WQI.web​qualityindex
Method v1.1.0 85 live / 86 total factors methodology

/ / d / netflix.com

netflix.com

50 / 100
overall · band: medium
scanned2026-04-26 23:17:00Z
methodv0.1 — 2026-04-25
verdicts28 pass 5 warn 38 fail 15 n/a
rescan
writes a fresh score to the registry

Categories

Security48/ 100 · 9 measured
Performance50/ 100 · 8 measured
SEO33/ 100 · 7 measured
AI-readiness50/ 100 · 4 measured
Privacy13/ 100 · 6 measured
Accessibility61/ 100 · 5 measured
Brand presence27/ 100 · 16 measured
Email health63/ 100 · 16 measured

Site facts

Snapshot date
2026-04-26
Factors scored
71 / 86
Composite score
50/100
Method version
v0.1 — 2026-04-25

Security· 48/100

#FactorVerdictScoreEvidence
4Security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-Content-Type-Options)warn60security_headers_score=60, missing=Content-Security-Policy|Referrer-Policy|Permissions-Policy
5SSL certificate validity & expiration windown/a—Scoring not yet implemented
6WordPress REST API user enumeration exposurepass100not_wordpress
7Sensitive path exposure (.git, .env, /admin, xmlrpc.php, wp-login.php)pass100total_checked=6
22DNSSEC validationfail0ds_present=false, ad_bit=false
23CAA recordsfail0records=\# 19 00 05 69 73 73 75 65 64 69 67 69 63 65 72 74 2e 63 6f 6d|\# 22 00 05 69 73 73 75 65 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67|\# 15 00 05 69 73 73 75 65 70 6b 69 2e 67 6f 6f 67, has_issue=false, has_iodef=false
26HSTS preload list inclusionfail0hsts_header=max-age=31536000; includeSubDomains, preload_status=unknown
27TLS minimum version & cipher suite qualitywarn70status=READY, grades=B|B|B|B|B, worst=B
28Subdomain takeover surfacepass100findings={"subdomain":"www.netflix.com","cname":"www.prod.ftl.netflix.com.","dangling":false}|{"subdomain":"api.netflix.com","cname":"api.dradis.netflix.com.","dangling":false}|{"subdomain":"app.netflix.com","cname":"www.netflix.com.","dangling":fal…
29Spam / phishing blocklist presencefail0listed=true, response_code=0, answers=127.255.255.254

Performance· 50/100

#FactorVerdictScoreEvidence
8Mobile PageSpeed score + Core Web Vitals (LCP, FCP, CLS)warn51performance_score=41, lcp_ms=7166.005143239188, cls=0, components={"perf":41,"lcp":30,"cls":100}
9HTTP/2 supportn/a—Scoring not yet implemented
10Compression (Brotli / gzip)pass80perf_compression=gzip
30HTTP/3 supportfail0supports_h3=false
31IPv6 supportpass100aaaa_count=3, aaaa=2600:1f14:62a:de82:822d:a423:9e4c:da8d|2600:1f14:62a:de81:b848:82ee:2416:447e|2600:1f14:62a:de80:69a8:7b12:8e5f:855d
32Image optimization (WebP/AVIF)fail30id=image-delivery-insight, lighthouse_score=0, displayValue=Est savings of 90 KiB
33Desktop PageSpeed scoren/a—Scoring not yet implemented
34Core Web Vitals from CrUX (Real User Monitoring)n/a—Scoring not yet implemented
35Lazy loading on below-fold imagesfail40id=image-delivery-insight, lighthouse_score=0, displayValue=Est savings of 90 KiB
36Font loading strategy (FOUT/FOIT/swap)fail0id=font-display-insight, lighthouse_score=0.5
37Total homepage byte weightpass100html_bytes=512000, subresource_bytes=0, total_bytes=512000, total_kb=500, sampled=0, total_refs=0
38Largest unused JavaScript bundlen/a—Scoring not yet implemented

SEO· 33/100

#FactorVerdictScoreEvidence
11Title, meta description, OG, Twitter cards, canonicalpass80title=true, description=true, og=true, twitter=true, canonical=false
12Schema.org structured data presencefail0structured_data_absent
13H1 tag presencefail0h1_count=0
14Sitemap.xml + robots.txt presencewarn50has_robots_txt=true, has_sitemap=false
39Schema.org type validity (parsed JSON-LD)n/a—Scoring not yet implemented
40Breadcrumb schemafail0present=false
41FAQ / HowTo schema (where applicable)n/a—n/a — not_applicable
42hreflang for multi-language sitesn/a—n/a — single_language
43Internal link depth (clicks from homepage to deepest content)pass100max_depth=0, pages_fetched=0, pages_seen=1, capped_at=50
61Better Business Bureau accreditationfail0no_link_on_site

