JSON result object for "http://coach.com/"

Note: This is not a stable API during the beta. Providing highlighted JSON instead of raw JSON data is therefore intentional.

{
  "flashcookies_count": null,
  "mx_scan_failed": true,
  "third_parties": [],
  "final_url_is_https": true,
  "web_has_hsts_header": true,
  "requests": [
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "http://coach.com/"
    }
  ],
  "web_has_protocol_tls1_3": true,
  "web_ciphers": {
    "std_HIGH": {
      "severity": "MEDIUM",
      "finding": "High encryption (AES+Camellia, no AEAD)    not offered"
    }
  },
  "requests_count": 1,
  "web_cert_trusted": true,
  "a_locations": [
    "Netherlands"
  ],
  "initial_url": "http://coach.com/",
  "flashcookies": [],
  "web_has_hpkp_header": false,
  "web_has_ssl": true,
  "mx_records": [
    [
      10,
      "mxa-0015f701.gslb.pphosted.com"
    ],
    [
      10,
      "mxb-0015f701.gslb.pphosted.com"
    ]
  ],
  "web_vulnerabilities": {
    "breach": {
      "cve": "CVE-2013-3587",
      "severity": "HIGH",
      "finding": "BREACH: potentially VULNERABLE, uses gzip HTTP compression.  - only supplied '/' tested ( Can be ignored for static pages or if no secrets in the page)"
    },
    "sec_client_renego": {
      "cve": "CVE-2009-3555",
      "severity": "HIGH",
      "finding": "Secure Client-Initiated Renegotiation : VULNERABLE, DoS threat"
    }
  },
  "a_records_reverse": [
    [
      "a23-36-226-45.deploy.static.akamaitechnologies.com"
    ]
  ],
  "mx_ssl_finished": true,
  "openwpm_final_url": "https://de.coach.com/",
  "mixed_content": false,
  "headerchecks": {
    "x-content-type-options": {
      "status": "OK",
      "value": "nosniff"
    },
    "x-frame-options": {
      "status": "INFO",
      "value": "sameorigin"
    },
    "content-security-policy": {
      "status": "INFO",
      "value": "default-src 'self' 'unsafe-inline' 'unsafe-eval' ipredictive.com adgrx.com demdex.net dpm.demdex.net adyen.com ads.yieldmo.com sync-criteo.ads.yieldmo.com *.amazonaws.com www.dwin1.com adnxs.com ib.adnxs.com secure.adnxs.com attentivemobile.com events.attentivemobile.com attn.tv *.audioeye.com bidswitch.net x.bidswitch.net *.bing.com *.btttag.com *.bluecore.com bluekai.com tags.bluekai.com *.bounceexchange.com bounceexchange.com bouncex.net events.bouncex.net *.creativecdn.com certona.net edge1.certona.net www.res-x.com *.cloudfront.net cloudfront.net *.coach.com coach.com *.katespade.com *.coachoutlet.com cohimg.net img1.cohimg.net cnstrc.com *.cnstrc.com cquotient.com criteo.com criteo.net *.criteo.net *.criteo.com w55c.net *.doubleclick.net *.facebook.com *.facebook.net facebook.net fonts.net fast.fonts.net *.forter.com forter.com stickyadstv.com ads.stickyadstv.com *.fwmrm.net *.google.com *.google.com.pr www.google.ie *.google.hn www.google.com.au www.google.vg www.google.com.bz www.google.pt www.google.ru www.google.lv www.google.com.uy www.google.nl www.google.com.eg www.google.mv www.google.com.mm www.google.com.ng www.google.com.sa www.google.de www.google.cd www.google.co.il www.google.com.ec www.google.com.ph www.google.cn www.google.com.qa www.google.bs www.google.es www.google.gy www.google.co.ma www.google.com.ly www.google.co.zm www.google.tn www.google.com.tr www.google.com.ag www.google.be www.google.sn www.google.com.kw www.google.co.vi *.google.com.do www.google.pl www.google.co.nz