Dashboard / Streaming / netflix.com

Netflix

netflix.com

Last checked: 3 weeks ago

Partially Compliant
MGv6C-1.0
81%
Partial Support
Works on IPv6 Only?
Website Not Ready
DNS Ready
Email Ready

IPv6 Addresses Detected

2a05:d018:76c:b685:e8ab:afd3:af51:3aed 2a05:d018:76c:b684:8ab7:ac02:667b:e863 2a05:d018:76c:b683:a2cd:4240:8669:6d4

IPv4 Addresses Detected

3.251.50.149 54.155.178.5 54.74.73.31

Network Information

WHOIS

IPv6 Network

Organization
MNT-ADSI
Country
IE
ASN
AS16509 AMAZON-02 - Amazon.com, Inc., US
Network
2a05:d010::/28

IPv4 Network

Organization
Amazon Data Services Ireland Limited
Country
US
ASN
AS16509 AMAZON-02 - Amazon.com, Inc., US
Network
3.248.0.0/13

Web Services

35%
6/8
AAAA Record

The domain has at least one IPv6 address (AAAA DNS record).

✓ 2a05:d018:76c:b685:e8ab:afd3:af51:3aed, 2a05:d018:76c:b684:8ab7:ac02:667b:e863, 2a05:d018:76c:b683:a2cd:4240:8669:6d4

+1
Globally Routable IPv6

The IPv6 addresses are publicly routable — not link-local, ULA, loopback or documentation ranges.

✓ All addresses are globally routable.

+1
HTTP over IPv6

Website reachable on port 80 when connecting via IPv6.

✓ HTTP (port 80) responds over IPv6 — 881ms TTFB.

+1
HTTPS over IPv6

Website reachable on port 443 when connecting via IPv6.

✓ HTTPS (port 443) responds over IPv6 — 587ms TTFB.

+1
IPv6-Only Reachability

Website responds when connected exclusively over IPv6, with no IPv4 fallback. Simulates what happens when IPv4 is turned off.

✗ Site is not reachable when limited to IPv6-only.

0
TLS Certificate Valid (IPv6)

The SSL/TLS certificate is valid, not expired, and matches the domain when connected via IPv6.

✓ Certificate valid — issued by C = US, O = DigiCert Inc, CN = DigiCert Global G3 TLS ECC SHA384 2020 CA1, expires Feb 18 21:41:48 2027 GMT

+1
Dual-Stack (IPv4 + IPv6)

The domain has both A and AAAA records for backwards compatibility during the IPv6 transition.

✓ Domain has both A and AAAA records.

+1
HTTP/3 (QUIC)

Server advertises HTTP/3 support via the Alt-Svc: h3 header.

✗ No HTTP/3 support detected.

0

DNS & DNSSEC

25%
3/5
NS Has AAAA Record

At least one authoritative nameserver has an IPv6 address (AAAA record).

✓ Nameserver has IPv6 address.

+1
NS Reachable via IPv6

Authoritative nameserver accepts TCP connections on port 53 over IPv6.

✓ Nameserver is reachable via IPv6 on port 53.

+1
NS Answers Queries via IPv6

Nameserver actually resolves DNS queries when asked over IPv6 — not just TCP open, but functionally answering.

✓ DNS queries answered over IPv6.

+1
DNSSEC Validated

Full DNSSEC chain-of-trust validation passes. Prevents DNS cache poisoning and spoofing.

✗ DNSSEC validation failed or zone is unsigned.

0
Reverse DNS (PTR)

A PTR record exists in ip6.arpa for the IPv6 address. Important for email delivery and network diagnostics.

✗ No PTR record found.

0
DS Record at Parent

Delegation Signer record exists in the parent zone.

✗ No DS record at parent.

RRSIG Valid

RRSIG signatures are present and not expired.

✗ No valid RRSIG found.

Signing Algorithm

The cryptographic algorithm used for DNSSEC signing.

No DNSKEY record found.

Email Services

25%
6/6
MX Record Exists

The domain has at least one MX (Mail Exchange) DNS record pointing to a mail server.

✓ MX record found.

+1
MX Server Has IPv6

The highest-priority MX server resolves to an IPv6 address (AAAA record).

✓ MX server has AAAA record.

+1
SMTP Reachable via IPv6

The MX server accepts SMTP connections (port 25) over IPv6 and responds with a 220 banner.

✓ SMTP port 25 responds over IPv6.

+1
STARTTLS over IPv6

The MX server supports STARTTLS encryption when connected over IPv6.

✓ STARTTLS supported over IPv6.

+1
SPF Record

A TXT record with v=spf1 exists, declaring which servers may send email for this domain.

✓ SPF record found.

+1
DKIM Selector

A DKIM public key is published at a common selector, enabling email signature verification.

DKIM selector found: default._domainkey

DMARC Record

A DMARC policy record exists at _dmarc.<domain>, enabling email authentication reporting.

✓ DMARC record found.

+1

IPv4 Baseline

15%
3/3
A Record

The domain has at least one IPv4 address (A DNS record).

✓ 3.251.50.149, 54.155.178.5, 54.74.73.31

+1
HTTP over IPv4

Website reachable on port 80 when connecting via IPv4.

✓ HTTP (port 80) responds over IPv4 — 871ms TTFB.

+1
HTTPS over IPv4

Website reachable on port 443 when connecting via IPv4.

✓ HTTPS (port 443) responds over IPv4 — 525ms TTFB.

+1

Render-Path Dependencies

not weighted

An AAAA record on this domain says nothing about the stylesheets, scripts and fonts the page then loads from somewhere else. Those are scored here, separately, because a blended figure would flatter both numbers. This score does not affect the 81% above.

Not measured

The dependency chain could not be walked because this check predates dependency scoring. This is recorded as unmeasured rather than counted against the domain.

DNS Resolution Performance

Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.

Resolver Transport A (IPv4) AAAA (IPv6) Delta
System Default 21.6 ms (p95: 21.7) 21.78 ms (p95: 23.01) +0.2 ms
Google IPv4 96.7 ms (p95: 99.31) 80.67 ms (p95: 112.25) -16 ms
Google IPv6 93.71 ms (p95: 103.56) 97.16 ms (p95: 104.25) +3.5 ms
Cloudflare IPv4 26.36 ms (p95: 26.99) 19.95 ms (p95: 25.94) -6.4 ms
Cloudflare IPv6 25.49 ms (p95: 28.55) 31.33 ms (p95: 38.97) +5.8 ms
Tamper-evident evidence record

This result is backed by an HMAC-SHA256 signed evidence record. Scan the code or follow the link to verify the audit trail independently.

330b4fde-6e8d-41af-bc06-b89ec544ba84
View Audit Trail →

Score History

Check History

Last 7 checks

Date Score Status Triggered By
08 Aug 2026
18:20 UTC
81 % Partial manual
08 Aug 2026
10:47 UTC
81 % Partial manual
01 Aug 2026
02:37 UTC
73 % Partial scheduled
04 Jul 2026
03:26 UTC
73 % Partial scheduled
13 Jun 2026
01:06 UTC
73 % Partial scheduled
07 Mar 2026
01:18 UTC
73 % Partial manual
06 Mar 2026
19:10 UTC
73 % Partial manual