AI-readiness· 50/100

#FactorVerdictScoreEvidence
15llms.txt presencefail0has_llms_txt=false
16AI crawler robots.txt directivespass100robots_ai_blocked_count=0
44AI plugin manifest (.well-known/ai-plugin.json)pass100status=200
45JSON-LD richness score for LLMsfail0org_complete=false, has_address=false, has_contact_point=false, has_same_as=false, has_content_type=false, breakdown={"coreOrg":0,"contact":0,"sameAs":0,"contentType":0}

Privacy· 13/100

#FactorVerdictScoreEvidence
46Cookie banner presence + CMP detectionfail0banner_detected=false
47Privacy policy page presencefail0found=false
48Terms of service page presencefail0found=false
49Third-party tracker countpass80count=2, hosts=assets.nflxext.com|help.nflxext.com
50CCPA "Do Not Sell or Share My Personal Information" linkfail0found=false
51Cookie scan — actual cookies set on first loadfail0count=5, names=flwssn|nfvdid|SecureNetflixId|NetflixId|gsid, with_cmp=false

Accessibility· 61/100

#FactorVerdictScoreEvidence
52Accessibility statement pagefail0found=false
53axe-core / WAVE accessibility scanpass87accessibility_category=0.87
54Image alt text coveragen/a—Scoring not yet implemented
55Heading hierarchy validityfail30lighthouse_score=0
56Color contrast (WCAG AA)pass100lighthouse_score=1, failing_count=0
57ARIA labels presence and validitypass86total_aria_audits=22, applicable=7, passing=6, failing=aria-hidden-focus
58Skip-to-content linkn/a—Scoring not yet implemented

Brand presence· 27/100

#FactorVerdictScoreEvidence
17Domain age (RDAP / WHOIS)pass100domain_age_years=28.5
18Wayback Machine site age & last snapshotn/a—Scoring not yet implemented
19Google Business Profile presence + ratingfail0found=false
20News mentions in last 30 dayspass85news_mentions_count=20
21Wikipedia entitypass100found=true, title=Netflix, url=https://en.wikipedia.org/wiki/Netflix
59Yelp presence + rating + review countfail0no_link_on_site
60Trustpilot presence + ratingfail0no_link_on_site
62LinkedIn Company Page (presence + employee count + follower count)fail0no_link_on_site
63Bing Placesn/a—n/a — no_public_url_convention
64Apple Maps presence (Apple Business Connect)fail0no_link_on_site
65Facebook Page presencefail0no_link_on_site
66Instagram presence (link from site → IG profile)fail0no_link_on_site
67Web App Manifest (manifest.json)n/a—Scoring not yet implemented
68Service Worker / PWA capabilityn/a—Scoring not yet implemented
69Analytics tools detectedfail0count=0
70Payment processors detectedn/a—n/a — no_payment_detected
71Marketing automation tools detectedfail0count=0
72Customer support tools detectedfail0count=0
73Tag manager presencewarn50count=0
74Ad networks detectedpass100count=0
83Visible contact form on sitefail0detected=false, count=0

Email health· 63/100

#FactorVerdictScoreEvidence
1DMARC enforcementpass100present=true, policy=reject
2DKIM signingpass100present=true, selector=google, source=doh_probe
3SPF record present and validpass100present=true, raw="v=spf1 include:_spf_ipv4.netflix.com include:_spf.google.com include:amazonses.com include:servers.mcsv.net include:_spf.salesforce.com include:_spf.createsend.com -all", qualifier=hardfail
24MTA-STS & TLS-RPTfail0policy_ok=false
25BIMI + VMCfail0no_bimi
75Branded domain email address (vs free Gmail/Yahoo)pass100branded=true, provider=google
76Email provider class (Workspace / 365 / Zoho / self-hosted / shared)pass100provider=google
77DMARC aggregate reporting enabled (rua=)pass100has_dmarc_reporting=true, audit_flag=true, derived_from_raw=true, source=derived_from_raw, dmarc_raw="v=DMARC1; p=reject; fo=1; rua=mailto:netflix@rua.netcraft.com,mailto:dmarcreports@netflix.com,mailto:dmarc_agg@dmarc.250ok.net;ruf=mailto:netflix@r…
78Free-email exposure on contact page (gmail/yahoo/outlook visible)fail0addresses=inexorabletash@gmail.com
79Newsletter signup form detectedfail0detected=false
80Email Service Provider (ESP) detectedpass100providers=Mailchimp|Campaign Monitor
81Transactional email provider detected (from SPF includes)pass100providers=Amazon SES|Salesforce
82SPF lookup count (10-limit deliverability check)pass100lookups=7, limit=10
84Mailto: direct contact link presentfail0Scored
85Email forwarding service detected (improvmx, forwardemail, etc.)pass100hosts=aspmx.l.google.com|aspmx2.googlemail.com|aspmx3.googlemail.com|alt1.aspmx.l.google.com|alt2.aspmx.l.google.com, provider=Google Workspace, kind=branded
86Lead magnet / signup incentive detected (free download, ebook, etc.)fail0detected=false

Scores are computed under method v0.1 — 2026-04-25. See the methodology for the full factor list and per-factor specifications.