Deep SSL/TLS Vulnerability Test

This report provides a deep analysis of the SSL/TLS configuration of 0fg8d.publishers.tremorhub.com. It checks for protocol support, cipher strength, and known vulnerabilities.

Scan Results

Testing all IP addresses (port 443): 3.217.120.91 52.205.125.86 34.198.219.43 98.87.144.28 34.195.145.162 100.51.155.203 34.192.252.18 34.225.5.229
-----------------------------------------------------
 Start 2026-03-16 09:04:08        -->> 3.217.120.91:443 (0fg8d.publishers.tremorhub.com) <<--

 Further IP addresses:   34.225.5.229 52.205.125.86 34.198.219.43 98.87.144.28
                         34.195.145.162 100.51.155.203 34.192.252.18
                         2600:1f10:4ce4:4a00:7af6:c54:f6f3:2621
                         2600:1f10:4ce4:4a02:d30f:e211:d290:4aef
                         2600:1f10:4ce4:4a01:9b8d:509c:afeb:878d
                         2600:1f10:4ce4:4a03:389b:265e:d21a:935b
                         2600:1f10:4ce4:4a01:24c:940f:b324:c9f1
                         2600:1f10:4ce4:4a05:1f57:a598:63e4:adcf
                         2600:1f10:4ce4:4a00:26be:ef40:2077:5989
                         2600:1f10:4ce4:4a05:18a0:e75b:8141:5ed4 
 rDNS (3.217.120.91):    ec2-3-217-120-91.compute-1.amazonaws.com.
 Service detected:       HTTP

 Testing for server implementation bugs 

 No bugs found.

 Testing HTTP header response @ "/" 

 HTTP Status Code             200 
 HTTP clock skew              0 sec from localtime
 Strict Transport Security    not offered
 Public Key Pinning           --
 Server banner                nginx
 Application banner           --
 Cookie(s)                    1 issued: 1/1 secure, 1/1 HttpOnly
 Security headers             --
 Reverse Proxy banner         --


 Testing vulnerabilities 

 Secure Renegotiation (RFC 5746)           supported (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied "/" tested
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              No fallback possible (OK), no protocol below TLS 1.2 offered
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see
                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=9A504AB9DE29F64F051DEDA4E2B55391D3EB1FFDB28E8967345F88AEBA5E74A3
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2
 BEAST (CVE-2011-3389)                     not vulnerable (OK), no SSL3 or TLS1
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses obsolete cipher block chaining ciphers with TLS, see server prefs.
 Winshock (CVE-2014-6321), experimental    not vulnerable (OK)
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Done 2026-03-16 09:04:57 [  59s] -->> 3.217.120.91:443 (0fg8d.publishers.tremorhub.com) <<--

-----------------------------------------------------
 Start 2026-03-16 09:04:57        -->> 52.205.125.86:443 (0fg8d.publishers.tremorhub.com) <<--

 Further IP addresses:   34.225.5.229 3.217.120.91 34.198.219.43 98.87.144.28
                         34.195.145.162 100.51.155.203 34.192.252.18
                         2600:1f10:4ce4:4a00:7af6:c54:f6f3:2621
                         2600:1f10:4ce4:4a02:d30f:e211:d290:4aef
                         2600:1f10:4ce4:4a01:9b8d:509c:afeb:878d
                         2600:1f10:4ce4:4a03:389b:265e:d21a:935b
                         2600:1f10:4ce4:4a01:24c:940f:b324:c9f1
                         2600:1f10:4ce4:4a05:1f57:a598:63e4:adcf
                         2600:1f10:4ce4:4a00:26be:ef40:2077:5989
                         2600:1f10:4ce4:4a05:18a0:e75b:8141:5ed4 
 rDNS (52.205.125.86):   ec2-52-205-125-86.compute-1.amazonaws.com.
 Service detected:       HTTP

 Testing for server implementation bugs 

 No bugs found.

