{ "hostname": "facebook.com", "jobId": "cms08bbso001oueaaca2d00mk", "status": "DONE", "overallScore": 86, "groups": [ { "group": "website", "score": 86, "present": true }, { "group": "mail", "score": 86, "present": true } ], "generatedAt": "2026-07-25T17:34:59.611Z", "finishedAt": "2026-07-25T10:31:30.362Z", "categories": [ { "category": "dns", "group": "website", "status": "DONE", "score": 88, "findings": [ { "id": "dns.ns.present", "status": "pass", "severity": "info", "titleKey": "findings.dns.ns.title", "verdictKey": "findings.dns.ns.verdict.present", "verdictParams": { "count": 4, "ipv6count": 4 }, "whyItMattersKey": "findings.dns.ns.why", "technicalDetails": { "rows": [ [ "a.ns.facebook.com", "129.134.30.12", "2a03:2880:f0fc:c:face:b00c:0:35" ], [ "b.ns.facebook.com", "129.134.31.12", "2a03:2880:f0fd:c:face:b00c:0:35" ], [ "c.ns.facebook.com", "185.89.218.12", "2a03:2880:f1fc:c:face:b00c:0:35" ], [ "d.ns.facebook.com", "185.89.219.12", "2a03:2880:f1fd:c:face:b00c:0:35" ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ipv4", "tech.columns.ipv6" ] }, "whatIsCheckedKey": "findings.dns.ns.what", "requirementLevel": "required" }, { "id": "dns.ipv4.present", "status": "pass", "severity": "info", "titleKey": "findings.dns.ipv4.title", "verdictKey": "findings.dns.ipv4.verdict.present", "verdictParams": { "count": 1, "address": "157.240.17.35" }, "whyItMattersKey": "findings.dns.ipv4.why", "technicalDetails": { "rows": [ [ "157.240.17.35" ] ], "columns": [ "tech.columns.ipv4" ] }, "whatIsCheckedKey": "findings.dns.ipv4.what", "requirementLevel": "required" }, { "id": "dns.ipv6.present", "status": "pass", "severity": "info", "titleKey": "findings.dns.ipv6.title", "verdictKey": "findings.dns.ipv6.verdict.present", "verdictParams": { "count": 1, "address": "2a03:2880:f15b:83:face:b00c:0:25de" }, "whyItMattersKey": "findings.dns.ipv6.why", "technicalDetails": { "rows": [ [ "2a03:2880:f15b:83:face:b00c:0:25de" ] ], "columns": [ "tech.columns.ipv6" ] }, "whatIsCheckedKey": "findings.dns.ipv6.what", "requirementLevel": "recommended" }, { "id": "dns.mx.present", "status": "pass", "severity": "info", "titleKey": "findings.dns.mx.title", "verdictKey": "findings.dns.mx.verdict.present", "verdictParams": { "count": 1 }, "whyItMattersKey": "findings.dns.mx.why", "technicalDetails": { "rows": [ [ 10, "smtpin.vvv.facebook.com" ] ], "columns": [ "tech.columns.priority", "tech.columns.mx_host" ] }, "whatIsCheckedKey": "findings.dns.mx.what", "requirementLevel": "optional" }, { "id": "dns.caa.present", "status": "pass", "severity": "info", "titleKey": "findings.dns.caa.title", "verdictKey": "findings.dns.caa.verdict.present", "verdictParams": { "count": 1 }, "whyItMattersKey": "findings.dns.caa.why", "technicalDetails": { "rows": [ [ 0, "issue", "digicert.com; account=271b0beda0771d006aa3a6c11b05187d456d6c239b46cb5241196095b09c92af" ] ], "columns": [ "tech.columns.flag", "tech.columns.tag", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.caa.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc8659" }, { "id": "dns.dnssec.insecure", "status": "not_found", "severity": "medium", "titleKey": "findings.dns.dnssec.title", "verdictKey": "findings.dns.dnssec.verdict.insecure", "whyItMattersKey": "findings.dns.dnssec.why", "technicalDetails": { "rows": [ [ "DNSKEY", false ], [ "AD", false ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.dnssec.what", "recommendationKey": "findings.dns.dnssec.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc4033" } ] }, { "category": "dnsserver", "group": "website", "status": "DONE", "score": 100, "findings": [ { "id": "dns.health.answer.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.answer.title", "verdictKey": "findings.dns.health.answer.verdict.ok", "whyItMattersKey": "findings.dns.health.answer.why", "whatIsCheckedKey": "findings.dns.health.answer.what", "requirementLevel": "required" }, { "id": "dns.health.nscount.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.nscount.title", "verdictKey": "findings.dns.health.nscount.verdict.ok", "verdictParams": { "count": 4 }, "whyItMattersKey": "findings.dns.health.nscount.why", "technicalDetails": { "rows": [ [ "a.ns.facebook.com" ], [ "b.ns.facebook.com" ], [ "c.ns.facebook.com" ], [ "d.ns.facebook.com" ] ], "columns": [ "tech.columns.nameserver" ] }, "whatIsCheckedKey": "findings.dns.health.nscount.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc2182" }, { "id": "dns.health.responding.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.responding.title", "verdictKey": "findings.dns.health.responding.verdict.ok", "verdictParams": { "count": 4 }, "whyItMattersKey": "findings.dns.health.responding.why", "technicalDetails": { "rows": [ [ "a.ns.facebook.com", "129.134.30.12", true, true, 4207849484 ], [ "b.ns.facebook.com", "129.134.31.12", true, true, 4207849484 ], [ "c.ns.facebook.com", "185.89.218.12", true, true, 4207849484 ], [ "d.ns.facebook.com", "185.89.219.12", true, true, 4207849484 ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.responding", "tech.columns.authoritative", "tech.columns.serial" ] }, "whatIsCheckedKey": "findings.dns.health.responding.what", "requirementLevel": "required" }, { "id": "dns.health.authoritative.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.authoritative.title", "verdictKey": "findings.dns.health.authoritative.verdict.ok", "verdictParams": { "count": 4 }, "whyItMattersKey": "findings.dns.health.authoritative.why", "technicalDetails": { "rows": [ [ "a.ns.facebook.com", "129.134.30.12", true, true, 4207849484 ], [ "b.ns.facebook.com", "129.134.31.12", true, true, 4207849484 ], [ "c.ns.facebook.com", "185.89.218.12", true, true, 4207849484 ], [ "d.ns.facebook.com", "185.89.219.12", true, true, 4207849484 ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.responding", "tech.columns.authoritative", "tech.columns.serial" ] }, "whatIsCheckedKey": "findings.dns.health.authoritative.what", "requirementLevel": "required" }, { "id": "dns.health.serialsync.