Deep SSL/TLS Vulnerability Test
This report provides a deep analysis of the SSL/TLS configuration of platform.betterplace.co.in. It checks for protocol support, cipher strength, and known vulnerabilities.
Scan Results
Testing all IP addresses (port 443): 3.170.185.39 3.170.185.110 3.170.185.127 3.170.185.72 ----------------------------------------------------- Start 2026-09-10 14:29:04 -->> 3.170.185.39:443 (platform.betterplace.co.in) <<-- Further IP addresses: 3.170.185.72 3.170.185.110 3.170.185.127 2600:9000:288b:9e00:15:7f4f:3240:93a1 2600:9000:288b:ce00:15:7f4f:3240:93a1 2600:9000:288b:2c00:15:7f4f:3240:93a1 2600:9000:288b:8800:15:7f4f:3240:93a1 2600:9000:288b:e600:15:7f4f:3240:93a1 2600:9000:288b:5c00:15:7f4f:3240:93a1 2600:9000:288b:5000:15:7f4f:3240:93a1 2600:9000:288b:6200:15:7f4f:3240:93a1 rDNS (3.170.185.39): server-3-170-185-39.ord58.r.cloudfront.net. Service detected: HTTP Testing for server implementation bugs No bugs found. Testing HTTP header response @ "/" HTTP Status Code 403 Forbidden HTTP clock skew +1 sec from localtime HTTP Age (RFC 7234) 24550 Strict Transport Security 365 days=31536000 s, just this domain Public Key Pinning -- Server banner AmazonS3 Application banner -- Cookie(s) (none issued at "/") -- HTTP status 403 signals you maybe missed the web application Security headers X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src https://*.betterplace.co.in data: blob:; frame-src https://*.betterplace.co.in https://*.aws.amazon.com https://*.amazonaws.com https://www.youtube.com https://*.hreasily.com https://*.hreasily-prod.com https://*.okta.com https://*.fountain.com https://docs.google.com data: blob:; object-src https://*.betterplace.co.in https://*.aws.amazon.com https://*.amazonaws.com data: blob:; script-src https://*.betterplace.co.in https://d2r1yp2w7bby2u.cloudfront.net https://*.clevertap-prod.com https://maps.googleapis.com https://maps.gstatic.com https://*.clarity.ms https://c.bing.com https://cdnjs.cloudflare.com/ajax/libs/ace/ 'sha256-s30MW1z/QoByQCVYslZYZDZukhT0OWrKffzziZDReTU=' sha256-ICIWzTa5xY61tiQXQ1vTh15+i+NLB8yi0Mqlwxsj6cM=' sha256-fdf9qYe77nefd6tkqB5fqIkwwwnXbD/GstaOE1voqWg=' sha256-UjiFqHMrK7/td5PS6sWQWmmX2EYPGIpDofRwAzodk8Q=' sha256-XmQXWIIbIuLeZuOA0lM9zZtPwQ1lsiDyST0d19aZuoQ=' sha256-Bm8jxwenZ/kivcM+83OupNxG9EoFWRQbhaOP1xf3znk=' unsafe-eval' blob:; style-src https://*.betterplace.co.in https://stackpath.bootstrapcdn.com https://fonts.googleapis.com 'unsafe-inline'; font-src https://*.betterplace.co.in https://fonts.gstatic.com; connect-src https://*.betterplace.co.in https://*.ingest.sentry.io wss://*.betterplace.co.in https://*.amazonaws.com https://maps.googleapis.com https://*.clarity.ms https://c.bing.com https://*.desivocal.com data: blob:; img-src https://*.betterplace.co.in https://d3nk1b5wr4ekug.cloudfront.net https://duero9anl5r4s.cloudfront.net https://*.amazonaws.com https://maps.googleapis.com https://maps.gstatic.com data: blob:; media-src https://d3nk1b5wr4ekug.cloudfront.net https://duero9anl5r4s.cloudfront.net https://*.amazonaws.com data: blob:; frame-ancestors https://*.betterplace.co.in https://*.fountain.com; X-XSS-Protection: 1 Referrer-Policy: strict-origin-when-cross-origin Reverse Proxy banner X-Cache: Error from cloudfront Via: 1.1 548d9524429f0644c4aaa89a2a6aa54a.cloudfront.net (CloudFront) Testing vulnerabilities Secure Renegotiation (RFC 5746) supported (OK) Secure Client-Initiated Renegotiation not vulnerable (OK) CRIME, TLS (CVE-2012-4929) not vulnerable (OK) BREACH (CVE-2013-3587) no gzip/deflate/compress/br HTTP compression (OK) - only supplied "/" tested POODLE, SSL (CVE-2014-3566) not vulnerable (OK) TLS_FALLBACK_SCSV (RFC 7507) No fallback possible (OK), no protocol below TLS 1.2 offered SWEET32 (CVE-2016-2183, CVE-2016-6329) not vulnerable (OK) FREAK (CVE-2015-0204) not vulnerable (OK) DROWN (CVE-2016-0800, CVE-2016-0703) not vulnerable on this host and port (OK) make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=9B1B4F191C879600B2375E74D2EC6BD920E5E4088C5E9E88BA01FFEFBDF92459 LOGJAM (CVE-2015-4000), experimental not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2 BEAST (CVE-2011-3389) not vulnerable (OK), no SSL3 or TLS1 LUCKY13 (CVE-2013-0169), experimental not vulnerable (OK) Winshock (CVE-2014-6321), experimental not vulnerable (OK) RC4 (CVE-2013-2566, CVE-2015-2808) no RC4 ciphers detected (OK) Done 2026-09-10 14:30:01 [ 66s] -->> 3.170.185.39:443 (platform.betterplace.co.in) <<-- ----------------------------------------------------- Start 2026-09-10 14:30:01 -->> 3.170.185.110:443 (platform.betterplace.co.in) <<-- Further IP addresses: 3.170.185.72 3.170.185.39 3.170.185.127 2600:9000:288b:9e00:15:7f4f:3240:93a1 2600:9000:288b:ce00:15:7f4f:3240:93a1 2600:9000:288b:2c00:15:7f4f:3240:93a1 2600:9000:288b:8800:15:7f4f:3240:93a1 2600:9000:288b:e600:15:7f4f:3240:93a1 2600:9000:288b:5c00:15:7f4f:3240:93a1 2600:9000:288b:5000:15:7f4f:3240:93a1 2600:9000:288b:6200:15:7f4f:3240:93a1 rDNS (3.170.185.110): server-3-170-185-110.ord58.r.cloudfront.net. Service detected: HTTP Testing for server implementation bugs No bugs found. Testing HTTP header response @ "/" HTTP Status Code 403 Forbidden HTTP clock skew +1 sec from localtime HTTP Age (RFC 7234) 24612 Strict Transport Security 365 days=31536000 s, just this domain Public Key Pinning -- Server banner AmazonS3 Application banner -- Cookie(s) (none issued at "/") -- HTTP status 403 signals you maybe missed the web application Security headers X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src https://*.betterplace.co.in data: blob:; frame-src https://*.betterplace.co.in https://*.aws.amazon.com https://*.amazonaws.com https://www.youtube.com https://*.hreasily.com https://*.hreasily-prod.com https://*.okta.com https://*.fountain.com https://docs.google.com data: blob:; object-src https://*.betterplace.co.in https://*.aws.amazon.com https://*.amazonaws.com data: blob:; script-src https://*.betterplace.co.in https://d2r1yp2w7bby2u.cloudfront.net https://*.clevertap-prod.com https://maps.googleapis.com https://maps.gstatic.com https://*.clarity.ms https://c.bing.com https://cdnjs.cloudflare.com/ajax/libs/ace/ 'sha256-s30MW1z/QoByQCVYslZYZDZukhT0OWrKffzziZDReTU=' sha256-ICIWzTa5xY61tiQXQ1vTh15+i+NLB8yi0Mqlwxsj6cM=' sha256-fdf9qYe77nefd6tkqB5fqIkwwwnXbD/GstaOE1voqWg=' sha256-UjiFqHMrK7/td5PS6sWQWmmX2EYPGIpDofRwAzodk8Q=' sha256-XmQXWIIbIuLeZuOA0lM9zZtPwQ1lsiDyST0d19aZuoQ=' sha256-Bm8jxwenZ/kivcM+83OupNxG9EoFWRQbhaOP1xf3znk=' unsafe-eval' blob:; style-src https://*.betterplace.co.in https://stackpath.bootstrapcdn.com https://fonts.googleapis.com 'unsafe-inline'; font-src https://*.betterplace.co.in https://fonts.gstatic.com; connect-src https://*.betterplace.co.in https://*.ingest.sentry.io wss://*.betterplace.co.in https://*.amazonaws.com https://maps.googleapis.com https://*.clarity.ms https://c.bing.com https://*.desivocal.com data: blob:; img-src https://*.betterplace.co.in