 Testing HTTP header response @ "/" 

 HTTP Status Code             200 
 HTTP clock skew              0 sec from localtime
 Strict Transport Security    not offered
 Public Key Pinning           --
 Server banner                nginx
 Application banner           --
 Cookie(s)                    1 issued: 1/1 secure, 1/1 HttpOnly
 Security headers             --
 Reverse Proxy banner         --


 Testing vulnerabilities 

 Secure Renegotiation (RFC 5746)           supported (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied "/" tested
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              No fallback possible (OK), no protocol below TLS 1.2 offered
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see
                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=9A504AB9DE29F64F051DEDA4E2B55391D3EB1FFDB28E8967345F88AEBA5E74A3
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2
 BEAST (CVE-2011-3389)                     not vulnerable (OK), no SSL3 or TLS1
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses obsolete cipher block chaining ciphers with TLS, see server prefs.
 Winshock (CVE-2014-6321), experimental    not vulnerable (OK)
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Done 2026-03-16 09:05:58 [ 120s] -->> 52.205.125.86:443 (0fg8d.publishers.tremorhub.com) <<--

-----------------------------------------------------
 Start 2026-03-16 09:05:58        -->> 34.198.219.43:443 (0fg8d.publishers.tremorhub.com) <<--

 Further IP addresses:   34.225.5.229 3.217.120.91 52.205.125.86 98.87.144.28
                         34.195.145.162 100.51.155.203 34.192.252.18
                         2600:1f10:4ce4:4a00:7af6:c54:f6f3:2621
                         2600:1f10:4ce4:4a02:d30f:e211:d290:4aef
                         2600:1f10:4ce4:4a01:9b8d:509c:afeb:878d
                         2600:1f10:4ce4:4a03:389b:265e:d21a:935b
                         2600:1f10:4ce4:4a01:24c:940f:b324:c9f1
                         2600:1f10:4ce4:4a05:1f57:a598:63e4:adcf
                         2600:1f10:4ce4:4a00:26be:ef40:2077:5989
                         2600:1f10:4ce4:4a05:18a0:e75b:8141:5ed4 
 rDNS (34.198.219.43):   ec2-34-198-219-43.compute-1.amazonaws.com.
 Service detected:       HTTP

 Testing for server implementation bugs 

 No bugs found.

 Testing HTTP header response @ "/" 

 HTTP Status Code             200 
 HTTP clock skew              0 sec from localtime
 Strict Transport Security    not offered
 Public Key Pinning           --
 Server banner                nginx
 Application banner           --
 Cookie(s)                    1 issued: 1/1 secure, 1/1 HttpOnly
 Security headers             --
 Reverse Proxy banner         --


 Testing vulnerabilities 

 Secure Renegotiation (RFC 5746)           supported (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied "/" tested
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              No fallback possible (OK), no protocol below TLS 1.2 offered
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see
                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=9A504AB9DE29F64F051DEDA4E2B55391D3EB1FFDB28E8967345F88AEBA5E74A3
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2
 BEAST (CVE-2011-3389)                     not vulnerable (OK), no SSL3 or TLS1
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses obsolete cipher block chaining ciphers with TLS, see server prefs.
 Winshock (CVE-2014-6321), experimental    not vulnerable (OK)
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Done 2026-03-16 09:06:51 [ 173s] -->> 34.198.219.43:443 (0fg8d.publishers.tremorhub.com) <<--

-----------------------------------------------------
 Start 2026-03-16 09:06:52        -->> 98.87.144.28:443 (0fg8d.publishers.tremorhub.com) <<--