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.serialsync.title", "verdictKey": "findings.dns.health.serialsync.verdict.ok", "whyItMattersKey": "findings.dns.health.serialsync.why", "technicalDetails": { "rows": [ [ "a.ns.facebook.com", "129.134.30.12", true, true, 4207849484 ], [ "b.ns.facebook.com", "129.134.31.12", true, true, 4207849484 ], [ "c.ns.facebook.com", "185.89.218.12", true, true, 4207849484 ], [ "d.ns.facebook.com", "185.89.219.12", true, true, 4207849484 ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.responding", "tech.columns.authoritative", "tech.columns.serial" ] }, "whatIsCheckedKey": "findings.dns.health.serialsync.what", "requirementLevel": "recommended" }, { "id": "dns.health.openresolver.closed", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.openresolver.title", "verdictKey": "findings.dns.health.openresolver.verdict.closed", "whyItMattersKey": "findings.dns.health.openresolver.why", "technicalDetails": { "rows": [ [ "a.ns.facebook.com", "129.134.30.12", true, true, 4207849484 ], [ "b.ns.facebook.com", "129.134.31.12", true, true, 4207849484 ], [ "c.ns.facebook.com", "185.89.218.12", true, true, 4207849484 ], [ "d.ns.facebook.com", "185.89.219.12", true, true, 4207849484 ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.responding", "tech.columns.authoritative", "tech.columns.serial" ] }, "whatIsCheckedKey": "findings.dns.health.openresolver.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc5358" }, { "id": "dns.health.publicips.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.publicips.title", "verdictKey": "findings.dns.health.publicips.verdict.ok", "whyItMattersKey": "findings.dns.health.publicips.why", "technicalDetails": { "rows": [ [ "a.ns.facebook.com", "129.134.30.12", true ], [ "a.ns.facebook.com", "2a03:2880:f0fc:c:face:b00c:0:35", true ], [ "b.ns.facebook.com", "129.134.31.12", true ], [ "b.ns.facebook.com", "2a03:2880:f0fd:c:face:b00c:0:35", true ], [ "c.ns.facebook.com", "185.89.218.12", true ], [ "c.ns.facebook.com", "2a03:2880:f1fc:c:face:b00c:0:35", true ], [ "d.ns.facebook.com", "185.89.219.12", true ], [ "d.ns.facebook.com", "2a03:2880:f1fd:c:face:b00c:0:35", true ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.public" ] }, "whatIsCheckedKey": "findings.dns.health.publicips.what", "requirementLevel": "required" }, { "id": "dns.health.dispersion.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.dispersion.title", "verdictKey": "findings.dns.health.dispersion.verdict.ok", "verdictParams": { "networks": 8 }, "whyItMattersKey": "findings.dns.health.dispersion.why", "technicalDetails": { "rows": [ [ "a.ns.facebook.com", "129.134.30.12", "129.134.30.0/24" ], [ "a.ns.facebook.com", "2a03:2880:f0fc:c:face:b00c:0:35", "2a03:2880:f0fc::/48" ], [ "b.ns.facebook.com", "129.134.31.12", "129.134.31.0/24" ], [ "b.ns.facebook.com", "2a03:2880:f0fd:c:face:b00c:0:35", "2a03:2880:f0fd::/48" ], [ "c.ns.facebook.com", "185.89.218.12", "185.89.218.0/24" ], [ "c.ns.facebook.com", "2a03:2880:f1fc:c:face:b00c:0:35", "2a03:2880:f1fc::/48" ], [ "d.ns.facebook.com", "185.89.219.12", "185.89.219.0/24" ], [ "d.ns.facebook.com", "2a03:2880:f1fd:c:face:b00c:0:35", "2a03:2880:f1fd::/48" ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.network" ] }, "whatIsCheckedKey": "findings.dns.health.dispersion.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc2182" }, { "id": "dns.health.ipv6.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.ipv6.title", "verdictKey": "findings.dns.health.ipv6.verdict.ok", "verdictParams": { "count": 4 }, "whyItMattersKey": "findings.dns.health.ipv6.why", "technicalDetails": { "rows": [ [ "a.ns.facebook.com", "2a03:2880:f0fc:c:face:b00c:0:35", true ], [ "b.ns.facebook.com", "2a03:2880:f0fd:c:face:b00c:0:35", true ], [ "c.ns.facebook.com", "2a03:2880:f1fc:c:face:b00c:0:35", true ], [ "d.ns.facebook.com", "2a03:2880:f1fd:c:face:b00c:0:35", true ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ipv6", "tech.columns.reachable" ] }, "whatIsCheckedKey": "findings.dns.health.ipv6.what", "requirementLevel": "recommended" }, { "id": "dns.health.soarefresh.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.soarefresh.title", "verdictKey": "findings.dns.health.soarefresh.verdict.ok", "verdictParams": { "max": 43200, "min": 1200, "value": 14400 }, "whyItMattersKey": "findings.dns.health.soarefresh.why", "technicalDetails": { "rows": [ [ "MNAME", "a.ns.facebook.com" ], [ "Serial", 4207849484 ], [ "Refresh", 14400 ], [ "Retry", 1800 ], [ "Expire", 604800 ], [ "Minimum TTL", 300 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.soarefresh.what", "requirementLevel": "recommended", "docsUrl": "https://www.ripe.net/publications/docs/ripe-203/" }, { "id": "dns.health.soaretry.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.soaretry.title", "verdictKey": "findings.dns.health.soaretry.verdict.ok", "verdictParams": { "max": 7200, "min": 120, "value": 1800 }, "whyItMattersKey": "findings.dns.health.soaretry.why", "technicalDetails": { "rows": [ [ "MNAME", "a.ns.facebook.com" ], [ "Serial", 4207849484 ], [ "Refresh", 14400 ], [ "Retry", 1800 ], [ "Expire", 604800 ], [ "Minimum TTL", 300 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.soaretry.what", "requirementLevel": "recommended", "docsUrl": "https://www.ripe.net/publications/docs/ripe-203/" }, { "id": "dns.health.soaexpire.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.soaexpire.title", "verdictKey": "findings.dns.health.soaexpire.verdict.ok", "verdictParams": { "max": 2419200, "min": 604800, "value": 604800 }, "whyItMattersKey": "findings.dns.health.soaexpire.why", "technicalDetails": { "rows": [ [ "MNAME", "a.ns.facebook.com" ], [ "Serial", 4207849484 ], [ "Refresh", 14400 ], [ "Retry", 1800 ], [ "Expire", 604800 ], [ "Minimum TTL", 300 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.soaexpire.what", "requirementLevel": "recommended", "docsUrl": "https://www.ripe.net/publications/docs/ripe-203/" }, { "id": "dns.health.sominttl.