Closed ralexander-phi closed 1 month ago
Here's the script output for domains with MTA-STS support:
Results: 123formbuilder.com max_age:86400 1se.co including 4.cn max_age:86400 42l.fr max_age:86400 4me.com including aat.org.uk mode:testing accurx.com including acko.com max_age:86400 acquia.com mode:testing active24.cz max_age:86401 ada.com including adamnet.works including adaptivedatanetworks.com mode:testing adasitecompliance.com mode:testing adeptmind.ai mode:testing affise.com including aftonbladet.se mode:testing agilent.com mode:testing airmiles.nl mode:testing ajax.systems including ajmadison.com mode:testing aldi-nord.de including aldi.es including aldi.fr including aldi.nl including alexridevski.net including almaden.app mode:testing altospam.com including altrad.com mode:testing alzheimers.org.uk mode:testing amadeus.com mode:testing america.gov including americancentury.com mode:testing americasnewsteam.com including ameritas.com including ammunitiondepot.com including animeworld.cx including anonymised.io mode:testing anu.edu.au including apm.net.au max_age:86400 apnic.net including appliedprivacy.net mode:testing arbeitsagentur.de including arbetsformedlingen.se including arcadis.com including archlinux.org including arcserve.com mode:testing arcticfoxes.net including ariat.com mode:testing arpnet.net including artemislena.eu including artikel10.org max_age:86400 as207960.net including asana.com including asmr.one max_age:86400 aswatson.com mode:testing aswatson.net mode:testing atendesimples.com mode:testing atgtickets.com mode:testing atom.com mode:testing atwiki.jp max_age:86400 audian.com mode:testing autistici.org including autoelevate.com mode:testing autosoftdms.com mode:testing avo.app mode:testing avochato.com mode:testing awardwallet.com including b17.ru mode:testing bahn.de including balanz.com mode:testing bambuser.com mode:testing banked.com mode:testing barion.com mode:testing basf.com including bcc.kz including bcdtravel.com mode:testing bdo.com max_age:86400 bdr.de max_age:86400 bearblog.dev max_age:86400 beautypie.com max_age:86400 bec.dk mode:testing beiersdorf.com including belastingdienst.nl mode:testing belfius.be mode:testing benq.com mode:testing betsafe.com including betsson.bet.ar including betsson.com including betterimpact.com including bigpicturemedical.com mode:testing bimcloud.com including binary.com mode:testing biomerieux.com mode:testing bitget.com mode:testing bitschine.fr including bk.ru max_age:86400 bkash.com mode:testing blazemeter.com mode:testing blindsidenetworks.com including blivakker.no mode:testing bluevine.com mode:testing bnnvara.nl mode:testing book-ye.com.ua mode:testing booksrun.com including boxtal.com including brave.com max_age:86400 britishmuseum.org including brownsshoes.com max_age:86400 buffalo.edu mode:testing bugfender.com including bugmd.com max_age:86400 buzzmonitor.com.br mode:testing cabinetoffice.gov.uk mode:testing cademi.com.br including callsign.com including cantor.com mode:testing canucks.com mode:testing captnemo.in mode:testing castlabs.com including cat.casa mode:testing ceicdata.com mode:testing centretechnologies.com mode:testing cert.ee max_age:86400 cetin.cz max_age:86400 charite.de including childrensalon.com including chop.edu including churchsuite.com mode:testing cin7.com including class.com mode:testing class.com.au mode:testing classdojo.com mode:testing clearbit.com mode:testing clearip.com max_age:86400 clearscore.com mode:testing cliffordchance.com including cloudsponge.com mode:testing clubedohardware.com.br including coassemble.com including codefortynine.com including coinswitch.co mode:testing colisprive.com mode:testing comcast.net including commerzbank.com including commonlit.org mode:testing companieshouse.gov.uk including comparethemarket.com including computerstlouis.com mode:testing conservativestar.com mode:testing coomer.su including cpan.org including cra.cz max_age:86400 crossbeam.com including crowdstrike.com max_age:86400 csaa.com max_age:86400 csiro.au mode:testing cspire.com mode:testing csswg.org including culvers.com mode:testing current.com mode:testing cybersmart.co.uk including cybre.space including cyclomedia.com mode:testing cyient.com including dana.com including danone.com mode:testing dataminr.com mode:testing datart.cz mode:testing datev.de max_age:333333 datevnet.de max_age:333333 db.de including deakin.edu.au mode:testing defra.gov.uk including deindeal.ch mode:testing deriv.com mode:testing deriv.me mode:testing desync.com including deteque.com max_age:432000 deutschebahn.com including dext.com including dft.gov.uk including dismail.de including disroot.org max_age:86400 dm.de including dmgmori.com including dnb.no including dns-net.de including dnswl.org including doctolib.com including doctolib.de including doctolib.fr including doctolib.it including domeneshop.no mode:testing dontpayfull.com mode:testing dp.ua mode:testing draytek.com max_age:86400 drive.com.au mode:testing drmartens.com including dropstab.com max_age:86400 drugs.com max_age:86400 dshield.org max_age:100000 dtkt.ua max_age:600 dus.net max_age:86400 dvla.gov.uk including dwp.gov.uk including eaglenewssource.com including easydmarc.com including ecosia.org mode:testing education.gov.uk including ef.com max_age:86400 eldorado.gg max_age:86400 elktube.com including emails-comparethemarket.com including emis.com mode:testing empatica.com including endpointprotector.com mode:testing eneba.com mode:testing entsoe.eu mode:testing enzuzo.com