We have found an issue with the Mail Analyzer DKIM validation page that we think could be improved.

The issue we found stems from the usage of sub-domains, for example Klaviyo a Marketing Platform recommends a Delegated Sub-Domain (Name Server Setup) for their DKIM Management/Setup. Once the delegation was in place, we sent a test e-mail to the Mail Analyzer to verify it was working correctly.

Inside the Mail Analyzer it correctly identified that the e-mail was fully compliant, however the "DKIM Record" was marked with a red "Not Present".

When you click on the DKIM Record to check the status, it takes you to the PowerToolbox DKIM lookup but attempts to lookup the selector on the root domain which fails, if we change the domain being looked up to be the FQDN subdomain (Matching the d= field from the DKIM Header available on the Mail Analyzer page) it correctly finds the selector.

I was told this is by design and due to the automated lookup method not able to detect the sub-domain DKIM selector properly, yet in the Mail Analyzer tool this does not make sense as it has all the header information available and can properly lookup based off the DKIM header domain d= instead of the root domain?

I feel like this is a bug and could be improved so it doesn't incorrectly flag it as failed and I was asked to raise in the Feedback portal.