 Further IP addresses:   34.225.5.229 3.217.120.91 52.205.125.86 34.198.219.43
                         34.195.145.162 100.51.155.203 34.192.252.18
                         2600:1f10:4ce4:4a00:7af6:c54:f6f3:2621
                         2600:1f10:4ce4:4a02:d30f:e211:d290:4aef
                         2600:1f10:4ce4:4a01:9b8d:509c:afeb:878d
                         2600:1f10:4ce4:4a03:389b:265e:d21a:935b
                         2600:1f10:4ce4:4a01:24c:940f:b324:c9f1
                         2600:1f10:4ce4:4a05:1f57:a598:63e4:adcf
                         2600:1f10:4ce4:4a00:26be:ef40:2077:5989
                         2600:1f10:4ce4:4a05:18a0:e75b:8141:5ed4 
 rDNS (98.87.144.28):    ec2-98-87-144-28.compute-1.amazonaws.com.
 Service detected:       HTTP

 Testing for server implementation bugs 

 No bugs found.

 Testing HTTP header response @ "/" 

 HTTP Status Code             200 
 HTTP clock skew              0 sec from localtime
 Strict Transport Security    not offered
 Public Key Pinning           --
 Server banner                nginx
 Application banner           --
 Cookie(s)                    1 issued: 1/1 secure, 1/1 HttpOnly
 Security headers             --
 Reverse Proxy banner         --


 Testing vulnerabilities 

 Secure Renegotiation (RFC 5746)           supported (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied "/" tested
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              No fallback possible (OK), no protocol below TLS 1.2 offered
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see
                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=9A504AB9DE29F64F051DEDA4E2B55391D3EB1FFDB28E8967345F88AEBA5E74A3
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2
 BEAST (CVE-2011-3389)                     not vulnerable (OK), no SSL3 or TLS1
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses obsolete cipher block chaining ciphers with TLS, see server prefs.
 Winshock (CVE-2014-6321), experimental    not vulnerable (OK)
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Done 2026-03-16 09:07:51 [ 233s] -->> 98.87.144.28:443 (0fg8d.publishers.tremorhub.com) <<--

-----------------------------------------------------
 Start 2026-03-16 09:07:51        -->> 34.195.145.162:443 (0fg8d.publishers.tremorhub.com) <<--

 Further IP addresses:   34.225.5.229 3.217.120.91 52.205.125.86 34.198.219.43
                         98.87.144.28 100.51.155.203 34.192.252.18
                         2600:1f10:4ce4:4a00:7af6:c54:f6f3:2621
                         2600:1f10:4ce4:4a02:d30f:e211:d290:4aef
                         2600:1f10:4ce4:4a01:9b8d:509c:afeb:878d
                         2600:1f10:4ce4:4a03:389b:265e:d21a:935b
                         2600:1f10:4ce4:4a01:24c:940f:b324:c9f1
                         2600:1f10:4ce4:4a05:1f57:a598:63e4:adcf
                         2600:1f10:4ce4:4a00:26be:ef40:2077:5989
                         2600:1f10:4ce4:4a05:18a0:e75b:8141:5ed4 
 rDNS (34.195.145.162):  ec2-34-195-145-162.compute-1.amazonaws.com.
 Service detected:       HTTP

 Testing for server implementation bugs 

 No bugs found.

 Testing HTTP header response @ "/" 

 HTTP Status Code             200 
 HTTP clock skew              0 sec from localtime
 Strict Transport Security    not offered
 Public Key Pinning           --
 Server banner                nginx
 Application banner           --
 Cookie(s)                    1 issued: 1/1 secure, 1/1 HttpOnly
 Security headers             --
 Reverse Proxy banner         --


 Testing vulnerabilities 

 Secure Renegotiation (RFC 5746)           supported (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied "/" tested
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              No fallback possible (OK), no protocol below TLS 1.2 offered
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see
                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=9A504AB9DE29F64F051DEDA4E2B55391D3EB1FFDB28E8967345F88AEBA5E74A3
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2
 BEAST (CVE-2011-3389)                     not vulnerable (OK), no SSL3 or TLS1
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses obsolete cipher block chaining ciphers with TLS, see server prefs.
 Winshock (CVE-2014-6321), experimental    not vulnerable (OK)
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Done 2026-03-16 09:08:51 [ 293s] -->> 34.195.145.162:443 (0fg8d.publishers.tremorhub.com) <<--

