892, "absent": 9498 } }, "referrer_policy": { "n": 10390, "na": 38402, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 669, "absent": 9721 } }, "secure_by_default": { "n": 8339, "na": 40453, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 53, "not_all": 8286 } }, "ipv6": { "n": 48792, "na": 0, "states": { "aaaa": 4674, "none": 44118 } } } }, "xxx": { "graded": 23564, "checks": { "dmarc": { "n": 23564, "na": 0, "states": { "absent": 20396, "none": 873, "quarantine": 633, "reject": 1662, "invalid": 0 }, "rua_present": 1932 }, "spf": { "n": 23564, "na": 0, "states": { "absent": 17146, "hardfail": 3513, "softfail": 2201, "neutral": 637, "plus_all": 1, "invalid": 66 } }, "dkim": { "n": 5590, "na": 17974, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 380, "none_observed": 5210 } }, "mx": { "n": 23564, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12520, "absent": 11044 } }, "reverse_dns": { "n": 12520, "na": 11044, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 9205, "none": 3315 } }, "caa": { "n": 23375, "na": 189, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 249, "absent": 23126 } }, "dnssec": { "n": 23564, "na": 0, "states": { "signed_valid": 1051, "signed_broken": 8, "unsigned": 22505 } }, "https": { "n": 23564, "na": 0, "states": { "https": 7658, "redirects": 0, "http_only": 15906 } }, "tls": { "n": 7658, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6850, "tls12": 808, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7658, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 6002, "invalid": 1656 } }, "hsts": { "n": 7658, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 952, "absent": 6706 } }, "csp": { "n": 6588, "na": 16976, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1144, "weak": 0, "absent": 5444 } }, "clickjacking": { "n": 6588, "na": 16976, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1162, "absent": 5426 } }, "mime_sniffing": { "n": 6588, "na": 16976, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1070, "absent": 5518 } }, "referrer_policy": { "n": 6588, "na": 16976, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 887, "absent": 5701 } }, "secure_by_default": { "n": 3402, "na": 20162, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 138, "not_all": 3264 } }, "ipv6": { "n": 23564, "na": 0, "states": { "aaaa": 1717, "none": 21847 } } } }, "xyz": { "graded": 8012230, "checks": { "dmarc": { "n": 8012230, "na": 0, "states": { "absent": 7480443, "none": 180608, "quarantine": 191472, "reject": 159643, "invalid": 64 }, "rua_present": 244191 }, "spf": { "n": 8012230, "na": 0, "states": { "absent": 2467190, "hardfail": 4981159, "softfail": 551189, "neutral": 9065, "plus_all": 325, "invalid": 3302 } }, "dkim": { "n": 233330, "na": 7778900, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 182659, "none_observed": 50671 } }, "mx": { "n": 8012230, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 5574896, "absent": 2437334 } }, "reverse_dns": { "n": 5574259, "na": 2437971, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 524452, "none": 5049807 } }, "caa": { "n": 7807783, "na": 204447, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 46743, "absent": 7761040 } }, "dnssec": { "n": 8012230, "na": 0, "states": { "signed_valid": 130615, "signed_broken": 1328, "unsigned": 7880287 } }, "https": { "n": 8012230, "na": 0, "states": { "https": 6374155, "redirects": 0, "http_only": 1638075 } }, "tls": { "n": 6374155, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 6280160, "tls12": 93995, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 6374155, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5937477, "invalid": 436678 } }, "hsts": { "n": 6374155, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 292745, "absent": 6081410 } }, "csp": { "n": 5450923, "na": 2561307, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 117099, "weak": 0, "absent": 5333824 } }, "clickjacking": { "n": 5450923, "na": 2561307, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 167199, "absent": 5283724 } }, "mime_sniffing": { "n": 5450923, "na": 2561307, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 182423, "absent": 5268500 } }, "referrer_policy": { "n": 5450923, "na": 2561307, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 144122, "absent": 5306801 } }, "secure_by_default": { "n": 5167779, "na": 2844451, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 40685, "not_all": 5127094 } }, "ipv6": { "n": 8012230, "na": 0, "states": { "aaaa": 659899, "none": 7352331 } } } }, "yachts": { "graded": 34435, "checks": { "dmarc": { "n": 34435, "na": 0, "states": { "absent": 30834, "none": 399, "quarantine": 321, "reject": 2881, "invalid": 0 }, "rua_present": 513 }, "spf": { "n": 34435, "na": 0, "states": { "absent": 28375, "hardfail": 3905, "softfail": 2068, "neutral": 32, "plus_all": 