Deep SSL/TLS Vulnerability Test
This report provides a deep analysis of the SSL/TLS configuration of encyclopedia.kaspersky.com. It checks for protocol support, cipher strength, and known vulnerabilities.
Scan Results
Start 2026-09-27 17:01:34 -->> 82.202.190.30:443 (encyclopedia.kaspersky.com) <<-- rDNS (82.202.190.30): -- Service detected: HTTP Testing for server implementation bugs No bugs found. Testing HTTP header response @ "/" HTTP Status Code 200 OK HTTP clock skew -1 sec from localtime Strict Transport Security misconfiguration: Strict-Transport-Security 2x -- checking first one only 365 days=31536000 s, includeSubDomains Public Key Pinning -- Server banner nginx Application banner -- Cookie(s) 1 issued: 1/1 secure, 1/1 HttpOnly Security headers X-Frame-Options: SAMEORIGIN misconfiguration: X-Content-Type-Options 2x -- checking first one only X-Content-Type-Options: nosniff Content-Security-Policy: child-src 'self' blob: blob: https://mc.yandex.ru https://*.kaspersky.com https://*.kasperskycontenthub.com https://*.latam.securelist.com https://*.securelist.com https://*.securelist.ru https://*.yandex.ru https://box.kaspersky.com https://encyclopedia.kaspersky.com https://kasperskycontenthub.com https://mc.yandex.ru https://tpc.googlesyndication.com; connect-src 'self' https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.kaspersky.ca https://*.kaspersky.co.jp https://*.kaspersky.co.uk https://*.kaspersky.co.za https://*.kaspersky.com https://*.kaspersky.com.au https://*.kaspersky.com.br https://*.kaspersky.com.tr https://*.kaspersky.de https://*.kaspersky.es https://*.kaspersky.fr https://*.kaspersky.it https://*.kaspersky.nl https://*.kaspersky.pt https://*.kaspersky.ru https://*.kaspersky.se https://*.kasperskycontenthub.com https://*.latam.securelist.com https://*.mktoresp.com https://*.pingdom.net https://*.reddit.com https://*.securelist.com https://*.securelist.ru https://*.yandex.com https://*.yandex.ru https://*.youtube.com https://box.kaspersky.com https://consentcdn.cookiebot.com https://e.infogram.com https://encyclopedia.kaspersky.com https://kasperskycontenthub.com https://kasperskyform.com https://kasperskyform.eu https://mc.yandex.ru https://tpc.googlesyndication.com https://www.googletagmanager.com wss://mc.yandex.com wss://mc.yandex.ru; default-src 'self' https://*.kaspersky.com https://*.kasperskycontenthub.com https://*.latam.securelist.com https://*.securelist.com https://*.securelist.ru https://box.kaspersky.com https://encyclopedia.kaspersky.com https://kasperskycontenthub.com https://kasperskycontenthub.com/encyclopedia https://tpc.googlesyndication.com; font-src 'self' data: https://*.gstatic.com https://*.kaspersky.com https://*.kasperskycontenthub.com https://*.latam.securelist.com https://*.securelist.com https://*.securelist.ru https://*.wp.com https://assets.kasperskycontenthub.com https://assets.threatpost.com https://box.kaspersky.com https://encyclopedia.kaspersky.com https://fonts.googleapis.com https://kasperskycontenthub.com https://tpc.googlesyndication.com; frame-src 'self' blob: blob: https://mc.yandex.ru http://*.slideshare.net https://*.doubleclick.net https://*.facebook.com https://*.google.com https://*.googletagservices.com https://*.infogram.com https://*.instagram.com https://*.kaspersky.com https://*.kasperskycontenthub.com https://*.latam.securelist.com https://*.libsyn.com https://*.securelist.com https://*.securelist.ru https://*.sharethis.com