18645.idDomain analysis & security report

• SPFMissing

  No SPF record: any server can send mail that claims to come from this domain.

  —
• DKIMNot found

  No key at the 12 common selectors we checked. A custom selector can’t be found from DNS alone.

  —
• DMARCMissing

  No DMARC policy: receivers aren’t told what to do with mail that fails SPF and DKIM.

  —
• MTA-STSMissing

  Forces encrypted delivery between mail servers.

  —
• BIMINot found

  Shows the brand logo in supporting inboxes. Optional; needs DMARC enforcement.

  —

Read from the domain's public DNS records.

• Strict-Transport-SecurityMissing

  The page is served over plain HTTP, so HTTPS can’t be enforced.

• Content-Security-PolicyMissing

  Limits where scripts can load from — the main defence against XSS.

• X-Frame-OptionsMissing

  Stops the site being framed for clickjacking.

• X-Content-Type-OptionsMissing

  Prevents browsers guessing file types.

• IPv6No IPv6 address
  No
• DNSSECDNS answers aren’t signed
  No
• CAA recordAny CA may issue certificates
  No
• TLS 1.3Doesn’t offer TLS 1.3
  No
• HTTP/3Not offered
  No
• HSTS preloadNot on the browsers’ preload list
  No

1. http://18645.id/200

• HTTP redirects to HTTPSThe page stays on plain HTTP.
  Fail
• www and non-www agreewww.18645.id ends on http://www.18645.id/, a different address.
  Warning
• 0 hops — no loopsThe address answers directly.
  Pass