Print reportMonitor this domain

DNS & email auth

warnLast checked
Findings6 findings

Recommended (1)

  • The record uses softfail (~all), which is weaker than fail (-all).

    SPF

    How to fix

    Move to -all once you're confident every legitimate sender is listed.

Healthy (5)

  • 1 MX record found.

    MX

  • DKIM selector selector1 has a healthy RSA key.

    DKIM

    selector1 (selector1._domainkey.bevycommerce.com)

  • DKIM selector selector2 has a healthy RSA key.

    DKIM

    selector2 (selector2._domainkey.bevycommerce.com)

  • DKIM selector google has a healthy RSA key.

    DKIM

    google (google._domainkey.bevycommerce.com)

  • DMARC policy is enforced with p=reject.

    DMARC

Evidence

MX

1 record
  • smtp.google.compriority 1

SPF

2 of 10 lookups
DNS lookups2 / 10
bevycommerce.com
v=spf1 include:_spf.google.com include:spf.protection.outlook.com ~all
include:_spf.google.com
v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all
include:spf.protection.outlook.com
v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all

Root TXT

3 records
  • google-site-verification=ybZUr7aOMnS4t8s1bwpSVkkymx0P5qH9u_rQSxuRCp8
  • v=spf1 include:_spf.google.com include:spf.protection.outlook.com ~all
  • google-site-verification=SciV0nvYQcPm2bUuYAFgDbnOLavWJQ3SvQBdO55TM3s

DKIM selectors

3 records
  • selector1selector1._domainkey.bevycommerce.com
    CNAME selector1-bevycommerce-com._domainkey.aivalabsinc.w-v1.dkim.mail.microsoft
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WeoLWQL+Nhm/s6z4AzVA5xb8GlFcX5ibTOv5t4j5DJWwPXRW0Y7YYKXQ8xSiPTEZu365ZGHfwbUscI5PJkJFS1o82710/PQMReG64nVMkC0Vi/7Zg7nQKuNj45cnbpkM7aHNm8OaI2TV7U6KiuLLBNue/oe4+gvtxnQakRfWKxfkMQNBgPaTUuegTQL13z7tij9muJ3IsLEOYjzFlI58ji1dDY1SY9l/nD1jfkoGE4WRf0/g+b66ITA1G7TqTip1zyYh4KDL5LucQpd2uuOuRkjIpAgDSMJ0+3Zm1jkWT5ps8wUNqx+tM91CRoyi7yb631u4LqaWAewUcO2D8F7KQIDAQAB;
  • selector2selector2._domainkey.bevycommerce.com
    CNAME selector2-bevycommerce-com._domainkey.aivalabsinc.w-v1.dkim.mail.microsoft
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs29V+FR1BI+vDLL3NPi/M4hEbASzpwuVCOJsJTSpwGe4ueHLOjllRqsorin/x1g8JMDLXiAKd+HrPA5ikj+d7phYpilb5JlY6v66otyG97ddx4K9THHNgNa1x+zIxqoc/6upnFpE3yTXyZdcZBXj2mMVpmGosp9lyXHPVpN9IpLJLApxMcxCdOeZqBlMb7rbHswhRe/9QOvE1XguTfTtImMoOf3Gj3/O3hqnRHuvVubpSWDX0odymcSx6ZPISY5ImvDi9DBNN+rWi2Nxhc9U25ffAo2xB9ko6RuEiHwnUnVALRzx4MwoHxps8P5Zy/Rlv35GDzo3h6uofmZC+q3twQIDAQAB;
  • googlegoogle._domainkey.bevycommerce.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqs9H8xzNxeq1URyWNxQTal4MPDrpHzDfniV4kX67SzI+rzKE+MwUSz+wma4qdjFoRrKAI4hjSliPm2HeFRMX3eRZcdQ+AbdMu+U7WkaYNRDyXkS2OzPKVyIB0njgCmF+q5HoznfLCTHvUrPb8zPZOGmG9I8TwYzQYBHX2MUfM/vPIpIPUQn/RQEphZrs3QLrlNrMiUnhNVBBmLyEacVNFNpATY+dYmkX/3XXnU0X01Vedj/0NhxQnOX9NVL3lHdVmJxxELKCue/zw22VUhVU0Q6yDQWUubrb7E1/phT9DUHsNLnnh7y784JaBUQegxSpKz+7Y7+N1jLXfy8PXeWXQIDAQAB

