3reef.com
Overall grade based on: IPv4: 2 of 2 complete · IPv6: 2 of 2 complete
All 4 endpoints share identical configuration Select an IP for owner, ASN & location
B 188.114.96.2 IPv4 WHOIS › B 188.114.97.2 IPv4 WHOIS › B 2a06:98c1:3120::2 IPv6 WHOIS › B 2a06:98c1:3121::2 IPv6 WHOIS › Grade Breakdown
Protocol Support 50%
Key Exchange 90%
Cipher Strength 100%
Certificate 100%
Grade capped at B: server supports obsolete TLS 1.0/1.1.
Security Vulnerabilities Detected
- •Obsolete TLS versions (1.0/1.1) supported.
- •CBC cipher suites with TLS 1.0/1.1 (BEAST, Lucky13).
Protocol Configuration
Supported Protocols
TLS 1.3
TLS 1.2
TLS 1.1
TLS 1.0
SSL 3
SSL 2
Negotiated Cipher
TLS_AES_256_GCM_SHA384
Protocol Details
| Connection | |
| ALPN | h2 http/1.1 |
| SNI Required | Yes |
| Supported Named Groups | X25519MLKEM768 X25519Kyber768Draft00 x25519 secp256r1 secp384r1 secp521r1 (server preference order) |
| Post-Quantum Key Exchange | Yes X25519MLKEM768, X25519Kyber768Draft00 |
| HTTP/3 (QUIC) | Yes (advertised) |
| Encrypted Client Hello | Yes(ECH config in HTTPS DNS record) |
| Security Features | |
| Forward Secrecy | Yes (ECDHE / DHE) |
| Downgrade Prevention | Yes (TLS_FALLBACK_SCSV) |
| Secure Renegotiation | Supported (RFC 5746) |
| Extended Master Secret | Yes (RFC 7627) |
| OCSP Stapling | No (certificate has no OCSP responder) |
| HSTS | No |
| HSTS Preloading | N/A (HSTS not enabled) |
| Security Checks | |
| BEAST attack | Not mitigated server-side (TLS 1.0 + CBC) |
| POODLE (SSLv3) | No (SSL 3 not supported) |
| POODLE (TLS) | Possible (CBC + legacy TLS present) |
| RC4 | No |
| SSL/TLS Compression | No (not supported by .NET TLS stack) |
| Heartbleed | Not tested |
Cipher Suite Analysis
| Cipher Suite | Hex | Key Exchange | FS | Bits | Strength |
|---|---|---|---|---|---|
| # TLS 1.3 | |||||
| TLS_AES_128_GCM_SHA256 | 0x1301 | ECDHE | FS | 128 | Secure |
| TLS_AES_256_GCM_SHA384 | 0x1302 | ECDHE | FS | 256 | Secure |
| TLS_CHACHA20_POLY1305_SHA256 | 0x1303 | ECDHE | FS | 256 | Secure |
| # TLS 1.2 | |||||
| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | 0xC02B | ECDHE | FS | 128 | Secure |
| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 | 0xCCA9 | ECDHE | FS | 256 | Secure |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA | 0xC009 | ECDHE | FS | 128 | Weak |
| TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 | 0xC02C | ECDHE | FS | 256 | Secure |
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA | 0xC00A | ECDHE | FS | 256 | Weak |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 | 0xC023 | ECDHE | FS | 128 | Weak |
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 | 0xC024 | ECDHE | FS | 256 | Weak |
Handshake Simulation
| Client | Protocol | Cipher Suite | Result |
|---|---|---|---|
| Chrome 120 / Win 11 | TLS 1.3 | TLS_AES_256_GCM_SHA384 | Success |
| Chrome 80 / Win 10 | TLS 1.3 | TLS_AES_256_GCM_SHA384 | Success |
| Firefox 115 / Win 10 | TLS 1.3 | TLS_AES_256_GCM_SHA384 | Success |
| iOS 17 / Safari | TLS 1.3 | TLS_CHACHA20_POLY1305_SHA256 | Success |
| macOS 14 / Safari | TLS 1.3 | TLS_AES_256_GCM_SHA384 | Success |
| Android 14 | TLS 1.3 | TLS_AES_128_GCM_SHA256 | Success |
| Chrome 69 / Win 7 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Chrome 49 / XP SP3 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| IE 11 / Win 10 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| IE 11 / Win 7 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Android 9.0 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Android 7.0 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Android 5.0 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Android 4.4.2 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Java 11 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Java 8u121 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Android 4.0.4 | TLS 1.0 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA | Success |
| Android 4.1.1 | TLS 1.0 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA | Success |
| Baidu Jan 2015 | TLS 1.0 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA | Success |
| Java 6 | TLS 1.0 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA | Success |
* Simulated based on server's supported protocols and cipher configuration.
