← Interactive report

bevycommerce.com

warnScanned ·
Summary

bevycommerce.com has warnings

0To fix now
1Recommended
7Healthy

DNS & email auth

warnLast checked
Findings6 findings

Recommended (1)

  • The record uses softfail (~all), which is weaker than fail (-all).

    SPF

    How to fix

    Move to -all once you're confident every legitimate sender is listed.

Healthy (5)

  • 1 MX record found.

    MX
  • DKIM selector selector1 has a healthy RSA key.

    DKIM

    selector1 (selector1._domainkey.bevycommerce.com)

  • DKIM selector selector2 has a healthy RSA key.

    DKIM

    selector2 (selector2._domainkey.bevycommerce.com)

  • DKIM selector google has a healthy RSA key.

    DKIM

    google (google._domainkey.bevycommerce.com)

  • DMARC policy is enforced with p=reject.

    DMARC

Evidence

MX

1 record
  • smtp.google.compriority 1

SPF

2 of 10 lookups
DNS lookups2 / 10
bevycommerce.com
include:_spf.google.com
include:spf.protection.outlook.com

Root TXT

3 records
  • google-site-verification=ybZUr7aOMnS4t8s1bwpSVkkymx0P5qH9u_rQSxuRCp8
  • v=spf1 include:_spf.google.com include:spf.protection.outlook.com ~all
  • google-site-verification=SciV0nvYQcPm2bUuYAFgDbnOLavWJQ3SvQBdO55TM3s

DKIM selectors

3 records
  • selector1selector1._domainkey.bevycommerce.com
    CNAME selector1-bevycommerce-com._domainkey.aivalabsinc.w-v1.dkim.mail.microsoft
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WeoLWQL+Nhm/s6z4AzVA5xb8GlFcX5ibTOv5t4j5DJWwPXRW0Y7YYKXQ8xSiPTEZu365ZGHfwbUscI5PJkJFS1o82710/PQMReG64nVMkC0Vi/7Zg7nQKuNj45cnbpkM7aHNm8OaI2TV7U6KiuLLBNue/oe4+gvtxnQakRfWKxfkMQNBgPaTUuegTQL13z7tij9muJ3IsLEOYjzFlI58ji1dDY1SY9l/nD1jfkoGE4WRf0/g+b66ITA1G7TqTip1zyYh4KDL5LucQpd2uuOuRkjIpAgDSMJ0+3Zm1jkWT5ps8wUNqx+tM91CRoyi7yb631u4LqaWAewUcO2D8F7KQIDAQAB;
  • selector2selector2._domainkey.bevycommerce.com
    CNAME selector2-bevycommerce-com._domainkey.aivalabsinc.w-v1.dkim.mail.microsoft
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs29V+FR1BI+vDLL3NPi/M4hEbASzpwuVCOJsJTSpwGe4ueHLOjllRqsorin/x1g8JMDLXiAKd+HrPA5ikj+d7phYpilb5JlY6v66otyG97ddx4K9THHNgNa1x+zIxqoc/6upnFpE3yTXyZdcZBXj2mMVpmGosp9lyXHPVpN9IpLJLApxMcxCdOeZqBlMb7rbHswhRe/9QOvE1XguTfTtImMoOf3Gj3/O3hqnRHuvVubpSWDX0odymcSx6ZPISY5ImvDi9DBNN+rWi2Nxhc9U25ffAo2xB9ko6RuEiHwnUnVALRzx4MwoHxps8P5Zy/Rlv35GDzo3h6uofmZC+q3twQIDAQAB;
  • googlegoogle._domainkey.bevycommerce.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqs9H8xzNxeq1URyWNxQTal4MPDrpHzDfniV4kX67SzI+rzKE+MwUSz+wma4qdjFoRrKAI4hjSliPm2HeFRMX3eRZcdQ+AbdMu+U7WkaYNRDyXkS2OzPKVyIB0njgCmF+q5HoznfLCTHvUrPb8zPZOGmG9I8TwYzQYBHX2MUfM/vPIpIPUQn/RQEphZrs3QLrlNrMiUnhNVBBmLyEacVNFNpATY+dYmkX/3XXnU0X01Vedj/0NhxQnOX9NVL3lHdVmJxxELKCue/zw22VUhVU0Q6yDQWUubrb7E1/phT9DUHsNLnnh7y784JaBUQegxSpKz+7Y7+N1jLXfy8PXeWXQIDAQAB

Probed with no records: 20230601, 20210112, k1, k2, s1, s2, default, dkim, mail

DMARC

1 record
v=DMARC1; p=reject; pct=100; rua=mailto:db7c47d8c7eb4ced8742587783b4ad9a@dmarc-reports.cloudflare.net; ruf=mailto:admin@bevycommerce.com
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=reject
Receivers refuse mail that fails DMARC outright.
pct=100
The policy applies to all failing mail.
rua=mailto:db7c47d8c7eb4ced8742587783b4ad9a@dmarc-reports.cloudflare.net
Receivers send daily aggregate reports about passing and failing mail to db7c47d8c7eb4ced8742587783b4ad9a@dmarc-reports.cloudflare.net.
ruf=mailto:admin@bevycommerce.com
Receivers may send per-message failure reports to admin@bevycommerce.com. Many receivers skip these for privacy reasons.
sp=rejectdefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault
No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.
Raw JSON

SSL & domain expiry

passLast checked
Findings2 findings

Healthy (2)

  • The TLS certificate is valid until Dec 2, 2026.

    TLS certificate

    Issued by Let's Encrypt.

  • Registration expiry is not published for this domain.

    Domain expiry

    The registry does not expose expiry data over RDAP.

Evidence

TLS certificate

port 443
Issued to
bevycommerce.com
Issued by
Let's Encrypt
Valid from
Valid until
Days remaining
87 days
Verification
trusted

Registration

unpublished

The registry does not expose expiry data over RDAP.

Raw JSON

Generated by Internet Posture · internetposture.com