mode:testing eon.com including eon.de including equinor.com mode:testing err.ee mode:testing eset.com including eurocontrol.int including europeantour.com mode:testing evolvetech.com.au mode:testing exprealty.com mode:testing facebook.com mode:testing facebookmail.com mode:testing fachschaften.org mode:testing facil-iti.com mode:testing faelix.net mode:testing fairydust.space including fco.gov.uk including feathermc.com including festool.com including ffh.de max_age:129600 finansavisen.no mode:testing finanzcheck.de including finanzguru.de max_age:1440 fishbrain.com mode:testing fisherinvestments.com mode:testing fitgirl-repacks.site including fitnesspark.fr mode:testing flawcra.cc mode:testing flowhub.com mode:testing fohr.co mode:testing follettsoftware.com mode:testing food.gov.uk including formative.com mode:testing fortress.com.hk mode:testing forwardemail.net including framer.com max_age:86400 freedommobile.ca mode:testing freevpn.one mode:testing frei.chat including frogeye.fr mode:testing futurae.com including gaming1.com mode:testing gene.com including genesisadaptive.com mode:testing getlasso.co mode:testing gflex.nl including givaudan.com mode:testing glamira.com including gleim.com mode:testing globalwebindex.net including glossgenius.com mode:testing gmail.com max_age:86400 gmx.com mode:testing gmx.net mode:testing gobrightline.com max_age:86400 gofluent.com mode:testing goformative.com mode:testing google.com max_age:86400 googlegroups.com mode:testing googlemail.com max_age:86400 goquiq.com mode:testing goteleport.com including govplus.com mode:testing grapheneos.network including grapheneos.org including graphisoft.com including gravitational.io including graylog.com including graylog.org including greatergood.com mode:testing greenpeace.org mode:testing groovinads.com including grundfos.com including gsa.gov max_age:86400 guardian.co.uk mode:testing gwr.com max_age:86400 habitat.org mode:testing hackerone.com including hacklab.fi max_age:86600 hackthebox.com mode:testing hackthebox.eu mode:testing halcyon.ai mode:testing hamrahcard.ir mode:testing hants.gov.uk including hastingsdirect.com including haworth.com mode:testing hcss.com mode:testing healthengine.com.au including hebcal.com mode:testing hexclad.com mode:testing hey.com max_age:86401 hide.me mode:testing highlinefast.com mode:testing highwaysengland.co.uk including hivetechnologylabs.com mode:testing hkexpress.com including hmcts.net including hmrc.gov.uk max_age:86401 hofstra.edu including hollandandbarrett.com including homeaffairs.gov.au max_age:86401 homeoffice.gov.uk including hopin.com max_age:86400 hostaway.com mode:testing hostpoint.ch including hostsailor.com max_age:86400 hotelchocolat.com including hotmail.com including hotplug.ru mode:testing hptronic.cz mode:testing hro.nl mode:testing hrp.org.uk including htzone.co.il mode:testing hubo.be including hult.edu mode:testing hybrid-analysis.com max_age:86400 iadvize.com mode:testing icertis.com max_age:86400 icims.com mode:testing iciparisxl.be mode:testing iciparisxl.nl mode:testing ico.org.uk including identitysandbox.gov including idp365.net max_age:86400 ik2.com including ikea.ca mode:testing ikea.com mode:testing imaios.com mode:testing imobiliare.ro mode:testing improvmx.com including inbox.eu mode:testing informingnews.com mode:testing infstones.com including insightly.com mode:testing inspera.com max_age:600 inspiredtaste.net mode:testing intechopen.com mode:testing internetcomputer.org including intershop.de max_age:86400 intigriti.com including intiveo.com mode:testing iriseden.fr including isecurenet.in including it.com mode:testing itemku.com mode:testing iwara.tv including jacarandafm.com mode:testing jcc.com.cy mode:testing jetbrains.com including jetsmart.com mode:testing jobbase.io including jobjack.co.za mode:testing jobscan.co including jodel.com mode:testing johnnywas.com including jonasled.de mode:testing jouwweb.nl including jula.com including jumia.com max_age:86400 jumpseller.com mode:testing justice.gov.uk including kanbanize.com max_age:86400 kartra.com mode:testing kbr.com including kemono.party including kemono.su including kempinski.com including kenhub.com mode:testing kerbertools.xyz including kif.rocks mode:testing knak.io mode:testing kpi.ua mode:testing kruidvat.be mode:testing kruidvat.nl mode:testing kusama.network mode:testing lacity.gov max_age:86400 lacity.org max_age:86400 laprovence.com mode:testing lehigh.edu mode:testing lemonade.com max_age:86400 lenovosoftware.com mode:testing lesfurets.com including lexmark.com max_age:86400 lillypulitzer.com including liquidtelecom.com mode:testing list.ru max_age:86400 litmus.com mode:testing liu.se including lnk.bio mode:testing login.gov including logz.io including loopmasters.com mode:testing lovebonito.com mode:testing luxsci.com including m247.com including m247.ro mode:testing macrium.com mode:testing maersk.com including mail.com mode:testing mail.de including mail.ru max_age:86400 mailbox.org including mailclub.fr mode:testing mailfence.com max_age:103680 marionnaud.ch mode:testing marionnaud.cz mode:testing mastodon.au mode:none mastodon.ml including mastodon.uno max_age:86400 maximiles.com mode:testing mediarithmics.com mode:testing meinberg.de mode:testing mend.io mode:testing mercury.net including midco.net mode:testing mileskimball.com max_age:86400 mimecast.com mode:testing mls.nc mode:testing mobkoi.com including mod.gov.uk including mod.uk including mode.com max_age:86400 molekule.com mode:testing