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.sominttl.title", "verdictKey": "findings.dns.health.sominttl.verdict.ok", "verdictParams": { "max": 86400, "min": 300, "value": 300 }, "whyItMattersKey": "findings.dns.health.sominttl.why", "technicalDetails": { "rows": [ [ "MNAME", "a.ns.facebook.com" ], [ "Serial", 4207849484 ], [ "Refresh", 14400 ], [ "Retry", 1800 ], [ "Expire", 604800 ], [ "Minimum TTL", 300 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.sominttl.what", "requirementLevel": "recommended", "docsUrl": "https://www.ripe.net/publications/docs/ripe-203/" }, { "id": "dns.health.serialformat.integer", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.serialformat.title", "verdictKey": "findings.dns.health.serialformat.verdict.integer", "verdictParams": { "serial": "4207849484" }, "whyItMattersKey": "findings.dns.health.serialformat.why", "technicalDetails": { "rows": [ [ "MNAME", "a.ns.facebook.com" ], [ "Serial", 4207849484 ], [ "Refresh", 14400 ], [ "Retry", 1800 ], [ "Expire", 604800 ], [ "Minimum TTL", 300 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.serialformat.what", "requirementLevel": "optional" }, { "id": "dns.health.parentmatch.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.parentmatch.title", "verdictKey": "findings.dns.health.parentmatch.verdict.ok", "whyItMattersKey": "findings.dns.health.parentmatch.why", "technicalDetails": { "rows": [ [ "a.ns.facebook.com", true, true ], [ "b.ns.facebook.com", true, true ], [ "c.ns.facebook.com", true, true ], [ "d.ns.facebook.com", true, true ] ], "columns": [ "tech.columns.nameserver", "tech.columns.in_zone", "tech.columns.at_parent" ] }, "whatIsCheckedKey": "findings.dns.health.parentmatch.what", "requirementLevel": "recommended" }, { "id": "dns.health.glue.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.glue.title", "verdictKey": "findings.dns.health.glue.verdict.ok", "whyItMattersKey": "findings.dns.health.glue.why", "technicalDetails": { "rows": [ [ "a.ns.facebook.com", "129.134.30.12, 2a03:2880:f0fc:c:face:b00c:0:35", "129.134.30.12, 2a03:2880:f0fc:c:face:b00c:0:35", true ], [ "b.ns.facebook.com", "129.134.31.12, 2a03:2880:f0fd:c:face:b00c:0:35", "129.134.31.12, 2a03:2880:f0fd:c:face:b00c:0:35", true ], [ "c.ns.facebook.com", "185.89.218.12, 2a03:2880:f1fc:c:face:b00c:0:35", "185.89.218.12, 2a03:2880:f1fc:c:face:b00c:0:35", true ], [ "d.ns.facebook.com", "185.89.219.12, 2a03:2880:f1fd:c:face:b00c:0:35", "185.89.219.12, 2a03:2880:f1fd:c:face:b00c:0:35", true ] ], "columns": [ "tech.columns.nameserver", "tech.columns.glue_ips", "tech.columns.authoritative_ips", "tech.columns.match" ] }, "whatIsCheckedKey": "findings.dns.health.glue.what", "requirementLevel": "recommended" }, { "id": "dns.health.primaryatparent.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.primaryatparent.title", "verdictKey": "findings.dns.health.primaryatparent.verdict.ok", "verdictParams": { "primary": "a.ns.facebook.com" }, "whyItMattersKey": "findings.dns.health.primaryatparent.why", "technicalDetails": { "rows": [ [ "a.ns.facebook.com", true, true ], [ "b.ns.facebook.com", true, true ], [ "c.ns.facebook.com", true, true ], [ "d.ns.facebook.com", true, true ] ], "columns": [ "tech.columns.nameserver", "tech.columns.in_zone", "tech.columns.at_parent" ] }, "whatIsCheckedKey": "findings.dns.health.primaryatparent.what", "requirementLevel": "recommended" } ] }, { "category": "http", "group": "website", "status": "DONE", "score": 90, "findings": [ { "id": "http.reachable.https", "status": "pass", "severity": "info", "titleKey": "findings.http.reachable.title", "verdictKey": "findings.http.reachable.verdict.https", "whyItMattersKey": "findings.http.reachable.why", "technicalDetails": { "rows": [ [ "https", true ], [ "http", true ], [ "final_url", "https://www.facebook.com/" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.reachable.what", "requirementLevel": "required" }, { "id": "http.ipv6.reachable", "status": "pass", "severity": "info", "titleKey": "findings.http.ipv6.title", "verdictKey": "findings.http.ipv6.verdict.reachable", "verdictParams": { "address": "2a03:2880:f15b:83:face:b00c:0:25de" }, "whyItMattersKey": "findings.http.ipv6.why", "technicalDetails": { "rows": [ [ "2a03:2880:f15b:83:face:b00c:0:25de" ] ], "columns": [ "tech.columns.ipv6" ] }, "whatIsCheckedKey": "findings.http.ipv6.what", "requirementLevel": "recommended" }, { "id": "http.ipv6content.differ", "status": "fail", "severity": "low", "titleKey": "findings.http.ipv6content.title", "verdictKey": "findings.http.ipv6content.verdict.differ", "verdictParams": { "similarity": 33 }, "whyItMattersKey": "findings.http.ipv6content.why", "whatIsCheckedKey": "findings.http.ipv6content.what", "recommendationKey": "findings.http.ipv6content.recommendation", "recommendationParams": { "similarity": 33 }, "requirementLevel": "recommended" }, { "id": "http.https_redirect.yes", "status": "pass", "severity": "info", "titleKey": "findings.http.https_redirect.title", "verdictKey": "findings.http.https_redirect.verdict.yes", "whyItMattersKey": "findings.http.https_redirect.why", "whatIsCheckedKey": "findings.http.https_redirect.what", "requirementLevel": "recommended" }, { "id": "http.hsts.present", "status": "pass", "severity": "info", "titleKey": "findings.http.hsts.title", "verdictKey": "findings.http.hsts.verdict.present", "whyItMattersKey": "findings.http.hsts.why", "technicalDetails": { "rows": [ [ "header", "max-age=15552000; preload" ], [ "includeSubDomains", false ], [ "preload", true ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.hsts.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6797" }, { "id": "http.csp.present", "status": "pass", "severity": "info", "titleKey": "findings.http.csp.title", "verdictKey": "findings.http.csp.verdict.present", "whyItMattersKey": "findings.http.csp.why", "technicalDetails": { "rows": [ [ "Content-Security-Policy", "default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net *.whatsapp.com *.whatsapp.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-XtTJpmxe' blob: 'self' 'unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com *.instagram.