Total Rows: 827890 Security Headers Grades: A 36,538 A+ 4,015 B 35,994 C 39,556 D 158,819 E 20,855 F 531,984 R 129 Sites using strict-transport-security: 213,101 Sites using content-security-policy: 91,344 Sites using content-security-policy-report-only: 5,704 Sites using x-webkit-csp: 771 Sites using x-content-security-policy: 2,857 Sites using public-key-pins: 454 Sites using public-key-pins-report-only: 36 Sites using x-content-type-options: 206,101 Sites using x-frame-options: 217,925 Sites using x-xss-protection: 143,531 Sites using x-download-options: 22,916 Sites using x-permitted-cross-domain-policies: 23,960 Sites using access-control-allow-origin: 43,608 Sites using referrer-policy: 105,571 Sites using feature-policy: 5,738 Sites using permissions-policy: 46,939 Sites using report-to: 189,651 Sites using nel: 186,964 Sites using security.txt: 9,514 Sites redirecting to HTTPS: 615,544 Sites using Let's Encrypt certificate: 261,350 Sites using EV Certificates: 7,785 Top 10 Server headers: cloudflare 227,678 nginx 147,950 Apache 121,207 LiteSpeed 24,394 Microsoft-IIS/10.0 16,706 openresty 15,520 Microsoft-IIS/8.5 8,377 Pepyaka/1.19.10 7,032 AmazonS3 6,923 nginx/1.18.0 (Ubuntu) 6,753 Top 10 TLDs: .com 398,220 .ru 49,382 .org 45,336 .net 44,592 .de 18,859 .uk 14,758 .jp 8,938 .xyz 8,268 .nl 8,014 .br 7,554 Top 10 Certificate Issuers: C = US, O = Let's Encrypt, CN = R3 231,279 C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 115,989 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 34,566 C = US, O = Let's Encrypt, CN = E1 29,993 C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 27,306 C = US, O = Google Trust Services LLC, CN = GTS CA 1P5 23,617 C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 18,052 C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1 17,129 C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 14,766 C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G2 6,117 TLS Protocol Versions: TLSv1.3 425,676 TLSv1.2 168,779 TLSv1.0 435 Top 10 Cipher Suites: TLS_AES_256_GCM_SHA384 373,155 ECDHE-RSA-AES256-GCM-SHA384 83,833 ECDHE-RSA-AES128-GCM-SHA256 62,496 TLS_AES_128_GCM_SHA256 46,812 ECDHE-RSA-CHACHA20-POLY1305 7,818 ECDHE-RSA-AES256-SHA384 6,809 TLS_CHACHA20_POLY1305_SHA256 5,709 ECDHE-ECDSA-CHACHA20-POLY1305 2,196 ECDHE-ECDSA-AES256-GCM-SHA384 1,644 DHE-RSA-AES256-GCM-SHA384 1,087 Top 10 PFS Key Exchange Params: X25519, 253 bits 468,977 ECDH, P-256, 256 bits 105,234 ECDH, P-384, 384 bits 14,312 ECDH, P-521, 521 bits 3,781 DH, 1024 bits 906 DH, 2048 bits 619 DH, 4096 bits 14 X448, 448 bits 11 DH, 3072 bits 2 Top Key Sizes: 2048 bit 389,601 256 bit 154,365 4096 bit 39,461 384 bit 7,347 3072 bit 2,898 1024 bit 155 8192 bit 21 521 bit 2 3112 bit 2 2408 bit 1 Sites using CAA: 40,599 HTTP Protocol Versions: http/2.0 485,220 http/1.1 341,503 http/1.0 1,146