moneyboxapp.com max_age:86400 moneyweb.co.za mode:testing mottmac.com including mulberry.com including mxtoolbox.com mode:testing myprecisionit.com mode:testing mywebinar.com including mywhoosh.com mode:testing nadeko.net including nakedandthriving.com including namepros.com max_age:86400 nameshield.net including nationalarchives.gov.uk including nav.no mode:testing ncsc.gov.uk including ncu.edu.tw mode:testing nd.edu mode:testing neel.ch including neo4j.com mode:testing neo4j.org mode:testing netfoundry.io mode:testing netwrix.com mode:testing netzbegruenung.de including netzone.ch including newlook.com including newsela.com mode:testing nextip.com.br including nhs.net mode:testing nianticlabs.com mode:testing nic.ir max_age:86400 nice.org.uk mode:testing nielsen.com mode:testing nodecraft.com mode:testing noelleeming.co.nz mode:none noibu.com mode:testing northwave.nl max_age:3600 nothingtohide.nl max_age:86400 notif-colissimo-laposte.info mode:testing nova.edu mode:testing novg.net max_age:86400 npl.co.uk including nra.bg max_age:86401 ntppool.org including nyacat.pw max_age:86400 nzbnoob.com max_age:86400 o2.pl max_age:86400 obsproject.com including octobre-editions.com mode:testing octopus.energy mode:testing office.com mode:testing office365.com mode:testing olaplex.com including olarm.com mode:testing omantel.om mode:testing onclusive.com mode:testing oneidentity.com mode:testing onestepgps.com mode:testing onet.pl mode:testing onfirstup.com including onlyfy.jobs including ons.gov.uk mode:testing op.pl mode:testing openathens.net mode:testing openfin.co mode:testing openstreetmap.org including openwrt.org mode:testing orcasecurity.io mode:testing ordnancesurvey.co.uk including os.uk including osano.com including osm.org including ospinsight.com including ovo.com including ovoenergy.com including pacificlife.com mode:testing pandadoc.com mode:testing pandora.be including parity.io mode:testing partnersgroup.com mode:testing passwordboss.com mode:testing payflex.co.za mode:testing peabody.org.uk mode:testing pentair.com mode:testing peoplefone.de including perf1.com including perfectomobile.com mode:testing perimeterx.com mode:testing pigg.es max_age:86400 pigment.com including pingless.com including pipedrive.com including pixelscan.net max_age:86400 pizzaexpress.com mode:testing plaion.com mode:testing playipp.com mode:testing plex.tv including plexapp.com including pley.com including pluginboutique.com mode:testing plusline.net max_age:86400 pointerpro.com mode:testing polaris.com including polisen.se including polkadot.io mode:testing polkadot.network mode:testing polymarket.com max_age:86400 postcode-lotterie.de mode:testing postcodeloterij.nl mode:testing postcrossing.com including posteo.de including postnl.nl mode:testing premierleague.com mode:testing prerender.io mode:testing prevu3d.com including privacyguides.org including productiv.com mode:testing profinance.ru max_age:86400 proton.me including protonmail.ch including protonmail.com including psyma.com mode:testing pulselive.com mode:testing puppet.com mode:testing puppetlabs.com mode:testing purelymail.com max_age:86400 q10.com mode:testing qntmnet.com mode:testing quest.com mode:testing raizinvest.com.au including rasa.io mode:testing raywhite.com max_age:86400 ready2order.com including recurring-emails-for-gmail.com including redwingshoes.com mode:testing relayfi.com mode:testing remerge.io max_age:86400 render.com including replicated.com mode:testing riseup.net max_age:86400 ritual.com including roche.com including rocketnews24.com mode:testing rollerdigital.com mode:testing rop.gov.om mode:testing rsk.co mode:testing rsvpify.com including rte.ie max_age:86400 ruhr-uni-bochum.de mode:testing runbox.com mode:testing safenames.com max_age:86400 safenames.net mode:testing sanfordhealth.org max_age:86400 sapref.com mode:testing sarbacane.com including sardine.ai mode:testing sarik.tech mode:testing sartorius.com including savvymoney.com mode:testing sbb.ch including schibsted.com mode:testing schildbach.de max_age:86400 schiphol.nl mode:testing schoolinks.com mode:testing securew2.com mode:testing securiti.ai max_age:86400 sekoia.io including senso.cloud max_age:86400 sexyforums.com max_age:86400 sezane.com mode:testing shapermint.com including shastacoe.net mode:testing shelterluv.com max_age:86400 shippypro.com mode:testing shiprocket.in including shl.com mode:testing short.io mode:testing showcaseidx.com mode:testing sidn.nl including sidnlabs.nl mode:none siepomaga.pl mode:testing simplelogin.co mode:testing simplybusiness.co.uk including singlewire.com mode:testing siptalk.com.au including skandia.se including skat.dk including skiff.com max_age:86400 skynetcloud.site including sltidc.lk mode:testing smnz.de including sns-security.fr mode:testing socialchorus.com including socialschools.eu max_age:86400 socketlabs.com max_age:172800 socloz.com mode:testing sofarocean.com mode:testing sonesta.com max_age:86400 soranews24.com mode:testing southernwater.co.uk max_age:86400 spark.co.nz including sparkhire.com mode:testing speedo.com mode:testing sportclips.com mode:testing squadhelp.com mode:testing srv.rent including starry.com mode:testing startmail.com including staybox.com.br mode:testing stonham.uk mode:testing storytel.com mode:testing studentbeans.com including studo.co including superawesome.com including superdrug.com mode:testing sury.org mode:testing suvinil.com.br including swissdec.ch mode:testing swisspass.ch including swordhealth.com mode:testing