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.csp.what", "requirementLevel": "recommended", "docsUrl": "https://www.w3.org/TR/CSP3/" }, { "id": "http.xfo.present", "status": "pass", "severity": "info", "titleKey": "findings.http.xfo.title", "verdictKey": "findings.http.xfo.verdict.present", "whyItMattersKey": "findings.http.xfo.why", "technicalDetails": { "rows": [ [ "X-Frame-Options", "DENY" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.xfo.what", "requirementLevel": "recommended" }, { "id": "http.xcto.nosniff", "status": "pass", "severity": "info", "titleKey": "findings.http.xcto.title", "verdictKey": "findings.http.xcto.verdict.nosniff", "whyItMattersKey": "findings.http.xcto.why", "whatIsCheckedKey": "findings.http.xcto.what", "requirementLevel": "recommended" }, { "id": "http.referrer.missing", "status": "not_found", "severity": "low", "titleKey": "findings.http.referrer.title", "verdictKey": "findings.http.referrer.verdict.missing", "whyItMattersKey": "findings.http.referrer.why", "whatIsCheckedKey": "findings.http.referrer.what", "recommendationKey": "findings.http.referrer.recommendation", "requirementLevel": "recommended" }, { "id": "http.compression.active", "status": "pass", "severity": "info", "titleKey": "findings.http.compression.title", "verdictKey": "findings.http.compression.verdict.active", "verdictParams": { "encoding": "br" }, "whyItMattersKey": "findings.http.compression.why", "technicalDetails": { "rows": [ [ "content_encoding", "br" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.compression.what", "requirementLevel": "optional" }, { "id": "http.securitytxt.present", "status": "pass", "severity": "info", "titleKey": "findings.http.securitytxt.title", "verdictKey": "findings.http.securitytxt.verdict.present", "whyItMattersKey": "findings.http.securitytxt.why", "technicalDetails": { "rows": [ [ "location", "/.well-known/security.txt" ], [ "contact", true ], [ "expires", true ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.securitytxt.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc9116" }, { "id": "http.http2.supported", "status": "pass", "severity": "info", "titleKey": "findings.http.http2.title", "verdictKey": "findings.http.http2.verdict.supported", "whyItMattersKey": "findings.http.http2.why", "technicalDetails": { "rows": [ [ "negotiated_protocol", "HTTP/2" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.http2.what", "requirementLevel": "recommended" }, { "id": "http.http3.advertised", "status": "pass", "severity": "info", "titleKey": "findings.http.http3.title", "verdictKey": "findings.http.http3.verdict.advertised", "whyItMattersKey": "findings.http.http3.why", "technicalDetails": { "rows": [ [ "alt_svc", "h3=\":443\"; ma=86400" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.http3.what", "requirementLevel": "optional" }, { "id": "http.cookies.none", "status": "not_applicable", "severity": "info", "titleKey": "findings.http.cookies.title", "verdictKey": "findings.http.cookies.verdict.none", "whyItMattersKey": "findings.http.cookies.why", "whatIsCheckedKey": "findings.http.cookies.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6265" }, { "id": "http.mixedcontent.none", "status": "pass", "severity": "info", "titleKey": "findings.http.mixedcontent.title", "verdictKey": "findings.http.mixedcontent.verdict.none", "whyItMattersKey": "findings.http.mixedcontent.why", "whatIsCheckedKey": "findings.http.mixedcontent.what", "requirementLevel": "required" }, { "id": "http.sri.no_external", "status": "not_applicable", "severity": "info", "titleKey": "findings.http.sri.title", "verdictKey": "findings.http.sri.verdict.no_external", "whyItMattersKey": "findings.http.sri.why", "whatIsCheckedKey": "findings.http.sri.what", "requirementLevel": "recommended", "docsUrl": "https://www.w3.org/TR/SRI/" } ] }, { "category": "mail", "group": "mail", "status": "DONE", "score": 71, "findings": [ { "id": "mail.mx.present", "status": "pass", "severity": "info", "titleKey": "findings.mail.mx.title", "verdictKey": "findings.mail.mx.verdict.present", "verdictParams": { "count": 1 }, "whyItMattersKey": "findings.mail.mx.why", "technicalDetails": { "rows": [ [ 10, "smtpin.vvv.facebook.com" ] ], "columns": [ "tech.columns.priority", "tech.columns.mx_host" ] }, "whatIsCheckedKey": "findings.mail.mx.what", "requirementLevel": "required" }, { "id": "mail.spf.weak", "status": "fail", "severity": "medium", "titleKey": "findings.mail.spf.title", "verdictKey": "findings.mail.spf.verdict.weak", "whyItMattersKey": "findings.mail.spf.why", "technicalDetails": { "rows": [ [ "record", "v=spf1 redirect=_spf.facebook.com" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.spf.what", "recommendationKey": "findings.mail.spf.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7208" }, { "id": "mail.dkim.revoked", "status": "fail", "severity": "medium", "titleKey": "findings.mail.dkim.title", "verdictKey": "findings.mail.dkim.verdict.revoked", "whyItMattersKey": "findings.mail.dkim.why", "technicalDetails": { "rows": [ [ "default", "rsa (revoked)" ] ], "columns": [ "tech.columns.selector", "tech.columns.key" ] }, "whatIsCheckedKey": "findings.mail.dkim.what", "recommendationKey": "findings.mail.dkim.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6376" }, { "id": "mail.dmarc.enforced", "status": "pass", "severity": "info", "titleKey": "findings.mail.dmarc.title", "verdictKey": "findings.mail.dmarc.verdict.enforced", "verdictParams": { "policy": "reject" }, "whyItMattersKey": "findings.mail.dmarc.why", "technicalDetails": { "rows": [ [ "record", "v=DMARC1; p=reject; rua=mailto:a@dmarc.facebookmail.com; ruf=mailto:fb-dmarc@datafeeds.phishlabs.com; pct=100" ], [ "policy", "reject" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.dmarc.