https://d3nk1b5wr4ekug.cloudfront.net https://duero9anl5r4s.cloudfront.net https://*.amazonaws.com https://maps.googleapis.com https://maps.gstatic.com data: blob:; media-src https://d3nk1b5wr4ekug.cloudfront.net https://duero9anl5r4s.cloudfront.net https://*.amazonaws.com data: blob:; frame-ancestors https://*.betterplace.co.in https://*.fountain.com; X-XSS-Protection: 1 Referrer-Policy: strict-origin-when-cross-origin Reverse Proxy banner X-Cache: Error from cloudfront Via: 1.1 191968e405f949a7453556ee34ace5ee.cloudfront.net (CloudFront) Testing vulnerabilities Secure Renegotiation (RFC 5746) supported (OK) Secure Client-Initiated Renegotiation not vulnerable (OK) CRIME, TLS (CVE-2012-4929) not vulnerable (OK) BREACH (CVE-2013-3587) no gzip/deflate/compress/br HTTP compression (OK) - only supplied "/" tested POODLE, SSL (CVE-2014-3566) not vulnerable (OK) TLS_FALLBACK_SCSV (RFC 7507) No fallback possible (OK), no protocol below TLS 1.2 offered SWEET32 (CVE-2016-2183, CVE-2016-6329) not vulnerable (OK) FREAK (CVE-2015-0204) not vulnerable (OK) DROWN (CVE-2016-0800, CVE-2016-0703) not vulnerable on this host and port (OK) make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=9B1B4F191C879600B2375E74D2EC6BD920E5E4088C5E9E88BA01FFEFBDF92459 LOGJAM (CVE-2015-4000), experimental not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2 BEAST (CVE-2011-3389) not vulnerable (OK), no SSL3 or TLS1 LUCKY13 (CVE-2013-0169), experimental not vulnerable (OK) Winshock (CVE-2014-6321), experimental not vulnerable (OK) RC4 (CVE-2013-2566, CVE-2015-2808) no RC4 ciphers detected (OK) Done 2026-09-10 14:30:58 [ 123s] -->> 3.170.185.110:443 (platform.betterplace.co.in) <<-- ----------------------------------------------------- Start 2026-09-10 14:30:59 -->> 3.170.185.127:443 (platform.betterplace.co.in) <<-- Further IP addresses: 3.170.185.72 3.170.185.39 3.170.185.110 2600:9000:288b:9e00:15:7f4f:3240:93a1 2600:9000:288b:ce00:15:7f4f:3240:93a1 2600:9000:288b:2c00:15:7f4f:3240:93a1 2600:9000:288b:8800:15:7f4f:3240:93a1 2600:9000:288b:e600:15:7f4f:3240:93a1 2600:9000:288b:5c00:15:7f4f:3240:93a1 2600:9000:288b:5000:15:7f4f:3240:93a1 2600:9000:288b:6200:15:7f4f:3240:93a1 rDNS (3.170.185.127): server-3-170-185-127.ord58.r.cloudfront.net. Service detected: HTTP Testing for server implementation bugs No bugs found. Testing HTTP header response @ "/" HTTP Status Code 403 Forbidden HTTP clock skew +1 sec from localtime HTTP Age (RFC 7234) 24669 Strict Transport Security 365 days=31536000 s, just this domain Public Key Pinning -- Server banner AmazonS3 Application banner -- Cookie(s) (none issued at "/") -- HTTP status 403 signals you maybe missed the web application Security headers X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src https://*.betterplace.co.in data: blob:; frame-src https://*.betterplace.co.in https://*.aws.amazon.com https://*.amazonaws.com https://www.youtube.com https://*.hreasily.com https://*.hreasily-prod.com https://*.okta.com https://*.fountain.com https://docs.google.com data: blob:; object-src https://*.betterplace.co.in https://*.aws.amazon.com https://*.amazonaws.com data: blob:; script-src https://*.betterplace.co.in https://d2r1yp2w7bby2u.cloudfront.net https://*.clevertap-prod.com https://maps.googleapis.com https://maps.gstatic.com https://*.clarity.ms https://c.bing.com https://cdnjs.cloudflare.com/ajax/libs/ace/ 