synaq.com mode:testing systemli.org including t-1.org including tabby.ai mode:testing tabletki.ua including talktalk.net including talktalkplc.com mode:testing tate.org.uk including taxfix.de including tcu.gov.br mode:testing tec35.com mode:testing technologyreview.com including telegraph.co.uk including telenet-ops.be including telenet.be including teltarif.de including tensquaregames.com including textrecruit.com mode:testing tfgm.com including the-afc.com mode:testing theguardian.com mode:testing themlc.com mode:testing themonetizr.com mode:testing thenational.academy including theperfumeshop.com mode:testing thewinesociety.com mode:testing thieme.de max_age:86400 thirdweb.com max_age:86400 thomasnet.com mode:testing threema.ch including tink.com including tink.se including tintup.com mode:testing tiscali.co.uk including tjx.com max_age:86400 tobit.com mode:testing tomi.ai including tommybahama.com including toshiba.com max_age:86400 tractive.com mode:testing tradinghub.eu mode:testing trafftech.io including travelperk.com mode:testing trayport.com including triplelift.com mode:testing tripsource.com including tryst.link mode:testing tu-chemnitz.de mode:testing tuta.com max_age:86400 tutanota.com max_age:86400 tutanota.de max_age:86400 twelve99.net including umantis.com including umbraco.io mode:testing umk.pl including umn.edu mode:testing unifocus.com mode:none unilever.com mode:testing unimus.net mode:testing unitednewsleader.com including unitedstartimes.com including uplearn.co.uk max_age:88400 uprinting.com mode:testing uriports.com including urlaubsguru.de mode:testing usaeaglenews.com including usaid.gov including usarcades.com max_age:86400 ushmm.org mode:testing uu.nl including valmet.com mode:testing vanadium.app including venntelecom.com mode:testing vev.design mode:testing vevo.com mode:testing vino.com including vipcommerce.com.br mode:testing virtuoussoftware.com including vistarmedia.com mode:testing vivaldi.com including vivaldi.net max_age:86401 vivun.com mode:testing vk.team max_age:86400 voeazul.com.br including voicestorm.com including vriendenloterij.nl mode:testing vsb.cz mode:none vtiger.com mode:testing vu.nl mode:testing wartsila.com max_age:86400 washtec.com including watsons.co.id mode:testing watsons.co.th mode:testing watsons.com.my mode:testing watsons.com.sg mode:testing watsons.com.tr mode:testing watsons.com.tw mode:testing wearfigs.com mode:testing web.de mode:testing webador.com including webedia-group.com mode:testing webhosting.dk max_age:86400 webinarjam.com mode:testing websupport.eu max_age:86401 weglot.com mode:testing westlotto.com mode:testing whatbox.ca including whatnot.com mode:testing wheelofnames.com mode:testing wideroe.no mode:testing wiktel.com max_age:300 withings.com including wizaly.com including wonde.com including worldhistory.org mode:testing wp.pl max_age:86400 wyday.com including xerius.be including xfinity.com including xl.pt mode:testing xometry.com mode:testing xsolla.com mode:testing yahoo.com mode:testing yubico.com mode:testing zapier.com mode:testing zephr.com max_age:86400 zerobounce.net mode:testing zivver.com including zone.eu max_age:86400 zooplus.com mode:none zooplus.de mode:none
Many domains that appear to have MTA-STS support have problems on the web server, here's those logs:
domain 'answear.com' failed with error: domain 'appypie.com' failed with error: Cannot connect to host mta-sts.appypie.com:443 ssl:default [None] domain 'beintoo.com' failed with error: domain 'bionexo.com' failed with error: Cannot connect to host mta-sts.bionexo.com:443 ssl:default [None] domain 'bl.uk' failed with error: Cannot connect to host mta-sts.bl.uk:443 ssl:default [Connect call failed ('194.66.233.215', 443)] domain 'bolha.us' failed with error: Cannot connect to host mta-sts.bolha.us:443 ssl:True [SSLCertVerificationError: (1, "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'mta-sts.bolha.us'. (_ssl.c:992)")] domain 'buildops.com' failed with error: Cannot connect to host mta-sts.buildops.com:443 ssl:default [None] domain 'cashfree.com' failed with error: Cannot connect to host mta-sts.cashfree.com:443 ssl:default [None] domain 'catboyindustries.co' failed with error: domain 'cbinsights.com' failed with error: Cannot connect to host mta-sts.cbinsights.com:443 ssl:default [None] domain 'cloudmini.net' failed with error: domain 'commercialobserver.com' failed with error: Cannot connect to host mta-sts.commercialobserver.com:443 ssl:True [SSLCertVerificationError: (1, "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'mta-sts.commercialobserver.com'. (_ssl.c:992)")] domain 'compassion.com' failed with error: Cannot connect to host mta-sts.compassion.com:443 ssl:default [None] domain 'contaazul.com' failed with error: domain 'coomer.party' failed with error: Cannot connect to host mta-sts.coomer.party:443 ssl:default [Connect call failed ('91.142.72.138', 443)] domain 'count.ly' failed with error: Cannot connect to host mta-sts.count.ly:443 ssl:default [None] domain 'daktela.com' failed with error: Cannot connect to host mta-sts.daktela.com:443 ssl:default [Connect call failed ('81.0.236.21', 443)] domain 'detik.net.id' failed with error: Cannot connect to host mta-sts.detik.net.id:443 ssl:default [None] domain 'digit.in' failed with error: Cannot connect to host mta-sts.digit.in:443 ssl:default [None] domain 'digitoon.ir' failed with error: Cannot connect to host mta-sts.digitoon.ir:443 ssl:default [None] domain 'dreamlines.de' failed with error: Cannot