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7489" }, { "id": "mail.bimi.missing", "status": "not_found", "severity": "info", "titleKey": "findings.mail.bimi.title", "verdictKey": "findings.mail.bimi.verdict.missing", "whyItMattersKey": "findings.mail.bimi.why", "whatIsCheckedKey": "findings.mail.bimi.what", "recommendationKey": "findings.mail.bimi.recommendation", "requirementLevel": "optional", "docsUrl": "https://datatracker.ietf.org/doc/html/draft-brand-indicators-for-message-identification" }, { "id": "mail.mtasts.testing", "status": "pass", "severity": "low", "titleKey": "findings.mail.mtasts.title", "verdictKey": "findings.mail.mtasts.verdict.testing", "whyItMattersKey": "findings.mail.mtasts.why", "technicalDetails": { "rows": [ [ "_mta-sts TXT", "v=STSv1; id=20191202T113700;" ], [ "policy HTTP status", 200 ], [ "mode", "testing" ], [ "max_age", "86400" ], [ "mx", "smtpin.vvv.facebook.com" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.mtasts.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc8461" }, { "id": "mail.tlsrpt.present", "status": "pass", "severity": "info", "titleKey": "findings.mail.tlsrpt.title", "verdictKey": "findings.mail.tlsrpt.verdict.present", "whyItMattersKey": "findings.mail.tlsrpt.why", "technicalDetails": { "rows": [ [ "record", "v=TLSRPTv1;rua=mailto:sts-reports@facebookmail.com" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.tlsrpt.what", "requirementLevel": "optional", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc8460" }, { "id": "mail.ipv6.all", "status": "pass", "severity": "info", "titleKey": "findings.mail.ipv6.title", "verdictKey": "findings.mail.ipv6.verdict.all", "whyItMattersKey": "findings.mail.ipv6.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com", "2a03:2880:11ff:fffd:face:b00c:0:686e" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.ipv6" ] }, "whatIsCheckedKey": "findings.mail.ipv6.what", "requirementLevel": "recommended" }, { "id": "mail.starttls.all", "status": "pass", "severity": "info", "titleKey": "findings.mail.starttls.title", "verdictKey": "findings.mail.starttls.verdict.all", "whyItMattersKey": "findings.mail.starttls.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com", "valid" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.starttls.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc3207" }, { "id": "mail.tls.modern", "status": "pass", "severity": "info", "titleKey": "findings.mail.tls.title", "verdictKey": "findings.mail.tls.verdict.modern", "whyItMattersKey": "findings.mail.tls.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com", "TLS 1.3" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.tls.what", "requirementLevel": "required" }, { "id": "mail.dane.missing", "status": "not_found", "severity": "low", "titleKey": "findings.mail.dane.title", "verdictKey": "findings.mail.dane.verdict.missing", "whyItMattersKey": "findings.mail.dane.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com", "no TLSA" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.dane.what", "recommendationKey": "findings.mail.dane.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7672" }, { "id": "mail.cipher.strong", "status": "pass", "severity": "info", "titleKey": "findings.mail.cipher.title", "verdictKey": "findings.mail.cipher.verdict.strong", "whyItMattersKey": "findings.mail.cipher.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com", "TLS_AES_256_GCM_SHA384", true ] ], "columns": [ "tech.columns.mx_host", "tech.columns.cipher", "tech.columns.forward_secrecy" ] }, "whatIsCheckedKey": "findings.mail.cipher.what", "requirementLevel": "recommended" }, { "id": "mail.certificate.valid", "status": "pass", "severity": "info", "titleKey": "findings.mail.certificate.title", "verdictKey": "findings.mail.certificate.verdict.valid", "whyItMattersKey": "findings.mail.certificate.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com", "msgin.facebookmail.com", "valid" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.subject", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.certificate.what", "requirementLevel": "required" }, { "id": "mail.cert_key.strong", "status": "pass", "severity": "info", "titleKey": "findings.mail.cert_key.title", "verdictKey": "findings.mail.cert_key.verdict.strong", "whyItMattersKey": "findings.mail.cert_key.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com", "RSA 2048" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.cert_key.what", "requirementLevel": "required" }, { "id": "mail.cert_sig.strong", "status": "pass", "severity": "info", "titleKey": "findings.mail.cert_sig.title", "verdictKey": "findings.mail.cert_sig.verdict.strong", "whyItMattersKey": "findings.mail.cert_sig.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com", "SHA256-RSA" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.cert_sig.what", "requirementLevel": "required" }, { "id": "mail.compression.off", "status": "pass", "severity": "info", "titleKey": "findings.mail.compression.title", "verdictKey": "findings.mail.compression.verdict.off", "whyItMattersKey": "findings.mail.compression.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com", "n/a (TLS 1.3)" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.compression.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7457" }, { "id": "mail.renegotiation.secure", "status": "pass", "severity": "info", "titleKey": "findings.mail.renegotiation.title", "verdictKey": "findings.mail.renegotiation.verdict.secure", "whyItMattersKey": "findings.mail.renegotiation.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com", "n/a (TLS 1.3)" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.renegotiation.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc5746" }, { "id": "mail.ems.present", "status": "pass", "severity": "info", "titleKey": "findings.mail.ems.title", "verdictKey": "findings.mail.ems.verdict.present", "whyItMattersKey": "findings.mail.ems.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com", "n/a (TLS 1.3)" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.ems.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7627" }, { "id": "mail.ptr.present", "status": "pass", "severity": "info", "titleKey": "findings.mail.ptr.title", "verdictKey": "findings.mail.ptr.verdict.present", "verdictParams": { "count": 2 }, "whyItMattersKey": "findings.mail.ptr.