'sha256-s30MW1z/QoByQCVYslZYZDZukhT0OWrKffzziZDReTU=' sha256-ICIWzTa5xY61tiQXQ1vTh15+i+NLB8yi0Mqlwxsj6cM=' sha256-fdf9qYe77nefd6tkqB5fqIkwwwnXbD/GstaOE1voqWg=' sha256-UjiFqHMrK7/td5PS6sWQWmmX2EYPGIpDofRwAzodk8Q=' sha256-XmQXWIIbIuLeZuOA0lM9zZtPwQ1lsiDyST0d19aZuoQ=' sha256-Bm8jxwenZ/kivcM+83OupNxG9EoFWRQbhaOP1xf3znk=' unsafe-eval' blob:; style-src https://*.betterplace.co.in https://stackpath.bootstrapcdn.com https://fonts.googleapis.com 'unsafe-inline'; font-src https://*.betterplace.co.in https://fonts.gstatic.com; connect-src https://*.betterplace.co.in https://*.ingest.sentry.io wss://*.betterplace.co.in https://*.amazonaws.com https://maps.googleapis.com https://*.clarity.ms https://c.bing.com https://*.desivocal.com data: blob:; img-src https://*.betterplace.co.in https://d3nk1b5wr4ekug.cloudfront.net https://duero9anl5r4s.cloudfront.net https://*.amazonaws.com https://maps.googleapis.com https://maps.gstatic.com data: blob:; media-src https://d3nk1b5wr4ekug.cloudfront.net https://duero9anl5r4s.cloudfront.net https://*.amazonaws.com data: blob:; frame-ancestors https://*.betterplace.co.in https://*.fountain.com; X-XSS-Protection: 1 Referrer-Policy: strict-origin-when-cross-origin Reverse Proxy banner X-Cache: Error from cloudfront Via: 1.1 6d608495c704c3391c897a110e88cffa.cloudfront.net (CloudFront) Testing vulnerabilities Secure Renegotiation (RFC 5746) supported (OK) Secure Client-Initiated Renegotiation not vulnerable (OK) CRIME, TLS (CVE-2012-4929) not vulnerable (OK) BREACH (CVE-2013-3587) no gzip/deflate/compress/br HTTP compression (OK) - only supplied "/" tested POODLE, SSL (CVE-2014-3566) not vulnerable (OK) TLS_FALLBACK_SCSV (RFC 7507) No fallback possible (OK), no protocol below TLS 1.2 offered SWEET32 (CVE-2016-2183, CVE-2016-6329) not vulnerable (OK) FREAK (CVE-2015-0204) not vulnerable (OK) DROWN (CVE-2016-0800, CVE-2016-0703) not vulnerable on this host and port (OK) make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=9B1B4F191C879600B2375E74D2EC6BD920E5E4088C5E9E88BA01FFEFBDF92459 LOGJAM (CVE-2015-4000), experimental not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2 BEAST (CVE-2011-3389) not vulnerable (OK), no SSL3 or TLS1 LUCKY13 (CVE-2013-0169), experimental not vulnerable (OK) Winshock (CVE-2014-6321), experimental not vulnerable (OK) RC4 (CVE-2013-2566, CVE-2015-2808) no RC4 ciphers detected (OK) Done 2026-09-10 14:31:59 [ 184s] -->> 3.170.185.127:443 (platform.betterplace.co.in) <<-- ----------------------------------------------------- Start 2026-09-10 14:31:59 -->> 3.170.185.72:443 (platform.betterplace.co.in) <<-- Further IP addresses: 3.170.185.39 3.170.185.110 3.170.185.127 2600:9000:288b:9e00:15:7f4f:3240:93a1 2600:9000:288b:ce00:15:7f4f:3240:93a1 2600:9000:288b:2c00:15:7f4f:3240:93a1 2600:9000:288b:8800:15:7f4f:3240:93a1 2600:9000:288b:e600:15:7f4f:3240:93a1 2600:9000:288b:5c00:15:7f4f:3240:93a1 2600:9000:288b:5000:15:7f4f:3240:93a1 2600:9000:288b:6200:15:7f4f:3240:93a1 rDNS (3.170.185.72): server-3-170-185-72.ord58.r.cloudfront.net. Service detected: HTTP Testing for server implementation bugs No bugs found. Testing HTTP header response @ "/" HTTP Status Code 403 Forbidden HTTP clock skew +1 sec from localtime HTTP Age (RFC 7234) 24731 Strict Transport Security 365 days=31536000 s, just this domain Public Key Pinning -- Server banner AmazonS3 Application banner -- Cookie(s) (none issued at "/") -- HTTP status 403 signals you maybe missed the web application Security headers X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src https://*.betterplace.co.in