diff --git a/api/src/domain/inputs/domain-filter.js b/api/src/domain/inputs/domain-filter.js
index c1d8c64b02..2280a63b47 100644
--- a/api/src/domain/inputs/domain-filter.js
+++ b/api/src/domain/inputs/domain-filter.js
@@ -1,16 +1,8 @@
 import { GraphQLInputObjectType, GraphQLEnumType } from 'graphql'
-import {
-  ComparisonEnums,
-  DomainOrderField,
-  DomainTagLabel,
-  StatusEnum,
-} from '../../enums'
+import { ComparisonEnums, DomainOrderField, DomainTagLabel, StatusEnum } from '../../enums'
 
 const filterValueEnumsVals = {}
-const filterValueEnums = [
-  ...StatusEnum.getValues(),
-  ...DomainTagLabel.getValues(),
-]
+const filterValueEnums = [...StatusEnum.getValues(), ...DomainTagLabel.getValues()]
 filterValueEnums.forEach(
   ({ name, value, description }) =>
     (filterValueEnumsVals[name] = {
@@ -21,8 +13,7 @@ filterValueEnums.forEach(
 
 export const domainFilter = new GraphQLInputObjectType({
   name: 'DomainFilter',
-  description:
-    'This object is used to provide filtering options when querying org-claimed domains.',
+  description: 'This object is used to provide filtering options when querying org-claimed domains.',
   fields: () => ({
     filterCategory: {
       type: DomainOrderField,
diff --git a/api/src/domain/loaders/load-domain-connections-by-organizations-id.js b/api/src/domain/loaders/load-domain-connections-by-organizations-id.js
index 8c49af94c8..689855f9f6 100644
--- a/api/src/domain/loaders/load-domain-connections-by-organizations-id.js
+++ b/api/src/domain/loaders/load-domain-connections-by-organizations-id.js
@@ -380,6 +380,21 @@ export const loadDomainConnectionsByOrgId =
             ${domainFilters}
             FILTER domain.archived ${comparison} true
           `
+          } else if (filterValue === 'nxdomain') {
+            domainFilters = aql`
+            ${domainFilters}
+            FILTER domain.rcode ${comparison} "NXDOMAIN"
+          `
+          } else if (filterValue === 'blocked') {
+            domainFilters = aql`
+            ${domainFilters}
+            FILTER domain.blocked ${comparison} true
+          `
+          } else if (filterValue === 'scan-pending') {
+            domainFilters = aql`
+            ${domainFilters}
+            FILTER domain.webScanPending ${comparison} true
+          `
           } else {
             domainFilters = aql`
             ${domainFilters}
diff --git a/api/src/enums/domain-tag-label.js b/api/src/enums/domain-tag-label.js
index d50fe795ee..478070a893 100644
--- a/api/src/enums/domain-tag-label.js
+++ b/api/src/enums/domain-tag-label.js
@@ -13,13 +13,11 @@ export const DomainTagLabel = new GraphQLEnumType({
     },
     PROD: {
       value: 'PROD',
-      description:
-        'Bilingual Label for tagging domains as a production environment.',
+      description: 'Bilingual Label for tagging domains as a production environment.',
     },
     STAGING: {
       value: 'STAGING',
-      description:
-        'English label for tagging domains as a staging environment.',
+      description: 'English label for tagging domains as a staging environment.',
     },
     DEV: {
       value: 'DÉV',
@@ -49,6 +47,18 @@ export const DomainTagLabel = new GraphQLEnumType({
       value: 'archived',
       description: 'English label for tagging domains that are archived.',
     },
+    NXDOMAIN: {
+      value: 'nxdomain',
+      description: 'Label for tagging domains that have an rcode status of NXDOMAIN.',
+    },
+    BLOCKED: {
+      value: 'blocked',
+      description: 'Label for tagging domains that are possibly blocked by a firewall.',
+    },
+    SCAN_PENDING: {
+      value: 'scan-pending',
+      description: 'Label for tagging domains that have a pending web scan.',
+    },
   },
   description: 'An enum used to assign and test user-generated domain tags',
 })
diff --git a/frontend/src/domains/DomainsPage.js b/frontend/src/domains/DomainsPage.js
index e8c19b7a62..5f60321f32 100644
--- a/frontend/src/domains/DomainsPage.js
+++ b/frontend/src/domains/DomainsPage.js
@@ -152,14 +152,17 @@ export default function DomainsPage() {
 
       <InfoPanel isOpen={isOpen} onToggle={onToggle}>
         <InfoBox title={t`Domain`} info={t`The domain address.`} />
-        <InfoBox title={t`Ciphers`} info={t`Shows if the domain uses only ciphers that are strong or acceptable.`} />
-        <InfoBox title={t`Curves`} info={t`Shows if the domain uses only curves that are strong or acceptable.`} />
-        <InfoBox title={t`HSTS`} info={t`Shows if the domain meets the HSTS requirements.`} />
+        {/* Web statuses */}
         <InfoBox
           title={t`HTTPS`}
           info={t`Shows if the domain meets the Hypertext Transfer Protocol Secure (HTTPS) requirements.`}
         />
+        <InfoBox title={t`HSTS`} info={t`Shows if the domain meets the HSTS requirements.`} />
+        <InfoBox title={t`Certificates`} info={t`Shows if the domain has a valid SSL certificate.`} />
         <InfoBox title={t`Protocols`} info={t`Shows if the domain uses acceptable protocols.`} />
+        <InfoBox title={t`Ciphers`} info={t`Shows if the domain uses only ciphers that are strong or acceptable.`} />
+        <InfoBox title={t`Curves`} info={t`Shows if the domain uses only curves that are strong or acceptable.`} />
+        {/* Email statuses */}
         <InfoBox title={t`SPF`} info={t`Shows if the domain meets the Sender Policy Framework (SPF) requirements.`} />
         <InfoBox
           title={t`DKIM`}
@@ -169,6 +172,10 @@ export default function DomainsPage() {
           title={t`DMARC`}
           info={t`Shows if the domain meets the Message Authentication, Reporting, and Conformance (DMARC) requirements.`}
         />
+        {/* Tags */}
+        <InfoBox title={t`NXDOMAIN`} info={t`Tag used to show domains that have an rcode status of NXDOMAIN`} />
+        <InfoBox title={t`BLOCKED`} info={t`Tag used to show domains that are possibly blocked by a firewall.`} />
+        <InfoBox title={t`SCAN PENDING`} info={t`Tag used to show domains that have a pending web scan.`} />
       </InfoPanel>
 
       <ErrorBoundary FallbackComponent={ErrorFallbackMessage}>
diff --git a/frontend/src/graphql/queries.js b/frontend/src/graphql/queries.js
index ea7588da83..8b81cf6a49 100644
--- a/frontend/src/graphql/queries.js
+++ b/frontend/src/graphql/queries.js
@@ -546,6 +546,7 @@ export const PAGINATED_ORG_DOMAINS = gql`
             claimTags
             hidden
             archived
+            rcode
             blocked
             webScanPending
           }
diff --git a/frontend/src/locales/en.po b/frontend/src/locales/en.po
index 87c0a62eed..a7b0e14947 100644
--- a/frontend/src/locales/en.po
+++ b/frontend/src/locales/en.po
@@ -311,7 +311,7 @@ msgstr "Any products or related services provided to you by TBS are and will rem
 #~ msgid "Application Portfolio Management (APM) systems; and"
 #~ msgstr "Application Portfolio Management (APM) systems; and"
 
-#: src/organizationDetails/OrganizationDomains.js:233
+#: src/organizationDetails/OrganizationDomains.js:236
 msgid "Apply"
 msgstr "Apply"
 
@@ -325,7 +325,7 @@ msgid "Archive domain"
 msgstr "Archive domain"
 
 #: src/admin/AdminDomainCard.js:51
-#: src/organizationDetails/OrganizationDomains.js:103
+#: src/organizationDetails/OrganizationDomains.js:106
 msgid "Archived"
 msgstr "Archived"
 
@@ -364,6 +364,11 @@ msgstr "Authenticate"
 msgid "BETA"
 msgstr "BETA"
 
+#: src/domains/DomainsPage.js:177
+#: src/organizationDetails/OrganizationDomains.js:314
+msgid "BLOCKED"
+msgstr "BLOCKED"
+
 #: src/auth/ForgotPasswordPage.js:101
 #: src/createOrganization/CreateOrganizationPage.js:228
 msgid "Back"
@@ -387,6 +392,7 @@ msgstr "Blank fields will not be included when updating the organization."
 
 #: src/domains/DomainCard.js:136
 #: src/guidance/WebGuidance.js:83
+#: src/organizationDetails/OrganizationDomains.js:100
 msgid "Blocked"
 msgstr "Blocked"
 
@@ -429,7 +435,8 @@ msgid "Certificate chain info could not be found during the scan."
 msgstr "Certificate chain info could not be found during the scan."
 