https://*.slideshare.net https://*.twitter.com https://*.wp.com https://*.yandex.com https://*.yandex.ru https://*.youtube.com https://box.kaspersky.com https://consentcdn.cookiebot.com https://dzen.ru https://encyclopedia.kaspersky.com https://go.kaspersky.com https://infogram.com https://kasperskycontenthub.com https://player.vimeo.com https://rutube.ru/ https://tpc.googlesyndication.com https://vk.com https://vkvideo.ru https://www.brighttalk.com https://www.googletagmanager.com; img-src 'self' data: http://*.wordpress.com http://*.wp.com http://assets.kasperskydaily.com http://d2538mqrb7brka.cloudfront.net http://forum.kasperskyclub.ru http://i0.poll.fm https://*.cdninstagram.com https://*.doubleclick.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.google.ru https://*.gravatar.com https://*.gstatic.com https://*.infogram.com https://*.instagram.com https://*.kaspersky.ca https://*.kaspersky.co.jp https://*.kaspersky.co.uk https://*.kaspersky.co.za https://*.kaspersky.com https://*.kaspersky.com.au https://*.kaspersky.com.br https://*.kaspersky.com.tr https://*.kaspersky.de https://*.kaspersky.es https://*.kaspersky.fr https://*.kaspersky.it https://*.kaspersky.nl https://*.kaspersky.pt https://*.kaspersky.ru https://*.kaspersky.se https://*.kasperskycontenthub.com https://*.kasperskydaily.com https://*.latam.securelist.com https://*.securelist.com https://*.securelist.ru https://*.sharethis.com https://*.staticflickr.com https://*.threatpost.com https://*.twimg.com https://*.twitter.com https://*.vk.com https://*.wordpress.com https://*.wp.com https://*.yandex.com https://*.yandex.ru https://*.ytimg.com https://assets.kasperskydaily.com https://box.kaspersky.com https://d1srlirzdlmpew.cloudfront.net https://d2538mqrb7brka.cloudfront.net https://encyclopedia.kaspersky.com https://kasperskycontenthub.com https://latam.securelist.com https://maps.googleapis.com https://mc.yandex.ru https://player.vimeo.com https://polldaddy.com https://rum-collector.pingdom.net https://s.w.org https://s3-eu-west-1.amazonaws.com https://securelist.com https://securelist.ru https://stats.g.doubleclick.net https://t.co https://threatpost.com https://tpc.googlesyndication.com https://vk.com https://www.googletagmanager.com; object-src 'self' https://*.kaspersky.com https://*.kasperskycontenthub.com https://*.latam.securelist.com https://*.securelist.com https://*.securelist.ru https://box.kaspersky.com https://encyclopedia.kaspersky.com https://kasperskycontenthub.com https://player.vimeo.com https://polldaddy.com https://tpc.googlesyndication.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.cloudfront.net https://*.crazyegg.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.flickr.com https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.googlesyndication.com https://*.googletagservices.com https://*.gravatar.com https://*.gstatic.com https://*.instagram.com https://*.kaspersky.ca https://*.kaspersky.co.jp https://*.kaspersky.co.uk https://*.kaspersky.co.za https://*.kaspersky.com https://*.kaspersky.com.au https://*.kaspersky.com.br https://*.kaspersky.com.tr https://*.kaspersky.de https://*.kaspersky.es https://*.kaspersky.fr https://*.kaspersky.it https://*.kaspersky.nl https://*.kaspersky.pt https://*.kaspersky.ru https://*.kaspersky.se https://*.kasperskycontenthub.com https://*.latam.securelist.com https://*.polldaddy.com https://*.securelist.com https://*.securelist.ru https://*.sharethis.com https://*.threatpost.com https://*.twimg.com https://*.twitter.com https://*.woopra.com https://*.wp.com https://*.yandex.com https://*.yandex.ru https://assets.adobedtm.com https://box.kaspersky.com https://cdn-ru.bitrix24.ru/ https://cdn.bitrix24.eu/ https://cdnjs.cloudflare.com https://connect.mail.ru https://consent.cookiebot.com https://consentcdn.cookiebot.com https://e.infogram.com https://encyclopedia.kaspersky.com https://kasperskycontenthub.com https://kasperskyform.com/bitrix/js/crm/site/form/dist/app.bundle.min.js ttps://kasperskyform.eu/bitrix/js/crm/site/form/dist/app.bundle.min.js ttps://mc.yandex.ru https://mc.yandex.ru https://player.vimeo.com https://polldaddy.com https://rum-static.pingdom.net https://s.ytimg.com https://storage.yandexcloud.net/ https://tpc.googlesyndication.com https://vk.com https://www.brighttalk.com https://www.googleoptimize.com https://www.googletagmanager.com https://www.googletagservices.com https://www.linkedin.com https://www.youtube.com https://yastatic.net; style-src 'self' 'unsafe-inline' https://*.google.com https://*.googleapis.com https://*.gravatar.com https://*.kaspersky.com https://*.kasperskycontenthub.com https://*.latam.securelist.com https://*.securelist.com https://*.securelist.ru https://*.sharethis.com https://*.threatpost.com https://*.twimg.com https://*.twitter.com https://*.wp.com https://box.kaspersky.com https://encyclopedia.kaspersky.com https://kasperskycontenthub.com https://kasperskyform.com/bitrix/js/crm/site/form/dist/app.bundle.min.css ttps://kasperskyform.eu/bitrix/js/crm/site/form/dist/app.bundle.min.css ttps://tpc.googlesyndication.com https://www.googletagmanager.com Permissions-Policy: interest-cohort=() misconfiguration: X-XSS-Protection 2x -- checking first one only X-XSS-Protection: 1; mode=block Permissions-Policy: interest-cohort=() Referrer-Policy: strict-origin-when-cross-origin Reverse Proxy banner -- Testing vulnerabilities Secure Renegotiation (RFC 5746) supported (OK) Secure Client-Initiated Renegotiation not vulnerable (OK) CRIME, TLS (CVE-2012-4929) not vulnerable (OK) BREACH (CVE-2013-3587) potentially NOT ok, "gzip" HTTP compression detected. - only supplied "/" tested Can be ignored for static pages or if no secrets in the page POODLE, SSL (CVE-2014-3566) not vulnerable (OK) TLS_FALLBACK_SCSV (RFC 7507) No fallback possible (OK), no protocol below TLS 1.2 offered SWEET32 (CVE-2016-2183, CVE-2016-6329) not vulnerable (OK) FREAK (CVE-2015-0204) not vulnerable (OK) DROWN (CVE-2016-0800, CVE-2016-0703) not vulnerable on this host and port (OK) make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=E415665F1D9A804BF4CA84BA76D531409136658CB5C1A53FCB0954FC756B2D58 LOGJAM (CVE-2015-4000), experimental not vulnerable (OK): no DH EXPORT ciphers, no common prime detected BEAST (CVE-2011-3389) not vulnerable (OK), no SSL3 or TLS1 LUCKY13 (CVE-2013-0169), experimental potentially VULNERABLE, uses obsolete cipher block chaining ciphers with TLS, see server prefs. Winshock (CVE-2014-6321), experimental not vulnerable (OK) RC4 (CVE-2013-2566, CVE-2015-2808) no RC4 ciphers detected (OK) Done 2026-09-27 17:03:14 [ 110s] -->> 82.202.190.30:443 (encyclopedia.kaspersky.com) <<--
About this Scan
This scan uses testssl.sh to check for:
- Protocols: SSLv2, SSLv3, TLS 1.0, TLS 1.1, TLS 1.2, TLS 1.3
- Vulnerabilities: Heartbleed, POODLE, FREAK, Logjam, DROWN, etc.
- Cipher Suites: Weak ciphers, perfect forward secrecy (PFS) support.