0, "invalid": 55 } }, "dkim": { "n": 504, "na": 33931, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 298, "none_observed": 206 } }, "mx": { "n": 34435, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 6707, "absent": 27728 } }, "reverse_dns": { "n": 6718, "na": 27717, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2515, "none": 4203 } }, "caa": { "n": 33366, "na": 1069, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 95, "absent": 33271 } }, "dnssec": { "n": 34435, "na": 0, "states": { "signed_valid": 1792, "signed_broken": 2, "unsigned": 32641 } }, "https": { "n": 34435, "na": 0, "states": { "https": 7962, "redirects": 0, "http_only": 26473 } }, "tls": { "n": 7962, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 7650, "tls12": 312, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 7962, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7159, "invalid": 803 } }, "hsts": { "n": 7962, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 831, "absent": 7131 } }, "csp": { "n": 5863, "na": 28572, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 939, "weak": 0, "absent": 4924 } }, "clickjacking": { "n": 5863, "na": 28572, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1180, "absent": 4683 } }, "mime_sniffing": { "n": 5863, "na": 28572, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1061, "absent": 4802 } }, "referrer_policy": { "n": 5863, "na": 28572, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 971, "absent": 4892 } }, "secure_by_default": { "n": 4439, "na": 29996, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 82, "not_all": 4357 } }, "ipv6": { "n": 34435, "na": 0, "states": { "aaaa": 3988, "none": 30447 } } } }, "yoga": { "graded": 27944, "checks": { "dmarc": { "n": 27944, "na": 0, "states": { "absent": 25538, "none": 1391, "quarantine": 599, "reject": 415, "invalid": 1 }, "rua_present": 1042 }, "spf": { "n": 27944, "na": 0, "states": { "absent": 20348, "hardfail": 4483, "softfail": 2837, "neutral": 216, "plus_all": 1, "invalid": 59 } }, "dkim": { "n": 2341, "na": 25603, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 819, "none_observed": 1522 } }, "mx": { "n": 27944, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 8620, "absent": 19324 } }, "reverse_dns": { "n": 8621, "na": 19323, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 6679, "none": 1942 } }, "caa": { "n": 27095, "na": 849, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 111, "absent": 26984 } }, "dnssec": { "n": 27944, "na": 0, "states": { "signed_valid": 673, "signed_broken": 14, "unsigned": 27257 } }, "https": { "n": 27944, "na": 0, "states": { "https": 12611, "redirects": 0, "http_only": 15333 } }, "tls": { "n": 12611, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 12425, "tls12": 186, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 12611, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 7437, "invalid": 5174 } }, "hsts": { "n": 12611, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2170, "absent": 10441 } }, "csp": { "n": 7053, "na": 20891, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 792, "weak": 0, "absent": 6261 } }, "clickjacking": { "n": 7053, "na": 20891, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1398, "absent": 5655 } }, "mime_sniffing": { "n": 7053, "na": 20891, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 972, "absent": 6081 } }, "referrer_policy": { "n": 7053, "na": 20891, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 562, "absent": 6491 } }, "secure_by_default": { "n": 6243, "na": 21701, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 34, "not_all": 6209 } }, "ipv6": { "n": 27944, "na": 0, "states": { "aaaa": 2032, "none": 25912 } } } }, "you": { "graded": 8499, "checks": { "dmarc": { "n": 8499, "na": 0, "states": { "absent": 7752, "none": 473, "quarantine": 109, "reject": 165, "invalid": 0 }, "rua_present": 237 }, "spf": { "n": 8499, "na": 0, "states": { "absent": 6286, "hardfail": 257, "softfail": 1891, "neutral": 59, "plus_all": 0, "invalid": 6 } }, "dkim": { "n": 569, "na": 7930, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 471, "none_observed": 98 } }, "mx": { "n": 8499, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 2255, "absent": 6244 } }, "reverse_dns": { "n": 2257, "na": 6242, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 2094, "none": 163 } }, "caa": { "n": 8470, "na": 29, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 128, "absent": 8342 } }, "dnssec": { "n": 8499, "na": 0, "states": { "signed_valid": 1208, "signed_broken": 2, "unsigned": 7289 } }, "https": { "n": 8499, "na": 0, "states": { "https": 5710, "redirects": 0, "http_only": 2789 } }, "tls": { "n": 5710, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 5605, "tls12": 105, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5710, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 