Total Rows: 813624 Security Headers Grades: A 43,880 A+ 7,662 B 65,984 C 48,019 D 171,535 E 20,318 F 454,943 R 1,283 Sites using strict-transport-security: 243,203 Sites using content-security-policy: 118,036 Sites using content-security-policy-report-only: 7,861 Sites using x-webkit-csp: 697 Sites using x-content-security-policy: 3,673 Sites using public-key-pins: 911 Sites using public-key-pins-report-only: 12 Sites using x-content-type-options: 267,604 Sites using x-frame-options: 283,481 Sites using x-xss-protection: 175,135 Sites using x-download-options: 39,828 Sites using x-permitted-cross-domain-policies: 47,598 Sites using access-control-allow-origin: 53,389 Sites using referrer-policy: 167,076 Sites using feature-policy: 5,343 Sites using permissions-policy: 82,220 Sites using report-to: 230,920 Sites using nel: 228,408 Sites using security.txt: 9,565 Sites redirecting to HTTPS: 647,961 Sites using Let's Encrypt certificate: 239,606 Sites using EV Certificates: 5,459 Top 10 Server headers: cloudflare 301,975 nginx 128,154 Apache 76,114 LiteSpeed 23,721 Microsoft-IIS/10.0 16,954 AmazonS3 9,328 nginx/1.18.0 (Ubuntu) 8,311 openresty 6,150 Vercel 6,087 CloudFront 5,040 Top 10 TLDs: .com 369,654 .net 36,906 .org 35,544 .ru 35,538 .de 18,058 .br 15,094 .uk 14,664 .jp 10,642 .in 9,331 .nl 8,450 Top 10 Certificate Issuers: C = US, O = Google Trust Services, CN = WE1 224,042 C = US, O = Let's Encrypt, CN = R10 91,321 C = US, O = Let's Encrypt, CN = R11 90,278 C = US, O = Let's Encrypt, CN = E6 28,927 C = US, O = Let's Encrypt, CN = E5 28,836 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 23,477 C = US, O = Amazon, CN = Amazon RSA 2048 M02 17,101 C = US, O = Amazon, CN = Amazon RSA 2048 M03 16,773 C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 10,810 C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1 9,456 TLS Protocol Versions: TLSv1.3 538,247 TLSv1.2 99,159 TLSv1.0 209 Top 10 Cipher Suites: TLS_AES_256_GCM_SHA384 454,965 TLS_AES_128_GCM_SHA256 79,413 ECDHE-RSA-AES256-GCM-SHA384 46,980 ECDHE-RSA-AES128-GCM-SHA256 32,810 ECDHE-ECDSA-CHACHA20-POLY1305 6,284 ECDHE-RSA-CHACHA20-POLY1305 4,795 TLS_CHACHA20_POLY1305_SHA256 3,869 ECDHE-ECDSA-AES256-GCM-SHA384 3,204 ECDHE-RSA-AES256-SHA384 2,267 ECDHE-ECDSA-AES128-GCM-SHA256 1,324 Top 10 PFS Key Exchange Params: X25519, 253 bits 555,272 ECDH, P-256, 256 bits 59,522 ECDH, P-384, 384 bits 15,551 ECDH, P-521, 521 bits 6,021 DH, 1024 bits 392 DH, 2048 bits 275 DH, 4096 bits 21 X448, 448 bits 18 DH, 3072 bits 1 Top Key Sizes: 2048 bit 308,110 256 bit 274,015 4096 bit 42,092 384 bit 8,944 3072 bit 3,788 1024 bit 98 8192 bit 22 2056 bit 2 521 bit 1 Sites using CAA: 59,115 HTTP Protocol Versions: http/2.0 550,452 http/1.1 262,366 http/1.0 760