Note: This is not a stable API during the beta. Providing highlighted JSON instead of raw JSON data is therefore intentional.
{
"flashcookies_count": null,
"mx_a_records_reverse": [
[
10,
[
[
"mx1.hvv.de"
]
]
],
[
10,
[
[
"mx0.hvv.de"
]
]
]
],
"third_parties": [
"code.etracker.com",
"static.etracker.com",
"www.etracker.de"
],
"mx_has_protocol_tls1_2": true,
"final_url_is_https": true,
"web_has_hsts_header": true,
"mx_pfs": true,
"mx_has_protocol_tls1": true,
"web_ciphers": {},
"requests_count": 21,
"web_cert_trusted": true,
"mx_ciphers": {
"std_aNULL": {
"severity": "CRITICAL",
"finding": "Anonymous NULL Ciphers (no authentication) offered - ugly"
},
"std_128Bit": {
"severity": "HIGH",
"finding": "Weak 128 Bit ciphers (SEED, IDEA, RC[2,4]) offered - bad"
}
},
"a_locations": [
"Germany"
],
"initial_url": "http://hvv.de/",
"mx_records": [
[
10,
"mx1.hvv.de"
],
[
10,
"mx0.hvv.de"
]
],
"web_has_hpkp_header": false,
"web_has_ssl": true,
"flashcookies": [],
"web_vulnerabilities": {
"breach": {
"cve": "CVE-2013-3587",
"severity": "HIGH",
"finding": "BREACH: potentially VULNERABLE, uses gzip HTTP compression. - only supplied '/' tested ( Can be ignored for static pages or if no secrets in the page)"
},
"lucky13": {
"cve": "CVE-2013-0169",
"severity": "LOW",
"finding": "potentially vulnerable to LUCKY13, uses cipher block chaining (CBC) ciphers with TLS. Check patches"
}
},
"redirected_to_https": true,
"mx_ssl_finished": true,
"openwpm_final_url": "https://www.hvv.de/",
"mixed_content": false,
"headerchecks": {
"x-content-type-options": {
"status": "OK",
"value": "nosniff"
},
"x-frame-options": {
"status": "INFO",
"value": "DENY"
},
"content-security-policy": {
"status": "INFO",
"value": "frame-ancestors 'self' buechen.de *.buechen.de boernsen-erleben.de *.boernsen-erleben.de;"
},
"x-xss-protection": {
"status": "OK",
"value": "1; mode=block"
},
"referrer-policy": {
"status": "MISSING",
"value": ""
}
},
"mx_has_ssl": true,
"web_ssl_finished": true,
"https": true,
"mx_has_protocol_sslv3": false,
"tracker_requests": [
"code.etracker.com",
"static.etracker.com",
"www.etracker.de"
],
"web_has_hsts_header_sufficient_time": true,
"google_analytics_present": false,
"third_parties_count": 3,
"mx_cert_trusted_reason": "",
"final_url": "https://www.hvv.de/",
"mx_has_protocol_tls1_3": true,
"web_has_hsts_preload_header": false,
"web_cert_trusted_reason": "",
"requests": [
{
"headers": null,
"method": null,
"referrer": null,
"url": "http://hvv.de/"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/resource/css/2172/0/16a8665ed291de35846994b239c0f8b9/body.css"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/resource/themes/hvv/css/frame-25412-15.css"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/resource/js/2172/0/704906d15e3cf3b1976b5875afe2e2c/head.js"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://static.etracker.com/code/e.js"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/resource/crblob/1562/db32618f00e4e10dca79755947e3c639/logo-svg-data.svg"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/resource/blob/102586/e386b564e761bcf228369b69889c4fa8/image-teaser-einspaltig-450x236-dt-kampagne-data.png"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/resource/blob/106526/eee53d59b1d0088cf72de1af476c8b4d/teaser-schueler-violett-data.jpg"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/resource/blob/107298/b72f5c5afabae11e7ab964e2f629499d/teaser-prepaid-card-einspaltig-data.png"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/resource/blob/108724/f4f