 #: src/domains/DomainCard.js:186
-#: src/organizationDetails/OrganizationDomains.js:279
+#: src/domains/DomainsPage.js:161
+#: src/organizationDetails/OrganizationDomains.js:288
 msgid "Certificates"
 msgstr "Certificates"
 
@@ -480,9 +487,9 @@ msgid "Check your associated Tracker email for the verification link"
 msgstr "Check your associated Tracker email for the verification link"
 
 #: src/domains/DomainCard.js:188
-#: src/domains/DomainsPage.js:155
+#: src/domains/DomainsPage.js:163
 #: src/guidance/WebTLSResults.js:101
-#: src/organizationDetails/OrganizationDomains.js:280
+#: src/organizationDetails/OrganizationDomains.js:290
 msgid "Ciphers"
 msgstr "Ciphers"
 
@@ -533,7 +540,7 @@ msgstr "Code field must not be empty"
 msgid "Collect and analyze DMARC reports."
 msgstr "Collect and analyze DMARC reports."
 
-#: src/organizationDetails/OrganizationDomains.js:175
+#: src/organizationDetails/OrganizationDomains.js:178
 msgid "Comparison"
 msgstr "Comparison"
 
@@ -680,10 +687,10 @@ msgid "Current Phone Number:"
 msgstr "Current Phone Number:"
 
 #: src/domains/DomainCard.js:189
-#: src/domains/DomainsPage.js:156
+#: src/domains/DomainsPage.js:164
 #: src/guidance/WebTLSResults.js:155
-#: src/organizationDetails/OrganizationDomains.js:281
-#: src/organizationDetails/OrganizationDomains.js:325
+#: src/organizationDetails/OrganizationDomains.js:291
+#: src/organizationDetails/OrganizationDomains.js:344
 msgid "Curves"
 msgstr "Curves"
 
@@ -692,8 +699,8 @@ msgstr "Curves"
 msgid "Curves Status"
 msgstr "Curves Status"
 
-#: src/domains/DomainsPage.js:165
-#: src/organizationDetails/OrganizationDomains.js:290
+#: src/domains/DomainsPage.js:168
+#: src/organizationDetails/OrganizationDomains.js:295
 msgid "DKIM"
 msgstr "DKIM"
 
@@ -748,8 +755,8 @@ msgstr "DKIM record and keys are deployed and valid"
 #~ msgid "DKIM record could not be found for this selector."
 #~ msgstr "DKIM record could not be found for this selector."
 
-#: src/domains/DomainsPage.js:169
-#: src/organizationDetails/OrganizationDomains.js:294
+#: src/domains/DomainsPage.js:172
+#: src/organizationDetails/OrganizationDomains.js:299
 msgid "DMARC"
 msgstr "DMARC"
 
@@ -841,7 +848,7 @@ msgstr "DNS Scan Complete"
 msgid "DNS scan for domain \"{0}\" has completed."
 msgstr "DNS scan for domain \"{0}\" has completed."
 
-#: src/organizationDetails/OrganizationDomains.js:181
+#: src/organizationDetails/OrganizationDomains.js:184
 msgid "DOES NOT EQUAL"
 msgstr "DOES NOT EQUAL"
 
@@ -932,8 +939,8 @@ msgstr "Disposition"
 #: src/dmarc/DmarcByDomainPage.js:324
 #: src/domains/DomainsPage.js:68
 #: src/domains/DomainsPage.js:154
-#: src/organizationDetails/OrganizationDomains.js:278
-#: src/organizationDetails/OrganizationDomains.js:312
+#: src/organizationDetails/OrganizationDomains.js:281
+#: src/organizationDetails/OrganizationDomains.js:331
 msgid "Domain"
 msgstr "Domain"
 
@@ -992,7 +999,7 @@ msgstr "Domain:"
 #: src/domains/DomainsPage.js:82
 #: src/domains/DomainsPage.js:116
 #: src/organizationDetails/OrganizationDetails.js:143
-#: src/organizationDetails/OrganizationDomains.js:108
+#: src/organizationDetails/OrganizationDomains.js:111
 #: src/summaries/Doughnut.js:50
 #: src/summaries/Doughnut.js:75
 #: src/user/MyTrackerPage.js:82
@@ -1015,7 +1022,7 @@ msgstr "Don't have an account? <0>Sign up</0>"
 #~ msgid "Dploy DKIM records and keys for all domains and senders; and"
 #~ msgstr "Dploy DKIM records and keys for all domains and senders; and"
 
-#: src/organizationDetails/OrganizationDomains.js:178
+#: src/organizationDetails/OrganizationDomains.js:181
 msgid "EQUALS"
 msgstr "EQUALS"
 
@@ -1186,8 +1193,8 @@ msgstr "Enter your user account's verified email address and we will send you a
 msgid "Envelope From"
 msgstr "Envelope From"
 
-#: src/guidance/WebConnectionResults.js:138
-#: src/guidance/WebConnectionResults.js:178
+#: src/guidance/WebConnectionResults.js:143
+#: src/guidance/WebConnectionResults.js:184
 msgid "Eventually"
 msgstr "Eventually"
 
@@ -1205,7 +1212,7 @@ msgstr "Export to CSV"
 
 #: src/dmarc/DmarcReportPage.js:129
 #: src/dmarc/DmarcReportPage.js:130
-#: src/organizationDetails/OrganizationDomains.js:223
+#: src/organizationDetails/OrganizationDomains.js:226
 msgid "Fail"
 msgstr "Fail"
 
@@ -1254,7 +1261,7 @@ msgstr "February"
 #~ msgid "Filters"
 #~ msgstr "Filters"
 
-#: src/organizationDetails/OrganizationDomains.js:138
+#: src/organizationDetails/OrganizationDomains.js:141
 msgid "Filters:"
 msgstr "Filters:"
 
@@ -1399,12 +1406,13 @@ msgstr "Guidance results"
 #~ msgstr "Guidance:"
 
 #: src/domains/DomainCard.js:162
+#: src/organizationDetails/OrganizationDomains.js:310
 msgid "HIDDEN"
 msgstr "HIDDEN"
 
 #: src/domains/DomainCard.js:185
-#: src/domains/DomainsPage.js:157
-#: src/organizationDetails/OrganizationDomains.js:282
+#: src/domains/DomainsPage.js:160
+#: src/organizationDetails/OrganizationDomains.js:287
 msgid "HSTS"
 msgstr "HSTS"
 
@@ -1412,19 +1420,19 @@ msgstr "HSTS"
 #~ msgid "HSTS Age:"
 #~ msgstr "HSTS Age:"
 
-#: src/guidance/WebConnectionResults.js:212
+#: src/guidance/WebConnectionResults.js:218
 msgid "HSTS Includes Subdomains"
 msgstr "HSTS Includes Subdomains"
 
-#: src/guidance/WebConnectionResults.js:194
+#: src/guidance/WebConnectionResults.js:200
 msgid "HSTS Max Age"
 msgstr "HSTS Max Age"
 
-#: src/guidance/WebConnectionResults.js:185
+#: src/guidance/WebConnectionResults.js:191
 msgid "HSTS Parsed"
 msgstr "HSTS Parsed"
 
-#: src/guidance/WebConnectionResults.js:203
+#: src/guidance/WebConnectionResults.js:209
 msgid "HSTS Preloaded"
 msgstr "HSTS Preloaded"
 
@@ -1450,12 +1458,12 @@ msgid "HTTP Upgrades"
 msgstr "HTTP Upgrades"
 
 #: src/domains/DomainCard.js:184
-#: src/domains/DomainsPage.js:159
+#: src/domains/DomainsPage.js:157
 #: src/organizationDetails/OrganizationDomains.js:284
 msgid "HTTPS"
 msgstr "HTTPS"
 
-#: src/guidance/WebConnectionResults.js:153
+#: src/guidance/WebConnectionResults.js:159
 msgid "HTTPS (443) Chain"
 msgstr "HTTPS (443) Chain"
 
@@ -1468,11 +1476,11 @@ msgstr "HTTPS Configuration Summary"
 msgid "HTTPS Configured"
 msgstr "HTTPS Configured"
 
-#: src/guidance/WebConnectionResults.js:174
+#: src/guidance/WebConnectionResults.js:180
 msgid "HTTPS Downgrades"
 msgstr "HTTPS Downgrades"
 
-#: src/guidance/WebConnectionResults.js:163
+#: src/guidance/WebConnectionResults.js:169
 msgid "HTTPS Live"
 msgstr "HTTPS Live"
 
@@ -1522,7 +1530,7 @@ msgstr "Heartbleed Vulnerable"
 #~ msgstr "Help us make government websites more secure. Please complete the following steps to become compliant with the Government of Canada's web security standards. If you have any questions about this process, please <0>contact us</0>."
 
 #: src/admin/AdminDomainCard.js:44
-#: src/organizationDetails/OrganizationDomains.js:102
+#: src/organizationDetails/OrganizationDomains.js:105
 msgid "Hidden"
 msgstr "Hidden"
 
@@ -1561,6 +1569,7 @@ msgid "I agree to all <0>Terms, Privacy Policy & Code of Conduct Guidelines <1/>
 msgstr "I agree to all <0>Terms, Privacy Policy & Code of Conduct Guidelines <1/></0>"
 
 #: src/organizationDetails/OrganizationDomains.js:98
+#: src/organizationDetails/OrganizationDomains.js:308
 msgid "INACTIVE"
 msgstr "INACTIVE"
 
@@ -1629,8 +1638,8 @@ msgstr "If you believe this was caused by a problem with Tracker, please <0>Repo
 msgid "If your organization has no affiliated users within Tracker, contact the <0>TBS Cyber Security</0> to assist in onboarding."
 msgstr "If your organization has no affiliated users within Tracker, contact the <0>TBS Cyber Security</0> to assist in onboarding."
 
