Total Rows: 703704 Security Headers Grades: A 51,991 A+ 8,109 B 61,889 C 35,513 D 141,622 E 22,193 F 380,903 R 1,484 Sites using strict-transport-security: 214,162 Sites using content-security-policy: 143,446 Sites using content-security-policy-report-only: 8,363 Sites using x-webkit-csp: 511 Sites using x-content-security-policy: 2,766 Sites using public-key-pins: 554 Sites using public-key-pins-report-only: 11 Sites using x-content-type-options: 267,151 Sites using x-frame-options: 280,595 Sites using x-xss-protection: 139,659 Sites using x-download-options: 33,421 Sites using x-permitted-cross-domain-policies: 41,820 Sites using access-control-allow-origin: 42,310 Sites using referrer-policy: 196,749 Sites using feature-policy: 3,924 Sites using permissions-policy: 86,493 Sites using report-to: 248,641 Sites using nel: 245,770 Sites using security.txt: 8,281 Sites redirecting to HTTPS: 563,718 Sites using Let's Encrypt certificate: 260,927 Sites using EV Certificates: 3,565 Top 10 Server headers: cloudflare 309,774 nginx 90,231 Apache 58,687 LiteSpeed 19,574 Microsoft-IIS/10.0 12,839 AmazonS3 7,712 nginx/1.24.0 (Ubuntu) 7,016 openresty 6,958 Vercel 6,521 CloudFront 5,252 Top 10 TLDs: .com 308,171 .net 29,827 .org 29,285 .uk 25,161 .ru 24,765 .de 22,254 .br 12,585 .nl 11,175 .jp 9,330 .in 7,929 Top 10 Certificate Issuers: C = US, O = Google Trust Services, CN = WE1 164,173 C = US, O = Let's Encrypt, CN = R12 58,560 C = US, O = Let's Encrypt, CN = R13 58,233 C = US, O = Let's Encrypt, CN = E7 49,867 C = US, O = Let's Encrypt, CN = E8 49,853 C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA DV R36 17,015 C = US, O = Amazon, CN = Amazon RSA 2048 M04 14,861 C = US, O = Amazon, CN = Amazon RSA 2048 M01 13,167 C = US, O = Let's Encrypt, CN = YE1 12,537 C = US, O = Let's Encrypt, CN = YE2 12,460 TLS Protocol Versions: TLSv1.3 477,265 TLSv1.2 58,677 TLSv1.0 89 Top 10 Cipher Suites: TLS_AES_256_GCM_SHA384 407,886 TLS_AES_128_GCM_SHA256 67,479 ECDHE-RSA-AES256-GCM-SHA384 26,827 ECDHE-RSA-AES128-GCM-SHA256 19,036 ECDHE-ECDSA-CHACHA20-POLY1305 4,658 ECDHE-RSA-CHACHA20-POLY1305 2,528 ECDHE-ECDSA-AES256-GCM-SHA384 2,380 TLS_CHACHA20_POLY1305_SHA256 1,900 ECDHE-RSA-AES256-SHA384 1,232 ECDHE-ECDSA-AES128-GCM-SHA256 1,136 Top 10 PFS Key Exchange Params: X25519, 253 bits 487,905 ECDH, P-256, 256 bits 32,254 ECDH, P-384, 384 bits 10,998 ECDH, P-521, 521 bits 4,153 DH, 1024 bits 224 DH, 2048 bits 145 DH, 4096 bits 17 X448, 448 bits 14 DH, 3072 bits 3 Top Key Sizes: 256 bit 274,106 2048 bit 218,529 4096 bit 33,059 384 bit 6,867 3072 bit 3,089 1024 bit 50 8192 bit 11 2056 bit 2 Sites using CAA: 39,558 HTTP Protocol Versions: http/2.0 488,280 http/1.1 214,849 http/1.0 549