This page comes from server tcp-demo-web, behind a dedicated load balancer in eu-de.
TLS for wk.tcp-demo.com ends on the load balancer, with a Let's Encrypt certificate.
Served by nginx, installed through the NAT gateway.