-----------------------------------------------------
 Start 2026-03-16 09:08:51        -->> 100.51.155.203:443 (0fg8d.publishers.tremorhub.com) <<--

 Further IP addresses:   34.225.5.229 3.217.120.91 52.205.125.86 34.198.219.43
                         98.87.144.28 34.195.145.162 34.192.252.18
                         2600:1f10:4ce4:4a00:7af6:c54:f6f3:2621
                         2600:1f10:4ce4:4a02:d30f:e211:d290:4aef
                         2600:1f10:4ce4:4a01:9b8d:509c:afeb:878d
                         2600:1f10:4ce4:4a03:389b:265e:d21a:935b
                         2600:1f10:4ce4:4a01:24c:940f:b324:c9f1
                         2600:1f10:4ce4:4a05:1f57:a598:63e4:adcf
                         2600:1f10:4ce4:4a00:26be:ef40:2077:5989
                         2600:1f10:4ce4:4a05:18a0:e75b:8141:5ed4 
 rDNS (100.51.155.203):  ec2-100-51-155-203.compute-1.amazonaws.com.
 Service detected:       HTTP

 Testing for server implementation bugs 

 No bugs found.

 Testing HTTP header response @ "/" 

 HTTP Status Code             200 
 HTTP clock skew              0 sec from localtime
 Strict Transport Security    not offered
 Public Key Pinning           --
 Server banner                nginx
 Application banner           --
 Cookie(s)                    1 issued: 1/1 secure, 1/1 HttpOnly
 Security headers             --
 Reverse Proxy banner         --


 Testing vulnerabilities 

 Secure Renegotiation (RFC 5746)           supported (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied "/" tested
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              No fallback possible (OK), no protocol below TLS 1.2 offered
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see
                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=9A504AB9DE29F64F051DEDA4E2B55391D3EB1FFDB28E8967345F88AEBA5E74A3
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2
 BEAST (CVE-2011-3389)                     not vulnerable (OK), no SSL3 or TLS1
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses obsolete cipher block chaining ciphers with TLS, see server prefs.
 Winshock (CVE-2014-6321), experimental    not vulnerable (OK)
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Done 2026-03-16 09:09:52 [ 354s] -->> 100.51.155.203:443 (0fg8d.publishers.tremorhub.com) <<--

-----------------------------------------------------
 Start 2026-03-16 09:09:52        -->> 34.192.252.18:443 (0fg8d.publishers.tremorhub.com) <<--

 Further IP addresses:   34.225.5.229 3.217.120.91 52.205.125.86 34.198.219.43
                         98.87.144.28 34.195.145.162 100.51.155.203
                         2600:1f10:4ce4:4a00:7af6:c54:f6f3:2621
                         2600:1f10:4ce4:4a02:d30f:e211:d290:4aef
                         2600:1f10:4ce4:4a01:9b8d:509c:afeb:878d
                         2600:1f10:4ce4:4a03:389b:265e:d21a:935b
                         2600:1f10:4ce4:4a01:24c:940f:b324:c9f1
                         2600:1f10:4ce4:4a05:1f57:a598:63e4:adcf
                         2600:1f10:4ce4:4a00:26be:ef40:2077:5989
                         2600:1f10:4ce4:4a05:18a0:e75b:8141:5ed4 
 rDNS (34.192.252.18):   ec2-34-192-252-18.compute-1.amazonaws.com.
 Service detected:       HTTP

 Testing for server implementation bugs 

 No bugs found.

