Dreamscape Immersive · Domain Security

Dreamscape Immersive Domain Security

Domain security

Domain security posture for Dreamscape Immersive, probed live across 3 host(s) and 2 registrable domain(s). 3 host(s) serve HTTPS (up to TLSv1.3); 0 advertise HSTS. Email/DNS controls: DNSSEC absent, SPF present, DMARC present (p=none).

CompanyVirtual RealityImmersive ExperiencesLocation Based EntertainmentEntertainmentMediaTicketingEducation Technology

Transport & Host Security

dreamscapeimmersive.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: no · cert expires: Oct 6 22:31:52 2026 GMT
api.techscapevr.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: no · cert expires: Oct 1 23:59:59 2026 GMT
api.hq.dev.techscapevr.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: no

Domain (DNS/Email) Security

dreamscapeimmersive.com
DNSSEC: no · SPF: yes · DMARC: yes (p=none) · CAA: none
techscapevr.com
DNSSEC: no · SPF: no · DMARC: yes (p=none) · CAA: none

Source

Domain Security

dreamscape-immersive-domain-security.yml Raw ↑ 
generated: '2026-08-12'
method: probed
source: live DNS/TLS/HTTP probes of apis.yml hosts plus the backend hosts named in the
  dreamscapeimmersive.com JavaScript bundle
note: >-
  techscapevr.com is Dreamscape Immersive's engineering domain — the consumer site's React
  bundle (static/js/main.a6db2b7f.chunk.js) resolves REACT_APP_API_DOMAIN to hosts under it.
  Both API hosts are AWS API Gateway endpoints that answer 403 {"message":"Forbidden"} to
  every anonymous request, so only transport-layer posture could be probed. The apex
  techscapevr.com does not resolve over HTTPS at all (DNS failure) — only the api.* and
  assets.* subdomains exist. No SPF TXT record is published at the techscapevr.com apex,
  DMARC is present but at p=none (monitor only), and there is no CAA record or DNSSEC on
  either domain.
hosts:
- host: dreamscapeimmersive.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Oct  6 22:31:52 2026 GMT
  hsts: false
- host: api.techscapevr.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Oct  1 23:59:59 2026 GMT
  hsts: false
  http_status: 403
  note: production AWS API Gateway backend; anonymous requests refused
- host: api.hq.dev.techscapevr.com
  https: true
  tls_version: TLSv1.3
  hsts: false
  http_status: 403
  note: development AWS API Gateway backend named by REACT_APP_API_DOMAIN in the shipped bundle
domains:
- domain: dreamscapeimmersive.com
  dnssec: false
  caa: []
  spf: true
  dmarc: true
  dmarc_policy: none
- domain: techscapevr.com
  dnssec: false
  caa: []
  spf: false
  dmarc: true
  dmarc_policy: none