| OK | IPv4 (A) | 30/30 | 1 IPv4 address(es) detected. |
| OK | IPv6 (AAAA) | 10/10 | 1 IPv6 address(es) detected. |
| OK | Name server redundancy | 20/20 | 7 NS record(s); 2 or more required. |
| OK | SOA record | 10/10 | Authoritative zone record. |
| ERROR | DNSSEC chain | 0/15 | Both DS and DNSKEY are required. |
| ERROR | CAA policy | 0/5 | Certificate authority restriction. |
| OK | DNS propagation | 10/10 | Agreement between public resolvers. |
| OK | MX records | 20/20 | 2 MX record(s). |
| OK | SPF | 25/25 | SPF policy published. |
| OK | DMARC | 25/25 | DMARC policy published. |
| ERROR | DKIM | 0/20 | No tested DKIM selector responded. |
| ERROR | MTA-STS | 0/5 | Mail transport policy. |
| ERROR | TLS-RPT | 0/5 | TLS reporting policy. |
| OK | Valid TLS certificate | 55/55 | 27 day(s) remaining. |
| WARNING | Certificate lifetime | 6/10 | Full points require at least 30 days remaining. |
| WARNING | HTTP security headers | 4/35 | 1 of 9 evaluated headers detected. |
| OK | PTR reverse DNS | 30/30 | PTR: www.stadt-koeln.de |
| WARNING | IPv4 diversity | 20/35 | Two or more IPv4 addresses receive full points. |
| OK | IPv6 connectivity | 35/35 | AAAA availability. |
| OK | DNS resolution | 40/40 | At least one address family must resolve. |
| OK | HTTP response | 40/40 | HTTP/2 200 |
| OK | HTTPS final URL | 20/20 | Final URL uses HTTPS. |