connect to host mta-sts.dreamlines.de:443 ssl:default [None] domain 'ecloud.global' failed with error: domain 'elster.de' failed with error: domain 'epson-europe.com' failed with error: domain 'eurodns.com' failed with error: domain 'ex.co' failed with error: Cannot connect to host mta-sts.ex.co:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'falcon-sandbox.com' failed with error: domain 'fark.com' failed with error: domain 'firestorm.ch' failed with error: Cannot connect to host mta-sts.firestorm.ch:443 ssl:True [SSLCertVerificationError: (1, "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'mta-sts.firestorm.ch'. (_ssl.c:992)")] domain 'fusionauth.io' failed with error: domain 'g4mm4.io' failed with error: Cannot connect to host mta-sts.g4mm4.io:443 ssl:default [None] domain 'getprintbox.com' failed with error: domain 'granicus.com' failed with error: domain 'greatlearning.in' failed with error: Cannot connect to host mta-sts.greatlearning.in:443 ssl:default [None] domain 'gulp.ch' failed with error: domain 'gulp.de' failed with error: domain 'handelsbanken.se' failed with error: domain 'hostux.net' failed with error: domain 'idealofsweden.com' failed with error: domain 'ikea.cn' failed with error: Cannot connect to host mta-sts.ikea.cn:443 ssl:default [Network is unreachable] domain 'influxdata.com' failed with error: domain 'ingka.com' failed with error: Cannot connect to host mta-sts.ingka.com:443 ssl:default [Network is unreachable] domain 'instantsystems.se' failed with error: domain 'introvert.software' failed with error: Cannot connect to host mta-sts.introvert.software:443 ssl:default [None] domain 'isoc.org.il' failed with error: Cannot connect to host mta-sts.isoc.org.il:443 ssl:default [None] domain 'ivanti.com' failed with error: domain 'ivytech.edu' failed with error: Cannot connect to host mta-sts.ivytech.edu:443 ssl:default [None] domain 'jalisco.gob.mx' failed with error: Cannot connect to host mta-sts.jalisco.gob.mx:443 ssl:default [None] domain 'johnnybet.com' failed with error: Cannot connect to host mta-sts.johnnybet.com:443 ssl:default [None] domain 'joinads.me' failed with error: Cannot connect to host mta-sts.joinads.me:443 ssl:default [None] domain 'jscrambler.com' failed with error: domain 'kaluza.com' failed with error: Cannot connect to host mta-sts.kaluza.com:443 ssl:True [SSLCertVerificationError: (1, "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'mta-sts.kaluza.com'. (_ssl.c:992)")] domain 'kanp.ai' failed with error: Cannot connect to host mta-sts.kanp.ai:443 ssl:default [None] domain 'ledger.com' failed with error: domain 'legalinsurrection.com' failed with error: Cannot connect to host mta-sts.legalinsurrection.com:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'legallais.com' failed with error: domain 'lennox.com' failed with error: Cannot connect to host mta-sts.lennox.com:443 ssl:default [Connect call failed ('205.145.201.35', 443)] domain 'linux.pizza' failed with error: Cannot connect to host mta-sts.linux.pizza:443 ssl:default [Connect call failed ('51.15.123.248', 443)] domain 'mantle.xyz' failed with error: Cannot connect to host mta-sts.mantle.xyz:443 ssl:default [None] domain 'megapulse.com.br' failed with error: Cannot connect to host mta-sts.megapulse.com.br:443 ssl:default [Connect call failed ('190.89.248.14', 443)] domain 'mightyape.co.nz' failed with error: domain 'milvus.com.br' failed with error: Cannot connect to host mta-sts.milvus.com.br:443 ssl:default [None] domain 'moneytalksnews.com' failed with error: domain 'mukuru.com' failed with error: Cannot connect to host mta-sts.mukuru.com:443 ssl:default [None] domain 'mygreatlearning.com' failed with error: Cannot connect to host mta-sts.mygreatlearning.com:443 ssl:default [None] domain 'myownconference.net' failed with error: Cannot connect to host mta-sts.myownconference.net:443 ssl:default [None] domain 'mywebinar.live' failed with error: domain 'mywebinar.net' failed with error: domain 'namebay.com' failed with error: domain 'neuviz.net.id' failed with error: Cannot connect to host mta-sts.neuviz.net.id:443 ssl:default [Connect call failed ('103.30.89.254', 443)] domain 'odysseylabel.com.au' failed with error: Cannot connect to host mta-sts.odysseylabel.com.au:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'onescreen.ai' failed with error: Cannot connect to host mta-sts.onescreen.ai:443 ssl:default [None] domain 'openocean.finance' failed with error: Cannot connect to host mta-sts.openocean.finance:443 ssl:default [None] domain 'pagerduty.com' failed with error: domain 'picsart.com' failed with error: domain 'pinelabs.com' failed with error: Cannot connect to host mta-sts.pinelabs.com:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'pitai.io' failed with error: Cannot connect to host mta-sts.pitai.io:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'playbuzz.com' failed with error: Cannot connect to host mta-sts.playbuzz.com:443 ssl:default [None] domain 'powerhosting.dk' failed with error: domain 'prometric.com' failed with error: Cannot connect to host mta-sts.prometric.com:443 ssl:default [None] domain 'provu.co.uk' failed with error: Cannot connect to host mta-sts.provu.co.uk:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'quackquack.in' failed with error: Cannot connect to host mta-sts.quackquack.in:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'raven.com' failed with error: Cannot connect to host mta-sts.raven.com:443 ssl:default [None] domain 'remerge.events' failed