generated: '2026-09-04'
method: probed
source: live DNS/TLS/HTTP probes of apis.yml + OpenAPI hosts
hosts:
- host: www.ximalaya.com
  https: true
  tls_version: TLSv1.2
  cert_expires: Feb 20 09:56:09 2027 GMT
  hsts: false
- host: open.ximalaya.com
  https: true
  tls_version: TLSv1.2
  cert_expires: Feb 20 09:56:09 2027 GMT
  hsts: false
- host: api.ximalaya.com
  https: true
  hsts: false
  note: >-
    The automated probe first recorded https:false, which was a false negative — an
    openssl s_client handshake to this host hangs rather than completing. Corrected
    2026-09-04 after a direct HTTPS request succeeded: GET
    https://api.ximalaya.com/oauth2/v2/access_token returned HTTP 400 with a valid
    certificate (curl ssl_verify_result=0) and the documented JSON error envelope.
    TLS protocol version could not be negotiated by the probe and is therefore not
    recorded rather than guessed.
domains:
- domain: ximalaya.com
  dnssec: true
  caa:
  - waf.c.ximalaya.com.
  spf: true
  dmarc: false