Recently a vulnerability in the SSLv3 protocol was discovered by Google researchers, which allows to decrypt session keys and, as a consequence, read confidential information. Much like the 2011 BEAST attack, this man-in-the-middle attack enforces an SSLv3 connection, although your Browser and the server on the other end may support higher/newer protocols.

Further information:

It is strongly recommended to deactivate SSL 3.0 completely in your Browser and on any server. You can check here, if your server configuration needs to be updated:

NEW You can also bulk check multiple servers.

Vulnerable Server

Until now we found 9779 servers vulnerable to the POODLE attack. The most recent additions to this list are:

Server Service letzte Prüfung
selfservice.klingel.de https
mail.indinvest.it https
spin.broadnet.no https
aseno.org https
selfservice.klingel.de https
selfservice.klingel.de https
email.charite.de https
www.kidsworld.ru https
procweb.jfrj.jus.br https
www.bartofil.com.br https
hims.ktf.com https
gdialog.ktipmedia.co.kr https
ssl-vg03.met.vgwort.de https
ssl-vg03.met.vgwort.de https
ssl-vg03.met.vgwort.de https