Email security for active24.cz

SPF

Pass

Authorizes which servers may send mail for the domain

SPF is published and within limits.

Policy: -all
DNS lookups: 6 / 10

Ends in -all (hardfail): unauthorized senders are rejected.
Uses 6 of 10 allowed DNS lookups.

v=spf1 mx ip4:81.95.96.0/20 ip4:31.15.8.0/21 ip4:185.12.196.0/22 ip4:185.26.229.213 ip6:2a02:4a8:ac24::/48 ip4:212.123.41.224/28 include:_spf.hostedemail.com include:servers.mcsv.net include:spf.spamfilter.io include:spf.protection.outlook.com include:spf-eu.emailsignatures365.com -all

DKIM

Pass

Cryptographically signs outgoing mail (best-effort selector probe)

DKIM key published for 1 known selector.

Selectors: selector1

Found a DKIM key at selector1._domainkey.active24.cz

DMARC

Pass

Tells receivers what to do with mail that fails SPF and DKIM

DMARC is enforced.

Policy: p=quarantine
Subdomains: sp=quarantine
Coverage: 100%

Policy p=quarantine: failing mail is sent to spam.
Aggregate reports (rua) are configured.

v=DMARC1; p=quarantine; sp=quarantine; pct=100; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=0; ri=172800; aspf=r; adkim=r; rf=afrf

MTA-STS

Pass

Enforces TLS for inbound mail and prevents downgrade attacks

MTA-STS is enforcing TLS.

Mode: enforce
Max age: 86401s

Policy mode is enforce: TLS is required for inbound mail.

v=STSv1; id=20250102

TLS-RPT

Pass

Receives reports about TLS delivery failures

TLS reporting is configured.

Reports to: mailto:[email protected]

TLS delivery failure reports are being collected.

v=TLSRPTv1; rua=mailto:[email protected]

BIMI

Not set

Displays your verified brand logo in supporting inboxes

No BIMI record. No brand logo is published for inboxes.