← Check another domain

facebook.com

58/100

C

Scanned 2026-05-12

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	ok	10/10
DKIM selector	missing	0/10
TLS certificate	critical	0/20
WHOIS integrity	whois rate limited	5/10
Subdomain takeover	clean	15/15
MTA-STS / TLSRPT	testing	3/5
DNSSEC	unsigned	0/5

Recommendations

Publish a DKIM key at default._domainkey.facebook.com (v=DKIM1; k=rsa; p=…)
Upgrade _mta-sts.facebook.com from mode=testing to mode=enforce once inbound email flow is verified
Enable DNSSEC on facebook.com — DS records must be published to the com zone by your registrar
TLS certificate for facebook.com expires in 7 days — renew immediately to avoid browser warnings

Details

Area	Detail
DMARC	v=DMARC1; p=reject; rua=mailto:a@dmarc.facebookmail.com; ruf=mailto:fb-dmarc@datafeeds.phishlabs.com; pct=100
SPF	v=spf1 redirect=_spf.facebook.com
DKIM selectors	—
TLS certificate	Critical (7 days remaining) — CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US
WHOIS registrar	—
WHOIS expires	—
Subdomains (72 subdomains scanned, 0 at risk)	72 found
DNSSEC	Unsigned