-#: src/guidance/WebConnectionResults.js:138
-#: src/guidance/WebConnectionResults.js:178
+#: src/guidance/WebConnectionResults.js:141
+#: src/guidance/WebConnectionResults.js:184
 msgid "Immediately"
 msgstr "Immediately"
 
@@ -1792,7 +1801,7 @@ msgstr "Individuals from a departmental information technology group may contact
 #~ msgid "Individuals with questions about the accuracy of their domain’s compliance data may contact the TBS Cyber Security mailbox."
 #~ msgstr "Individuals with questions about the accuracy of their domain’s compliance data may contact the TBS Cyber Security mailbox."
 
-#: src/organizationDetails/OrganizationDomains.js:220
+#: src/organizationDetails/OrganizationDomains.js:223
 msgid "Info"
 msgstr "Info"
 
@@ -2040,9 +2049,14 @@ msgstr "Must Staple"
 #~ msgstr "My Tracker"
 
 #: src/organizationDetails/OrganizationDomains.js:93
+#: src/organizationDetails/OrganizationDomains.js:303
 msgid "NEW"
 msgstr "NEW"
 
+#: src/domains/DomainsPage.js:176
+msgid "NXDOMAIN"
+msgstr "NXDOMAIN"
+
 #: src/admin/WebCheckPage.js:60
 #: src/createOrganization/CreateOrganizationPage.js:173
 #: src/createOrganization/CreateOrganizationPage.js:178
@@ -2083,8 +2097,8 @@ msgstr "Negative"
 #~ msgid "Neutral tags highlight relevant configuration details, but are not addressed within policy requirements and have no impact on scoring."
 #~ msgstr "Neutral tags highlight relevant configuration details, but are not addressed within policy requirements and have no impact on scoring."
 
-#: src/guidance/WebConnectionResults.js:138
-#: src/guidance/WebConnectionResults.js:178
+#: src/guidance/WebConnectionResults.js:144
+#: src/guidance/WebConnectionResults.js:184
 msgid "Never"
 msgstr "Never"
 
@@ -2125,10 +2139,10 @@ msgstr "New Value:"
 #~ msgstr "Next"
 
 #: src/guidance/WebConnectionResults.js:126
-#: src/guidance/WebConnectionResults.js:166
-#: src/guidance/WebConnectionResults.js:188
-#: src/guidance/WebConnectionResults.js:206
-#: src/guidance/WebConnectionResults.js:215
+#: src/guidance/WebConnectionResults.js:172
+#: src/guidance/WebConnectionResults.js:194
+#: src/guidance/WebConnectionResults.js:212
+#: src/guidance/WebConnectionResults.js:221
 #: src/guidance/WebTLSResults.js:233
 #: src/guidance/WebTLSResults.js:291
 #: src/guidance/WebTLSResults.js:302
@@ -2153,7 +2167,7 @@ msgstr "No DKIM selectors are currently attached to this domain. Please contact
 
 #: src/admin/AdminDomains.js:156
 #: src/domains/DomainsPage.js:89
-#: src/organizationDetails/OrganizationDomains.js:246
+#: src/organizationDetails/OrganizationDomains.js:249
 msgid "No Domains"
 msgstr "No Domains"
 
@@ -2261,6 +2275,13 @@ msgstr "Not Before:"
 msgid "Not Implemented"
 msgstr "Not Implemented"
 
+#: src/guidance/WebConnectionResults.js:139
+#: src/guidance/WebConnectionResults.js:203
+#: src/guidance/WebConnectionResults.js:212
+#: src/guidance/WebConnectionResults.js:221
+msgid "Not available"
+msgstr "Not available"
+
 #: src/app/ContactUsPage.js:24
 msgid "Note that compliance data does not automatically refresh. Modifications to domains could take 24 hours to update."
 msgstr "Note that compliance data does not automatically refresh. Modifications to domains could take 24 hours to update."
@@ -2386,6 +2407,7 @@ msgid "PREVIEW"
 msgstr "PREVIEW"
 
 #: src/organizationDetails/OrganizationDomains.js:94
+#: src/organizationDetails/OrganizationDomains.js:304
 msgid "PROD"
 msgstr "PROD"
 
@@ -2395,7 +2417,7 @@ msgstr "Page {0} of {1}"
 
 #: src/dmarc/DmarcReportPage.js:120
 #: src/dmarc/DmarcReportPage.js:121
-#: src/organizationDetails/OrganizationDomains.js:217
+#: src/organizationDetails/OrganizationDomains.js:220
 msgid "Pass"
 msgstr "Pass"
 
@@ -2574,8 +2596,8 @@ msgstr "Protect domains that do not send email - GOV.UK (www.gov.uk)"
 #: src/domains/DomainCard.js:187
 #: src/domains/DomainsPage.js:162
 #: src/guidance/WebTLSResults.js:52
-#: src/organizationDetails/OrganizationDomains.js:287
-#: src/organizationDetails/OrganizationDomains.js:326
+#: src/organizationDetails/OrganizationDomains.js:289
+#: src/organizationDetails/OrganizationDomains.js:345
 msgid "Protocols"
 msgstr "Protocols"
 
@@ -2777,8 +2799,13 @@ msgstr "Rotate DKIM keys annually."
 msgid "SAN List:"
 msgstr "SAN List:"
 
-#: src/domains/DomainsPage.js:163
-#: src/organizationDetails/OrganizationDomains.js:288
+#: src/domains/DomainsPage.js:178
+#: src/organizationDetails/OrganizationDomains.js:315
+msgid "SCAN PENDING"
+msgstr "SCAN PENDING"
+
+#: src/domains/DomainsPage.js:166
+#: src/organizationDetails/OrganizationDomains.js:293
 msgid "SPF"
 msgstr "SPF"
 
@@ -2835,6 +2862,7 @@ msgstr "SPF record is deployed and valid"
 #~ msgstr "SSL scan for domain \"{0}\" has completed."
 
 #: src/organizationDetails/OrganizationDomains.js:95
+#: src/organizationDetails/OrganizationDomains.js:305
 msgid "STAGING"
 msgstr "STAGING"
 
@@ -2857,6 +2885,7 @@ msgstr "Scan Domain"
 
 #: src/domains/DomainCard.js:141
 #: src/guidance/GuidancePage.js:140
+#: src/organizationDetails/OrganizationDomains.js:101
 msgid "Scan Pending"
 msgstr "Scan Pending"
 
@@ -2894,8 +2923,8 @@ msgstr "Search by initiated by, resource name"
 
 #: src/dmarc/DmarcByDomainPage.js:221
 #: src/dmarc/DmarcByDomainPage.js:292
-#: src/domains/DomainsPage.js:189
-#: src/organizationDetails/OrganizationDomains.js:313
+#: src/domains/DomainsPage.js:196
+#: src/organizationDetails/OrganizationDomains.js:332
 msgid "Search for a domain"
 msgstr "Search for a domain"
 
@@ -2998,15 +3027,15 @@ msgstr "Showing data for period:"
 msgid "Shows if all the certificates in the bundle provided by the server were sent in the correct order."
 msgstr "Shows if all the certificates in the bundle provided by the server were sent in the correct order."
 
-#: src/guidance/WebConnectionResults.js:182
+#: src/guidance/WebConnectionResults.js:188
 msgid "Shows if the HSTS (HTTP Strict Transport Security) header is present."
 msgstr "Shows if the HSTS (HTTP Strict Transport Security) header is present."
 
-#: src/guidance/WebConnectionResults.js:209
+#: src/guidance/WebConnectionResults.js:215
 msgid "Shows if the HSTS header includes the includeSubdomains directive."
 msgstr "Shows if the HSTS header includes the includeSubdomains directive."
 
-#: src/guidance/WebConnectionResults.js:200
+#: src/guidance/WebConnectionResults.js:206
 msgid "Shows if the HSTS header includes the preload directive."
 msgstr "Shows if the HSTS header includes the preload directive."
 
@@ -3018,11 +3047,11 @@ msgstr "Shows if the HTTP connection is live."
 msgid "Shows if the HTTP endpoint upgrades to HTTPS upgrade immediately, eventually (after the first redirect), or never."
 msgstr "Shows if the HTTP endpoint upgrades to HTTPS upgrade immediately, eventually (after the first redirect), or never."
 
-#: src/guidance/WebConnectionResults.js:160
+#: src/guidance/WebConnectionResults.js:166
 msgid "Shows if the HTTPS connection is live."
 msgstr "Shows if the HTTPS connection is live."
 
-#: src/guidance/WebConnectionResults.js:170
+#: src/guidance/WebConnectionResults.js:176
 msgid "Shows if the HTTPS endpoint downgrades to unsecured HTTP immediately, eventually, or never."
 msgstr "Shows if the HTTPS endpoint downgrades to unsecured HTTP immediately, eventually, or never."
 
@@ -3030,7 +3059,8 @@ msgstr "Shows if the HTTPS endpoint downgrades to unsecured HTTP immediately, ev
 msgid "Shows if the certificate bundle provided from the server included the root certificate."
 msgstr "Shows if the certificate bundle provided from the server included the root certificate."
 