5409, "invalid": 301 } }, "hsts": { "n": 5710, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1764, "absent": 3946 } }, "csp": { "n": 3813, "na": 4686, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1141, "weak": 0, "absent": 2672 } }, "clickjacking": { "n": 3813, "na": 4686, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1415, "absent": 2398 } }, "mime_sniffing": { "n": 3813, "na": 4686, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1506, "absent": 2307 } }, "referrer_policy": { "n": 3813, "na": 4686, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1405, "absent": 2408 } }, "secure_by_default": { "n": 2866, "na": 5633, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 729, "not_all": 2137 } }, "ipv6": { "n": 8499, "na": 0, "states": { "aaaa": 1293, "none": 7206 } } } }, "za": { "graded": 1079305, "checks": { "dmarc": { "n": 1079305, "na": 0, "states": { "absent": 684171, "none": 218952, "quarantine": 106404, "reject": 69685, "invalid": 93 }, "rua_present": 147406 }, "spf": { "n": 1079305, "na": 0, "states": { "absent": 220941, "hardfail": 228281, "softfail": 436300, "neutral": 184712, "plus_all": 96, "invalid": 8975 } }, "dkim": { "n": 484549, "na": 594756, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 364246, "none_observed": 120303 } }, "mx": { "n": 1079305, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 923002, "absent": 156303 } }, "reverse_dns": { "n": 921134, "na": 158171, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 830766, "none": 90368 } }, "caa": { "n": 1076084, "na": 3221, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 7129, "absent": 1068955 } }, "dnssec": { "n": 1079305, "na": 0, "states": { "signed_valid": 3558, "signed_broken": 52, "unsigned": 1075695 } }, "https": { "n": 1079305, "na": 0, "states": { "https": 955609, "redirects": 0, "http_only": 123696 } }, "tls": { "n": 955609, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 915992, "tls12": 39617, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 955609, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 904810, "invalid": 50799 } }, "hsts": { "n": 955609, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 125934, "absent": 829675 } }, "csp": { "n": 618770, "na": 460535, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 42118, "weak": 0, "absent": 576652 } }, "clickjacking": { "n": 618770, "na": 460535, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 61434, "absent": 557336 } }, "mime_sniffing": { "n": 618770, "na": 460535, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 65350, "absent": 553420 } }, "referrer_policy": { "n": 618770, "na": 460535, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 32826, "absent": 585944 } }, "secure_by_default": { "n": 612381, "na": 466924, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 3459, "not_all": 608922 } }, "ipv6": { "n": 1079305, "na": 0, "states": { "aaaa": 93465, "none": 985840 } } } }, "zip": { "graded": 12148, "checks": { "dmarc": { "n": 12148, "na": 0, "states": { "absent": 10070, "none": 442, "quarantine": 543, "reject": 1093, "invalid": 0 }, "rua_present": 1193 }, "spf": { "n": 12148, "na": 0, "states": { "absent": 7927, "hardfail": 1482, "softfail": 2485, "neutral": 230, "plus_all": 0, "invalid": 24 } }, "dkim": { "n": 1148, "na": 11000, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 707, "none_observed": 441 } }, "mx": { "n": 12148, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 4057, "absent": 8091 } }, "reverse_dns": { "n": 4058, "na": 8090, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 3421, "none": 637 } }, "caa": { "n": 12104, "na": 44, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 349, "absent": 11755 } }, "dnssec": { "n": 12148, "na": 0, "states": { "signed_valid": 2814, "signed_broken": 22, "unsigned": 9312 } }, "https": { "n": 12148, "na": 0, "states": { "https": 5073, "redirects": 0, "http_only": 7075 } }, "tls": { "n": 5073, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 4960, "tls12": 113, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 5073, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 4637, "invalid": 436 } }, "hsts": { "n": 5073, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 1134, "absent": 3939 } }, "csp": { "n": 3721, "na": 8427, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 684, "weak": 0, "absent": 3037 } }, "clickjacking": { "n": 3721, "na": 8427, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 942, "absent": 2779 } }, "mime_sniffing": { "n": 3721, "na": 8427, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 994, "absent": 2727 } }, "referrer_policy": { "n": 3721, "na": 8427, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 699, "absent": 3022 } }, "secure_by_default": { "n": 2528, "na": 9620, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 