as far as i can see both IP adresses associated with the domain Name are behinf a cloudflare CDN and are only supporting TLS_ECDHE_ECDSA-* Ciphers:
As of now a whitelist entry / "Tunneld Host" List entry for that domain should be working, correct?
yes, a SSL-Tunnel would work, as I already stated above.
Your tests with Qualys SSL Labs tool confirm my findings with curl on MWG. And also confirm that this site cannot be connected with MWG SSL Scanner.
I just still don't understand why SSL handshake works with the openssl tool with all the ciphers cited in my first message but not with curl and the SSL Scanner