DNS Gurus

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Hostname Mismatch - certificate is issued for image-glb.qpyou.cn, ac-tln-eu-login-m.qpyou.cn, acefishing.qpyou.cn, analytics-log.withhive.com, analytics.withhive.com, api-auth.qpyou.cn, api-authcp.qpyou.cn, api-member.qpyou.cn, api-profile.qpyou.cn, not for developers.withhive.com.qpyou.cn.akadns.net

Open Cached · just now
68/100 SECURITY SCORE

Certificate Information

Subject
C=KR, ST=Seoul, L=Geumcheon-gu, O=Com2us Corp., CN=image-glb.qpyou.cn
Issuer
C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1
Valid From
November 09, 2025
Valid Until
November 10, 2026 344 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
4A:0E:D2:F0:6D:0D:81:FB:A4:D3:B0:34:3D:99:0A:29:83:F4:38:8B:A2:68:E0:37:A4:ED:28:4C:55:07:61:6A
Alternative Names
71 domains

Security Configuration

TLS Protocols
TLS 1.0 TLS 1.1 TLS 1.2
Forward Secrecy
Limited (Check cipher configuration)
Warnings
  • • TLS 1.3 is not supported (recommended)
  • • TLS 1.1 is deprecated and should be disabled
  • • TLS 1.0 is deprecated and should be disabled

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

71 domains
developers.hiveplatform.ai
ac-tln-eu-login-m.qpyou.cn acefishing.qpyou.cn api-auth.qpyou.cn api-authcp.qpyou.cn api-member.qpyou.cn api-profile.qpyou.cn auth.qpyou.cn authcp.qpyou.cn cds.qpyou.cn cli-api-chat-gsp.qpyou.cn cli-api-chatc-gsp.qpyou.cn cp-hub.qpyou.cn dlc3.qpyou.cn friend-api.qpyou.cn friend-hub.qpyou.cn gameitem.qpyou.cn hiveiap.qpyou.cn image-aka.qpyou.cn image-glb.qpyou.cn m.qpyou.cn member.qpyou.cn ninepb3d-h.qpyou.cn play.qpyou.cn profile.qpyou.cn promotion.qpyou.cn provision.qpyou.cn s.qpyou.cn vkrcn2.qpyou.cn
p2o-community.summonerswar.com
analytics-log.withhive.com analytics.withhive.com auth-backoffice.withhive.com authority.withhive.com com2us.withhive.com community.withhive.com communityback.withhive.com console-notification.withhive.com console-promotion.withhive.com console.withhive.com coupon.withhive.com couponback.withhive.com customer-m.withhive.com customer.withhive.com developers.withhive.com event.withhive.com gamevil.withhive.com hgp-collectlog.withhive.com hiveiap-voidback.withhive.com hiveiapback.withhive.com hiveitemback.withhive.com hivemanager.withhive.com idback.withhive.com inquiry.withhive.com m.withhive.com member-m.withhive.com member-web.withhive.com messaging.withhive.com miback.withhive.com notification.withhive.com oauth-manager.withhive.com play.withhive.com profile-m.withhive.com promotion.withhive.com social-m.withhive.com store.withhive.com terms.withhive.com ua.withhive.com ueback.withhive.com weblogin.withhive.com www.withhive.com