Audit: facebook.com

Audited on 20 Sep 2026

Export PDF (Pro) Save + monitor →

Needs attention

  • TLS certificate expires in 8 days If auto-renewal is configured, it has not run yet.
69
overall score
On-page SEO
0
Crawlability
67
TLS & security
83
Network
83
Email
100
DNS
83

The site is up · responded in 144 ms

  • Reachable 4% of the last 24 hours
  • Outages cost you traffic and rankings while they last, and they rarely happen while you are watching.
Live status: Facebook → Email me if it goes down →

On-page SEO

0/100
  • ? Page indexing The page was not fetched
  • ? On-page markup The page was not fetched

Crawlability

67/100
  • ✓ robots.txt present + valid Parsed cleanly · 0 sitemap(s) declared
  • ✗ Sitemap.xml is valid XML Present but does not parse — EntityRef: expecting ';'

TLS & security

83/100
  • ✓ TLS handshake succeeds
  • ✗ Certificate not expiring soon -11 days left

Network

83/100
  • ✓ Hostname resolves to an A record 57.144.20.1
  • ! Server header does not leak version

Email

100/100
  • ✓ MX records valid + reachable
  • ✓ SPF record present v=spf1 redirect=_spf.facebook.com
  • ✓ DMARC record present
  • ✓ DMARC policy enforced p=reject
  • ✓ DKIM key published selector=default

DNS

83/100
  • ✓ A records resolve
  • ✓ NS records present
  • ✓ MX records present
  • ✗ DNS resolvers agree on the same A record 36% of 12 resolvers agree
  • ✓ Domain registration not expiring soon 2747 days left
  • ✓ Domain is established 29y 5m 4d (1997-03-29)

What changed

1 thing changed on facebook.com in the last 30 days.

Certificates expire, DNS gets edited, a header goes missing in a deploy. Prove the domain is yours and we watch it on a schedule — free — and email you the moment something moves, so you hear it from us instead of from a customer.

See what changed → Sign in

Subdomains discovered 🔒 Pro

287 via Certificate Transparency

We found 287 subdomains for facebook.com via Certificate Transparency logs.

Unlock the subdomain list

  • See every subdomain discovered via crt.sh CT logs
  • Click any subdomain to audit it (separate report)
  • Useful for security recon + asset inventory
Upgrade to Pro → Already Pro? Sign in

Tech stack detected

1 technology · Pro: track changes over time →

Signature-based identification from the public homepage. Pattern set is fixed; nothing is sent to third parties.

Analytics

  • Google Analytics

A certificate that expires on Tuesday should not wait until Friday. Prove a domain is yours and we check it free, once a week, emailing you anything that changed. Pro checks it once a day, looks at every host on the domain, and keeps 365 days of history — so you hear about a problem in hours rather than days.

Compare plans →