-#: src/organizationDetails/OrganizationDomains.js:279
+#: src/domains/DomainsPage.js:161
+#: src/organizationDetails/OrganizationDomains.js:288
 msgid "Shows if the domain has a valid SSL certificate."
 msgstr "Shows if the domain has a valid SSL certificate."
 
@@ -3049,43 +3079,43 @@ msgstr "Shows if the domain has a valid SSL certificate."
 #~ msgid "Shows if the domain is policy compliant."
 #~ msgstr "Shows if the domain is policy compliant."
 
-#: src/domains/DomainsPage.js:166
-#: src/organizationDetails/OrganizationDomains.js:291
+#: src/domains/DomainsPage.js:169
+#: src/organizationDetails/OrganizationDomains.js:296
 msgid "Shows if the domain meets the DomainKeys Identified Mail (DKIM) requirements."
 msgstr "Shows if the domain meets the DomainKeys Identified Mail (DKIM) requirements."
 
-#: src/domains/DomainsPage.js:157
-#: src/organizationDetails/OrganizationDomains.js:282
+#: src/domains/DomainsPage.js:160
+#: src/organizationDetails/OrganizationDomains.js:287
 msgid "Shows if the domain meets the HSTS requirements."
 msgstr "Shows if the domain meets the HSTS requirements."
 
-#: src/domains/DomainsPage.js:160
+#: src/domains/DomainsPage.js:158
 #: src/organizationDetails/OrganizationDomains.js:285
 msgid "Shows if the domain meets the Hypertext Transfer Protocol Secure (HTTPS) requirements."
 msgstr "Shows if the domain meets the Hypertext Transfer Protocol Secure (HTTPS) requirements."
 
-#: src/domains/DomainsPage.js:170
-#: src/organizationDetails/OrganizationDomains.js:295
+#: src/domains/DomainsPage.js:173
+#: src/organizationDetails/OrganizationDomains.js:300
 msgid "Shows if the domain meets the Message Authentication, Reporting, and Conformance (DMARC) requirements."
 msgstr "Shows if the domain meets the Message Authentication, Reporting, and Conformance (DMARC) requirements."
 
-#: src/domains/DomainsPage.js:163
-#: src/organizationDetails/OrganizationDomains.js:288
+#: src/domains/DomainsPage.js:166
+#: src/organizationDetails/OrganizationDomains.js:293
 msgid "Shows if the domain meets the Sender Policy Framework (SPF) requirements."
 msgstr "Shows if the domain meets the Sender Policy Framework (SPF) requirements."
 
 #: src/domains/DomainsPage.js:162
-#: src/organizationDetails/OrganizationDomains.js:287
+#: src/organizationDetails/OrganizationDomains.js:289
 msgid "Shows if the domain uses acceptable protocols."
 msgstr "Shows if the domain uses acceptable protocols."
 
-#: src/domains/DomainsPage.js:155
-#: src/organizationDetails/OrganizationDomains.js:280
+#: src/domains/DomainsPage.js:163
+#: src/organizationDetails/OrganizationDomains.js:290
 msgid "Shows if the domain uses only ciphers that are strong or acceptable."
 msgstr "Shows if the domain uses only ciphers that are strong or acceptable."
 
-#: src/domains/DomainsPage.js:156
-#: src/organizationDetails/OrganizationDomains.js:281
+#: src/domains/DomainsPage.js:164
+#: src/organizationDetails/OrganizationDomains.js:291
 msgid "Shows if the domain uses only curves that are strong or acceptable."
 msgstr "Shows if the domain uses only curves that are strong or acceptable."
 
@@ -3117,7 +3147,7 @@ msgstr "Shows if the server was found to be vulnerable to the Heartbleed vulnera
 msgid "Shows if the server was found to be vulnerable to the ROBOT vulnerability."
 msgstr "Shows if the server was found to be vulnerable to the ROBOT vulnerability."
 
-#: src/guidance/WebConnectionResults.js:191
+#: src/guidance/WebConnectionResults.js:197
 msgid "Shows the duration of time, in seconds, that the HSTS header is valid."
 msgstr "Shows the duration of time, in seconds, that the HSTS header is valid."
 
@@ -3215,7 +3245,7 @@ msgstr "Staging"
 #~ msgid "Status"
 #~ msgstr "Status"
 
-#: src/organizationDetails/OrganizationDomains.js:191
+#: src/organizationDetails/OrganizationDomains.js:194
 msgid "Status or tag"
 msgstr "Status or tag"
 
@@ -3282,6 +3312,7 @@ msgid "TBS reserves the right to refuse service, and may reject your application
 msgstr "TBS reserves the right to refuse service, and may reject your application for an account, or cancel an existing account, for any reason, at our sole discretion."
 
 #: src/organizationDetails/OrganizationDomains.js:96
+#: src/organizationDetails/OrganizationDomains.js:306
 msgid "TEST"
 msgstr "TEST"
 
@@ -3305,10 +3336,53 @@ msgstr "TLS Summary"
 msgid "TLS scan for domain \"{0}\" has completed."
 msgstr "TLS scan for domain \"{0}\" has completed."
 
-#: src/organizationDetails/OrganizationDomains.js:165
+#: src/organizationDetails/OrganizationDomains.js:168
 msgid "Tag"
 msgstr "Tag"
 
+#: src/organizationDetails/OrganizationDomains.js:304
+msgid "Tag used to show domains as a production environment."
+msgstr "Tag used to show domains as a production environment."
+
+#: src/organizationDetails/OrganizationDomains.js:305
+msgid "Tag used to show domains as a staging environment."
+msgstr "Tag used to show domains as a staging environment."
+
+#: src/organizationDetails/OrganizationDomains.js:306
+msgid "Tag used to show domains as a test environment."
+msgstr "Tag used to show domains as a test environment."
+
+#: src/organizationDetails/OrganizationDomains.js:311
+msgid "Tag used to show domains as hidden from affecting the organization summary scores."
+msgstr "Tag used to show domains as hidden from affecting the organization summary scores."
+
+#: src/organizationDetails/OrganizationDomains.js:303
+msgid "Tag used to show domains as new to the system."
+msgstr "Tag used to show domains as new to the system."
+
+#: src/organizationDetails/OrganizationDomains.js:307
+msgid "Tag used to show domains as web-hosting."
+msgstr "Tag used to show domains as web-hosting."
+
+#: src/organizationDetails/OrganizationDomains.js:308
+msgid "Tag used to show domains that are not active."
+msgstr "Tag used to show domains that are not active."
+
+#: src/domains/DomainsPage.js:177
+#: src/organizationDetails/OrganizationDomains.js:314
+msgid "Tag used to show domains that are possibly blocked by a firewall."
+msgstr "Tag used to show domains that are possibly blocked by a firewall."
+
+#: src/domains/DomainsPage.js:178
+#: src/organizationDetails/OrganizationDomains.js:315
+msgid "Tag used to show domains that have a pending web scan."
+msgstr "Tag used to show domains that have a pending web scan."
+
+#: src/domains/DomainsPage.js:176
+#: src/organizationDetails/OrganizationDomains.js:313
+msgid "Tag used to show domains that have an rcode status of NXDOMAIN"
+msgstr "Tag used to show domains that have an rcode status of NXDOMAIN"
+
 #: src/guidance/GuidanceTagDetails.js:47
 msgid "Technical implementation guidance:"
 msgstr "Technical implementation guidance:"
@@ -3369,7 +3443,7 @@ msgstr "The advice, guidance or services provided to you by TBS will be provided
 
 #: src/dmarc/DmarcByDomainPage.js:324
 #: src/domains/DomainsPage.js:154
-#: src/organizationDetails/OrganizationDomains.js:278
+#: src/organizationDetails/OrganizationDomains.js:281
 msgid "The domain address."
 msgstr "The domain address."
 
@@ -3575,8 +3649,8 @@ msgstr "Two Factor Authentication"
 msgid "Two-Factor Authentication:"
 msgstr "Two-Factor Authentication:"
 
-#: src/guidance/WebConnectionResults.js:143
-#: src/guidance/WebConnectionResults.js:219
+#: src/guidance/WebConnectionResults.js:149
+#: src/guidance/WebConnectionResults.js:225
 msgid "URL:"
 msgstr "URL:"
 
@@ -3815,7 +3889,7 @@ msgstr "Users"
 msgid "Users exercise due diligence in ensuring the accuracy of the materials reproduced;"
 msgstr "Users exercise due diligence in ensuring the accuracy of the materials reproduced;"
 
-#: src/organizationDetails/OrganizationDomains.js:155
+#: src/organizationDetails/OrganizationDomains.js:158
 msgid "Value"
 msgstr "Value"
 
@@ -3870,6 +3944,7 @@ msgid "Vulnerability Scan Dashboard"
 msgstr "Vulnerability Scan Dashboard"
 
 #: src/organizationDetails/OrganizationDomains.js:97
+#: src/organizationDetails/OrganizationDomains.js:307
 msgid "WEB"
 msgstr "WEB"
 
@@ -4012,10 +4087,10 @@ msgid "Would you like to request an invite to {orgName}?"
 msgstr "Would you like to request an invite to {orgName}?"
 