Probed with no records: 20230601, 20210112, k1, k2, s1, s2, default, dkim, mail

DMARC

1 record
v=DMARC1; p=reject; pct=100; rua=mailto:db7c47d8c7eb4ced8742587783b4ad9a@dmarc-reports.cloudflare.net; ruf=mailto:admin@bevycommerce.com
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=reject
Receivers refuse mail that fails DMARC outright.
pct=100
The policy applies to all failing mail.
rua=mailto:db7c47d8c7eb4ced8742587783b4ad9a@dmarc-reports.cloudflare.net
Receivers send daily aggregate reports about passing and failing mail to db7c47d8c7eb4ced8742587783b4ad9a@dmarc-reports.cloudflare.net.
ruf=mailto:admin@bevycommerce.com
Receivers may send per-message failure reports to admin@bevycommerce.com. Many receivers skip these for privacy reasons.
sp=rejectdefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault
No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.
Raw JSON
{
  "mx": [
    {
      "type": "MX",
      "exchange": "smtp.google.com",
      "priority": 1
    }
  ],
  "spf": {
    "tree": {
      "via": "root",
      "domain": "bevycommerce.com",
      "issues": [],
      "records": [
        "v=spf1 include:_spf.google.com include:spf.protection.outlook.com ~all"
      ],
      "children": [
        {
          "via": "include",
          "domain": "_spf.google.com",
          "issues": [],
          "records": [
            "v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all"
          ],
          "children": []
        },
        {
          "via": "include",
          "domain": "spf.protection.outlook.com",
          "issues": [],
          "records": [
            "v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all"
          ],
          "children": []
        }
      ]
    },
    "truncated": false,
    "lookupCount": 2,
    "voidLookupCount": 0
  },
  "dkim": [
    {
      "cname": [
        "selector1-bevycommerce-com._domainkey.aivalabsinc.w-v1.dkim.mail.microsoft"
      ],
      "records": [
        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WeoLWQL+Nhm/s6z4AzVA5xb8GlFcX5ibTOv5t4j5DJWwPXRW0Y7YYKXQ8xSiPTEZu365ZGHfwbUscI5PJkJFS1o82710/PQMReG64nVMkC0Vi/7Zg7nQKuNj45cnbpkM7aHNm8OaI2TV7U6KiuLLBNue/oe4+gvtxnQakRfWKxfkMQNBgPaTUuegTQL13z7tij9muJ3IsLEOYjzFlI58ji1dDY1SY9l/nD1jfkoGE4WRf0/g+b66ITA1G7TqTip1zyYh4KDL5LucQpd2uuOuRkjIpAgDSMJ0+3Zm1jkWT5ps8wUNqx+tM91CRoyi7yb631u4LqaWAewUcO2D8F7KQIDAQAB;"
      ],
      "selector": "selector1",
      "queryName": "selector1._domainkey.bevycommerce.com"
    },
    {
      "cname": [
        "selector2-bevycommerce-com._domainkey.aivalabsinc.w-v1.dkim.mail.microsoft"
      ],
      "records": [
        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs29V+FR1BI+vDLL3NPi/M4hEbASzpwuVCOJsJTSpwGe4ueHLOjllRqsorin/x1g8JMDLXiAKd+HrPA5ikj+d7phYpilb5JlY6v66otyG97ddx4K9THHNgNa1x+zIxqoc/6upnFpE3yTXyZdcZBXj2mMVpmGosp9lyXHPVpN9IpLJLApxMcxCdOeZqBlMb7rbHswhRe/9QOvE1XguTfTtImMoOf3Gj3/O3hqnRHuvVubpSWDX0odymcSx6ZPISY5ImvDi9DBNN+rWi2Nxhc9U25ffAo2xB9ko6RuEiHwnUnVALRzx4MwoHxps8P5Zy/Rlv35GDzo3h6uofmZC+q3twQIDAQAB;"
      ],
      "selector": "selector2",
      "queryName": "selector2._domainkey.bevycommerce.com"
    },
    {
      "cname": [],
      "records": [
        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqs9H8xzNxeq1URyWNxQTal4MPDrpHzDfniV4kX67SzI+rzKE+MwUSz+wma4qdjFoRrKAI4hjSliPm2HeFRMX3eRZcdQ+AbdMu+U7WkaYNRDyXkS2OzPKVyIB0njgCmF+q5HoznfLCTHvUrPb8zPZOGmG9I8TwYzQYBHX2MUfM/vPIpIPUQn/RQEphZrs3QLrlNrMiUnhNVBBmLyEacVNFNpATY+dYmkX/3XXnU0X01Vedj/0NhxQnOX9NVL3lHdVmJxxELKCue/zw22VUhVU0Q6yDQWUubrb7E1/phT9DUHsNLnnh7y784JaBUQegxSpKz+7Y7+N1jLXfy8PXeWXQIDAQAB"
      ],
      "selector": "google",
      "queryName": "google._domainkey.bevycommerce.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20230601",
      "queryName": "20230601._domainkey.bevycommerce.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20210112",
      "queryName": "20210112._domainkey.bevycommerce.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k1",
      "queryName": "k1._domainkey.bevycommerce.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k2",
      "queryName": "k2._domainkey.bevycommerce.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s1",
      "queryName": "s1._domainkey.bevycommerce.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s2",
      "queryName": "s2._domainkey.bevycommerce.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "default",
      "queryName": "default._domainkey.bevycommerce.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "dkim",
      "queryName": "dkim._domainkey.bevycommerce.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "mail",
      "queryName": "mail._domainkey.bevycommerce.com"
    }
  ],
  "rootTxt": [
    "google-site-verification=ybZUr7aOMnS4t8s1bwpSVkkymx0P5qH9u_rQSxuRCp8",
    "v=spf1 include:_spf.google.com include:spf.protection.outlook.com ~all",
    "google-site-verification=SciV0nvYQcPm2bUuYAFgDbnOLavWJQ3SvQBdO55TM3s"
  ],
  "dmarcTxt": [
    "v=DMARC1; p=reject; pct=100; rua=mailto:db7c47d8c7eb4ced8742587783b4ad9a@dmarc-reports.cloudflare.net; ruf=mailto:admin@bevycommerce.com"
  ]
}