Deep SSL/TLS Vulnerability Test
This report provides a deep analysis of the SSL/TLS configuration of digital-success.ionos.co.uk. It checks for protocol support, cipher strength, and known vulnerabilities.
Scan Results
Testing all IP addresses (port 443): 217.160.86.21 217.160.86.20 ----------------------------------------------------- Start 2026-09-10 10:01:12 -->> 217.160.86.21:443 (digital-success.ionos.co.uk) <<-- Further IP addresses: 217.160.86.20 rDNS (217.160.86.21): digital-success.ionos.de. Service detected: HTTP Testing for server implementation bugs No bugs found. Testing HTTP header response @ "/" HTTP Status Code 200 HTTP clock skew 0 sec from localtime Strict Transport Security 365 days=31536000 s, includeSubDomains Public Key Pinning -- Server banner Apache Application banner -- Cookie(s) 1 issued: 1/1 secure, 1/1 HttpOnly Security headers X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src frontend-services.ionos.com ias.ionos.de ias.ionos.com ias.ionos.fr ias.ionos.es ias.ionos.it ias.ionos.mx ias.ionos.co.uk ias.ionos.ca ias.uicdn.net tif.ionos.de tif.ionos.com tif.ionos.fr tif.ionos.es tif.ionos.it tif.ionos.mx tif.ionos.co.uk tif.ionos.ca t.ionos.de t.ionos.com t.ionos.fr t.ionos.es t.ionos.it t.ionos.mx t.ionos.co.uk t.ionos.ca t.uimserv.net ce1.uicdn.net var.uicdn.net mawa.ionos.de mawa.ionos.com mawa.ionos.co.uk mawa.ionos.ca mawa.ionos.mx mawa.ionos.fr mawa.ionos.es mawa.ionos.it ias-stats.1and1.com 6zqtim.ionos.de xxwre7.ionos.co.uk 54ft7i.ionos.com nsupig.ionos.ca 948si5.ionos.fr v0v7kq.ionos.es kt8986.ionos.it e5xnsj.ionos.mx 6kudki.ionos.at 'self' 'unsafe-inline'; style-src ce1.uicdn.net ias.uicdn.net var.uicdn.net frontend-services.ionos.com 'self' 'unsafe-inline'; img-src frontend-services.ionos.com screenshot.ionos.com ias.uicdn.net *.fbcdn.net graph.facebook.com *.twimg.com ias.ionos.de ias.ionos.com ias.ionos.fr ias.ionos.es ias.ionos.it ias.ionos.mx ias.ionos.co.uk ias.ionos.ca t.ionos.de t.ionos.com t.ionos.fr t.ionos.es t.ionos.it t.ionos.mx t.ionos.co.uk t.ionos.ca t.uimserv.net mawa.ionos.de mawa.ionos.com mawa.ionos.co.uk mawa.ionos.ca mawa.ionos.mx mawa.ionos.fr mawa.ionos.es mawa.ionos.it data: 'self'; font-src ce1.uicdn.net cors.uicdn.net 'self'; connect-src frontend-services.ionos.com var.uicdn.net navigation.ionos.ca navigation.ionos.co.uk navigation.ionos.com navigation.ionos.es navigation.ionos.fr navigation.ionos.it navigation.ionos.mx navigation.ionos.pl navigation.ionos.de domrec.ionos.com shop-api.ionos.ca shop-api.ionos.co.uk shop-api.ionos.com shop-api.ionos.es shop-api.ionos.fr shop-api.ionos.it shop-api.ionos.mx shop-api.ionos.de ias.ionos.de ias.ionos.com ias.ionos.fr ias.ionos.es ias.ionos.it ias.ionos.mx ias.ionos.co.uk ias.ionos.ca t.ionos.de t.ionos.com t.ionos.fr t.ionos.es t.ionos.it t.ionos.mx t.ionos.co.uk t.ionos.ca t.uimserv.net hed.ionos.de hed.ionos.com hed.ionos.fr hed.ionos.es hed.ionos.it hed.ionos.mx hed.ionos.co.uk hed.ionos.ca sentry.ionos.com mawa.ionos.de mawa.ionos.com mawa.ionos.co.uk mawa.ionos.ca mawa.ionos.mx mawa.ionos.fr mawa.ionos.es mawa.ionos.it 6zqtim.ionos.de xxwre7.ionos.co.uk 54ft7i.ionos.com nsupig.ionos.ca 948si5.ionos.fr v0v7kq.ionos.es kt8986.ionos.it e5xnsj.ionos.mx 6kudki.ionos.at 'self'; frame-src data: *.ionos.de *.ionos.com *.ionos.fr *.ionos.es *.ionos.it *.ionos.co.uk *.ionos.ca *.ionos.mx 'self'; report-uri https://sentry.ionos.com/api/10/security/?sentry_key=1587e6c8a6e54aceb3aeb199bffcefc4; X-XSS-Protection: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Reverse Proxy banner -- Testing vulnerabilities Secure Renegotiation (RFC 5746) supported (OK) Secure Client-Initiated Renegotiation not vulnerable (OK) CRIME, TLS (CVE-2012-4929) not vulnerable (OK) BREACH (CVE-2013-3587) potentially NOT ok, "gzip" HTTP compression detected. - only supplied "/" tested Can be ignored for static pages or if no secrets in the page POODLE, SSL (CVE-2014-3566) not vulnerable (OK) TLS_FALLBACK_SCSV (RFC 7507) Downgrade attack prevention supported (OK) SWEET32 (CVE-2016-2183, CVE-2016-6329) not vulnerable (OK) FREAK (CVE-2015-0204) not vulnerable (OK) DROWN (CVE-2016-0800, CVE-2016-0703) not vulnerable on this host and port (OK) make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=9F548ECB03F7CAE48B89E9DC38A28B90CC2B11627687532F0934791CE65BDF4B LOGJAM (CVE-2015-4000), experimental not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2 BEAST (CVE-2011-3389) TLS1: ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES128-SHA VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated) LUCKY13 (CVE-2013-0169), experimental potentially VULNERABLE, uses obsolete cipher block chaining ciphers with TLS, see server prefs. Winshock (CVE-2014-6321), experimental not vulnerable (OK) RC4 (CVE-2013-2566, CVE-2015-2808) no RC4 ciphers detected (OK) Done 2026-09-10 10:02:29 [ 84s] -->> 217.160.86.21:443 (digital-success.ionos.co.uk) <<-- ----------------------------------------------------- Start 2026-09-10 10:02:29 -->> 217.160.86.20:443 (digital-success.ionos.co.uk) <<-- Further IP addresses: 217.160.86.21 rDNS (217.160.86.20): digital-success.ionos.de. Service detected: HTTP Testing for server implementation bugs No bugs found. Testing HTTP header response @ "/" HTTP Status Code 200 HTTP clock skew 0 sec from localtime Strict Transport Security 365 days=31536000 s, includeSubDomains Public Key Pinning -- Server banner Apache Application banner -- Cookie(s) 1 issued: 1/1 secure, 1/1 HttpOnly Security headers X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src frontend-services.ionos.com ias.ionos.de ias.ionos.com ias.ionos.fr ias.ionos.es ias.ionos.it ias.ionos.mx ias.ionos.co.uk ias.ionos.ca ias.uicdn.net tif.ionos.de tif.ionos.com tif.ionos.fr tif.ionos.es tif.ionos.it tif.ionos.mx tif.ionos.co.uk tif.ionos.ca t.ionos.de t.ionos.com t.ionos.fr t.ionos.es t.ionos.it t.ionos.mx t.ionos.co.uk t.ionos.ca t.uimserv.net ce1.uicdn.net var.uicdn.net mawa.ionos.de mawa.ionos.com mawa.ionos.co.uk mawa.ionos.ca mawa.ionos.mx mawa.ionos.fr mawa.ionos.es mawa.ionos.it ias-stats.1and1.com 6zqtim.ionos.de xxwre7.ionos.co.uk 54ft7i.ionos.com nsupig.ionos.ca 948si5.ionos.fr v0v7kq.ionos.es kt8986.ionos.it e5xnsj.ionos.mx 6kudki.ionos.at 'self' 'unsafe-inline'; style-src ce1.uicdn.net ias.uicdn.net var.uicdn.net frontend-services.ionos.com 'self' 'unsafe-inline'; img-src frontend-services.ionos.com screenshot.ionos.com ias.uicdn.net *.fbcdn.net graph.facebook.com *.twimg.com ias.ionos.de ias.ionos.com ias.ionos.fr ias.ionos.es ias.ionos.it ias.ionos.mx ias.ionos.co.uk ias.ionos.ca t.ionos.de t.ionos.com t.ionos.fr