Hi @bontchev
you have really an open port 80:
| Domainname | Http-Status | redirect | Sec. | G |
|---|---|---|---|---|
| • http://pandora.nlcv.bas.bg/ | ||||
| 195.96.252.66 | 307 | https://pandora.nlcv.bas.bg/ | 0.083 | A |
| • https://pandora.nlcv.bas.bg/ | ||||
| 195.96.252.66 | 403 | 1.864 | M | |
| Forbidden | ||||
| • http://pandora.nlcv.bas.bg/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de | ||||
| 195.96.252.66 | 307 | https://pandora.nlcv.bas.bg/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de | 0.083 | A |
| • https://pandora.nlcv.bas.bg/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de | 404 | 1.403 | A | |
| Not Found |
This is enough to use http - validation. The last http status 404 is wonderful.
And closing port 80 isn't good:
Why closing port 80 is bad for security