Smashgg · Domain Security

Smashgg Domain Security

Domain security

Domain security posture for Smashgg, probed live across 3 host(s) and 1 registrable domain(s). 3 host(s) serve HTTPS (up to TLSv1.3); 2 advertise HSTS. Email/DNS controls: DNSSEC absent, SPF present, DMARC present (p=reject).

CompanyConsumerEsportsGamingTournamentsGraphQLEventsDeveloper API

Transport & Host Security

api.start.gg
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes
developer.start.gg
HTTPS: yes · HSTS: yes
www.start.gg
HTTPS: yes · HSTS: no

Domain (DNS/Email) Security

start.gg
DNSSEC: no · SPF: yes · DMARC: yes (p=reject) · CAA: yes

Source

Domain Security

smashgg-domain-security.yml Raw ↑ 
generated: '2026-07-21'
method: probed
source: TLS handshake + HTTP HEAD + dig (probed 2026-07-21)
hosts:
  - host: api.start.gg
    https: true
    tls_version: TLSv1.3
    hsts: true
    hsts_max_age: 15724800
    hsts_include_subdomains: true
  - host: developer.start.gg
    https: true
    hsts: true
    hsts_max_age: 31536000
    hsts_include_subdomains: false
  - host: www.start.gg
    https: true
    hsts: false
domains:
  - domain: start.gg
    dnssec: false
    caa:
      - digicert.com
      - letsencrypt.org
      - pki.goog
      - ssl.com
      - comodoca.com
      - microsoft.com
    spf: true
    spf_record: 'v=spf1 include:amazonses.com include:servers.mcsv.net include:_spf.google.com -all'
    dmarc: true
    dmarc_policy: reject
notes: >-
  start.gg (smash.gg's successor; smash.gg 301-redirects to www.start.gg) is a
  Microsoft property - the CAA record authorizes microsoft.com as a certificate
  issuer. DMARC is enforced (p=reject). DNSSEC is not enabled.