{
"percentage": 83,
"level": "Medium",
"issues": [],
"warnings": [
"HSTS is not enabled.",
"No CAA records found.",
"MTA-STS is not configured."
],
"improvements": [
"Tighten SPF policy to use \"-all\" after confirming all legitimate senders are included.",
"Enable HSTS with: Strict-Transport-Security: max-age=31536000; includeSubDomains; preload",
"Add CAA records to restrict which certificate authorities may issue certificates for your domain.",
"Publish an _mta-sts.codeforgex.studio TXT record and host an MTA-STS policy file over HTTPS."
],
"details": {
"input_domain": "codeforgex.studio",
"parent_domain": "codeforgex.studio",
"using_parent_fallback": false,
"MX": {
"records": [
{
"host": "codeforgex.studio",
"class": "IN",
"ttl": 300,
"type": "MX",
"pri": 0,
"target": "mx1.spacemail.com"
},
{
"host": "codeforgex.studio",
"class": "IN",
"ttl": 300,
"type": "MX",
"pri": 0,
"target": "mx2.spacemail.com"
}
],
"found_on": "codeforgex.studio",
"fallback_used": false
},
"SPF": {
"value": "v=spf1 include:spf.shared.spaceship.host include:spf.spacemail.com ~all",
"mode": "softfail (~all)",
"found_on": "codeforgex.studio",
"fallback_used": false
},
"DMARC": {
"value": "v=DMARC1; p=reject; rua=mailto:dmarc-reports@codeforgex.studio; ruf=mailto:dmarc-reports@codeforgex.studio; pct=100; sp=reject;",
"found_on": "codeforgex.studio",
"fallback_used": false,
"policy": "reject",
"rua": "mailto:dmarc-reports@codeforgex.studio",
"ruf": "mailto:dmarc-reports@codeforgex.studio",
"subdomain_policy": "reject"
},
"DKIM": {
"selector_used": "x",
"found_on": "codeforgex.studio",
"fallback_used": false,
"status": "found"
},
"BIMI": {
"value": "v=BIMI1;l=https://codeforgex.studio/logo.svg;",
"found_on": "codeforgex.studio",
"fallback_used": false
},
"SSL": {
"name": "/CN=codeforgex.studio",
"subject": {
"CN": "codeforgex.studio"
},
"hash": "77aff69f",
"issuer": "R12",
"version": 2,
"serialNumber": "0x051473AE1549DB6E9811A4A13822B44BB424",
"serialNumberHex": "051473AE1549DB6E9811A4A13822B44BB424",
"validFrom": "260127115351Z",
"validTo": "260427115350Z",
"validFrom_time_t": 1769514831,
"validTo_time_t": 1777290830,
"signatureTypeSN": "RSA-SHA256",
"signatureTypeLN": "sha256WithRSAEncryption",
"signatureTypeNID": 668,
"purposes": {
"1": [
true,
false,
"sslclient"
],
"2": [
true,
false,
"sslserver"
],
"3": [
true,
false,
"nssslserver"
],
"4": [
false,
false,
"smimesign"
],
"5": [
false,
false,
"smimeencrypt"
],
"6": [
false,
false,
"crlsign"
],
"7": [
true,
true,
"any"
],
"8": [
true,
false,
"ocsphelper"
],
"9": [
false,
false,
"timestampsign"
]
},
"extensions": {
"keyUsage": "Digital Signature, Key Encipherment",
"extendedKeyUsage": "TLS Web Server Authentication, TLS Web Client Authentication",
"basicConstraints": "CA:FALSE",
"subjectKeyIdentifier": "C0:33:D2:75:94:F1:91:DA:FE:5C:7F:80:48:63:18:18:2D:02:FA:7B",
"authorityKeyIdentifier": "keyid:00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2\n",
"authorityInfoAccess": "CA Issuers - URI:http://r12.i.lencr.org/\n",
"subjectAltName": "DNS:codeforgex.studio, DNS:www.codeforgex.studio",
"certificatePolicies": "Policy: 2.23.140.1.2.1\n",
"crlDistributionPoints": "\nFull Name:\n URI:http://r12.c.lencr.org/37.crl\n",
"ct_precert_scts": "Signed Certificate Timestamp:\n Version : v1 (0x0)\n Log ID : A5:C9:78:92:5D:57:46:17:82:87:0D:D8:89:66:0B:5C:\n 55:64:8B:7D:00:40:F2:EC:07:68:51:D1:88:69:19:F7\n Timestamp : Jan 27 12:52:21.830 2026 GMT\n Extensions: 00:00:05:00:30:39:E3:3A\n Signature : ecdsa-with-SHA256\n 30:45:02:20:6E:0D:73:B4:C2:EB:40:46:E4:46:BC:B5:\n E2:CD:B5:5E:73:07:9A:D8:F0:3E:C4:8B:74:7E:63:43:\n 41:DA:08:2B:02:21:00:D5:C1:07:3F:8A:F2:82:E9:EE:\n F3:17:D7:F1:FA:9E:0A:FA:B0:39:9A:31:7B:66:F8:7C:\n C0:AA:2C:48:A9:69:CB\nSigned Certificate Timestamp:\n Version : v1 (0x0)\n Log ID : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF:\n C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA\n Timestamp : Jan 27 12:52:23.767 2026 GMT\n Extensions: none\n Signature : ecdsa-with-SHA256\n 30:45:02:21:00:DA:A3:0A:19:C5:CB:C3:D1:BC:B1:AB:\n 3C:AB:F7:2E:51:D9:A1:0A:69:F6:91:40:E1:6A:15:FF:\n ED:B7:D2:53:3A:02:20:25:5B:D4:02:DB:5C:66:6A:B1:\n 89:95:77:0D:9C:DB:34:19:11:6E:1A:0F:55:E0:00:53:\n 9A:04:70:FA:AE:0A:35"
