Last scanned 2h ago · Mar 30, 2026, 10:53 PM
Good progress. SPF and DKIM are in place. DKIM needs attention to complete your protection.
First scan · Mar 30, 2026, 10:53 PM
Detected Record
v=DMARC1; p=reject; rua=mailto:a@dmarc.facebookmail.com; ruf=mailto:fb-dmarc@datafeeds.phishlabs.com; pct=100
Policy
reject
Percentage
100%
Aggregate Reporting
mailto:a@dmarc.facebookmail.com
Forensic Reporting
mailto:fb-dmarc@datafeeds.phishlabs.com
DKIM Alignment
relaxed
SPF Alignment
relaxed
Detected Record
v=spf1 redirect=_spf.facebook.com
All Mechanism
not specified
DNS Lookups
1/10
Record Length
33 bytes
Detected Record
default._domainkey: t=y; k=rsa; p=;
Selector
default
Algorithm
rsa-sha256
Status
REVOKED (empty p= tag)
The DKIM key is revoked (empty p= tag). Publish a new key for this selector.
Detected Record
v=STSv1; id=20191202T113700;
Policy ID
20191202T113700
Policy File
accessible
Mode
testing
Max Age
86400s (below recommended 7d)
MX Match
policy MX matches actual MX
Switch MTA-STS policy from testing to enforce once you have verified TLS works for all senders.
Detected Record
v=TLSRPTv1;rua=mailto:sts-reports@facebookmail.com
Report URI
mailto:sts-reports@facebookmail.com
Publish a BIMI record with your brand SVG logo. Requires DMARC at p=quarantine or p=reject with pct=100.