Cool, but it doesn't check security headers correctly:

https://httpsornot.com/?domain=theandrewbailey.com

versus:

https://securityheaders.com/?q=https%3A%2F%2Ftheandrewbailey...

Edit: fixed now?