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com", "173.252.82.250", "msgin-regional-shv-01-rsnb0.facebook.com" ], [ "smtpin.vvv.facebook.com", "2a03:2880:11ff:fffd:face:b00c:0:686e", "msgin-regional6-shv-01-rftw0.facebook.com" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.ip", "tech.columns.ptr" ] }, "whatIsCheckedKey": "findings.mail.ptr.what", "requirementLevel": "recommended" }, { "id": "mail.openrelay.untested", "status": "not_applicable", "severity": "info", "titleKey": "findings.mail.openrelay.title", "verdictKey": "findings.mail.openrelay.verdict.untested", "whyItMattersKey": "findings.mail.openrelay.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com", "untested", "" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.openrelay.what", "requirementLevel": "required" } ] }, { "category": "blacklist", "group": "mail", "status": "DONE", "score": 100, "findings": [ { "id": "mail.bl.spamhauszen.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spamhauszen.title", "verdictKey": "findings.mail.bl.spamhauszen.verdict.clean", "verdictParams": { "zone": "zen.spamhaus.org" }, "whyItMattersKey": "findings.mail.bl.spamhauszen.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spamhauszen.what", "requirementLevel": "required" }, { "id": "mail.bl.spamhausdbl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spamhausdbl.title", "verdictKey": "findings.mail.bl.spamhausdbl.verdict.clean", "verdictParams": { "zone": "dbl.spamhaus.org" }, "whyItMattersKey": "findings.mail.bl.spamhausdbl.why", "technicalDetails": { "rows": [ [ "facebook.com", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spamhausdbl.what", "requirementLevel": "required" }, { "id": "mail.bl.barracuda.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.barracuda.title", "verdictKey": "findings.mail.bl.barracuda.verdict.clean", "verdictParams": { "zone": "b.barracudacentral.org" }, "whyItMattersKey": "findings.mail.bl.barracuda.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.barracuda.what", "requirementLevel": "required" }, { "id": "mail.bl.spamcop.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spamcop.title", "verdictKey": "findings.mail.bl.spamcop.verdict.clean", "verdictParams": { "zone": "bl.spamcop.net" }, "whyItMattersKey": "findings.mail.bl.spamcop.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spamcop.what", "requirementLevel": "required" }, { "id": "mail.bl.psbl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.psbl.title", "verdictKey": "findings.mail.bl.psbl.verdict.clean", "verdictParams": { "zone": "psbl.surriel.com" }, "whyItMattersKey": "findings.mail.bl.psbl.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.psbl.what", "requirementLevel": "required" }, { "id": "mail.bl.zerospam.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.zerospam.title", "verdictKey": "findings.mail.bl.zerospam.verdict.clean", "verdictParams": { "zone": "bl.0spam.org" }, "whyItMattersKey": "findings.mail.bl.zerospam.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.zerospam.what", "requirementLevel": "required" }, { "id": "mail.bl.blocklistde.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.blocklistde.title", "verdictKey": "findings.mail.bl.blocklistde.verdict.clean", "verdictParams": { "zone": "bl.blocklist.de" }, "whyItMattersKey": "findings.mail.bl.blocklistde.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.blocklistde.what", "requirementLevel": "required" }, { "id": "mail.bl.surbl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.surbl.title", "verdictKey": "findings.mail.bl.surbl.verdict.clean", "verdictParams": { "zone": "multi.surbl.org" }, "whyItMattersKey": "findings.mail.bl.surbl.why", "technicalDetails": { "rows": [ [ "facebook.com", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.surbl.what", "requirementLevel": "recommended" }, { "id": "mail.bl.semfresh.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.semfresh.title", "verdictKey": "findings.mail.bl.semfresh.verdict.clean", "verdictParams": { "zone": "fresh.spameatingmonkey.net" }, "whyItMattersKey": "findings.mail.bl.semfresh.why", "technicalDetails": { "rows": [ [ "facebook.com", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.semfresh.what", "requirementLevel": "recommended" }, { "id": "mail.bl.sembl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.sembl.title", "verdictKey": "findings.mail.bl.sembl.verdict.clean", "verdictParams": { "zone": "bl.spameatingmonkey.net" }, "whyItMattersKey": "findings.mail.bl.sembl.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.sembl.what", "requirementLevel": "recommended" }, { "id": "mail.bl.sembackscatter.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.sembackscatter.title", "verdictKey": "findings.mail.bl.sembackscatter.verdict.clean", "verdictParams": { "zone": "backscatter.spameatingmonkey.net" }, "whyItMattersKey": "findings.mail.bl.sembackscatter.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.sembackscatter.what", "requirementLevel": "recommended" }, { "id": "mail.bl.spfbl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spfbl.title", "verdictKey": "findings.mail.bl.spfbl.verdict.clean", "verdictParams": { "zone": "dnsbl.spfbl.net" }, "whyItMattersKey": "findings.mail.bl.spfbl.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spfbl.what", "requirementLevel": "recommended" }, { "id": "mail.bl.gbudb.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.gbudb.title", "verdictKey": "findings.mail.bl.gbudb.verdict.clean", "verdictParams": { "zone": "truncate.gbudb.net" }, "whyItMattersKey": "findings.mail.bl.gbudb.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.gbudb.what", "requirementLevel": "recommended" }, { "id": "mail.bl.spamrats.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spamrats.title", "verdictKey": "findings.mail.bl.spamrats.verdict.clean", "verdictParams": { "zone": "spam.spamrats.com" }, "whyItMattersKey": "findings.mail.bl.spamrats.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spamrats.what", "requirementLevel": "recommended" }, { "id": "mail.bl.spamratsdyna.