Site Access: HTTP and HTTPS
What a visitor typing each address gets, and where its redirects end (up to 5 are followed), as seen from our scanner.
| Host | http:// (port 80) | https:// (port 443) |
|---|---|---|
| 3reef.com | 403 Forbidden (unencrypted) | 403 Forbidden |
| www.3reef.com | 403 Forbidden (unencrypted) | 403 Forbidden |
- http://3reef.com answers without redirecting to HTTPS: visitors who type the address without https:// get an unencrypted page.
- http://www.3reef.com answers without redirecting to HTTPS.
DNS Records
As a public resolver answered for 3reef.com. Looked up 2026-11-06 00:07 UTC · 2 days ago
| Type | Records |
|---|---|
| A | |
| AAAA | |
| NS | evan.ns.cloudflare.com tess.ns.cloudflare.com |
| MX | 0 _dc-mx.172e5a52f250.3reef.com |
| SPF | v=spf1 +a +mx +ip4:72.52.222.15 ~all |
Certificate Identity
| Common Name | 3reef.com |
| Alt Names | 3reef.com *.3reef.com |
| Issuer | CN=WE1, O=Google Trust Services, C=US |
| Validity | 2026-09-28 to 2026-12-27 (48 days remaining) |
| Key | ECDSA 256 bits (sha256ECDSA) |
| Serial Number | 0ACD22C5F9AD96FF0EB9C0C957534C0B |
| SHA256 Fingerprint | 79abe5fabe8039a1214fc8238b8e6201133315f9b20febbc61d5e868129e4d91 |
| Pin SHA256 | j5okdiRfpavuCDUAlTvTi2IVnQTAx6TW+uVfMJkHgOY= |
Certificate Properties
| Type | DV |
| Cert Transparency | Yes (SCT) |
| OCSP Must Staple | No |
| Revocation | Good (not revoked) CRL: http://c.pki.goog/we1/QCjpOdnuLC8.crl No OCSP responder — revocation is published via CRL only (as CA/B Forum rules now allow). |
| DNS CAA | No (missing) |
| Trusted By | Yes Mozilla · Apple · Android · Java · Windows |
| Name Match | Yes |
| Validity Period | 90 days (maximum 200 days for certificates issued then) |
| Chain Issues | None |
Trust Chain Architecture
End-Entity Certificate
CN=3reef.com (Issuer: CN=WE1, O=Google Trust Services, C=US)
Intermediate CA
CN=WE1, O=Google Trust Services, C=US (Issuer: CN=GTS Root R4, O=Google Trust Services LLC, C=US)
Root Certificate
CN=GTS Root R4, O=Google Trust Services LLC, C=US (Issuer: CN=GTS Root R4, O=Google Trust Services LLC, C=US)
TLS History & Relations
Everything our scans have seen for 3reef.com, first seen 2026-11-06; current certificate since 2026-11-06.
Certificates served
| Certificate (SHA-256) | Issuer | Valid | Served |
|---|---|---|---|
| 79abe5fabe8039a1… current | WE1 | 2026-09-28 → 2026-12-27 | 2026-11-06 |
Addresses
| Address | Certificate | Seen |
|---|---|---|
| 188.114.96.2 | 79abe5fabe8039a1… | 2026-11-06 |
| 188.114.97.2 | 79abe5fabe8039a1… | 2026-11-06 |
| 2a06:98c1:3120::2 | 79abe5fabe8039a1… | 2026-11-06 |
| 2a06:98c1:3121::2 | 79abe5fabe8039a1… | 2026-11-06 |
TLS history (a row per change; repeated checks only extend it)
| Since → last checked (UTC) | Grade | TLS | Certificates | Addresses |
|---|---|---|---|---|
| 2026-11-06 00:07 | B | TLS 1.3 | 79abe5fabe8039a1… | 188.114.96.2, 188.114.97.2 |
Other hosts seen on the same addresses
0542.ua 100up.net 10-lineloto2.com 1clickai.com.au 1es.co.th 1morestore.com 1msg.io 1win-apk24.org 1win-apk-site.com 1win-sng.com 2ndhome.co.in 33win1.red 3nz9f.icu 4.tax 4thpointer.in 537133.vip 582793.cc 76.life 7b.au 82.com 889992786.xyz 889992794.xyz 889993606.xyz 9dots-sss-dev.org a49.co.th a7net.com.br aaravmain.org aastik.in aaush.com.np abah.me