with error: Cannot connect to host mta-sts.remerge.events:443 ssl:default [[SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:992)] domain 'remerge.supply' failed with error: Cannot connect to host mta-sts.remerge.supply:443 ssl:default [[SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:992)] domain 'restaurant365.com' failed with error: domain 'revizto.com' failed with error: domain 'rltx.net' failed with error: Cannot connect to host mta-sts.rltx.net:443 ssl:default [Connect call failed ('72.52.178.23', 443)] domain 'roller.app' failed with error: Cannot connect to host mta-sts.roller.app:443 ssl:default [[SSL: TLSV1_ALERT_INTERNAL_ERROR] tlsv1 alert internal error (_ssl.c:992)] domain 'runyourpool.com' failed with error: Cannot connect to host mta-sts.runyourpool.com:443 ssl:default [[SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:992)] domain 'rws.nl' failed with error: domain 'rydoo.com' failed with error: Cannot connect to host mta-sts.rydoo.com:443 ssl:default [None] domain 's-sols.com' failed with error: Cannot connect to host mta-sts.s-sols.com:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)')] domain 'sameteem.com' failed with error: Cannot connect to host mta-sts.sameteem.com:443 ssl:default [None] domain 'scotrail.co.uk' failed with error: domain 'senteon.co' failed with error: domain 'siilo.com' failed with error: Cannot connect to host mta-sts.siilo.com:443 ssl:default [None] domain 'sisense.com' failed with error: domain 'snafu.de' failed with error: Cannot connect to host mta-sts.snafu.de:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)')] domain 'sodresantoro.com.br' failed with error: Cannot connect to host mta-sts.sodresantoro.com.br:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'soverin.net' failed with error: domain 'speakup.nl' failed with error: domain 'sprocket.bz' failed with error: Cannot connect to host mta-sts.sprocket.bz:443 ssl:True [SSLCertVerificationError: (1, "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'mta-sts.sprocket.bz'. (_ssl.c:992)")] domain 'sqills.com' failed with error: Cannot connect to host mta-sts.sqills.com:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'srovname.cz' failed with error: Cannot connect to host mta-sts.srovname.cz:443 ssl:default [None] domain 'stonly.com' failed with error: domain 'studio3t.com' failed with error: Cannot connect to host mta-sts.studio3t.com:443 ssl:default [None] domain 'syneto.eu' failed with error: Cannot connect to host mta-sts.syneto.eu:443 ssl:default [None] domain 'talkiatry.com' failed with error: Cannot connect to host mta-sts.talkiatry.com:443 ssl:default [None] domain 'thedailyhorn.com' failed with error: domain 'thehackernews.com' failed with error: Cannot connect to host mta-sts.thehackernews.com:443 ssl:default [None] domain 'themars.top' failed with error: Cannot connect to host mta-sts.themars.top:443 ssl:default [None] domain 'ucertify.com' failed with error: Cannot connect to host mta-sts.ucertify.com:443 ssl:default [None] domain 'uni-bonn.de' failed with error: Cannot connect to host mta-sts.uni-bonn.de:443 ssl:default [None] domain 'vanoord.com' failed with error: domain 'vestednetworks.com' failed with error: domain 'vexpenses.com' failed with error: Cannot connect to host mta-sts.vexpenses.com:443 ssl:True [SSLCertVerificationError: (1, "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'mta-sts.vexpenses.com'. (_ssl.c:992)")] domain 'vultr.com' failed with error: domain 'wehkamp.nl' failed with error: domain 'wesleyan.edu' failed with error: Cannot connect to host mta-sts.wesleyan.edu:443 ssl:default [None] domain 'westlotto.de' failed with error: 400, message='Got more than 8190 bytes (10476) when reading Header value is too long.', url='https://mta-sts.westlotto.de/.well-known/mta-sts.txt' domain 'winpot.mx' failed with error: Cannot connect to host mta-sts.winpot.mx:443 ssl:default [[SSL: TLSV1_ALERT_INTERNAL_ERROR] tlsv1 alert internal error (_ssl.c:992)] domain 'wur.nl' failed with error: domain 'yieldbird.com' failed with error: Cannot connect to host mta-sts.yieldbird.com:443 ssl:default [None] doctolib.it including (venv) robert@r-tp:~/code/mta-sts-cache-warming$ egrep -o " \d+.*it.+ (.*)$" tools/bulk_addition/logs doctolib.it including (venv) robert@r-tp:~/code/mta-sts-cache-warming$ egrep -o " \d+.*it.+\s+(.*)$" tools/bulk_addition/logs domain 'answear.com' failed with error: domain 'appypie.com' failed with error: Cannot connect to host mta-sts.appypie.com:443 ssl:default [None] domain 'beintoo.com' failed with error: domain 'bionexo.com' failed with error: Cannot connect to host mta-sts.bionexo.com:443 ssl:default [None] domain 'bl.uk' failed with error: Cannot connect to host mta-sts.bl.uk:443 ssl:default [Connect call failed ('194.66.233.215', 443)] domain 'bolha.us' failed with error: Cannot connect to host mta-sts.bolha.us:443 ssl:True [SSLCertVerificationError: (1, "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'mta-sts.bolha.us'. (_ssl.c:992)")] domain 'buildops.com' failed with error: Cannot connect to host mta-sts.buildops.com:443 ssl:default [None] domain 'cashfree.com' failed with error: Cannot connect to host mta-sts.cashfree.com:443 ssl:default [None] domain 'catboyindustries.co' failed with error: domain 'cbinsights.com' failed with error: Cannot connect to host mta-sts.cbinsights.com:443 ssl:default [None] domain 'cloudmini.net' failed with error: domain 'commercialobserver.com' failed with error: Cannot connect to host mta-sts.commercialobserver.com:443 