JSON result object for "http://www.medipolis.at/"

Note: This is not a stable API during the beta. Providing highlighted JSON instead of raw JSON data is therefore intentional. 

{
  "flashcookies_count": null,
  "mx_a_records_reverse": [
    [
      0,
      [
        [
          "redirect-mail.domain-bestellsystem.de"
        ]
      ]
    ]
  ],
  "third_parties": [],
  "mx_has_protocol_tls1_2": false,
  "final_url_is_https": true,
  "web_has_hsts_header": true,
  "mx_pfs": true,
  "mx_has_protocol_tls1": true,
  "web_ciphers": {},
  "mx_has_protocol_sslv2": false,
  "requests_count": 10,
  "web_cert_trusted": true,
  "mx_ciphers": {
    "std_STRONG": {
      "severity": "MEDIUM",
      "finding": "Strong encryption (AEAD ciphers)           not offered"
    },
    "std_128Bit": {
      "severity": "HIGH",
      "finding": "Weak 128 Bit ciphers (SEED, IDEA, RC[2,4]) offered - bad"
    },
    "std_aNULL": {
      "severity": "CRITICAL",
      "finding": "Anonymous NULL Ciphers (no authentication) offered - ugly"
    },
    "std_EXPORT": {
      "severity": "CRITICAL",
      "finding": "Export ciphers (w/o ADH+NULL)              offered - ugly"
    },
    "std_3DES": {
      "severity": "MEDIUM",
      "finding": "Triple DES Ciphers (Medium)                offered - not too bad"
    },
    "std_DES+64Bit": {
      "severity": "CRITICAL",
      "finding": "LOW: 64 Bit + DES encryption (w/o export)  offered - ugly"
    }
  },
  "a_locations": [
    "Germany"
  ],
  "initial_url": "http://www.medipolis.at/",
  "mx_records": [
    [
      0,
      "mail.medipolis.at"
    ]
  ],
  "web_has_hpkp_header": false,
  "web_has_ssl": true,
  "flashcookies": [],
  "web_vulnerabilities": {
    "beast": {
      "cve": "CVE-2011-3389",
      "severity": "LOW",
      "finding": "BEAST: VULNERABLE -- but also supports higher protocols (possible mitigation): TLSv1.1 TLSv1.2"
    },
    "lucky13": {
      "cve": "CVE-2013-0169",
      "severity": "LOW",
      "finding": "potentially vulnerable to LUCKY13, uses cipher block chaining (CBC) ciphers with TLS. Check patches"
    },
    "cbc_tls1": {
      "cve": "CVE-2011-3389",
      "severity": "MEDIUM",
      "finding": "BEAST: CBC ciphers for TLS1: ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES128-SHA AES256-SHA"
    }
  },
  "redirected_to_https": true,
  "mx_ssl_finished": true,
  "openwpm_final_url": "https://www.medipolis.de/",
  "mixed_content": false,
  "headerchecks": {
    "x-content-type-options": {
      "status": "OK",
      "value": "nosniff"
    },
    "x-frame-options": {
      "status": "MISSING",
      "value": ""
    },
    "content-security-policy": {
      "status": "INFO",
      "value": "default-src             'self';         style-src             'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com;         img-src             'self' data: https://i.ytimg.com https://*.google-analytics.com https://*.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.kununu.com;         script-src             'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://tagmanager.google.com;         connect-src             'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com;         font-src             'self' data: https://fonts.gstatic.com;         frame-src             'self' https://www.youtube-nocookie.com https://player.vimeo.com;"
    },
    "x-xss-protection": {
      "status": "OK",
      "value": "1; mode=block"
    },
    "referrer-policy": {
      "status": "MISSING",
      "value": ""
    }
  },
  "mx_has_ssl": true,
  "web_ssl_finished": true,
  "https": true,
  "mx_has_protocol_sslv3": false,
  "tracker_requests": [],
  "web_has_hsts_header_sufficient_time": true,
  "google_analytics_present": false,
  "third_parties_count": 0,
  "mx_cert_trusted_reason": "certificate does not match supplied URIAll certificate trust checks failed: (self signed).",
  "final_url": "https://www.medipolis.de/",
  "mx_has_protocol_tls1_3": false,
  "web_has_hsts_preload_header": true,
  "web_cert_trusted_reason": "",
  "requests": [
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "http://www.medipolis.at/"
    },
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "https://www.medipolis.de/"
    },
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "https://www.medipolis.de/typo3temp/assets/compressed/merged-6ca96fe0afc9ce4e31df50b6babb8ed8-42283e9c31c51f82c2b54ca4fed023aa.css?1693831500"
    },
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "https://www.medipolis.de/typo3temp/assets/compressed/merged-6266ac86e3e98b07baaae912c4d61399-b81a241268bca02a52448ae13db10dbd.js?1693831500"
    },
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "https://www.medipolis.de/typo3conf/ext/medipolispackage/Resources/Public/Images/medipolis-logo.svg"
