Total Rows: 838600 Security Headers Grades: A 44,935 A+ 5,032 B 39,729 C 39,176 D 165,329 E 22,222 F 522,064 R 113 Sites using strict-transport-security: 221,330 Sites using content-security-policy: 103,177 Sites using content-security-policy-report-only: 7,363 Sites using x-webkit-csp: 768 Sites using x-content-security-policy: 3,159 Sites using public-key-pins: 680 Sites using public-key-pins-report-only: 34 Sites using x-content-type-options: 216,233 Sites using x-frame-options: 257,868 Sites using x-xss-protection: 157,838 Sites using x-download-options: 27,394 Sites using x-permitted-cross-domain-policies: 31,552 Sites using access-control-allow-origin: 48,017 Sites using referrer-policy: 133,602 Sites using feature-policy: 5,574 Sites using permissions-policy: 39,416 Sites using report-to: 249,185 Sites using nel: 247,548 Sites using security.txt: 6,529 Sites redirecting to HTTPS: 645,823 Sites using Let's Encrypt certificate: 278,451 Sites using EV Certificates: 6,924 Top 10 Server headers: cloudflare 299,760 nginx 133,159 Apache 92,307 LiteSpeed 21,553 Microsoft-IIS/10.0 18,100 openresty 12,879 nginx/1.18.0 (Ubuntu) 8,883 AmazonS3 7,287 nginx/1.20.1 5,180 Microsoft-IIS/8.5 4,722 Top 10 TLDs: .com 370,620 .ru 42,376 .net 39,015 .org 32,795 .top 20,267 .de 16,903 .br 16,156 .jp 12,028 .uk 11,983 .xyz 9,896 Top 10 Certificate Issuers: C = US, O = Let's Encrypt, CN = R3 228,220 C = US, O = Google Trust Services LLC, CN = GTS CA 1P5 104,324 C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 56,531 C = US, O = Let's Encrypt, CN = E1 50,200 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 30,183 C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 17,875 C = US, O = Amazon, CN = Amazon RSA 2048 M02 15,900 C = US, O = Amazon, CN = Amazon RSA 2048 M01 13,222 C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 10,919 C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G4 8,232 TLS Protocol Versions: TLSv1.3 482,310 TLSv1.2 146,244 TLSv1.0 315 Top 10 Cipher Suites: TLS_AES_256_GCM_SHA384 422,701 ECDHE-RSA-AES256-GCM-SHA384 73,096 TLS_AES_128_GCM_SHA256 56,191 ECDHE-RSA-AES128-GCM-SHA256 49,946 ECDHE-RSA-CHACHA20-POLY1305 10,681 ECDHE-RSA-AES256-SHA384 4,199 TLS_CHACHA20_POLY1305_SHA256 3,418 ECDHE-ECDSA-AES256-GCM-SHA384 2,642 ECDHE-ECDSA-CHACHA20-POLY1305 1,698 ECDHE-ECDSA-AES128-GCM-SHA256 1,248 Top 10 PFS Key Exchange Params: X25519, 253 bits 521,349 ECDH, P-256, 256 bits 85,219 ECDH, P-384, 384 bits 14,018 ECDH, P-521, 521 bits 6,210 DH, 1024 bits 627 DH, 2048 bits 508 DH, 4096 bits 22 X448, 448 bits 18 DH, 3072 bits 2 Top Key Sizes: 2048 bit 447,825 256 bit 125,020 4096 bit 44,037 384 bit 7,769 3072 bit 3,177 1024 bit 117 8192 bit 22 3112 bit 2 2096 bit 1 2408 bit 1 Sites using CAA: 47,987 HTTP Protocol Versions: http/2.0 518,866 http/1.1 318,558 http/1.0 1,133