 Testing HTTP header response @ "/" 

 HTTP Status Code             200 
 HTTP clock skew              0 sec from localtime
 Strict Transport Security    not offered
 Public Key Pinning           --
 Server banner                nginx
 Application banner           --
 Cookie(s)                    1 issued: 1/1 secure, 1/1 HttpOnly
 Security headers             --
 Reverse Proxy banner         --


 Testing vulnerabilities 

 Secure Renegotiation (RFC 5746)           supported (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied "/" tested
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              No fallback possible (OK), no protocol below TLS 1.2 offered
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see
                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=9A504AB9DE29F64F051DEDA4E2B55391D3EB1FFDB28E8967345F88AEBA5E74A3
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2
 BEAST (CVE-2011-3389)                     not vulnerable (OK), no SSL3 or TLS1
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses obsolete cipher block chaining ciphers with TLS, see server prefs.
 Winshock (CVE-2014-6321), experimental    not vulnerable (OK)
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Done 2026-03-16 09:10:52 [ 414s] -->> 34.192.252.18:443 (0fg8d.publishers.tremorhub.com) <<--

-----------------------------------------------------
 Start 2026-03-16 09:10:53        -->> 34.225.5.229:443 (0fg8d.publishers.tremorhub.com) <<--

 Further IP addresses:   3.217.120.91 52.205.125.86 34.198.219.43 98.87.144.28
                         34.195.145.162 100.51.155.203 34.192.252.18
                         2600:1f10:4ce4:4a00:7af6:c54:f6f3:2621
                         2600:1f10:4ce4:4a02:d30f:e211:d290:4aef
                         2600:1f10:4ce4:4a01:9b8d:509c:afeb:878d
                         2600:1f10:4ce4:4a03:389b:265e:d21a:935b
                         2600:1f10:4ce4:4a01:24c:940f:b324:c9f1
                         2600:1f10:4ce4:4a05:1f57:a598:63e4:adcf
                         2600:1f10:4ce4:4a00:26be:ef40:2077:5989
                         2600:1f10:4ce4:4a05:18a0:e75b:8141:5ed4 
 rDNS (34.225.5.229):    ec2-34-225-5-229.compute-1.amazonaws.com.
 Service detected:       HTTP

 Testing for server implementation bugs 

 No bugs found.

 Testing HTTP header response @ "/" 

 HTTP Status Code             200 
 HTTP clock skew              0 sec from localtime
 Strict Transport Security    not offered
 Public Key Pinning           --
 Server banner                nginx
 Application banner           --
 Cookie(s)                    1 issued: 1/1 secure, 1/1 HttpOnly
 Security headers             --
 Reverse Proxy banner         --


 Testing vulnerabilities 

 Secure Renegotiation (RFC 5746)           supported (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied "/" tested
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              No fallback possible (OK), no protocol below TLS 1.2 offered
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see
                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=9A504AB9DE29F64F051DEDA4E2B55391D3EB1FFDB28E8967345F88AEBA5E74A3
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2
 BEAST (CVE-2011-3389)                     not vulnerable (OK), no SSL3 or TLS1
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses obsolete cipher block chaining ciphers with TLS, see server prefs.
 Winshock (CVE-2014-6321), experimental    not vulnerable (OK)
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Done 2026-03-16 09:12:01 [ 483s] -->> 34.225.5.229:443 (0fg8d.publishers.tremorhub.com) <<--

-----------------------------------------------------
Done testing now all IP addresses (on port 443): 3.217.120.91 52.205.125.86 34.198.219.43 98.87.144.28 34.195.145.162 100.51.155.203 34.192.252.18 34.225.5.229

About this Scan

This scan uses testssl.sh to check for:

  • Protocols: SSLv2, SSLv3, TLS 1.0, TLS 1.1, TLS 1.2, TLS 1.3
  • Vulnerabilities: Heartbleed, POODLE, FREAK, Logjam, DROWN, etc.
  • Cipher Suites: Weak ciphers, perfect forward secrecy (PFS) support.

Run Another Scan Recent Scans