 #: src/guidance/WebConnectionResults.js:126
-#: src/guidance/WebConnectionResults.js:166
-#: src/guidance/WebConnectionResults.js:188
-#: src/guidance/WebConnectionResults.js:206
-#: src/guidance/WebConnectionResults.js:215
+#: src/guidance/WebConnectionResults.js:172
+#: src/guidance/WebConnectionResults.js:194
+#: src/guidance/WebConnectionResults.js:212
+#: src/guidance/WebConnectionResults.js:221
 #: src/guidance/WebTLSResults.js:233
 #: src/guidance/WebTLSResults.js:291
 #: src/guidance/WebTLSResults.js:302
diff --git a/frontend/src/locales/fr.po b/frontend/src/locales/fr.po
index 04f67805b8..9bcbe09051 100644
--- a/frontend/src/locales/fr.po
+++ b/frontend/src/locales/fr.po
@@ -311,7 +311,7 @@ msgstr "Tous les produits ou services connexes qui vous sont fournis par le SCT
 #~ msgid "Application Portfolio Management (APM) systems; and"
 #~ msgstr "les systèmes de gestion du portefeuille d’applications (GPA);"
 
-#: src/organizationDetails/OrganizationDomains.js:233
+#: src/organizationDetails/OrganizationDomains.js:236
 msgid "Apply"
 msgstr "Appliquer"
 
@@ -325,7 +325,7 @@ msgid "Archive domain"
 msgstr "Archiver ce domaine"
 
 #: src/admin/AdminDomainCard.js:51
-#: src/organizationDetails/OrganizationDomains.js:103
+#: src/organizationDetails/OrganizationDomains.js:106
 msgid "Archived"
 msgstr "Archivé"
 
@@ -364,6 +364,11 @@ msgstr "Authentifier"
 msgid "BETA"
 msgstr "BETA"
 
+#: src/domains/DomainsPage.js:177
+#: src/organizationDetails/OrganizationDomains.js:314
+msgid "BLOCKED"
+msgstr "BLOQUÉ"
+
 #: src/auth/ForgotPasswordPage.js:101
 #: src/createOrganization/CreateOrganizationPage.js:228
 msgid "Back"
@@ -387,6 +392,7 @@ msgstr "Les champs vides ne seront pas pris en compte lors de la mise à jour de
 
 #: src/domains/DomainCard.js:136
 #: src/guidance/WebGuidance.js:83
+#: src/organizationDetails/OrganizationDomains.js:100
 msgid "Blocked"
 msgstr "Bloqué"
 
@@ -429,7 +435,8 @@ msgid "Certificate chain info could not be found during the scan."
 msgstr "Les informations sur la chaîne de certificats n'ont pas pu être trouvées pendant l'analyse."
 
 #: src/domains/DomainCard.js:186
-#: src/organizationDetails/OrganizationDomains.js:279
+#: src/domains/DomainsPage.js:161
+#: src/organizationDetails/OrganizationDomains.js:288
 msgid "Certificates"
 msgstr "Certificats"
 
@@ -480,9 +487,9 @@ msgid "Check your associated Tracker email for the verification link"
 msgstr "Vérifiez le lien de vérification dans votre courriel de suivi associé."
 
 #: src/domains/DomainCard.js:188
-#: src/domains/DomainsPage.js:155
+#: src/domains/DomainsPage.js:163
 #: src/guidance/WebTLSResults.js:101
-#: src/organizationDetails/OrganizationDomains.js:280
+#: src/organizationDetails/OrganizationDomains.js:290
 msgid "Ciphers"
 msgstr "Ciphers"
 
@@ -533,7 +540,7 @@ msgstr "Le champ de code ne doit pas être vide"
 msgid "Collect and analyze DMARC reports."
 msgstr "Recueillir et analyser les rapports DMARC."
 
-#: src/organizationDetails/OrganizationDomains.js:175
+#: src/organizationDetails/OrganizationDomains.js:178
 msgid "Comparison"
 msgstr "Comparaison"
 
@@ -680,10 +687,10 @@ msgid "Current Phone Number:"
 msgstr "Numéro de téléphone actuel:"
 
 #: src/domains/DomainCard.js:189
-#: src/domains/DomainsPage.js:156
+#: src/domains/DomainsPage.js:164
 #: src/guidance/WebTLSResults.js:155
-#: src/organizationDetails/OrganizationDomains.js:281
-#: src/organizationDetails/OrganizationDomains.js:325
+#: src/organizationDetails/OrganizationDomains.js:291
+#: src/organizationDetails/OrganizationDomains.js:344
 msgid "Curves"
 msgstr "Courbes"
 
@@ -692,8 +699,8 @@ msgstr "Courbes"
 msgid "Curves Status"
 msgstr "État des courbes"
 
-#: src/domains/DomainsPage.js:165
-#: src/organizationDetails/OrganizationDomains.js:290
+#: src/domains/DomainsPage.js:168
+#: src/organizationDetails/OrganizationDomains.js:295
 msgid "DKIM"
 msgstr "DKIM"
 
@@ -748,8 +755,8 @@ msgstr "L'enregistrement DKIM et les clés sont déployés et valides"
 #~ msgid "DKIM record could not be found for this selector."
 #~ msgstr "Un enregistrement DKIM n'a pas pu être trouvé pour ce sélecteur."
 
-#: src/domains/DomainsPage.js:169
-#: src/organizationDetails/OrganizationDomains.js:294
+#: src/domains/DomainsPage.js:172
+#: src/organizationDetails/OrganizationDomains.js:299
 msgid "DMARC"
 msgstr "DMARC"
 
@@ -841,7 +848,7 @@ msgstr "Scan DNS terminé"
 msgid "DNS scan for domain \"{0}\" has completed."
 msgstr "Le scan DNS du domaine \"{0}\" est terminé."
 
-#: src/organizationDetails/OrganizationDomains.js:181
+#: src/organizationDetails/OrganizationDomains.js:184
 msgid "DOES NOT EQUAL"
 msgstr "N'EST PAS ÉGAL"
 
@@ -932,8 +939,8 @@ msgstr "Disposition"
 #: src/dmarc/DmarcByDomainPage.js:324
 #: src/domains/DomainsPage.js:68
 #: src/domains/DomainsPage.js:154
-#: src/organizationDetails/OrganizationDomains.js:278
-#: src/organizationDetails/OrganizationDomains.js:312
+#: src/organizationDetails/OrganizationDomains.js:281
+#: src/organizationDetails/OrganizationDomains.js:331
 msgid "Domain"
 msgstr "Domaine"
 
@@ -992,7 +999,7 @@ msgstr "Domaine:"
 #: src/domains/DomainsPage.js:82
 #: src/domains/DomainsPage.js:116
 #: src/organizationDetails/OrganizationDetails.js:143
-#: src/organizationDetails/OrganizationDomains.js:108
+#: src/organizationDetails/OrganizationDomains.js:111
 #: src/summaries/Doughnut.js:50
 #: src/summaries/Doughnut.js:75
 #: src/user/MyTrackerPage.js:82
@@ -1011,7 +1018,7 @@ msgstr "Domaines utilisés pour la validation SPF."
 msgid "Don't have an account? <0>Sign up</0>"
 msgstr "Vous n'avez pas de compte ? <0>S'inscrire</0>"
 
-#: src/organizationDetails/OrganizationDomains.js:178
+#: src/organizationDetails/OrganizationDomains.js:181
 msgid "EQUALS"
 msgstr "ÉGAUX"
 
@@ -1170,8 +1177,8 @@ msgstr "Saisissez l'adresse électronique vérifiée de votre compte d'utilisate
 msgid "Envelope From"
 msgstr "Enveloppe De"
 
-#: src/guidance/WebConnectionResults.js:138
-#: src/guidance/WebConnectionResults.js:178
+#: src/guidance/WebConnectionResults.js:143
+#: src/guidance/WebConnectionResults.js:184
 msgid "Eventually"
 msgstr "Éventuellement"
 
@@ -1189,7 +1196,7 @@ msgstr "Exportation vers CSV"
 
 #: src/dmarc/DmarcReportPage.js:129
 #: src/dmarc/DmarcReportPage.js:130
-#: src/organizationDetails/OrganizationDomains.js:223
+#: src/organizationDetails/OrganizationDomains.js:226
 msgid "Fail"
 msgstr "Échec"
 
@@ -1234,7 +1241,7 @@ msgstr "Février"
 #~ msgid "Filters"
 #~ msgstr "Filtres"
 
-#: src/organizationDetails/OrganizationDomains.js:138
+#: src/organizationDetails/OrganizationDomains.js:141
 msgid "Filters:"
 msgstr "Filtres :"
 
@@ -1371,12 +1378,13 @@ msgstr "Résultats de l'orientation"
 #~ msgstr "Orientation:"
 
 #: src/domains/DomainCard.js:162
+#: src/organizationDetails/OrganizationDomains.js:310
 msgid "HIDDEN"
 msgstr "CACHÉ"
 
 #: src/domains/DomainCard.js:185
-#: src/domains/DomainsPage.js:157
-#: src/organizationDetails/OrganizationDomains.js:282
+#: src/domains/DomainsPage.js:160
+#: src/organizationDetails/OrganizationDomains.js:287
 msgid "HSTS"
 msgstr "HSTS"
 
@@ -1384,19 +1392,19 @@ msgstr "HSTS"
 #~ msgid "HSTS Age:"
 #~ msgstr "Âge du HSTS:"
 
-#: src/guidance/WebConnectionResults.js:212
+#: src/guidance/WebConnectionResults.js:218
 msgid "HSTS Includes Subdomains"
 msgstr "HSTS inclut les sous-domaines"
 