ssl:True [SSLCertVerificationError: (1, "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'mta-sts.commercialobserver.com'. (_ssl.c:992)")] domain 'compassion.com' failed with error: Cannot connect to host mta-sts.compassion.com:443 ssl:default [None] domain 'contaazul.com' failed with error: domain 'coomer.party' failed with error: Cannot connect to host mta-sts.coomer.party:443 ssl:default [Connect call failed ('91.142.72.138', 443)] domain 'count.ly' failed with error: Cannot connect to host mta-sts.count.ly:443 ssl:default [None] domain 'daktela.com' failed with error: Cannot connect to host mta-sts.daktela.com:443 ssl:default [Connect call failed ('81.0.236.21', 443)] domain 'detik.net.id' failed with error: Cannot connect to host mta-sts.detik.net.id:443 ssl:default [None] domain 'digit.in' failed with error: Cannot connect to host mta-sts.digit.in:443 ssl:default [None] domain 'digitoon.ir' failed with error: Cannot connect to host mta-sts.digitoon.ir:443 ssl:default [None] domain 'dreamlines.de' failed with error: Cannot connect to host mta-sts.dreamlines.de:443 ssl:default [None] domain 'ecloud.global' failed with error: domain 'elster.de' failed with error: domain 'epson-europe.com' failed with error: domain 'eurodns.com' failed with error: domain 'ex.co' failed with error: Cannot connect to host mta-sts.ex.co:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'falcon-sandbox.com' failed with error: domain 'fark.com' failed with error: domain 'firestorm.ch' failed with error: Cannot connect to host mta-sts.firestorm.ch:443 ssl:True [SSLCertVerificationError: (1, "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'mta-sts.firestorm.ch'. (_ssl.c:992)")] domain 'fusionauth.io' failed with error: domain 'g4mm4.io' failed with error: Cannot connect to host mta-sts.g4mm4.io:443 ssl:default [None] domain 'getprintbox.com' failed with error: domain 'granicus.com' failed with error: domain 'greatlearning.in' failed with error: Cannot connect to host mta-sts.greatlearning.in:443 ssl:default [None] domain 'gulp.ch' failed with error: domain 'gulp.de' failed with error: domain 'handelsbanken.se' failed with error: domain 'hostux.net' failed with error: domain 'idealofsweden.com' failed with error: domain 'ikea.cn' failed with error: Cannot connect to host mta-sts.ikea.cn:443 ssl:default [Network is unreachable] domain 'influxdata.com' failed with error: domain 'ingka.com' failed with error: Cannot connect to host mta-sts.ingka.com:443 ssl:default [Network is unreachable] domain 'instantsystems.se' failed with error: domain 'introvert.software' failed with error: Cannot connect to host mta-sts.introvert.software:443 ssl:default [None] domain 'isoc.org.il' failed with error: Cannot connect to host mta-sts.isoc.org.il:443 ssl:default [None] domain 'ivanti.com' failed with error: domain 'ivytech.edu' failed with error: Cannot connect to host mta-sts.ivytech.edu:443 ssl:default [None] domain 'jalisco.gob.mx' failed with error: Cannot connect to host mta-sts.jalisco.gob.mx:443 ssl:default [None] domain 'johnnybet.com' failed with error: Cannot connect to host mta-sts.johnnybet.com:443 ssl:default [None] domain 'joinads.me' failed with error: Cannot connect to host mta-sts.joinads.me:443 ssl:default [None] domain 'jscrambler.com' failed with error: domain 'kaluza.com' failed with error: Cannot connect to host mta-sts.kaluza.com:443 ssl:True [SSLCertVerificationError: (1, "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'mta-sts.kaluza.com'. (_ssl.c:992)")] domain 'kanp.ai' failed with error: Cannot connect to host mta-sts.kanp.ai:443 ssl:default [None] domain 'ledger.com' failed with error: domain 'legalinsurrection.com' failed with error: Cannot connect to host mta-sts.legalinsurrection.com:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'legallais.com' failed with error: domain 'lennox.com' failed with error: Cannot connect to host mta-sts.lennox.com:443 ssl:default [Connect call failed ('205.145.201.35', 443)] domain 'linux.pizza' failed with error: Cannot connect to host mta-sts.linux.pizza:443 ssl:default [Connect call failed ('51.15.123.248', 443)] domain 'mantle.xyz' failed with error: Cannot connect to host mta-sts.mantle.xyz:443 ssl:default [None] domain 'megapulse.com.br' failed with error: Cannot connect to host mta-sts.megapulse.com.br:443 ssl:default [Connect call failed ('190.89.248.14', 443)] domain 'mightyape.co.nz' failed with error: domain 'milvus.com.br' failed with error: Cannot connect to host mta-sts.milvus.com.br:443 ssl:default [None] domain 'moneytalksnews.com' failed with error: domain 'mukuru.com' failed with error: Cannot connect to host mta-sts.mukuru.com:443 ssl:default [None] domain 'mygreatlearning.com' failed with error: Cannot connect to host mta-sts.mygreatlearning.com:443 ssl:default [None] domain 'myownconference.net' failed with error: Cannot connect to host mta-sts.myownconference.net:443 ssl:default [None] domain 'mywebinar.live' failed with error: domain 'mywebinar.net' failed with error: domain 'namebay.com' failed with error: domain 'neuviz.net.id' failed with error: Cannot connect to host mta-sts.neuviz.net.id:443 ssl:default [Connect call failed ('103.30.89.254', 443)] domain 'odysseylabel.com.au' failed with error: Cannot connect to host mta-sts.odysseylabel.com.au:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'onescreen.ai' failed with error: Cannot connect to host mta-sts.onescreen.ai:443 ssl:default [None] domain 'openocean.finance' failed with error: Cannot connect to host mta-sts.openocean.finance:443 ssl:default [None] domain 'pagerduty.com' failed with error: domain 'picsart.com' failed with error: domain 'pinelabs.com' failed with error: Cannot connect to host mta-sts.pinelabs.com:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'pitai.io' failed with error: Cannot connect to host mta-sts.pitai.io:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'playbuzz.com' failed with error: Cannot connect to host mta-sts.playbuzz.com:443 ssl:default [None] domain 'powerhosting.dk' failed with error: domain 'prometric.com' failed with error: Cannot connect to host mta-sts.prometric.com:443 ssl:default [None] domain 'provu.co.uk' failed with error: Cannot connect to host mta-sts.provu.co.uk:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'quackquack.in' failed with error: Cannot connect to host mta-sts.quackquack.in:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'raven.com' failed with error: Cannot connect to host mta-sts.raven.com:443 ssl:default [None] domain 'remerge.events' failed with error: Cannot connect to host mta-sts.remerge.events:443 ssl:default [[SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:992)] domain 'remerge.supply' failed with error: Cannot connect to host mta-sts.remerge.supply:443 ssl:default [[SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:992)] domain 'restaurant365.com' failed with error: domain 'revizto.com' failed with error: domain 'rltx.net' failed with error: Cannot connect to host mta-sts.rltx.net:443 ssl:default [Connect call failed ('72.52.178.23', 443)] domain 'roller.app' failed with error: Cannot connect to host mta-sts.roller.app:443 ssl:default [[SSL: TLSV1_ALERT_INTERNAL_ERROR] tlsv1 alert internal error (_ssl.c:992)] domain 'runyourpool.com' failed with error: Cannot connect to host mta-sts.runyourpool.com:443 ssl:default [[SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:992)] domain 'rws.nl' failed with error: domain 'rydoo.com' failed with error: Cannot connect to host mta-sts.rydoo.com:443 ssl:default [None] domain 's-sols.com' failed with error: Cannot connect to host mta-sts.s-sols.com:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)')] domain 'sameteem.com' failed with error: Cannot connect to host mta-sts.sameteem.com:443 ssl:default [None] domain 'scotrail.co.uk' failed with error: domain 'senteon.co' failed with error: domain 'siilo.com' failed with error: Cannot connect to host mta-sts.siilo.com:443 ssl:default [None] domain 'sisense.com' failed with error: domain 'snafu.de' failed with error: Cannot connect to host mta-sts.snafu.de:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)')] domain 'sodresantoro.com.br' failed with error: Cannot connect to host mta-sts.sodresantoro.com.br:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'soverin.net' failed with error: domain 'speakup.nl' failed with error: domain 'sprocket.bz' failed with error: Cannot connect to host mta-sts.sprocket.bz:443 ssl:True [SSLCertVerificationError: (1, "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'mta-sts.sprocket.bz'. (_ssl.c:992)")] domain 'sqills.com' failed with error: Cannot connect to host mta-sts.sqills.com:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')] domain 'srovname.cz' failed with error: Cannot connect to host mta-sts.srovname.cz:443 ssl:default [None] domain 'stonly.com' failed with error: domain 'studio3t.com' failed with error: Cannot connect to host mta-sts.studio3t.com:443 ssl:default [None] domain 'syneto.eu' failed with error: Cannot connect to host mta-sts.syneto.eu:443 ssl:default [None] domain 'talkiatry.com' failed with error: Cannot connect to host mta-sts.talkiatry.com:443 ssl:default [None] domain 'thedailyhorn.com' failed with error: domain 'thehackernews.com' failed with error: Cannot connect to host mta-sts.thehackernews.com:443 ssl:default [None] domain 'themars.top' failed with error: Cannot connect to host mta-sts.themars.top:443 ssl:default [None] domain 'ucertify.com' failed with error: Cannot connect to host mta-sts.ucertify.com:443 ssl:default [None] domain 'uni-bonn.de' failed with error: Cannot connect to host mta-sts.uni-bonn.de:443 ssl:default [None] domain 'vanoord.com' failed with error: domain 'vestednetworks.com' failed with error: domain 'vexpenses.com' failed with error: Cannot connect to host mta-sts.vexpenses.com:443 ssl:True [SSLCertVerificationError: (1, "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'mta-sts.vexpenses.com'. (_ssl.c:992)")] domain 'vultr.com' failed with error: domain 'wehkamp.nl' failed with error: domain 'wesleyan.edu' failed with error: Cannot connect to host mta-sts.wesleyan.edu:443 ssl:default [None] domain 'westlotto.de' failed with error: 400, message='Got more than 8190 bytes (10476) when reading Header value is too long.', url='https://mta-sts.westlotto.de/.well-known/mta-sts.txt' domain 'winpot.mx' failed with error: Cannot connect to host mta-sts.winpot.mx:443 ssl:default [[SSL: TLSV1_ALERT_INTERNAL_ERROR] tlsv1 alert internal error (_ssl.c:992)] domain 'wur.nl' failed with error: domain 'yieldbird.com' failed with error: Cannot connect to host mta-sts.yieldbird.com:443 ssl:default [None]
Domain list is here: https://radar.cloudflare.com/domains
Need to investigate
these shows on my local machine, but not via the GitHub Action. Removing for now.
Here's the script output for domains with MTA-STS support:
Many domains that appear to have MTA-STS support have problems on the web server, here's those logs: