{
 "list": {
  "name": "Tranco",
  "list_id": "8P8NV",
  "created_on": "2026-11-08T22:00:02Z",
  "window": "2026-10-10 to 2026-11-08",
  "download": "https://tranco-list.eu/download/8P8NV/1000000"
 },
 "run": {
  "date": "2026-11-09",
  "domains_requested": 1000,
  "fetches_reached": 677,
  "fetches_failed": 323,
  "retried": 90,
  "final_url_http": 3,
  "final_status_classes": {
   "2xx": 540,
   "4xx": 134,
   "5xx": 3
  },
  "failure_reasons": {
   "That domain has no public address.": 217,
   "That domain points to a private or reserved address, so we do not check it.": 12,
   "The site could not be reached.": 39,
   "The site did not answer within 8 seconds.": 50,
   "More than 5 redirects.": 2,
   "That domain is reserved for internal or test use.": 2,
   "Enter a public domain name, not an IP address or an internal name.": 1
  }
 },
 "primary_checks_for_pass_count": [
  "https",
  "hsts",
  "csp",
  "framing",
  "nosniff",
  "referrer",
  "permissions",
  "leaks"
 ],
 "pass_count_distribution_reached_sites": {
  "1": 35,
  "2": 136,
  "3": 140,
  "4": 122,
  "5": 105,
  "6": 103,
  "7": 34,
  "8": 2
 },
 "all_primary_pass": 2,
 "checks": {
  "https": {
   "present_in": 677,
   "pass": 674,
   "warn": 0,
   "fail": 3,
   "info": 0,
   "pass_pct_of_present": 99.6,
   "pass_pct_of_reached": 99.6
  },
  "hsts": {
   "present_in": 677,
   "pass": 338,
   "warn": 93,
   "fail": 246,
   "info": 0,
   "pass_pct_of_present": 49.9,
   "pass_pct_of_reached": 49.9
  },
  "csp": {
   "present_in": 677,
   "pass": 37,
   "warn": 328,
   "fail": 312,
   "info": 0,
   "pass_pct_of_present": 5.5,
   "pass_pct_of_reached": 5.5
  },
  "framing": {
   "present_in": 677,
   "pass": 347,
   "warn": 82,
   "fail": 248,
   "info": 0,
   "pass_pct_of_present": 51.3,
   "pass_pct_of_reached": 51.3
  },
  "nosniff": {
   "present_in": 677,
   "pass": 371,
   "warn": 0,
   "fail": 306,
   "info": 0,
   "pass_pct_of_present": 54.8,
   "pass_pct_of_reached": 54.8
  },
  "referrer": {
   "present_in": 677,
   "pass": 152,
   "warn": 521,
   "fail": 4,
   "info": 0,
   "pass_pct_of_present": 22.5,
   "pass_pct_of_reached": 22.5
  },
  "permissions": {
   "present_in": 677,
   "pass": 147,
   "warn": 530,
   "fail": 0,
   "info": 0,
   "pass_pct_of_present": 21.7,
   "pass_pct_of_reached": 21.7
  },
  "coop": {
   "present_in": 677,
   "pass": 90,
   "warn": 0,
   "fail": 0,
   "info": 587,
   "pass_pct_of_present": 13.3,
   "pass_pct_of_reached": 13.3
  },
  "leaks": {
   "present_in": 677,
   "pass": 546,
   "warn": 131,
   "fail": 0,
   "info": 0,
   "pass_pct_of_present": 80.6,
   "pass_pct_of_reached": 80.6
  },
  "cors": {
   "present_in": 74,
   "pass": 0,
   "warn": 14,
   "fail": 0,
   "info": 60,
   "pass_pct_of_present": 0,
   "pass_pct_of_reached": 0
  },
  "xxss": {
   "present_in": 172,
   "pass": 0,
   "warn": 0,
   "fail": 0,
   "info": 172,
   "pass_pct_of_present": 0,
   "pass_pct_of_reached": 0
  },
  "cookies": {
   "present_in": 395,
   "pass": 164,
   "warn": 231,
   "fail": 0,
   "info": 0,
   "pass_pct_of_present": 41.5,
   "pass_pct_of_reached": 24.2
  }
 },
 "hsts_max_age": {
  "denominator_https_final": 674,
  "no_header": 240,
  "zero_or_missing_max_age": 3,
  "under_6_months": 72,
  "six_months_to_under_1_year": 21,
  "one_year_or_more": 338,
  "two_years_or_more": 75,
  "includeSubDomains": 245,
  "preload": 179
 },
 "csp": {
  "denominator_reached": 677,
  "no_csp_at_all": 312,
  "report_only_only": 25,
  "enforced": 340,
  "enforced_unsafe_inline_flagged": 99,
  "enforced_unsafe_eval_flagged": 146,
  "enforced_wildcard_flagged": 61,
  "enforced_no_object_src_flagged": 180,
  "enforced_no_script_restriction": 133,
  "enforced_pass": 37,
  "unsafe_inline_pct_of_enforced": 29.1,
  "no_csp_pct_of_reached": 46.1
 },
 "version_disclosure": {
  "denominator_reached": 677,
  "with_disclosure": 131,
  "pct": 19.4,
  "by_header": {
   "server": 63,
   "x-powered-by": 65,
   "x-generator": 6
  }
 },
 "cookies": {
  "sites_reached": 677,
  "sites_setting_cookies_on_homepage": 395,
  "sites_with_flag_gap": 231,
  "gap_pct_of_cookie_sites": 58.5,
  "sites_with_cookie_lacking_httponly": 258,
  "note": "Cookie checks run only on the first 20 Set-Cookie headers per response. Flag gap means a cookie lacks Secure (https) or an explicit SameSite."
 },
 "notes": "Percentages use fetches reached as denominator unless the field name says otherwise. Failed fetches are excluded from every percentage."
}