60, "not_all": 2468 } }, "ipv6": { "n": 12148, "na": 0, "states": { "aaaa": 2206, "none": 9942 } } } }, "zone": { "graded": 32948, "checks": { "dmarc": { "n": 32948, "na": 0, "states": { "absent": 27213, "none": 2229, "quarantine": 1969, "reject": 1535, "invalid": 2 }, "rua_present": 2954 }, "spf": { "n": 32948, "na": 0, "states": { "absent": 22293, "hardfail": 4168, "softfail": 5861, "neutral": 460, "plus_all": 5, "invalid": 161 } }, "dkim": { "n": 4161, "na": 28787, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 2244, "none_observed": 1917 } }, "mx": { "n": 32948, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 12582, "absent": 20366 } }, "reverse_dns": { "n": 12580, "na": 20368, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 9667, "none": 2913 } }, "caa": { "n": 31873, "na": 1075, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 841, "absent": 31032 } }, "dnssec": { "n": 32948, "na": 0, "states": { "signed_valid": 2104, "signed_broken": 27, "unsigned": 30817 } }, "https": { "n": 32948, "na": 0, "states": { "https": 14908, "redirects": 0, "http_only": 18040 } }, "tls": { "n": 14908, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 14260, "tls12": 648, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 14908, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 12934, "invalid": 1974 } }, "hsts": { "n": 14908, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 2879, "absent": 12029 } }, "csp": { "n": 10671, "na": 22277, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 1009, "weak": 0, "absent": 9662 } }, "clickjacking": { "n": 10671, "na": 22277, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1600, "absent": 9071 } }, "mime_sniffing": { "n": 10671, "na": 22277, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 1723, "absent": 8948 } }, "referrer_policy": { "n": 10671, "na": 22277, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1091, "absent": 9580 } }, "secure_by_default": { "n": 8928, "na": 24020, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 188, "not_all": 8740 } }, "ipv6": { "n": 32948, "na": 0, "states": { "aaaa": 5537, "none": 27411 } } } }, "zw": { "graded": 33286, "checks": { "dmarc": { "n": 33286, "na": 0, "states": { "absent": 20213, "none": 9352, "quarantine": 1915, "reject": 1803, "invalid": 3 }, "rua_present": 1664 }, "spf": { "n": 33286, "na": 0, "states": { "absent": 8020, "hardfail": 6033, "softfail": 18726, "neutral": 392, "plus_all": 6, "invalid": 109 } }, "dkim": { "n": 19543, "na": 13743, "denominator_note": "domains where DKIM was evaluated (MX present and provider recognised) — selectors are not enumerable from DNS, so an unrecognised provider is undetermined, not absent", "states": { "selector_found": 17266, "none_observed": 2277 } }, "mx": { "n": 33286, "na": 0, "denominator_note": "all graded domains — the MX check records absence as undetermined rather than fail, so its applicable basis is degenerate (99.9% pass) and says nothing", "states": { "present": 29313, "absent": 3973 } }, "reverse_dns": { "n": 29296, "na": 3990, "denominator_note": "MX-bearing domains with a resolvable primary MX host", "states": { "ptr": 22678, "none": 6618 } }, "caa": { "n": 33148, "na": 138, "denominator_note": "domains where the CAA lookup returned a determinate answer", "states": { "present": 1381, "absent": 31767 } }, "dnssec": { "n": 33286, "na": 0, "states": { "signed_valid": 0, "signed_broken": 0, "unsigned": 33286 } }, "https": { "n": 33286, "na": 0, "states": { "https": 29576, "redirects": 0, "http_only": 3710 } }, "tls": { "n": 29576, "na": 0, "denominator_note": "HTTPS-serving", "states": { "tls13": 29005, "tls12": 571, "tls11": 0, "tls10": 0, "other": 0 }, "weak_cipher": 0 }, "certificate": { "n": 29576, "na": 0, "denominator_note": "HTTPS-serving", "states": { "valid": 27474, "invalid": 2102 } }, "hsts": { "n": 29576, "na": 0, "denominator_note": "HTTPS-serving", "states": { "present": 3456, "absent": 26120 } }, "csp": { "n": 18221, "na": 15065, "denominator_note": "domains whose page returned a 2xx response", "states": { "effective": 933, "weak": 0, "absent": 17288 } }, "clickjacking": { "n": 18221, "na": 15065, "denominator_note": "domains whose page returned a 2xx response", "states": { "protected": 1792, "absent": 16429 } }, "mime_sniffing": { "n": 18221, "na": 15065, "denominator_note": "domains whose page returned a 2xx response", "states": { "nosniff": 2113, "absent": 16108 } }, "referrer_policy": { "n": 18221, "na": 15065, "denominator_note": "domains whose page returned a 2xx response", "states": { "present": 1321, "absent": 16900 } }, "secure_by_default": { "n": 17996, "na": 15290, "denominator_note": "domains where all five header checks were evaluated", "states": { "all_headers_pass": 82, "not_all": 17914 } }, "ipv6": { "n": 33286, "na": 0, "states": { "aaaa": 10218, "none": 23068 } } } } } }