29564a0e9d94068abddf7b734e425/image-teaser-einspaltig-468x220-platz-frei-data.jpg"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/resource/js/2172/0/704906d15e3cf3b1976b5875afe2e2c/body.js"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/resource/themes/hvv/js/hvv-frame-25310-22.js"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/resource/blob/109910/2fd0bfd0bf2f4aad8babfcaffa078161/buehne-1800x1200-hvv-plus-sep-23-kino-data.jpg"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/resource/crblob/1758/9ae41b775d9880a83aafbe7ffb1f3676/icomoon-ttf-data.ttf"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/resource/crblob/66724/0e9e8d5dfeda12d487b7c3fa51453098/sharpgroteskmedium20-woff2-data.woff2"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://code.etracker.com/t.js?v=076bb7&et=Aw3UKb"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/weather-service/warnings"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/weather-service/weather?hour-period=9"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.etracker.de/cntcc?&&et=Aw3UKb&v=5.0&tc=16948954734611&pagename=Startseite&ilevel=1&areas=de&et_source_url=https%3A%2F%2Fwww.hvv.de%2F&cc_ordercurr=EUR&cc_ordertype=lead&cc_baskettype=basket&block_cookies=true&respect_dnt=true&et_bs=1&code_source=%2F%2Fstatic.etracker.com%2Fcode%2Fe.js&code_async=true&et_sbscr=0&coid=6ff2f263caa664c852162515cb5a0e1b&et_cblk=1&et_cd=www.hvv.de&dh=AaTRvMfoowzRlKVBnM2%2FSufrv1N0WZ3M&clt=24"
},
{
"headers": null,
"method": null,
"referrer": null,
"url": "https://www.hvv.de/service/hvv-news/3104?offset=0&size=4"
}
],
"web_has_protocol_sslv3": false,
"mx_vulnerabilities": {
"sec_client_renego": {
"cve": "CVE-2009-3555",
"severity": "MEDIUM",
"finding": "Secure Client-Initiated Renegotiation : VULNERABLE, potential DoS threat"
},
"beast": {
"cve": "CVE-2011-3389",
"severity": "LOW",
"finding": "BEAST: VULNERABLE -- but also supports higher protocols (possible mitigation): TLSv1.1 TLSv1.2"
},
"lucky13": {
"cve": "CVE-2013-0169",
"severity": "LOW",
"finding": "potentially vulnerable to LUCKY13, uses cipher block chaining (CBC) ciphers with TLS. Check patches"
},
"cbc_tls1": {
"cve": "CVE-2011-3389",
"severity": "MEDIUM",
"finding": "BEAST: CBC ciphers for TLS1: AECDH-AES256-SHA ADH-AES256-SHA ADH-CAMELLIA256-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA AECDH-AES128-SHA ADH-AES128-SHA ADH-CAMELLIA128-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA ADH-SEED-SHA DHE-RSA-SEED-SHA SEED-SHA"
}
},
"mx_cert_trusted": true,
"web_has_protocol_tls1_2": true,
"web_has_protocol_tls1": false,
"profilecookies": [
{
"baseDomain": "hvv.de",
"isHttpOnly": true,
"value": ".livefe1",
"lifetime": -1,
"path": "/",
"name": "LBSESS",
"expiry": -1,
"isSecure": true,
"host": "www.hvv.de"
}
],
"cname_records": [],
"success": true,
"cookie_stats": {
"first_party_flash": 0,
"first_party_long": 0,
"third_party_track_domains": [],
"third_party_track_uniq": 0,
"first_party_short": 1,
"third_party_long": 0,
"third_party_short": 0,
"third_party_track": 0,
"third_party_flash": 0
},
"mx_locations": [
"Germany"
],
"web_has_protocol_tls1_3": true,
"cookies_count": 1,
"third_party_requests_count": 3,
"web_pfs": true,
"leaks": [],
"web_has_protocol_tls1_1": false,
"web_has_hsts_preload": false,
"reachable": true,
"a_records": [
"185.91.106.209"
],
"a_records_reverse": [
[]
],
"mx_a_records": [
[
10,
[
"185.91.106.75"
]
],
[
10,
[
"185.91.106.74"
]
]
],
"responses": null,
"mx_has_protocol_tls1_1": true,
"final_https_url": "https://www.hvv.de/"
}