Each test cell combines a color status and a compact technical summary. The notes below explain both in plain language.
DNS
Format: [NS count] v6 configured/reachable/operational [location]
Meaning: Shows how many authoritative name servers exist, and how many IPv6 endpoints are configured, responsive, and operational.
- Configured/Reachable/Operational maps to DNS server endpoints discovered from NS records.
- Location tags indicate hosting locality context for the tested domain.
Mail
Format: [MX count] v4 smtp configured/reachable/operational v6 smtp configured/reachable/operational [location]
Meaning: Shows MX footprint and SMTP health per IP family. Operational means an SMTP banner and EHLO exchange succeeded on port 25.
- v4 and v6 SMTP are measured separately.
- MX presence without successful SMTP handshake can still produce non-operational results.
Web
Format: [site count] v6 configured/reachable/operational [location]
Meaning: Shows IPv6 web endpoint readiness for the discovered HTTPS host. Operational means family-specific HTTPS requests complete successfully.
- Configured/Reachable are derived from discovered A/AAAA records on the final web host.
- Operational reflects request success by family (tcp4 and tcp6 tested separately).
DNSSEC
Format: S/?/? (partial), U/-/-, or error text
Meaning: Shows whether DNSKEY data is observed at the apex (signed), absent (unsigned), or unavailable due to lookup error.
- S/?/? (partial) indicates partial DNSSEC signal only.
- Full chain validation is not yet performed by this checker.
DMARC
Format: policy or p=…, sp=…
Meaning: Published DMARC policy at _dmarc.{domain} (DNS TXT). Shows organizational policy (p=) and subdomain policy (sp=) when set.
- No record (NXDOMAIN or no DMARC TXT) scores 0% on the ramp (red).
- p=none scores 25%; quarantine 75%; reject 100%. Stricter of p and sp drives the color.
- Lookup failures (timeout, SERVFAIL) show grey — not scored as absent.
- Does not measure SPF/DKIM pass rates — policy publication only.
DNSSEC uses signed=1 point; unsigned, error, and unknown=0 points.
Row score does not include DMARC or RPKI in v1; those columns use the same 0–100% red→green ramp as IPv6 preferred %.