-#: src/guidance/WebConnectionResults.js:194
+#: src/guidance/WebConnectionResults.js:200
 msgid "HSTS Max Age"
 msgstr "HSTS Âge maximum"
 
-#: src/guidance/WebConnectionResults.js:185
+#: src/guidance/WebConnectionResults.js:191
 msgid "HSTS Parsed"
 msgstr "HSTS analysé"
 
-#: src/guidance/WebConnectionResults.js:203
+#: src/guidance/WebConnectionResults.js:209
 msgid "HSTS Preloaded"
 msgstr "HSTS préchargé"
 
@@ -1422,12 +1430,12 @@ msgid "HTTP Upgrades"
 msgstr "Mises à jour HTTP"
 
 #: src/domains/DomainCard.js:184
-#: src/domains/DomainsPage.js:159
+#: src/domains/DomainsPage.js:157
 #: src/organizationDetails/OrganizationDomains.js:284
 msgid "HTTPS"
 msgstr "HTTPS"
 
-#: src/guidance/WebConnectionResults.js:153
+#: src/guidance/WebConnectionResults.js:159
 msgid "HTTPS (443) Chain"
 msgstr "Chaîne HTTPS (443)"
 
@@ -1440,11 +1448,11 @@ msgstr "Résumé de la configuration HTTPS"
 msgid "HTTPS Configured"
 msgstr "HTTPS configuré"
 
-#: src/guidance/WebConnectionResults.js:174
+#: src/guidance/WebConnectionResults.js:180
 msgid "HTTPS Downgrades"
 msgstr "Déclassements HTTPS"
 
-#: src/guidance/WebConnectionResults.js:163
+#: src/guidance/WebConnectionResults.js:169
 msgid "HTTPS Live"
 msgstr "HTTPS Live"
 
@@ -1494,7 +1502,7 @@ msgstr "Vulnérabilité Heartbleed"
 #~ msgstr "Aidez-nous à rendre les sites Web du gouvernement plus sûrs. Veuillez suivre les étapes suivantes pour vous conformer aux normes de sécurité Web du gouvernement du Canada. Si vous avez des questions sur ce processus, veuillez <0>nous contacter</0>."
 
 #: src/admin/AdminDomainCard.js:44
-#: src/organizationDetails/OrganizationDomains.js:102
+#: src/organizationDetails/OrganizationDomains.js:105
 msgid "Hidden"
 msgstr "Caché"
 
@@ -1533,6 +1541,7 @@ msgid "I agree to all <0>Terms, Privacy Policy & Code of Conduct Guidelines <1/>
 msgstr "J'accepte toutes les <0>Conditions générales, la politique de confidentialité et les directives du code de conduite<1/></0>."
 
 #: src/organizationDetails/OrganizationDomains.js:98
+#: src/organizationDetails/OrganizationDomains.js:308
 msgid "INACTIVE"
 msgstr "INACTIF"
 
@@ -1601,8 +1610,8 @@ msgstr "Si vous pensez que cela a été causé par un problème avec Tracker, ve
 msgid "If your organization has no affiliated users within Tracker, contact the <0>TBS Cyber Security</0> to assist in onboarding."
 msgstr "Si votre organisation n'a pas d'utilisateurs affiliés à Suivi, contactez l’<0>équipe responsable de la cybersécurité du SCT</0> pour vous aider à l'intégrer."
 
-#: src/guidance/WebConnectionResults.js:138
-#: src/guidance/WebConnectionResults.js:178
+#: src/guidance/WebConnectionResults.js:141
+#: src/guidance/WebConnectionResults.js:184
 msgid "Immediately"
 msgstr "Immédiatement"
 
@@ -1764,7 +1773,7 @@ msgstr "Les personnes d'un groupe ministériel de technologie de l'information p
 #~ msgid "Individuals with questions about the accuracy of their domain’s compliance data may contact the TBS Cyber Security mailbox."
 #~ msgstr "Les personnes ayant des questions sur l'exactitude des données de conformité de leur domaine peuvent contacter la boîte aux lettres de la cybersécurité du SCT."
 
-#: src/organizationDetails/OrganizationDomains.js:220
+#: src/organizationDetails/OrganizationDomains.js:223
 msgid "Info"
 msgstr "Info"
 
@@ -2008,9 +2017,14 @@ msgid "Must Staple"
 msgstr "Agrafe obligatoire"
 
 #: src/organizationDetails/OrganizationDomains.js:93
+#: src/organizationDetails/OrganizationDomains.js:303
 msgid "NEW"
 msgstr "NOUVEAU"
 
+#: src/domains/DomainsPage.js:176
+msgid "NXDOMAIN"
+msgstr "NXDOMAIN"
+
 #: src/admin/WebCheckPage.js:60
 #: src/createOrganization/CreateOrganizationPage.js:173
 #: src/createOrganization/CreateOrganizationPage.js:178
@@ -2051,8 +2065,8 @@ msgstr "Négatif"
 #~ msgid "Neutral tags highlight relevant configuration details, but are not addressed within policy requirements and have no impact on scoring."
 #~ msgstr "Les balises neutres mettent en évidence les détails pertinents de la configuration, mais ne sont pas traitées dans le cadre des exigences de la politique et n'ont aucun impact sur la notation."
 
-#: src/guidance/WebConnectionResults.js:138
-#: src/guidance/WebConnectionResults.js:178
+#: src/guidance/WebConnectionResults.js:144
+#: src/guidance/WebConnectionResults.js:184
 msgid "Never"
 msgstr "Jamais"
 
@@ -2093,10 +2107,10 @@ msgstr "Nouvelle valeur :"
 #~ msgstr "Suivant"
 
 #: src/guidance/WebConnectionResults.js:126
-#: src/guidance/WebConnectionResults.js:166
-#: src/guidance/WebConnectionResults.js:188
-#: src/guidance/WebConnectionResults.js:206
-#: src/guidance/WebConnectionResults.js:215
+#: src/guidance/WebConnectionResults.js:172
+#: src/guidance/WebConnectionResults.js:194
+#: src/guidance/WebConnectionResults.js:212
+#: src/guidance/WebConnectionResults.js:221
 #: src/guidance/WebTLSResults.js:233
 #: src/guidance/WebTLSResults.js:291
 #: src/guidance/WebTLSResults.js:302
@@ -2121,7 +2135,7 @@ msgstr "Aucun sélecteur DKIM n'est actuellement associé à ce domaine. Veuille
 
 #: src/admin/AdminDomains.js:156
 #: src/domains/DomainsPage.js:89
-#: src/organizationDetails/OrganizationDomains.js:246
+#: src/organizationDetails/OrganizationDomains.js:249
 msgid "No Domains"
 msgstr "Aucun domaine"
 
@@ -2229,6 +2243,13 @@ msgstr "Pas avant :"
 msgid "Not Implemented"
 msgstr "Non mis en œuvre"
 
+#: src/guidance/WebConnectionResults.js:139
+#: src/guidance/WebConnectionResults.js:203
+#: src/guidance/WebConnectionResults.js:212
+#: src/guidance/WebConnectionResults.js:221
+msgid "Not available"
+msgstr "Non disponible"
+
 #: src/app/ContactUsPage.js:24
 msgid "Note that compliance data does not automatically refresh. Modifications to domains could take 24 hours to update."
 msgstr "Notez que les données de conformité ne sont pas automatiquement actualisées. La mise à jour des modifications apportées aux domaines peut prendre 24 heures."
@@ -2354,6 +2375,7 @@ msgid "PREVIEW"
 msgstr "APERÇU"
 
 #: src/organizationDetails/OrganizationDomains.js:94
+#: src/organizationDetails/OrganizationDomains.js:304
 msgid "PROD"
 msgstr "PROD"
 
@@ -2363,7 +2385,7 @@ msgstr "Page {0} de {1}"
 
 #: src/dmarc/DmarcReportPage.js:120
 #: src/dmarc/DmarcReportPage.js:121
-#: src/organizationDetails/OrganizationDomains.js:217
+#: src/organizationDetails/OrganizationDomains.js:220
 msgid "Pass"
 msgstr "Passez"
 
@@ -2542,8 +2564,8 @@ msgstr "Protéger les domaines qui n'envoient pas de courrier électronique - GO
 #: src/domains/DomainCard.js:187
 #: src/domains/DomainsPage.js:162
 #: src/guidance/WebTLSResults.js:52
-#: src/organizationDetails/OrganizationDomains.js:287
-#: src/organizationDetails/OrganizationDomains.js:326
+#: src/organizationDetails/OrganizationDomains.js:289
+#: src/organizationDetails/OrganizationDomains.js:345
 msgid "Protocols"
 msgstr "Protocoles"
 
@@ -2741,8 +2763,13 @@ msgstr "Effectuer la rotation des clés DKIM annuellement."
 msgid "SAN List:"
 msgstr "Liste des SAN :"
 
-#: src/domains/DomainsPage.js:163
-#: src/organizationDetails/OrganizationDomains.js:288
+#: src/domains/DomainsPage.js:178
+#: src/organizationDetails/OrganizationDomains.js:315
+msgid "SCAN PENDING"
+msgstr "SCAN EN ATTENTE"
+
+#: src/domains/DomainsPage.js:166
+#: src/organizationDetails/OrganizationDomains.js:293
 msgid "SPF"
 msgstr "SPF"
 
@@ -2799,8 +2826,9 @@ msgstr "L'enregistrement SPF est déployé et valide"
 #~ msgstr "Le scan SSL pour le domaine \"{0}\" est terminé."
 