t.ionos.es t.ionos.it t.ionos.mx t.ionos.co.uk t.ionos.ca t.uimserv.net mawa.ionos.de mawa.ionos.com mawa.ionos.co.uk mawa.ionos.ca mawa.ionos.mx mawa.ionos.fr mawa.ionos.es mawa.ionos.it data: 'self'; font-src ce1.uicdn.net cors.uicdn.net 'self'; connect-src frontend-services.ionos.com var.uicdn.net navigation.ionos.ca navigation.ionos.co.uk navigation.ionos.com navigation.ionos.es navigation.ionos.fr navigation.ionos.it navigation.ionos.mx navigation.ionos.pl navigation.ionos.de domrec.ionos.com shop-api.ionos.ca shop-api.ionos.co.uk shop-api.ionos.com shop-api.ionos.es shop-api.ionos.fr shop-api.ionos.it shop-api.ionos.mx shop-api.ionos.de ias.ionos.de ias.ionos.com ias.ionos.fr ias.ionos.es ias.ionos.it ias.ionos.mx ias.ionos.co.uk ias.ionos.ca t.ionos.de t.ionos.com t.ionos.fr t.ionos.es t.ionos.it t.ionos.mx t.ionos.co.uk t.ionos.ca t.uimserv.net hed.ionos.de hed.ionos.com hed.ionos.fr hed.ionos.es hed.ionos.it hed.ionos.mx hed.ionos.co.uk hed.ionos.ca sentry.ionos.com mawa.ionos.de mawa.ionos.com mawa.ionos.co.uk mawa.ionos.ca mawa.ionos.mx mawa.ionos.fr mawa.ionos.es mawa.ionos.it 6zqtim.ionos.de xxwre7.ionos.co.uk 54ft7i.ionos.com nsupig.ionos.ca 948si5.ionos.fr v0v7kq.ionos.es kt8986.ionos.it e5xnsj.ionos.mx 6kudki.ionos.at 'self'; frame-src data: *.ionos.de *.ionos.com *.ionos.fr *.ionos.es *.ionos.it *.ionos.co.uk *.ionos.ca *.ionos.mx 'self'; report-uri https://sentry.ionos.com/api/10/security/?sentry_key=1587e6c8a6e54aceb3aeb199bffcefc4; X-XSS-Protection: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Reverse Proxy banner -- Testing vulnerabilities Secure Renegotiation (RFC 5746) supported (OK) Secure Client-Initiated Renegotiation not vulnerable (OK) CRIME, TLS (CVE-2012-4929) not vulnerable (OK) BREACH (CVE-2013-3587) potentially NOT ok, "gzip" HTTP compression detected. - only supplied "/" tested Can be ignored for static pages or if no secrets in the page POODLE, SSL (CVE-2014-3566) not vulnerable (OK) TLS_FALLBACK_SCSV (RFC 7507) Downgrade attack prevention supported (OK) SWEET32 (CVE-2016-2183, CVE-2016-6329) not vulnerable (OK) FREAK (CVE-2015-0204) not vulnerable (OK) DROWN (CVE-2016-0800, CVE-2016-0703) not vulnerable on this host and port (OK) make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=9F548ECB03F7CAE48B89E9DC38A28B90CC2B11627687532F0934791CE65BDF4B LOGJAM (CVE-2015-4000), experimental not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2 BEAST (CVE-2011-3389) TLS1: ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES128-SHA VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated) LUCKY13 (CVE-2013-0169), experimental potentially VULNERABLE, uses obsolete cipher block chaining ciphers with TLS, see server prefs. Winshock (CVE-2014-6321), experimental not vulnerable (OK) RC4 (CVE-2013-2566, CVE-2015-2808) no RC4 ciphers detected (OK) Done 2026-09-10 10:03:43 [ 158s] -->> 217.160.86.20:443 (digital-success.ionos.co.uk) <<-- ----------------------------------------------------- Done testing now all IP addresses (on port 443): 217.160.86.21 217.160.86.20
About this Scan
This scan uses testssl.sh to check for:
- Protocols: SSLv2, SSLv3, TLS 1.0, TLS 1.1, TLS 1.2, TLS 1.3
- Vulnerabilities: Heartbleed, POODLE, FREAK, Logjam, DROWN, etc.
- Cipher Suites: Weak ciphers, perfect forward secrecy (PFS) support.