Total Rows: 836048 Security Headers Grades: A 33,280 A+ 2,900 B 35,034 C 40,046 D 146,326 E 9,669 F 568,717 R 76 Sites using strict-transport-security: 195,430 Sites using content-security-policy: 83,441 Sites using content-security-policy-report-only: 5,137 Sites using x-webkit-csp: 779 Sites using x-content-security-policy: 2,239 Sites using public-key-pins: 482 Sites using public-key-pins-report-only: 26 Sites using x-content-type-options: 192,533 Sites using x-frame-options: 208,061 Sites using x-xss-protection: 143,906 Sites using x-download-options: 22,797 Sites using x-permitted-cross-domain-policies: 22,003 Sites using access-control-allow-origin: 42,621 Sites using referrer-policy: 73,418 Sites using feature-policy: 5,568 Sites using permissions-policy: 34,642 Sites using report-to: 182,715 Sites using nel: 181,693 Sites using security.txt: 9,767 Sites redirecting to HTTPS: 612,461 Sites using Let's Encrypt certificate: 237,574 Sites using EV Certificates: 8,850 Top 10 Server headers: cloudflare 228,086 nginx 151,318 Apache 131,011 LiteSpeed 27,117 Microsoft-IIS/10.0 17,804 openresty 16,109 Microsoft-IIS/8.5 10,885 AmazonS3 6,435 Apache/2 5,744 nginx/1.20.2 5,653 Top 10 TLDs: .com 415,006 .org 47,787 .net 42,547 .ru 40,885 .de 16,828 .uk 14,813 .xyz 12,149 .jp 9,637 .in 7,932 .cn 7,869 Top 10 Certificate Issuers: C = US, O = Let's Encrypt, CN = R3 216,936 C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 146,198 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 39,306 C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 29,961 C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 21,279 C = US, O = Let's Encrypt, CN = E1 20,541 C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 17,356 C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1 12,782 C = US, O = DigiCert Inc, CN = RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1 8,455 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = Encryption Everywhere DV TLS CA - G1 5,936 TLS Protocol Versions: TLSv1.3 392,375 TLSv1.2 186,569 TLSv1.0 521 Top 10 Cipher Suites: TLS_AES_256_GCM_SHA384 349,423 ECDHE-RSA-AES256-GCM-SHA384 94,300 ECDHE-RSA-AES128-GCM-SHA256 67,962 TLS_AES_128_GCM_SHA256 40,277 ECDHE-RSA-AES256-SHA384 8,264 ECDHE-RSA-CHACHA20-POLY1305 7,536 TLS_CHACHA20_POLY1305_SHA256 2,675 ECDHE-ECDSA-CHACHA20-POLY1305 2,418 ECDHE-ECDSA-AES256-GCM-SHA384 1,857 DHE-RSA-AES256-GCM-SHA384 1,280 Top 10 PFS Key Exchange Params: X25519, 253 bits 441,972 ECDH, P-256, 256 bits 112,974 ECDH, P-384, 384 bits 17,592 ECDH, P-521, 521 bits 3,983 DH, 1024 bits 1,138 DH, 2048 bits 570 DH, 4096 bits 19 X448, 448 bits 10 DH, 3072 bits 2 Top Key Sizes: 2048 bit 364,073 256 bit 167,138 4096 bit 36,145 384 bit 8,019 3072 bit 2,709 1024 bit 154 8192 bit 15 2096 bit 2 3112 bit 2 3096 bit 1 Sites using CAA: 36,445 HTTP Protocol Versions: http/2.0 474,125 http/1.1 360,630 http/1.0 1,269