 #: src/organizationDetails/OrganizationDomains.js:95
+#: src/organizationDetails/OrganizationDomains.js:305
 msgid "STAGING"
-msgstr "DEV"
+msgstr "DÉV"
 
 #: src/admin/UserListModal.js:265
 msgid "SUPER_ADMIN"
@@ -2821,6 +2849,7 @@ msgstr "Domaine de balayage"
 
 #: src/domains/DomainCard.js:141
 #: src/guidance/GuidancePage.js:140
+#: src/organizationDetails/OrganizationDomains.js:101
 msgid "Scan Pending"
 msgstr "Scan en attente"
 
@@ -2858,8 +2887,8 @@ msgstr "Recherche par initié par, nom de la ressource"
 
 #: src/dmarc/DmarcByDomainPage.js:221
 #: src/dmarc/DmarcByDomainPage.js:292
-#: src/domains/DomainsPage.js:189
-#: src/organizationDetails/OrganizationDomains.js:313
+#: src/domains/DomainsPage.js:196
+#: src/organizationDetails/OrganizationDomains.js:332
 msgid "Search for a domain"
 msgstr "Rechercher un domaine"
 
@@ -2962,15 +2991,15 @@ msgstr "Affichage des données pour la période:"
 msgid "Shows if all the certificates in the bundle provided by the server were sent in the correct order."
 msgstr "Indique si tous les certificats du paquet fourni par le serveur ont été envoyés dans le bon ordre."
 
-#: src/guidance/WebConnectionResults.js:182
+#: src/guidance/WebConnectionResults.js:188
 msgid "Shows if the HSTS (HTTP Strict Transport Security) header is present."
 msgstr "Indique si l'en-tête HSTS (HTTP Strict Transport Security) est présent."
 
-#: src/guidance/WebConnectionResults.js:209
+#: src/guidance/WebConnectionResults.js:215
 msgid "Shows if the HSTS header includes the includeSubdomains directive."
 msgstr "Indique si l'en-tête HSTS inclut la directive includeSubdomains."
 
-#: src/guidance/WebConnectionResults.js:200
+#: src/guidance/WebConnectionResults.js:206
 msgid "Shows if the HSTS header includes the preload directive."
 msgstr "Indique si l'en-tête HSTS inclut la directive preload."
 
@@ -2982,11 +3011,11 @@ msgstr "Indique si la connexion HTTP est active."
 msgid "Shows if the HTTP endpoint upgrades to HTTPS upgrade immediately, eventually (after the first redirect), or never."
 msgstr "Indique si le point d'extrémité HTTP passe à la mise à niveau HTTPS immédiatement, éventuellement (après la première redirection) ou jamais."
 
-#: src/guidance/WebConnectionResults.js:160
+#: src/guidance/WebConnectionResults.js:166
 msgid "Shows if the HTTPS connection is live."
 msgstr "Indique si la connexion HTTPS est active."
 
-#: src/guidance/WebConnectionResults.js:170
+#: src/guidance/WebConnectionResults.js:176
 msgid "Shows if the HTTPS endpoint downgrades to unsecured HTTP immediately, eventually, or never."
 msgstr "Indique si le point de terminaison HTTPS passe en HTTP non sécurisé immédiatement, éventuellement ou jamais."
 
@@ -2994,7 +3023,8 @@ msgstr "Indique si le point de terminaison HTTPS passe en HTTP non sécurisé im
 msgid "Shows if the certificate bundle provided from the server included the root certificate."
 msgstr "Indique si le paquet de certificats fourni par le serveur comprend le certificat racine."
 
-#: src/organizationDetails/OrganizationDomains.js:279
+#: src/domains/DomainsPage.js:161
+#: src/organizationDetails/OrganizationDomains.js:288
 msgid "Shows if the domain has a valid SSL certificate."
 msgstr "Indique si le domaine dispose d'un certificat SSL valide."
 
@@ -3013,17 +3043,17 @@ msgstr "Indique si le domaine dispose d'un certificat SSL valide."
 #~ msgid "Shows if the domain is policy compliant."
 #~ msgstr "Indique si le domaine est conforme à la politique."
 
-#: src/domains/DomainsPage.js:166
-#: src/organizationDetails/OrganizationDomains.js:291
+#: src/domains/DomainsPage.js:169
+#: src/organizationDetails/OrganizationDomains.js:296
 msgid "Shows if the domain meets the DomainKeys Identified Mail (DKIM) requirements."
 msgstr "Indique si le domaine répond aux exigences de DomainKeys Identified Mail (DKIM)."
 
-#: src/domains/DomainsPage.js:157
-#: src/organizationDetails/OrganizationDomains.js:282
+#: src/domains/DomainsPage.js:160
+#: src/organizationDetails/OrganizationDomains.js:287
 msgid "Shows if the domain meets the HSTS requirements."
 msgstr "Indique si le domaine répond aux exigences du HSTS."
 
-#: src/domains/DomainsPage.js:160
+#: src/domains/DomainsPage.js:158
 #: src/organizationDetails/OrganizationDomains.js:285
 msgid "Shows if the domain meets the Hypertext Transfer Protocol Secure (HTTPS) requirements."
 msgstr "Indique si le domaine répond aux exigences du protocole de transfert hypertexte sécurisé (HTTPS)."
@@ -3034,28 +3064,28 @@ msgstr "Indique si le domaine répond aux exigences du protocole de transfert hy
 #~ msgid "Shows if the domain meets the Hypertext Transfer ol Secure (HTTPS) requirements."
 #~ msgstr "Indique si le domaine répond aux exigences de Hypertext Transfer ol Secure (HTTPS)."
 
-#: src/domains/DomainsPage.js:170
-#: src/organizationDetails/OrganizationDomains.js:295
+#: src/domains/DomainsPage.js:173
+#: src/organizationDetails/OrganizationDomains.js:300
 msgid "Shows if the domain meets the Message Authentication, Reporting, and Conformance (DMARC) requirements."
 msgstr "Indique si le domaine répond aux exigences de Message Authentication, Reporting, and Conformance (DMARC)."
 
-#: src/domains/DomainsPage.js:163
-#: src/organizationDetails/OrganizationDomains.js:288
+#: src/domains/DomainsPage.js:166
+#: src/organizationDetails/OrganizationDomains.js:293
 msgid "Shows if the domain meets the Sender Policy Framework (SPF) requirements."
 msgstr "Indique si le domaine répond aux exigences du Sender Policy Framework (SPF)."
 
 #: src/domains/DomainsPage.js:162
-#: src/organizationDetails/OrganizationDomains.js:287
+#: src/organizationDetails/OrganizationDomains.js:289
 msgid "Shows if the domain uses acceptable protocols."
 msgstr "Indique si le domaine utilise des protocoles acceptables."
 
-#: src/domains/DomainsPage.js:155
-#: src/organizationDetails/OrganizationDomains.js:280
+#: src/domains/DomainsPage.js:163
+#: src/organizationDetails/OrganizationDomains.js:290
 msgid "Shows if the domain uses only ciphers that are strong or acceptable."
 msgstr "Indique si le domaine utilise uniquement des ciphers forts ou acceptables."
 
-#: src/domains/DomainsPage.js:156
-#: src/organizationDetails/OrganizationDomains.js:281
+#: src/domains/DomainsPage.js:164
+#: src/organizationDetails/OrganizationDomains.js:291
 msgid "Shows if the domain uses only curves that are strong or acceptable."
 msgstr "Indique si le domaine utilise uniquement des courbes fortes ou acceptables"
 
@@ -3087,7 +3117,7 @@ msgstr "Indique si le serveur s'est avéré vulnérable à la faille Heartbleed.
 msgid "Shows if the server was found to be vulnerable to the ROBOT vulnerability."
 msgstr "Indique si le serveur a été jugé vulnérable à la vulnérabilité ROBOT."
 
-#: src/guidance/WebConnectionResults.js:191
+#: src/guidance/WebConnectionResults.js:197
 msgid "Shows the duration of time, in seconds, that the HSTS header is valid."
 msgstr "Indique la durée, en secondes, pendant laquelle l'en-tête HSTS est valide."
 
@@ -3181,7 +3211,7 @@ msgstr "Adresse IP source"
 msgid "Staging"
 msgstr "Dév"
 
-#: src/organizationDetails/OrganizationDomains.js:191
+#: src/organizationDetails/OrganizationDomains.js:194
 msgid "Status or tag"
 msgstr "Statut ou étiquette"
 
@@ -3244,6 +3274,7 @@ msgid "TBS reserves the right to refuse service, and may reject your application
 msgstr "TBS se réserve le droit de refuser le service, de rejeter votre demande de compte ou d'annuler un compte existant, pour quelque raison que ce soit, à sa seule discrétion."
 
 #: src/organizationDetails/OrganizationDomains.js:96
+#: src/organizationDetails/OrganizationDomains.js:306
 msgid "TEST"
 msgstr "TEST"
 
@@ -3267,10 +3298,53 @@ msgstr "Résumé TLS"
 msgid "TLS scan for domain \"{0}\" has completed."
 msgstr "Le scan TLS pour le domaine \"{0}\" est terminé."
 
