Smashgg · Domain Security

Smashgg Domain Security

Domain security

Domain security posture for Smashgg, probed live across 3 host(s) and 1 registrable domain(s). 3 host(s) serve HTTPS (up to TLSv1.3); 2 advertise HSTS. Email/DNS controls: DNSSEC absent, SPF present, DMARC present (p=reject).

CompanyConsumerEsportsGamingTournamentsGraphQLEventDeveloper API

Transport & Host Security

api.start.gg

HTTPS: yes · TLS: TLSv1.3 · HSTS: yes

developer.start.gg

HTTPS: yes · HSTS: yes

www.start.gg

HTTPS: yes · HSTS: no

Domain (DNS/Email) Security

start.gg

DNSSEC: no · SPF: yes · DMARC: yes (p=reject) · CAA: yes

Source

Domain Security

generated: '2026-07-21'
method: probed
source: TLS handshake + HTTP HEAD + dig (probed 2026-07-21)
hosts:
  - host: api.start.gg
    https: true
    tls_version: TLSv1.3
    hsts: true
    hsts_max_age: 15724800
    hsts_include_subdomains: true
  - host: developer.start.gg
    https: true
    hsts: true
    hsts_max_age: 31536000
    hsts_include_subdomains: false
  - host: www.start.gg
    https: true
    hsts: false
domains:
  - domain: start.gg
    dnssec: false
    caa:
      - digicert.com
      - letsencrypt.org
      - pki.goog
      - ssl.com
      - comodoca.com
      - microsoft.com
    spf: true
    spf_record: 'v=spf1 include:amazonses.com include:servers.mcsv.net include:_spf.google.com -all'
    dmarc: true
    dmarc_policy: reject
notes: >-
  start.gg (smash.gg's successor; smash.gg 301-redirects to www.start.gg) is a
  Microsoft property - the CAA record authorizes microsoft.com as a certificate
  issuer. DMARC is enforced (p=reject). DNSSEC is not enabled.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/smashgg-domain-security"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.