},
"expiry_days": 70.755,
"altnames": [
"codeforgex.studio",
"www.codeforgex.studio"
]
},
"HSTS": null,
"DNSSEC": {
"status": "Enabled",
"applies_to": "codeforgex.studio",
"fallback_used": false,
"ds": [
{
"server": "San Francisco CA, United States",
"ip": "208.67.222.220",
"provider": "OpenDNS",
"line": "1487 13 2 B805B06867CF1148EE34513DAC8608BC7FC3A18D95374B1887E1C679 E6D58051"
},
{
"server": "Mountain View CA, United States",
"ip": "8.8.8.8",
"provider": "Google",
"line": "1487 13 2 B805B06867CF1148EE34513DAC8608BC7FC3A18D95374B1887E1C679 E6D58051"
},
{
"server": "Berkeley, US",
"ip": "9.9.9.9",
"provider": "Quad9",
"line": "1487 13 2 B805B06867CF1148EE34513DAC8608BC7FC3A18D95374B1887E1C679 E6D58051"
},
{
"server": "Virginia, United States",
"ip": "64.6.64.6",
"provider": "VeriSign Global Registry Services",
"line": "1487 13 2 B805B06867CF1148EE34513DAC8608BC7FC3A18D95374B1887E1C679 E6D58051"
},
{
"server": "Columbia, United States",
"ip": "185.228.169.9",
"provider": "Daniel Cid",
"line": "1487 13 2 B805B06867CF1148EE34513DAC8608BC7FC3A18D95374B1887E1C679 E6D58051"
}
],
"dnskey": [
{
"server": "San Francisco CA, United States",
"ip": "208.67.222.220",
"provider": "OpenDNS",
"line": "256 3 13 0lJwhpQafSPHLXXtjBqLB6N/nQ3bJYUoTeA0dpoBr3r1z5mShEC/0FW1 +pUZObaziprS0kpPnTcjt2QdxiT+wg=="
},
{
"server": "San Francisco CA, United States",
"ip": "208.67.222.220",
"provider": "OpenDNS",
"line": "257 3 13 FI9iK++4ZieB7ryMSPFbMjLSPSiXB1h0EW/IrthlDba340gOsR2kigk1 78DE/W1uX45U6qjqS+qqP7q21GTPMQ=="
},
{
"server": "Mountain View CA, United States",
"ip": "8.8.8.8",
"provider": "Google",
"line": "256 3 13 0lJwhpQafSPHLXXtjBqLB6N/nQ3bJYUoTeA0dpoBr3r1z5mShEC/0FW1 +pUZObaziprS0kpPnTcjt2QdxiT+wg=="
},
{
"server": "Mountain View CA, United States",
"ip": "8.8.8.8",
"provider": "Google",
"line": "257 3 13 FI9iK++4ZieB7ryMSPFbMjLSPSiXB1h0EW/IrthlDba340gOsR2kigk1 78DE/W1uX45U6qjqS+qqP7q21GTPMQ=="
},
{
"server": "Berkeley, US",
"ip": "9.9.9.9",
"provider": "Quad9",
"line": "257 3 13 FI9iK++4ZieB7ryMSPFbMjLSPSiXB1h0EW/IrthlDba340gOsR2kigk1 78DE/W1uX45U6qjqS+qqP7q21GTPMQ=="
},
{
"server": "Berkeley, US",
"ip": "9.9.9.9",
"provider": "Quad9",
"line": "256 3 13 0lJwhpQafSPHLXXtjBqLB6N/nQ3bJYUoTeA0dpoBr3r1z5mShEC/0FW1 +pUZObaziprS0kpPnTcjt2QdxiT+wg=="
},
{
"server": "Virginia, United States",
"ip": "64.6.64.6",
"provider": "VeriSign Global Registry Services",
"line": "256 3 13 0lJwhpQafSPHLXXtjBqLB6N/nQ3bJYUoTeA0dpoBr3r1z5mShEC/0FW1 +pUZObaziprS0kpPnTcjt2QdxiT+wg=="
},
{
"server": "Virginia, United States",
"ip": "64.6.64.6",
"provider": "VeriSign Global Registry Services",
"line": "257 3 13 FI9iK++4ZieB7ryMSPFbMjLSPSiXB1h0EW/IrthlDba340gOsR2kigk1 78DE/W1uX45U6qjqS+qqP7q21GTPMQ=="
},
{
"server": "Columbia, United States",
"ip": "185.228.169.9",
"provider": "Daniel Cid",
"line": "256 3 13 0lJwhpQafSPHLXXtjBqLB6N/nQ3bJYUoTeA0dpoBr3r1z5mShEC/0FW1 +pUZObaziprS0kpPnTcjt2QdxiT+wg=="
},
{
"server": "Columbia, United States",
"ip": "185.228.169.9",
"provider": "Daniel Cid",
"line": "257 3 13 FI9iK++4ZieB7ryMSPFbMjLSPSiXB1h0EW/IrthlDba340gOsR2kigk1 78DE/W1uX45U6qjqS+qqP7q21GTPMQ=="
}
]
},
"CAA": null,
"MTA_STS": null,
"TLS_RPT": {
"value": "Present",
"found_on": "codeforgex.studio",
"fallback_used": false
}
}
}