Dashboard / Security Report

889992786.xyz

Overall grade based on: IPv4: 2 of 2 complete · IPv6: 2 of 2 complete

All 4 endpoints share identical configuration Select an IP for owner, ASN & location

B 188.114.96.2 IPv4 WHOIS › B 188.114.97.2 IPv4 WHOIS › B 2a06:98c1:3120::2 IPv6 WHOIS › B 2a06:98c1:3121::2 IPv6 WHOIS ›

Adequate Protection

Overall Rating

188.114.96.2 WHOIS › 188.114.97.2 WHOIS › 2a06:98c1:3120::2 WHOIS › 2a06:98c1:3121::2 WHOIS ›

Assessed 2026-10-20 02:00 UTC

Grade Breakdown

Protocol Support 50%

Key Exchange 90%

Cipher Strength 100%

Certificate 100%

Grade capped at B: server supports obsolete TLS 1.0/1.1.

Security Vulnerabilities Detected

•Obsolete TLS versions (1.0/1.1) supported.
•CBC cipher suites with TLS 1.0/1.1 (BEAST, Lucky13).

Protocol Configuration

Supported Protocols

TLS 1.3

TLS 1.2

TLS 1.1

TLS 1.0

SSL 3

SSL 2

Negotiated Cipher

TLS_AES_256_GCM_SHA384

Protocol Details

Connection
ALPN	h2 http/1.1
SNI Required	Yes
Supported Named Groups	X25519MLKEM768 X25519Kyber768Draft00 x25519 secp256r1 secp384r1 secp521r1 (server preference order)
Post-Quantum Key Exchange	Yes X25519MLKEM768, X25519Kyber768Draft00
HTTP/3 (QUIC)	Yes (advertised)
Encrypted Client Hello	Yes(ECH config in HTTPS DNS record)
Security Features
Forward Secrecy	Yes (ECDHE / DHE)
Downgrade Prevention	Yes (TLS_FALLBACK_SCSV)
Secure Renegotiation	Supported (RFC 5746)
Extended Master Secret	Yes (RFC 7627)
OCSP Stapling	No (certificate has no OCSP responder)
HSTS	No
HSTS Preloading	N/A (HSTS not enabled)
Security Checks
BEAST attack	Not mitigated server-side (TLS 1.0 + CBC)
POODLE (SSLv3)	No (SSL 3 not supported)
POODLE (TLS)	Possible (CBC + legacy TLS present)
RC4	No
SSL/TLS Compression	No (not supported by .NET TLS stack)
Heartbleed	Not tested

Cipher Suite Analysis

Cipher Suite	Hex	Key Exchange	FS	Bits	Strength
# TLS 1.3
TLS_AES_128_GCM_SHA256	0x1301	ECDHE	FS	128	Secure
TLS_AES_256_GCM_SHA384	0x1302	ECDHE	FS	256	Secure
TLS_CHACHA20_POLY1305_SHA256	0x1303	ECDHE	FS	256	Secure
# TLS 1.2
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	0xC02B	ECDHE	FS	128	Secure
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256	0xCCA9	ECDHE	FS	256	Secure
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA	0xC009	ECDHE	FS	128	Weak
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384	0xC02C	ECDHE	FS	256	Secure
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA	0xC00A	ECDHE	FS	256	Weak
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256	0xC023	ECDHE	FS	128	Weak
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384	0xC024	ECDHE	FS	256	Weak

Handshake Simulation

Client	Protocol	Cipher Suite	Result
Chrome 120 / Win 11	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
Chrome 80 / Win 10	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
Firefox 115 / Win 10	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
iOS 17 / Safari	TLS 1.3	TLS_CHACHA20_POLY1305_SHA256	Success
macOS 14 / Safari	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
Android 14	TLS 1.3	TLS_AES_128_GCM_SHA256	Success
Chrome 69 / Win 7	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Chrome 49 / XP SP3	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
IE 11 / Win 10	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
IE 11 / Win 7	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Android 9.0	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Android 7.0	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Android 5.0	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Android 4.4.2	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Java 11	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Java 8u121	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Android 4.0.4	TLS 1.0	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA	Success
Android 4.1.1	TLS 1.0	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA	Success
Baidu Jan 2015	TLS 1.0	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA	Success
Java 6	TLS 1.0	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA	Success

* Simulated based on server's supported protocols and cipher configuration.

Certificate Identity

Common Name	889992786.xyz
Alt Names	*.889992786.xyz 889992786.xyz
Issuer	CN=YE2, O=Let's Encrypt, C=US
Validity	2026-10-08 to 2027-01-06 (58 days remaining)
Key	ECDSA 256 bits (sha384ECDSA)
Serial Number	051D079C56FD5621682057CA1DA6B30D9C6C
SHA256 Fingerprint	047146d4cdb780c97dc57aae5f1bc080dfd7c859a03314f540fded3cc08075b6
Pin SHA256	Q3ZbJSGXMjT4/r60rJYadW7M2IQQ9lJtmdQ+nPxX0EM=

Certificate Properties

Type	DV
Cert Transparency	Yes (SCT)
OCSP Must Staple	No
Revocation	Good (not revoked) CRL: http://ye2.c.lencr.org/109.crl No OCSP responder — revocation is published via CRL only (as CA/B Forum rules now allow).
DNS CAA	No (missing)
Trusted By	Yes Mozilla · Apple · Android · Java · Windows
Name Match	Yes
Validity Period	90 days (maximum 200 days for certificates issued then)
Chain Issues	None

Trust Chain Architecture

End-Entity Certificate

CN=889992786.xyz (Issuer: CN=YE2, O=Let's Encrypt, C=US)

Intermediate CA

CN=YE2, O=Let's Encrypt, C=US (Issuer: CN=Root YE, O=ISRG, C=US)

Intermediate CA

CN=Root YE, O=ISRG, C=US (Issuer: CN=ISRG Root X2, O=Internet Security Research Group, C=US)

Root Certificate

CN=ISRG Root X2, O=Internet Security Research Group, C=US (Issuer: CN=ISRG Root X2, O=Internet Security Research Group, C=US)

TLS History & Relations

Everything our scans have seen for 889992786.xyz, first seen 2026-10-20; current certificate since 2026-10-20.

Certificates served

Certificate (SHA-256)	Issuer	Valid	Served
047146d4cdb780c9… current	YE2	2026-10-08 → 2027-01-06	2026-10-20

Addresses

Address	Certificate	Seen
188.114.96.2	047146d4cdb780c9…	2026-10-20
188.114.97.2	047146d4cdb780c9…	2026-10-20
2a06:98c1:3120::2	047146d4cdb780c9…	2026-10-20
2a06:98c1:3121::2	047146d4cdb780c9…	2026-10-20

TLS history (a row per change; repeated checks only extend it)

Since → last checked (UTC)	Grade	TLS	Certificates	Addresses
2026-10-20 02:00	B	TLS 1.3	047146d4cdb780c9…	188.114.96.2, 188.114.97.2, 2a06:98c1:3120::2, 2a06:98c1:3121::2