Alectra Utilities Domain Security

generated: '2026-07-27'
method: probed
source: live DNS/TLS/HTTP probes of apis.yml + OpenAPI hosts
hosts:
- host: alectrautilities.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Sep  1 11:55:24 2026 GMT
  hsts: true
  hsts_max_age: 31622400
- host: myalectra.alectrautilities.com
  https: true
  tls_version: TLSv1.2
  cert_expires: Nov 12 23:59:59 2026 GMT
  hsts: true
  hsts_max_age: 63072000
- host: sandbox.greenbuttonalliance.org
  https: true
  tls_version: TLSv1.3
  cert_expires: Sep 28 20:26:53 2026 GMT
  hsts: null
  note: >-
    Not an Alectra host. This is the Green Button Alliance public sandbox declared in
    the servers[] block of the harvested standard specification.
- host: alectrautilitiesgbportal.savagedata.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Nov 17 14:06:38 2026 GMT
  hsts: true
  hsts_max_age: 2592000
  note: >-
    Alectra-branded Green Button customer portal / Data Custodian front end, operated
    by the vendor Savage Data Systems on savagedata.com rather than on an Alectra
    domain. Probed manually and added to this file — the pipeline host collector only
    walks apis.yml Website/Portal/humanURL/baseURL and OpenAPI servers[].
- host: alectrautilitiesonboarding.savagedata.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Nov 17 14:06:38 2026 GMT
  hsts: true
  hsts_max_age: 2592000
  note: Alectra third-party registration and onboarding application, vendor-hosted.
- host: alectrautilitiesdataview.savagedata.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Nov 17 14:06:38 2026 GMT
  hsts: true
  hsts_max_age: 2592000
  note: Commercial and industrial interval-data portal (CSV download), vendor-hosted.
domains:
- domain: alectrautilities.com
  dnssec: true
  caa:
  - 0 issuewild "sectigo.com"
  - 0 issue "sectigo.com"
  - 0 issuewild "letsencrypt.org"
  - 0 issue "letsencrypt.org"
  spf: true
  dmarc: true
  dmarc_policy: reject
- domain: greenbuttonalliance.org
  dnssec: false
  caa: []
  spf: true
  dmarc: true
  dmarc_policy: reject
- domain: savagedata.com
  dnssec: false
  caa: []
  spf: true
  spf_record: v=spf1 mx ip4:206.47.119.162 -all
  dmarc: true
  dmarc_policy: quarantine
  note: >-
    The data custodian vendor domain that actually hosts every Alectra Green Button
    surface. Weaker posture than Alectra's own domain on all three counts: no DNSSEC
    (Alectra has it), no CAA records (Alectra pins Sectigo and Let's Encrypt), and
    DMARC p=quarantine rather than Alectra's p=reject. HSTS max-age on the three
    vendor hosts is 2592000 (30 days) against 31622400 (366 days) on
    alectrautilities.com. Recorded because the regulated data surface lives here, not
    on the domain whose posture Alectra controls.