www.google.kz www.google.hu www.google.co.ke www.google.ro www.google.is www.google.mu www.google.am www.google.com.py www.google.com.kh www.google.ba www.google.co.za www.google.com.sg www.google.com.bo www.google.sk www.google.com.gh www.google.sr www.google.co.th www.google.ci www.google.ch www.google.com.pa www.google.ht www.google.cl www.google.co.kr www.google.com.tw www.google.co.uk www.google.gl www.google.com.sv www.google.com.gt www.google.fr www.google.co.cr www.google.com.hk www.google.co.ls www.gstatic.com fonts.gstatic.com www.google.com.my *.google.co.in www.google.co.jp *.google.com.co *.google.com.pe www.google.ca www.google.se www.google.tt www.google.ae www.google.com.vn www.google.com.ar www.google.com.br www.google.co.ve www.google.com.mx www.google.com.ni www.google.com.ua www.google.as *.google.com.jm www.googleadservices.com googleapis.com *.googleapis.com cloudfunctions.net *.cloudfunctions.net www.googletagmanager.com *.google-analytics.com 360yield.com ad.360yield.com casalemedia.com *.casalemedia.com ivitrack.com jsdelivr.net *.jsdelivr.net klarna.com *.klarna.com klarnacdn.net *.klarnacdn.net klarnaevt.com *.klarnaevt.com *.klarnaservices.com linksynergy.com *.linksynergy.com liadm.com *.liadm.com addressy.com api.addressy.com pcapredict.com tapes11111.pcapredict.com crwdcntrl.net media.net contextual.media.net mathtag.com mediavine.com exchange.mediavine.com mediawallahscript.com partner.mediawallahscript.com *.mountain.com mountain.com micpn.com *.micpn.com cookielaw.org cdn.cookielaw.org postrelease.com jadserve.postrelease.com agkn.com aa.agkn.com onetrust.com *.online-metrix.net *.optimizely.com optimizely.com outbrain.com sync.outbrain.com *.paypal.com www.paypalobjects.com pinimg.com s.pinimg.com pinterest.com *.pinterest.com pdst.fm cdn.pdst.fm *.powerreviews.com pubmatic.com simage2.pubmatic.com *.quantummetric.com quantummetric.com *.rakuten.com rmtag.com intljs.rmtag.com rlcdn.com *.rlcdn.com revcontent.com trends.revcontent.com rubiconproject.com pixel.rubiconproject.com force.com *.force.com my.salesforce.com *.my.salesforce.com *.salesforceliveagent.com sharethrough.com match.sharethrough.com *.shoprunner.com *.shoprunner.io signifyd.com *.signifyd.com sitescout.com smartadserver.com rtb-csync.smartadserver.com sc-static.net *.snapchat.com stylitics.com *.stylitics.com loopassets.net qa-specops.loopassets.net taboola.com sync-t1.taboola.com tangiblee.com *.tangiblee.com tapad.com tapestry.tapad.com teads.tv criteo-sync.teads.tv *.tiktok.com adsrvr.org *.adsrvr.org tremorhub.com criteo-partners.tremorhub.com 3lift.com eb2.3lift.com twitter.com *.twitter.com ads-twitter.com static.ads-twitter.com t.co ad.smaato.net s.ad.smaato.net clmbtech.com ade.clmbtech.com mdhv.io jelly.mdhv.io postcodeanywhere.co.uk services.postcodeanywhere.co.uk rqtrk.eu ws.rqtrk.eu techlab-cdn.com p11.techlab-cdn.com wknd.ai tag.wknd.ai wyng.com cdn.wyng.com *.yext-pixel.com *.adyen.com *.attn.tv *.cquotient.com *.onetrust.com cloudflare.com cdnjs.cloudflare.com coach.comis images.coach.comis a.bigcontent.io *.a.bigcontent.io api2.fonts.com dynl.mktgcdn.com m.media-amazon.com apay-us.amazon.com static-na.payments-amazon.com api.bluecore.app *.drivecommerce.com visitor.omnitagjs.com matching.ivitrack.com ad.tpmn.co.kr tg.socdm.com *.shoppinggives.com *.loveslisa.tech *.iesnare.com *.cloudinary.com *.yahoo.com