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spamratsdyna.title", "verdictKey": "findings.mail.bl.spamratsdyna.verdict.clean", "verdictParams": { "zone": "dyna.spamrats.com" }, "whyItMattersKey": "findings.mail.bl.spamratsdyna.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spamratsdyna.what", "requirementLevel": "recommended" }, { "id": "mail.bl.spamratsnoptr.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spamratsnoptr.title", "verdictKey": "findings.mail.bl.spamratsnoptr.verdict.clean", "verdictParams": { "zone": "noptr.spamrats.com" }, "whyItMattersKey": "findings.mail.bl.spamratsnoptr.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spamratsnoptr.what", "requirementLevel": "recommended" }, { "id": "mail.bl.justspam.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.justspam.title", "verdictKey": "findings.mail.bl.justspam.verdict.clean", "verdictParams": { "zone": "dnsbl.justspam.org" }, "whyItMattersKey": "findings.mail.bl.justspam.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.justspam.what", "requirementLevel": "recommended" }, { "id": "mail.bl.fabel.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.fabel.title", "verdictKey": "findings.mail.bl.fabel.verdict.clean", "verdictParams": { "zone": "spamsources.fabel.dk" }, "whyItMattersKey": "findings.mail.bl.fabel.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.fabel.what", "requirementLevel": "recommended" }, { "id": "mail.bl.s5h.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.s5h.title", "verdictKey": "findings.mail.bl.s5h.verdict.clean", "verdictParams": { "zone": "all.s5h.net" }, "whyItMattersKey": "findings.mail.bl.s5h.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.s5h.what", "requirementLevel": "recommended" }, { "id": "mail.bl.dronebl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.dronebl.title", "verdictKey": "findings.mail.bl.dronebl.verdict.clean", "verdictParams": { "zone": "dnsbl.dronebl.org" }, "whyItMattersKey": "findings.mail.bl.dronebl.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.dronebl.what", "requirementLevel": "recommended" }, { "id": "mail.bl.interserver.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.interserver.title", "verdictKey": "findings.mail.bl.interserver.verdict.clean", "verdictParams": { "zone": "rbl.interserver.net" }, "whyItMattersKey": "findings.mail.bl.interserver.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.interserver.what", "requirementLevel": "recommended" }, { "id": "mail.bl.mailspike.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.mailspike.title", "verdictKey": "findings.mail.bl.mailspike.verdict.clean", "verdictParams": { "zone": "z.mailspike.net" }, "whyItMattersKey": "findings.mail.bl.mailspike.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.mailspike.what", "requirementLevel": "recommended" }, { "id": "mail.bl.uceprotect1.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.uceprotect1.title", "verdictKey": "findings.mail.bl.uceprotect1.verdict.clean", "verdictParams": { "zone": "dnsbl-1.uceprotect.net" }, "whyItMattersKey": "findings.mail.bl.uceprotect1.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.uceprotect1.what", "requirementLevel": "recommended" }, { "id": "mail.bl.uceprotect2.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.uceprotect2.title", "verdictKey": "findings.mail.bl.uceprotect2.verdict.clean", "verdictParams": { "zone": "dnsbl-2.uceprotect.net" }, "whyItMattersKey": "findings.mail.bl.uceprotect2.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.uceprotect2.what", "requirementLevel": "optional" }, { "id": "mail.bl.uceprotect3.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.uceprotect3.title", "verdictKey": "findings.mail.bl.uceprotect3.verdict.clean", "verdictParams": { "zone": "dnsbl-3.uceprotect.net" }, "whyItMattersKey": "findings.mail.bl.uceprotect3.why", "technicalDetails": { "rows": [ [ "smtpin.vvv.facebook.com (173.252.82.250)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.uceprotect3.what", "requirementLevel": "optional" } ] }, { "category": "rpki", "group": "website", "status": "DONE", "score": 100, "findings": [ { "id": "rpki.web.valid", "status": "pass", "severity": "info", "titleKey": "findings.rpki.web.title", "verdictKey": "findings.rpki.web.verdict.valid", "whyItMattersKey": "findings.rpki.web.why", "technicalDetails": { "rows": [ [ "2a03:2880:f15b:83:face:b00c:0:25de", "AS32934", "valid" ], [ "157.240.17.35", "AS32934", "valid" ] ], "columns": [ "tech.columns.ip", "tech.columns.asn", "tech.columns.result" ] }, "whatIsCheckedKey": "findings.rpki.web.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6811" }, { "id": "rpki.ns.valid", "status": "pass", "severity": "info", "titleKey": "findings.rpki.ns.title", "verdictKey": "findings.rpki.ns.verdict.valid", "whyItMattersKey": "findings.rpki.ns.why", "technicalDetails": { "rows": [ [ "2a03:2880:f0fc:c:face:b00c:0:35", "AS32934", "valid" ], [ "129.134.30.12", "AS32934", "valid" ], [ "2a03:2880:f1fc:c:face:b00c:0:35", "AS32934", "valid" ], [ "185.89.218.12", "AS32934", "valid" ], [ "2a03:2880:f1fd:c:face:b00c:0:35", "AS32934", "valid" ], [ "185.89.219.12", "AS32934", "valid" ], [ "2a03:2880:f0fd:c:face:b00c:0:35", "AS32934", "valid" ], [ "129.134.31.12", "AS32934", "valid" ] ], "columns": [ "tech.columns.ip", "tech.columns.asn", "tech.columns.result" ] }, "whatIsCheckedKey": "findings.rpki.ns.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6811" } ] }, { "category": "rpkimail", "group": "mail", "status": "DONE", "score": 95, "findings": [ { "id": "rpki.mail.notfound", "status": "not_found", "severity": "low", "titleKey": "findings.rpki.mail.title", "verdictKey": "findings.rpki.mail.verdict.notfound", "whyItMattersKey": "findings.rpki.mail.why", "technicalDetails": { "rows": [ [ "2a03:2880:11ff:fffd:face:b00c:0:686e", "AS32934", "valid" ], [ "173.252.82.250", "AS32934", "not-found" ] ], "columns": [ "tech.columns.ip", "tech.columns.asn", "tech.columns.result" ] }, "whatIsCheckedKey": "findings.rpki.mail.what", "recommendationKey": "findings.rpki.mail.