    },
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "https://www.medipolis.de/fileadmin/_processed_/5/1/csm_medipolis-leistungsspektrum-slider_c9e69f9fb5.jpg"
    },
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "https://www.medipolis.de/typo3temp/assets/compressed/main-44a40a940ec240d307fa54bc9eb9c971.js?1693831500"
    },
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "https://www.medipolis.de/typo3conf/ext/medipolispackage/Resources/Public/Fonts/AaltoSans/AaltoSansW05-Regular.woff2"
    },
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "https://www.medipolis.de/typo3conf/ext/medipolispackage/Resources/Public/Fonts/AaltoSans/AaltoSansW05-SemiBold.woff2"
    },
    {
      "headers": null,
      "method": null,
      "referrer": null,
      "url": "https://www.medipolis.de/typo3conf/ext/medipolispackage/Resources/Public/Fonts/Fontello/medipolis/fontello.woff2?82893058"
    }
  ],
  "mx_vulnerabilities": {
    "sec_client_renego": {
      "cve": "CVE-2009-3555",
      "severity": "MEDIUM",
      "finding": "Secure Client-Initiated Renegotiation : VULNERABLE, potential DoS threat"
    },
    "beast": {
      "cve": "CVE-2011-3389",
      "severity": "MEDIUM",
      "finding": "BEAST: VULNERABLE -- and no higher protocols as mitigation supported"
    },
    "freak": {
      "cve": "CVE-2015-0204",
      "severity": "CRITICAL",
      "finding": "FREAK: VULNERABLE, uses EXPORT RSA ciphers"
    },
    "sweet32": {
      "cve": "CVE-2016-2183, CVE-2016-6329",
      "severity": "LOW",
      "finding": "SWEET32, uses 64 bit block ciphers"
    },
    "fallback_scsv": {
      "cve": "",
      "severity": "MEDIUM",
      "finding": "TLS_FALLBACK_SCSV (RFC 7507): Downgrade attack prevention NOT supported"
    },
    "LOGJAM_common primes": {
      "cve": "CVE-2015-4000",
      "severity": "HIGH",
      "finding": "common prime 'Postfix' detected"
    },
    "rc4": {
      "cve": "CVE-2013-2566, CVE-2015-2808",
      "severity": "HIGH",
      "finding": "RC4: VULNERABLE, Detected ciphers: ADH-RC4-MD5 RC4-SHA RC4-MD5 EXP-ADH-RC4-MD5 EXP-RC4-MD5"
    },
    "lucky13": {
      "cve": "CVE-2013-0169",
      "severity": "LOW",
      "finding": "potentially vulnerable to LUCKY13, uses cipher block chaining (CBC) ciphers with TLS. Check patches"
    },
    "logjam": {
      "cve": "CVE-2015-4000",
      "severity": "HIGH",
      "finding": "LOGJAM: VULNERABLE, uses DH EXPORT ciphers"
    },
    "cbc_tls1": {
      "cve": "CVE-2011-3389",
      "severity": "MEDIUM",
      "finding": "BEAST: CBC ciphers for TLS1: DHE-RSA-AES256-SHA ADH-AES256-SHA AES256-SHA DHE-RSA-AES128-SHA ADH-AES128-SHA AES128-SHA EDH-RSA-DES-CBC3-SHA ADH-DES-CBC3-SHA DES-CBC3-SHA EDH-RSA-DES-CBC-SHA ADH-DES-CBC-SHA DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-ADH-DES-CBC-SHA EXP-DES-CBC-SHA EXP-RC2-CBC-MD5"
    }
  },
  "mx_cert_trusted": false,
  "web_has_protocol_tls1_2": true,
  "web_has_protocol_tls1": true,
  "profilecookies": [],
  "cname_records": [],
  "success": true,
  "cookie_stats": {
    "first_party_flash": 0,
    "first_party_long": 0,
    "third_party_track_domains": [],
    "third_party_track_uniq": 0,
    "first_party_short": 0,
    "third_party_long": 0,
    "third_party_short": 0,
    "third_party_track": 0,
    "third_party_flash": 0
  },
  "mx_locations": [
    "Germany"
  ],
  "cookies_count": 0,
  "third_party_requests_count": 0,
  "web_pfs": true,
  "leaks": [],
  "web_has_protocol_tls1_1": true,
  "web_has_hsts_preload": false,
  "reachable": true,
  "a_records": [
    "116.203.213.72",
    "116.202.21.136",
    "116.202.9.166"
  ],
  "a_records_reverse": [
    [
      "cs2.web-redirect.eu"
    ],
    [
      "cs3.web-redirect.eu"
    ],
    [
      "cs1.web-redirect.eu"
    ]
  ],
  "mx_a_records": [
    [
      0,
      [
        "95.130.17.37"
      ]
    ]
  ],
  "responses": null,
  "mx_has_protocol_tls1_1": true,
  "final_https_url": "https://www.medipolis.de/"
}
All times are shown in UTC (GMT+0).

About

PrivacyScore is a website scanning tool that allows anyone to benchmark security and privacy features of websites. Rankings are public and can be configured to one's preferences. PrivacyScore helps users, activists, and data protection authorities.

Feedback

We are curious to receive your feedback. Please do not hesitate to contact us if you observe any errors. Site owners can request to exclude their sites from future scans.

Beta Status

PrivacyScore is currently in public beta. While we're giving our very best, we currently cannot guarantee the accuracy of the displayed results and rankings.
 

Privacy Policy · Imprint / Impressum