consent.nxtck.com consent.mediaforge.com consent.jrs5.com *.smooch.io *.my.salesforce-sites.com *.drrv.co *.googlesyndication.com tapestry.support jira.tapestry.support *.needle.com *.mapbox.com www.upsellit.com *.stuartweitzman.com shareasale.com api.fillr.com smct.co edgeshoppingstatic.azureedge.net api.bounce-commerce.de preview.babylonjs.com *.instagram.com *.youtube.com youtube.com rstyle.me *.narvar.com www.out.com www.cosmopolitan.com www.ecosia.org slooks.top *.reddit.com *.rakuten.ca www.groupon.com shrturl.site www.byrdie.com www.tsawwassenmills.com www.lyst.com www.retailmenot.com www.shopittome.com *.dealmoon.com appium.io mobile.ebates.com www.elle.com *.55haitao.com www.latimes.com theeverygirl.com www.instyle.com gateway.studentbeans.com www.refinery29.com clothedup.com nymag.com *.affirm.com *.qualtrics.com sentry.io *.sentry.io cdn.shopping.gives api.thegreenwebfoundation.org *.amplience.net cdn.honey.io m.huaren.us app.partnerboost.com www.studentbeans.com www.forbes.com findsimilar.com bellejamericancarnival.weebly.com yandex.ru *.yandex.ru brokescholar.com modesens.com arise.okta.com adx.dable.io www.gravatar.com email.traversedlp.com www.wepowerconnections.com usage.trackjs.com unpkg.com *.ibosscloud.com *.shoplooks.com fonts.bunny.net www.aadvantageeshopping.com ln-rules.rewardstyle.com pippio.com um.simpli.fi *.kampyle.com *.medallia.com adgen.socdm.com cs.adingo.jp sync.aralego.com www.talkable.com *.pfizer.com www.lrb.co.uk www.thebrandcloset.com static.lisa-cdn.net yastatic.net cm.adform.net id5-sync.com s.thebrighttag.com ad.yieldlab.net *.krxd.net cdn.aralego.net match.prod.bidr.io cms.quantserve.com data: blob:;"
    },
    "x-xss-protection": {
      "status": "OK",
      "value": "1; mode=block"
    },
    "referrer-policy": {
      "status": "WARN",
      "key": "referrer-policy",
      "value": "strict-origin-when-cross-origin"
    }
  },
  "web_ssl_finished": true,
  "cookie_stats": {
    "first_party_flash": 0,
    "first_party_long": 0,
    "third_party_track_domains": [],
    "third_party_track_uniq": 0,
    "first_party_short": 0,
    "third_party_long": 0,
    "third_party_short": 0,
    "third_party_track": 0,
    "third_party_flash": 0
  },
  "tracker_requests": [],
  "web_has_hsts_header_sufficient_time": true,
  "third_parties_count": 0,
  "final_url": "https://de.coach.com/",
  "google_analytics_present": false,
  "web_has_hsts_preload_header": false,
  "web_cert_trusted_reason": "",
  "final_https_url": "https://de.coach.com/",
  "web_has_protocol_sslv3": false,
  "web_has_protocol_tls1": false,
  "profilecookies": [],
  "cname_records": [],
  "success": true,
  "https": true,
  "mx_locations": [
    "United States"
  ],
  "mx_a_records_reverse": [
    [
      10,
      [
        [
          "mx0a-0015f701.pphosted.com"
        ]
      ]
    ],
    [
      10,
      [
        [
          "mx0a-0015f701.pphosted.com"
        ]
      ]
    ]
  ],
  "cookies_count": 0,
  "third_party_requests_count": 0,
  "web_pfs": true,
  "leaks": [],
  "web_has_protocol_tls1_1": false,
  "web_has_hsts_preload": false,
  "reachable": true,
  "a_records": [
    "23.36.226.45"
  ],
  "redirected_to_https": true,
  "mx_a_records": [
    [
      10,
      [
        "67.231.148.26"
      ]
    ],
    [
      10,
      [
        "67.231.148.26"
      ]
    ]
  ],
  "responses": null,
  "web_has_protocol_tls1_2": true
}