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6811" } ] }, { "category": "tls", "group": "website", "status": "DONE", "score": 65, "findings": [ { "id": "tls.https.reachable", "status": "pass", "severity": "info", "titleKey": "findings.tls.https.title", "verdictKey": "findings.tls.https.verdict.reachable", "whyItMattersKey": "findings.tls.https.why", "whatIsCheckedKey": "findings.tls.https.what", "requirementLevel": "required" }, { "id": "tls.version.legacy", "status": "fail", "severity": "high", "titleKey": "findings.tls.version.title", "verdictKey": "findings.tls.version.verdict.legacy", "whyItMattersKey": "findings.tls.version.why", "technicalDetails": { "rows": [ [ "TLS 1.0", true ], [ "TLS 1.1", true ], [ "TLS 1.2", true ], [ "TLS 1.3", true ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.version.what", "recommendationKey": "findings.tls.version.recommendation", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc8446" }, { "id": "tls.cipher.strong", "status": "pass", "severity": "info", "titleKey": "findings.tls.cipher.title", "verdictKey": "findings.tls.cipher.verdict.strong", "verdictParams": { "cipher": "TLS_AES_128_GCM_SHA256" }, "whyItMattersKey": "findings.tls.cipher.why", "technicalDetails": { "rows": [ [ "cipher", "TLS_AES_128_GCM_SHA256" ], [ "forward_secrecy", true ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.cipher.what", "requirementLevel": "required" }, { "id": "tls.certificate.valid", "status": "pass", "severity": "info", "titleKey": "findings.tls.certificate.title", "verdictKey": "findings.tls.certificate.verdict.valid", "whyItMattersKey": "findings.tls.certificate.why", "technicalDetails": { "rows": [ [ "subject", "*.facebook.com" ], [ "issuer", "DigiCert Global G2 TLS RSA SHA256 2020 CA1" ], [ "not_after", "2026-08-01T23:59:59Z" ], [ "dns_names", "*.facebook.com, *.facebook.net, *.fbcdn.net, *.fbsbx.com, *.m.facebook.com, *.messenger.com, *.xx.fbcdn.net, *.xy.fbcdn.net, *.xz.fbcdn.net, facebook.com, messenger.com" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.certificate.what", "requirementLevel": "required" }, { "id": "tls.cert_key.strong", "status": "pass", "severity": "info", "titleKey": "findings.tls.cert_key.title", "verdictKey": "findings.tls.cert_key.verdict.strong", "verdictParams": { "bits": 256, "algorithm": "ECDSA" }, "whyItMattersKey": "findings.tls.cert_key.why", "technicalDetails": { "rows": [ [ "algorithm", "ECDSA" ], [ "bits", 256 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.cert_key.what", "requirementLevel": "required" }, { "id": "tls.cert_sig.strong", "status": "pass", "severity": "info", "titleKey": "findings.tls.cert_sig.title", "verdictKey": "findings.tls.cert_sig.verdict.strong", "verdictParams": { "algorithm": "SHA256-RSA" }, "whyItMattersKey": "findings.tls.cert_sig.why", "technicalDetails": { "rows": [ [ "signature", "SHA256-RSA" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.cert_sig.what", "requirementLevel": "required" }, { "id": "tls.ocsp.not_stapled", "status": "not_found", "severity": "low", "titleKey": "findings.tls.ocsp.title", "verdictKey": "findings.tls.ocsp.verdict.not_stapled", "whyItMattersKey": "findings.tls.ocsp.why", "whatIsCheckedKey": "findings.tls.ocsp.what", "recommendationKey": "findings.tls.ocsp.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6066" }, { "id": "tls.dane.none_web", "status": "not_applicable", "severity": "info", "titleKey": "findings.tls.dane.title", "verdictKey": "findings.tls.dane.verdict.none_web", "whyItMattersKey": "findings.tls.dane.why", "whatIsCheckedKey": "findings.tls.dane.what", "requirementLevel": "optional", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6698" }, { "id": "tls.cipherorder.tls13", "status": "pass", "severity": "info", "titleKey": "findings.tls.cipherorder.title", "verdictKey": "findings.tls.cipherorder.verdict.tls13", "whyItMattersKey": "findings.tls.cipherorder.why", "whatIsCheckedKey": "findings.tls.cipherorder.what", "requirementLevel": "recommended" }, { "id": "tls.keyexchange.strong", "status": "pass", "severity": "info", "titleKey": "findings.tls.keyexchange.title", "verdictKey": "findings.tls.keyexchange.verdict.strong", "verdictParams": { "kx": "ECDHE", "hash": "SHA256" }, "whyItMattersKey": "findings.tls.keyexchange.why", "technicalDetails": { "rows": [ [ "key_exchange", "ECDHE" ], [ "hash", "SHA256" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.keyexchange.what", "requirementLevel": "required" }, { "id": "tls.compression.tls13", "status": "pass", "severity": "info", "titleKey": "findings.tls.compression.title", "verdictKey": "findings.tls.compression.verdict.tls13", "whyItMattersKey": "findings.tls.compression.why", "whatIsCheckedKey": "findings.tls.compression.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7457" }, { "id": "tls.renegotiation.tls13", "status": "pass", "severity": "info", "titleKey": "findings.tls.renegotiation.title", "verdictKey": "findings.tls.renegotiation.verdict.tls13", "whyItMattersKey": "findings.tls.renegotiation.why", "whatIsCheckedKey": "findings.tls.renegotiation.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc5746" }, { "id": "tls.ems.tls13", "status": "pass", "severity": "info", "titleKey": "findings.tls.ems.title", "verdictKey": "findings.tls.ems.verdict.tls13", "whyItMattersKey": "findings.tls.ems.why", "whatIsCheckedKey": "findings.tls.ems.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7627" }, { "id": "tls.zerortt.enabled", "status": "fail", "severity": "low", "titleKey": "findings.tls.zerortt.title", "verdictKey": "findings.tls.zerortt.verdict.enabled", "verdictParams": { "maxEarlyData": 0 }, "whyItMattersKey": "findings.tls.zerortt.why", "technicalDetails": { "rows": [ [ "max_early_data", 0 ], [ "accepted", true ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.zerortt.what", "recommendationKey": "findings.tls.zerortt.recommendation", "recommendationParams": { "maxEarlyData": 0 }, "requirementLevel": "optional", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc8446#section-2.3" } ] } ] }