JSON result object for "https://www.tweakguides.com/"

Note: This is not a stable API during the beta. Providing highlighted JSON instead of raw JSON data is therefore intentional. 

{
  "flashcookies_count": null,
  "mx_a_records_reverse": [
    [
      0,
      [
        [
          "tweakguides.com"
        ]
      ]
    ]
  ],
  "third_parties": [],
  "mx_has_protocol_tls1_2": true,
  "final_url_is_https": true,
  "web_has_hsts_header": false,
  "mx_pfs": true,
  "mx_has_protocol_tls1": true,
  "web_ciphers": {
    "std_3DES": {
      "severity": "MEDIUM",
      "finding": "Triple DES Ciphers (Medium)                offered - not too bad"
    }
  },
  "mx_has_protocol_sslv2": true,
  "requests_count": 5,
  "web_cert_trusted": true,
  "mx_ciphers": {
    "std_128Bit": {
      "severity": "HIGH",
      "finding": "Weak 128 Bit ciphers (SEED, IDEA, RC[2,4]) offered - bad"
    },
    "std_aNULL": {
      "severity": "CRITICAL",
      "finding": "Anonymous NULL Ciphers (no authentication) offered - ugly"
    },
    "std_EXPORT": {
      "severity": "CRITICAL",
      "finding": "Export ciphers (w/o ADH+NULL)              offered - ugly"
    },
    "std_3DES": {
      "severity": "MEDIUM",
      "finding": "Triple DES Ciphers (Medium)                offered - not too bad"
    },
    "std_DES+64Bit": {
      "severity": "CRITICAL",
      "finding": "LOW: 64 Bit + DES encryption (w/o export)  offered - ugly"
    }
  },
  "a_locations": [
    "Netherlands"
  ],
  "initial_url": "https://www.tweakguides.com/",
  "mx_records": [
    [
      0,
      "mail.tweakguides.com"
    ]
  ],
  "web_has_hpkp_header": false,
  "web_has_ssl": true,
  "flashcookies": [],
  "web_vulnerabilities": {
    "cbc_ssl3": {
      "cve": "CVE-2011-3389",
      "severity": "MEDIUM",
      "finding": "BEAST: CBC ciphers for SSL3: DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA"
    },
    "sweet32": {
      "cve": "CVE-2016-2183, CVE-2016-6329",
      "severity": "LOW",
      "finding": "SWEET32, uses 64 bit block ciphers"
    },
    "fallback_scsv": {
      "cve": "",
      "severity": "HIGH",
      "finding": "TLS_FALLBACK_SCSV (RFC 7507): Downgrade attack prevention NOT supported and vulnerable to POODLE SSL"
    },
    "LOGJAM_common primes": {
      "cve": "CVE-2015-4000",
      "severity": "HIGH",
      "finding": "common prime 'nginx/1024-bit MODP group with safe prime modulus' detected"
    },
    "poodle_ssl": {
      "cve": "CVE-2014-3566",
      "severity": "HIGH",
      "finding": "POODLE, SSL: VULNERABLE, uses SSLv3+CBC"
    },
    "cbc_tls1": {
      "cve": "CVE-2011-3389",
      "severity": "MEDIUM",
      "finding": "BEAST: CBC ciphers for TLS1: DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA"
    },
    "lucky13": {
      "cve": "CVE-2013-0169",
      "severity": "LOW",
      "finding": "potentially vulnerable to LUCKY13, uses cipher block chaining (CBC) ciphers with TLS. Check patches"
    },
    "beast": {
      "cve": "CVE-2011-3389",
      "severity": "LOW",
      "finding": "BEAST: VULNERABLE -- but also supports higher protocols (possible mitigation): TLSv1.1 TLSv1.2"
    },
    "drown": {
      "cve": "CVE-2016-0800, CVE-2016-0703",
      "severity": "HIGH",
      "finding": "SSLv2 offered, but could not detect a cipher (CVE-2015-3197. Make sure you don't use this certificate elsewhere, see https://censys.io/ipv4?q=4E52395652C85DE98E2BDEB9476E64FC03326FE88484F1F711D51B125CC219BE"
    }
  },
  "redirected_to_https": false,
  "mx_ssl_finished": true,
  "openwpm_final_url": "https://www.tweakguides.com/",
  "mixed_content": false,
  "headerchecks": {
    "x-content-type-options": {
      "status": "MISSING",
      "value": ""
    },
    "x-frame-options": {
      "status": "MISSING",
      "value": ""
    },
    "content-security-policy": {
      "status": "MISSING",
      "value": ""
    },
    "x-xss-protection": {
      "status": "MISSING",
      "value": ""
    },
    "referrer-policy": {
      "status": "MISSING",
      "value": ""
    }
  },
  "mx_has_ssl": true,
  "web_ssl_finished": true,
  "https": true,
  "mx_has_protocol_sslv3": true,
  "tracker_requests": [],
  "google_analytics_present": false,
  "third_parties_count": 0,
  "mx_cert_trusted_reason": "certificate does not match supplied URIAll certificate trust checks failed: (self signed).",
  "final_url": "https://www.tweakguides.com/",
  "mx_has_protocol_tls1_3": false,
  "web_has_hsts_preload_header": false,
  "web_cert_trusted_reason": "",
  "requests": [
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "https://www.tweakguides.com/"
    },
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "https://www.tweakguides.com/pi.css"
    },
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "https://www.tweakguides.com/header.gif"
    },
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "https://www.tweakguides.com/EuroVPS.png"
    },
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "https://www.tweakguides.com/TGTC_Button.png"
