/ / d / wikipedia.org

wikipedia.org

51 / 100

overall · band: medium

scanned2026-04-26 23:20:18Z

methodv0.1 — 2026-04-25

verdicts30 pass 5 warn 36 fail 15 n/a

rescanwrites a fresh score to the registry

Site facts

Snapshot date: 2026-04-26
Factors scored: 71 / 86
Composite score: 51/100
Method version: v0.1 — 2026-04-25

Security· 53/100

#	Factor	Verdict	Score	Evidence
4	Security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-Content-Type-Options)	fail	20	security_headers_score=20, missing=Content-Security-Policy\|X-Content-Type-Options\|X-Frame-Options\|Referrer-Policy\|Permissions-Policy\|X-XSS-Protection
5	SSL certificate validity & expiration window	n/a	—	Scoring not yet implemented
6	WordPress REST API user enumeration exposure	pass	100	not_wordpress
7	Sensitive path exposure (.git, .env, /admin, xmlrpc.php, wp-login.php)	pass	100	total_checked=6
22	DNSSEC validation	fail	0	ds_present=false, ad_bit=false
23	CAA records	fail	0	records=\# 37 00 05 69 6f 64 65 66 6d 61 69 6c 74 6f 3a 64 6e 73 2d 61 64 6d 69 6e 40 77 69 6b 69 6d 65 64 69 61 2e 6f 72 67\|\# 19 00 05 69 73 73 75 65 64 69 67 69 63 65 72 74 2e 63 6f 6d\|\# 22 00 05 69 73 73 75 65 6c 65 74 73 65 6e 63 72 79 70 74 2…
26	HSTS preload list inclusion	pass	100	hsts_header=max-age=106384710; includeSubDomains; preload, preload_status=preloaded
27	TLS minimum version & cipher suite quality	n/a	—	Scoring not yet implemented
28	Subdomain takeover surface	pass	100	findings={"subdomain":"www.wikipedia.org","cname":"dyna.wikimedia.org.","dangling":false}\|{"subdomain":"mail.wikipedia.org","cname":"dyna.wikimedia.org.","dangling":false}\|{"subdomain":"shop.wikipedia.org","cname":"dyna.wikimedia.org.","dangling":fa…
29	Spam / phishing blocklist presence	fail	0	listed=true, response_code=0, answers=127.255.255.254

Performance· 63/100

#	Factor	Verdict	Score	Evidence
8	Mobile PageSpeed score + Core Web Vitals (LCP, FCP, CLS)	warn	53	performance_score=45, lcp_ms=4233, cls=0, components={"perf":45,"lcp":30,"cls":100}
9	HTTP/2 support	n/a	—	Scoring not yet implemented
10	Compression (Brotli / gzip)	pass	80	perf_compression=gzip
30	HTTP/3 support	fail	0	supports_h3=false
31	IPv6 support	pass	100	aaaa_count=1, aaaa=2620:0:863:ed1a::1
32	Image optimization (WebP/AVIF)	fail	30	id=image-delivery-insight, lighthouse_score=0, displayValue=Est savings of 35 KiB
33	Desktop PageSpeed score	n/a	—	Scoring not yet implemented
34	Core Web Vitals from CrUX (Real User Monitoring)	n/a	—	Scoring not yet implemented
35	Lazy loading on below-fold images	fail	40	id=image-delivery-insight, lighthouse_score=0, displayValue=Est savings of 35 KiB
36	Font loading strategy (FOUT/FOIT/swap)	pass	100	id=font-display-insight, lighthouse_score=1
37	Total homepage byte weight	pass	100	html_bytes=92443, subresource_bytes=580, total_bytes=93023, total_kb=91, sampled=2, total_refs=2
38	Largest unused JavaScript bundle	n/a	—	Scoring not yet implemented

SEO· 44/100

#	Factor	Verdict	Score	Evidence
11	Title, meta description, OG, Twitter cards, canonical	warn	60	title=true, description=true, og=true, twitter=false, canonical=false
12	Schema.org structured data presence	fail	0	structured_data_absent
13	H1 tag presence	pass	100	h1_count=1, h1_text=Wikipedia The Free Encyclopedia
14	Sitemap.xml + robots.txt presence	warn	50	has_robots_txt=true, has_sitemap=false
39	Schema.org type validity (parsed JSON-LD)	n/a	—	Scoring not yet implemented
40	Breadcrumb schema	fail	0	present=false
41	FAQ / HowTo schema (where applicable)	n/a	—	n/a — not_applicable
42	hreflang for multi-language sites	n/a	—	n/a — single_language
43	Internal link depth (clicks from homepage to deepest content)	pass	100	max_depth=0, pages_fetched=0, pages_seen=1, capped_at=50
61	Better Business Bureau accreditation	fail	0	no_link_on_site

AI-readiness· 25/100

#	Factor	Verdict	Score	Evidence
15	llms.txt presence	fail	0	has_llms_txt=false
16	AI crawler robots.txt directives	pass	100	robots_ai_blocked_count=0
44	AI plugin manifest (.well-known/ai-plugin.json)	fail	0	status=404
45	JSON-LD richness score for LLMs	fail	0	org_complete=false, has_address=false, has_contact_point=false, has_same_as=false, has_content_type=false, breakdown={"coreOrg":0,"contact":0,"sameAs":0,"contentType":0}

Privacy· 13/100

#	Factor	Verdict	Score	Evidence
46	Cookie banner presence + CMP detection	fail	0	banner_detected=false
47	Privacy policy page presence	fail	0	found=false
48	Terms of service page presence	fail	0	found=false
49	Third-party tracker count	pass	80	count=3, hosts=creativecommons.org\|upload.wikimedia.org\|wikis.world
50	CCPA "Do Not Sell or Share My Personal Information" link	fail	0	found=false
51	Cookie scan — actual cookies set on first load	fail	0	count=5, names=WMF-Last-Access\|WMF-Last-Access-Global\|GeoIP\|NetworkProbeLimit\|WMF-Uniq, with_cmp=false

Accessibility· 83/100

#	Factor	Verdict	Score	Evidence
52	Accessibility statement page	fail	0	found=false
53	axe-core / WAVE accessibility scan	pass	95	accessibility_category=0.95
54	Image alt text coverage	pass	100	lighthouse_score=1, failing_count=0
55	Heading hierarchy validity	pass	100	lighthouse_score=1
56	Color contrast (WCAG AA)	pass	100	lighthouse_score=1, failing_count=0
57	ARIA labels presence and validity	pass	100	total_aria_audits=22, applicable=9, passing=9
58	Skip-to-content link	n/a	—	Scoring not yet implemented

Brand presence· 33/100

#	Factor	Verdict	Score	Evidence
17	Domain age (RDAP / WHOIS)	pass	100	domain_age_years=25.3
18	Wayback Machine site age & last snapshot	n/a	—	Scoring not yet implemented
19	Google Business Profile presence + rating	pass	100	found=true, rating=4.6, review_count=2549
20	News mentions in last 30 days	pass	85	news_mentions_count=20
21	Wikipedia entity	pass	100	found=true, title=Wikipedia, url=https://en.wikipedia.org/wiki/Wikipedia
59	Yelp presence + rating + review count	fail	0	no_link_on_site
60	Trustpilot presence + rating	fail	0	no_link_on_site
62	LinkedIn Company Page (presence + employee count + follower count)	fail	0	no_link_on_site
63	Bing Places	n/a	—	n/a — no_public_url_convention
64	Apple Maps presence (Apple Business Connect)	fail	0	no_link_on_site
65	Facebook Page presence	fail	0	no_link_on_site
66	Instagram presence (link from site → IG profile)	fail	0	no_link_on_site
67	Web App Manifest (manifest.json)	n/a	—	Scoring not yet implemented
68	Service Worker / PWA capability	n/a	—	Scoring not yet implemented
69	Analytics tools detected	fail	0	count=0
70	Payment processors detected	n/a	—	n/a — no_payment_detected
71	Marketing automation tools detected	fail	0	count=0
72	Customer support tools detected	fail	0	count=0
73	Tag manager presence	warn	50	count=0
74	Ad networks detected	pass	100	count=0
83	Visible contact form on site	fail	0	detected=false, count=0

Email health· 54/100

#	Factor	Verdict	Score	Evidence
1	DMARC enforcement	pass	100	present=true, policy=reject
2	DKIM signing	fail	0	present=false
3	SPF record present and valid	pass	100	present=true, raw="v=spf1 include:_cidrs.wikimedia.org ~all", qualifier=softfail
24	MTA-STS & TLS-RPT	fail	0	policy_ok=false
25	BIMI + VMC	fail	0	no_bimi
75	Branded domain email address (vs free Gmail/Yahoo)	pass	100	branded=true, provider=generic
76	Email provider class (Workspace / 365 / Zoho / self-hosted / shared)	warn	70	provider=unclassified_enterprise, mx=mx-in1001.wikimedia.org\|mx-in2001.wikimedia.org, source=mx_classifier
77	DMARC aggregate reporting enabled (rua=)	pass	100	has_dmarc_reporting=true, audit_flag=true, derived_from_raw=true, source=derived_from_raw, dmarc_raw="v=DMARC1; p=reject; rua=mailto:dmarc-rua@wikimedia.org;"
78	Free-email exposure on contact page (gmail/yahoo/outlook visible)	pass	100	Scored
79	Newsletter signup form detected	fail	0	detected=false
80	Email Service Provider (ESP) detected	fail	0	Scored
81	Transactional email provider detected (from SPF includes)	fail	0	Scored
82	SPF lookup count (10-limit deliverability check)	pass	100	lookups=1, limit=10
84	Mailto: direct contact link present	fail	0	Scored
85	Email forwarding service detected (improvmx, forwardemail, etc.)	pass	100	hosts=mx-in1001.wikimedia.org\|mx-in2001.wikimedia.org, kind=unknown
86	Lead magnet / signup incentive detected (free download, ebook, etc.)	pass	100	detected=true, sample=Free quote

Scores are computed under method v0.1 — 2026-04-25. See the methodology for the full factor list and per-factor specifications.