data: blob:; frame-src https://*.betterplace.co.in https://*.aws.amazon.com https://*.amazonaws.com https://www.youtube.com https://*.hreasily.com https://*.hreasily-prod.com https://*.okta.com https://*.fountain.com https://docs.google.com data: blob:; object-src https://*.betterplace.co.in https://*.aws.amazon.com https://*.amazonaws.com data: blob:; script-src https://*.betterplace.co.in https://d2r1yp2w7bby2u.cloudfront.net https://*.clevertap-prod.com https://maps.googleapis.com https://maps.gstatic.com https://*.clarity.ms https://c.bing.com https://cdnjs.cloudflare.com/ajax/libs/ace/ 'sha256-s30MW1z/QoByQCVYslZYZDZukhT0OWrKffzziZDReTU=' sha256-ICIWzTa5xY61tiQXQ1vTh15+i+NLB8yi0Mqlwxsj6cM=' sha256-fdf9qYe77nefd6tkqB5fqIkwwwnXbD/GstaOE1voqWg=' sha256-UjiFqHMrK7/td5PS6sWQWmmX2EYPGIpDofRwAzodk8Q=' sha256-XmQXWIIbIuLeZuOA0lM9zZtPwQ1lsiDyST0d19aZuoQ=' sha256-Bm8jxwenZ/kivcM+83OupNxG9EoFWRQbhaOP1xf3znk=' unsafe-eval' blob:; style-src https://*.betterplace.co.in https://stackpath.bootstrapcdn.com https://fonts.googleapis.com 'unsafe-inline'; font-src https://*.betterplace.co.in https://fonts.gstatic.com; connect-src https://*.betterplace.co.in https://*.ingest.sentry.io wss://*.betterplace.co.in https://*.amazonaws.com https://maps.googleapis.com https://*.clarity.ms https://c.bing.com https://*.desivocal.com data: blob:; img-src https://*.betterplace.co.in https://d3nk1b5wr4ekug.cloudfront.net https://duero9anl5r4s.cloudfront.net https://*.amazonaws.com https://maps.googleapis.com https://maps.gstatic.com data: blob:; media-src https://d3nk1b5wr4ekug.cloudfront.net https://duero9anl5r4s.cloudfront.net https://*.amazonaws.com data: blob:; frame-ancestors https://*.betterplace.co.in https://*.fountain.com; X-XSS-Protection: 1 Referrer-Policy: strict-origin-when-cross-origin Reverse Proxy banner X-Cache: Error from cloudfront Via: 1.1 58604f6513a4b949b4f0a68fa25d7136.cloudfront.net (CloudFront) Testing vulnerabilities Secure Renegotiation (RFC 5746) supported (OK) Secure Client-Initiated Renegotiation not vulnerable (OK) CRIME, TLS (CVE-2012-4929) not vulnerable (OK) BREACH (CVE-2013-3587) no gzip/deflate/compress/br HTTP compression (OK) - only supplied "/" tested POODLE, SSL (CVE-2014-3566) not vulnerable (OK) TLS_FALLBACK_SCSV (RFC 7507) No fallback possible (OK), no protocol below TLS 1.2 offered SWEET32 (CVE-2016-2183, CVE-2016-6329) not vulnerable (OK) FREAK (CVE-2015-0204) not vulnerable (OK) DROWN (CVE-2016-0800, CVE-2016-0703) not vulnerable on this host and port (OK) make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=9B1B4F191C879600B2375E74D2EC6BD920E5E4088C5E9E88BA01FFEFBDF92459 LOGJAM (CVE-2015-4000), experimental not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2 BEAST (CVE-2011-3389) not vulnerable (OK), no SSL3 or TLS1 LUCKY13 (CVE-2013-0169), experimental not vulnerable (OK) Winshock (CVE-2014-6321), experimental not vulnerable (OK) RC4 (CVE-2013-2566, CVE-2015-2808) no RC4 ciphers detected (OK) Done 2026-09-10 14:32:58 [ 243s] -->> 3.170.185.72:443 (platform.betterplace.co.in) <<-- ----------------------------------------------------- Done testing now all IP addresses (on port 443): 3.170.185.39 3.170.185.110 3.170.185.127 3.170.185.72
About this Scan
This scan uses testssl.sh to check for:
- Protocols: SSLv2, SSLv3, TLS 1.0, TLS 1.1, TLS 1.2, TLS 1.3
- Vulnerabilities: Heartbleed, POODLE, FREAK, Logjam, DROWN, etc.
- Cipher Suites: Weak ciphers, perfect forward secrecy (PFS) support.