    }
  ],
  "web_has_protocol_sslv3": true,
  "mx_vulnerabilities": {
    "sec_client_renego": {
      "cve": "CVE-2009-3555",
      "severity": "MEDIUM",
      "finding": "Secure Client-Initiated Renegotiation : VULNERABLE, potential DoS threat"
    },
    "cbc_ssl3": {
      "cve": "CVE-2011-3389",
      "severity": "MEDIUM",
      "finding": "BEAST: CBC ciphers for SSL3: DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ADH-AES256-SHA ADH-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA ADH-AES128-SHA ADH-SEED-SHA ADH-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA IDEA-CBC-SHA EDH-RSA-DES-CBC3-SHA ADH-DES-CBC3-SHA DES-CBC3-SHA EDH-RSA-DES-CBC-SHA ADH-DES-CBC-SHA DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-ADH-DES-CBC-SHA EXP-DES-CBC-SHA EXP-RC2-CBC-MD5"
    },
    "freak": {
      "cve": "CVE-2015-0204",
      "severity": "CRITICAL",
      "finding": "FREAK: VULNERABLE, uses EXPORT RSA ciphers"
    },
    "sweet32": {
      "cve": "CVE-2016-2183, CVE-2016-6329",
      "severity": "LOW",
      "finding": "SWEET32, uses 64 bit block ciphers"
    },
    "LOGJAM_common primes": {
      "cve": "CVE-2015-4000",
      "severity": "HIGH",
      "finding": "common prime 'postfix builtin' detected"
    },
    "lucky13": {
      "cve": "CVE-2013-0169",
      "severity": "LOW",
      "finding": "potentially vulnerable to LUCKY13, uses cipher block chaining (CBC) ciphers with TLS. Check patches"
    },
    "logjam": {
      "cve": "CVE-2015-4000",
      "severity": "HIGH",
      "finding": "LOGJAM: VULNERABLE, uses DH EXPORT ciphers"
    },
    "drown": {
      "cve": "CVE-2016-0800, CVE-2016-0703",
      "severity": "CRITICAL",
      "finding": "VULNERABLE, SSLv2 offered with 7 ciphers. Make sure you don't use this certificate elsewhere, see https://censys.io/ipv4?q=E6B03AC39C5A396C14647C516C8409EEFB965687E164475A0175D191BBD6EE3F"
    },
    "beast": {
      "cve": "CVE-2011-3389",
      "severity": "LOW",
      "finding": "BEAST: VULNERABLE -- but also supports higher protocols (possible mitigation): TLSv1.1 TLSv1.2"
    },
    "fallback_scsv": {
      "cve": "",
      "severity": "HIGH",
      "finding": "TLS_FALLBACK_SCSV (RFC 7507): Downgrade attack prevention NOT supported and vulnerable to POODLE SSL"
    },
    "poodle_ssl": {
      "cve": "CVE-2014-3566",
      "severity": "HIGH",
      "finding": "POODLE, SSL: VULNERABLE, uses SSLv3+CBC"
    },
    "rc4": {
      "cve": "CVE-2013-2566, CVE-2015-2808",
      "severity": "HIGH",
      "finding": "RC4: VULNERABLE, Detected ciphers: ADH-RC4-MD5 RC4-SHA RC4-MD5 RC4-MD5 EXP-ADH-RC4-MD5 EXP-RC4-MD5 EXP-RC4-MD5"
    },
    "cbc_tls1": {
      "cve": "CVE-2011-3389",
      "severity": "MEDIUM",
      "finding": "BEAST: CBC ciphers for TLS1: DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ADH-AES256-SHA ADH-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA ADH-AES128-SHA ADH-SEED-SHA ADH-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA IDEA-CBC-SHA EDH-RSA-DES-CBC3-SHA ADH-DES-CBC3-SHA DES-CBC3-SHA EDH-RSA-DES-CBC-SHA ADH-DES-CBC-SHA DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-ADH-DES-CBC-SHA EXP-DES-CBC-SHA EXP-RC2-CBC-MD5"
    }
  },
  "mx_cert_trusted": false,
  "web_has_protocol_tls1_2": true,
  "web_has_protocol_tls1": true,
  "profilecookies": [],
  "cname_records": [],
  "success": true,
  "cookie_stats": {
    "first_party_flash": 0,
    "first_party_long": 0,
    "third_party_track_domains": [],
    "third_party_track_uniq": 0,
    "first_party_short": 0,
    "third_party_long": 0,
    "third_party_short": 0,
    "third_party_track": 0,
    "third_party_flash": 0
  },
  "mx_locations": [
    "Netherlands"
  ],
  "web_has_protocol_tls1_3": false,
  "cookies_count": 0,
  "third_party_requests_count": 0,
  "web_pfs": true,
  "leaks": [],
  "web_has_protocol_tls1_1": true,
  "web_has_hsts_preload": false,
  "reachable": true,
  "a_records": [
    "77.235.53.151"
  ],
  "a_records_reverse": [
    [
      "tweakguides.com"
    ]
  ],
  "mx_a_records": [
    [
      0,
      [
        "77.235.53.151"
      ]
    ]
  ],
  "responses": null,
  "mx_has_protocol_tls1_1": true,
  "web_has_protocol_sslv2": true,
  "final_https_url": "https://www.tweakguides.com/"
}
All times are shown in UTC (GMT+0).

About

PrivacyScore is a website scanning tool that allows anyone to benchmark security and privacy features of websites. Rankings are public and can be configured to one's preferences. PrivacyScore helps users, activists, and data protection authorities.

Feedback

We are curious to receive your feedback. Please do not hesitate to contact us if you observe any errors. Site owners can request to exclude their sites from future scans.

Beta Status

PrivacyScore is currently in public beta. While we're giving our very best, we currently cannot guarantee the accuracy of the displayed results and rankings.
 

Privacy Policy · Imprint / Impressum