denyfirst.

A perfect handshake
on a site anyone
can strip.

This deployment scans only hosts this project owns. It is here so that you can watch the instrument work and check its verdicts against your own run of it — not so that it opens connections to somebody else's server on a stranger's behalf, and the terms say so plainly. Run it yourself to scan anything else. Exactly what is sent is written out in full, and it is one GET of the root over each scheme.

This grades how a site is reached. To grade the handshake and the certificate behind it, use the TLS check.