-#: src/organizationDetails/OrganizationDomains.js:165
+#: src/organizationDetails/OrganizationDomains.js:168
 msgid "Tag"
 msgstr "Tag"
 
+#: src/organizationDetails/OrganizationDomains.js:304
+msgid "Tag used to show domains as a production environment."
+msgstr "Balise utilisée pour montrer que les domaines sont un environnement de production."
+
+#: src/organizationDetails/OrganizationDomains.js:305
+msgid "Tag used to show domains as a staging environment."
+msgstr "Balise utilisée pour montrer les domaines comme un environnement d'essai."
+
+#: src/organizationDetails/OrganizationDomains.js:306
+msgid "Tag used to show domains as a test environment."
+msgstr "Balise utilisée pour montrer les domaines en tant qu'environnement de test."
+
+#: src/organizationDetails/OrganizationDomains.js:311
+msgid "Tag used to show domains as hidden from affecting the organization summary scores."
+msgstr "Balise utilisée pour indiquer que les domaines sont cachés et n'affectent pas les notes de synthèse de l'organisation."
+
+#: src/organizationDetails/OrganizationDomains.js:303
+msgid "Tag used to show domains as new to the system."
+msgstr "Étiquette utilisée pour indiquer que les domaines sont nouveaux dans le système."
+
+#: src/organizationDetails/OrganizationDomains.js:307
+msgid "Tag used to show domains as web-hosting."
+msgstr "Balise utilisée pour afficher les domaines en tant qu'hébergement web."
+
+#: src/organizationDetails/OrganizationDomains.js:308
+msgid "Tag used to show domains that are not active."
+msgstr "Balise utilisée pour afficher les domaines qui ne sont pas actifs."
+
+#: src/domains/DomainsPage.js:177
+#: src/organizationDetails/OrganizationDomains.js:314
+msgid "Tag used to show domains that are possibly blocked by a firewall."
+msgstr "Balise utilisée pour afficher les domaines susceptibles d'être bloqués par un pare-feu."
+
+#: src/domains/DomainsPage.js:178
+#: src/organizationDetails/OrganizationDomains.js:315
+msgid "Tag used to show domains that have a pending web scan."
+msgstr "Balise utilisée pour afficher les domaines dont l'analyse web est en cours."
+
+#: src/domains/DomainsPage.js:176
+#: src/organizationDetails/OrganizationDomains.js:313
+msgid "Tag used to show domains that have an rcode status of NXDOMAIN"
+msgstr "Balise utilisée pour afficher les domaines dont le code rcode est NXDOMAIN"
+
 #: src/guidance/GuidanceTagDetails.js:47
 msgid "Technical implementation guidance:"
 msgstr "Conseils techniques de mise en œuvre :"
@@ -3331,7 +3405,7 @@ msgstr "Les conseils, orientations ou services qui vous sont fournis par le SCT
 
 #: src/dmarc/DmarcByDomainPage.js:324
 #: src/domains/DomainsPage.js:154
-#: src/organizationDetails/OrganizationDomains.js:278
+#: src/organizationDetails/OrganizationDomains.js:281
 msgid "The domain address."
 msgstr "L'adresse du domaine."
 
@@ -3529,8 +3603,8 @@ msgstr "Authentification à deux facteurs"
 msgid "Two-Factor Authentication:"
 msgstr "Authentification à deux facteurs:"
 
-#: src/guidance/WebConnectionResults.js:143
-#: src/guidance/WebConnectionResults.js:219
+#: src/guidance/WebConnectionResults.js:149
+#: src/guidance/WebConnectionResults.js:225
 msgid "URL:"
 msgstr "URL :"
 
@@ -3769,7 +3843,7 @@ msgstr "Utilisateurs"
 msgid "Users exercise due diligence in ensuring the accuracy of the materials reproduced;"
 msgstr "Les utilisateurs font preuve de diligence raisonnable en s'assurant de l'exactitude des documents reproduits;"
 
-#: src/organizationDetails/OrganizationDomains.js:155
+#: src/organizationDetails/OrganizationDomains.js:158
 msgid "Value"
 msgstr "Valeur"
 
@@ -3824,6 +3898,7 @@ msgid "Vulnerability Scan Dashboard"
 msgstr "Tableau de bord de l'analyse des vulnérabilités"
 
 #: src/organizationDetails/OrganizationDomains.js:97
+#: src/organizationDetails/OrganizationDomains.js:307
 msgid "WEB"
 msgstr "WEB"
 
@@ -3954,10 +4029,10 @@ msgid "Would you like to request an invite to {orgName}?"
 msgstr "Souhaitez-vous demander une invitation à {orgName} ?"
 
 #: src/guidance/WebConnectionResults.js:126
-#: src/guidance/WebConnectionResults.js:166
-#: src/guidance/WebConnectionResults.js:188
-#: src/guidance/WebConnectionResults.js:206
-#: src/guidance/WebConnectionResults.js:215
+#: src/guidance/WebConnectionResults.js:172
+#: src/guidance/WebConnectionResults.js:194
+#: src/guidance/WebConnectionResults.js:212
+#: src/guidance/WebConnectionResults.js:221
 #: src/guidance/WebTLSResults.js:233
 #: src/guidance/WebTLSResults.js:291
 #: src/guidance/WebTLSResults.js:302
diff --git a/frontend/src/organizationDetails/OrganizationDomains.js b/frontend/src/organizationDetails/OrganizationDomains.js
index 0d77ad4393..9c9d430e01 100644
--- a/frontend/src/organizationDetails/OrganizationDomains.js
+++ b/frontend/src/organizationDetails/OrganizationDomains.js
@@ -96,6 +96,9 @@ export function OrganizationDomains({ orgSlug }) {
     { value: t`TEST`, text: t`Test` },
     { value: t`WEB`, text: t`Web` },
     { value: t`INACTIVE`, text: t`Inactive` },
+    { value: `NXDOMAIN`, text: `NXDOMAIN` },
+    { value: `BLOCKED`, text: t`Blocked` },
+    { value: `SCAN_PENDING`, text: t`Scan Pending` },
   ]
 
   const hiddenFilterOptions = [
@@ -276,15 +279,17 @@ export function OrganizationDomains({ orgSlug }) {
     <Box>
       <InfoPanel isOpen={isOpen} onToggle={onToggle}>
         <InfoBox title={t`Domain`} info={t`The domain address.`} />
-        <InfoBox title={t`Certificates`} info={t`Shows if the domain has a valid SSL certificate.`} />
-        <InfoBox title={t`Ciphers`} info={t`Shows if the domain uses only ciphers that are strong or acceptable.`} />
-        <InfoBox title={t`Curves`} info={t`Shows if the domain uses only curves that are strong or acceptable.`} />
-        <InfoBox title={t`HSTS`} info={t`Shows if the domain meets the HSTS requirements.`} />
+        {/* Web statuses */}
         <InfoBox
           title={t`HTTPS`}
           info={t`Shows if the domain meets the Hypertext Transfer Protocol Secure (HTTPS) requirements.`}
         />
+        <InfoBox title={t`HSTS`} info={t`Shows if the domain meets the HSTS requirements.`} />
+        <InfoBox title={t`Certificates`} info={t`Shows if the domain has a valid SSL certificate.`} />
         <InfoBox title={t`Protocols`} info={t`Shows if the domain uses acceptable protocols.`} />
+        <InfoBox title={t`Ciphers`} info={t`Shows if the domain uses only ciphers that are strong or acceptable.`} />
+        <InfoBox title={t`Curves`} info={t`Shows if the domain uses only curves that are strong or acceptable.`} />
+        {/* Email statuses */}
         <InfoBox title={t`SPF`} info={t`Shows if the domain meets the Sender Policy Framework (SPF) requirements.`} />
         <InfoBox
           title={t`DKIM`}
@@ -294,6 +299,20 @@ export function OrganizationDomains({ orgSlug }) {
           title={t`DMARC`}
           info={t`Shows if the domain meets the Message Authentication, Reporting, and Conformance (DMARC) requirements.`}
         />
+        {/* Tags */}
+        <InfoBox title={t`NEW`} info={t`Tag used to show domains as new to the system.`} />
+        <InfoBox title={t`PROD`} info={t`Tag used to show domains as a production environment.`} />
+        <InfoBox title={t`STAGING`} info={t`Tag used to show domains as a staging environment.`} />
+        <InfoBox title={t`TEST`} info={t`Tag used to show domains as a test environment.`} />
+        <InfoBox title={t`WEB`} info={t`Tag used to show domains as web-hosting.`} />
+        <InfoBox title={t`INACTIVE`} info={t`Tag used to show domains that are not active.`} />
+        <InfoBox
+          title={t`HIDDEN`}
+          info={t`Tag used to show domains as hidden from affecting the organization summary scores.`}
+        />
+        <InfoBox title={`NXDOMAIN`} info={t`Tag used to show domains that have an rcode status of NXDOMAIN`} />
+        <InfoBox title={t`BLOCKED`} info={t`Tag used to show domains that are possibly blocked by a firewall.`} />
+        <InfoBox title={t`SCAN PENDING`} info={t`Tag used to show domains that have a pending web scan.`} />
       </InfoPanel>
 
       <SearchBox