Websites using HSTS - 47.3M Live sites

Name: Websites that use HSTS
Creator: webatla
License: https://webatla.com/terms

About HSTS Database preview By country By TLD Download

About HSTS

webatla tracks 47,293,039 live websites using HSTS — 15.3% of every site we index. Download the full list of websites that using HSTS technology as a daily JSONL export — every record includes the domain plus DNS, WHOIS, IP address, hosting country and global rank.

HTTP Strict Transport Security (HSTS) is a web security policy mechanism that instructs browsers to only interact with a website using HTTPS, never HTTP. Defined in RFC 6797, it is implemented via a server response header that tells clients to enforce secure connections for a specified duration.

HSTS protects against protocol downgrade attacks and cookie hijacking by ensuring all communication is encrypted. It is widely adopted by security-conscious websites and is a key recommendation in modern web security best practices, supported by all major browsers.

At a glance

Websiterfc-editor.org ↗

First release2012-01-01

All figures as of Jul 28, 2026

47,293,039 Sites detected

15.3% Of all websites

Database preview of HSTS sites

HSTS detection is a value inside the Technologies column. Two datasets carry it — switch between them to compare what's included.

webatla-technologies-hsts-2026-07-28.jsonl.zst · 47,293,039 rows · 14 columns Daily fresh export

Domain	TLD suffix	TLD	Domain type	HTTP status	IP address	Country by IP	Social networks	Technologies last data checked	Technologies	PR value	Harmonic value	Domain creation date	Domain expiration date
instagram.com	com	com	ICANN	HTTP 200	157.240.0.174	DE	{"facebook":["https://developers.facebook.com/docs/instagram","https://facebook.com/help/instagram/261704639352628","https://facebook.com/help/cancelcontracts?source=instagram.com"],"instagram":["https://instagram.com/data/manifest.json","https://instagram.com/accounts/password/reset","https://instagram.com/accounts/emailsignup?next="]}	2026-05-14	PWA, HSTS, HTTP/3, DigiCert, Open Graph	0.0062957	26,877,164	2004-06-04	2034-06-04
youtube.com	com	com	ICANN	HTTP 200	142.251.13.136	US	{"youtube":["https://youtube.com/static/favicon.ico","https://youtube.com/s/_/ytmweb/_/ss/k=ytmweb.c3_base_cow_tracing.Osf9qbBmtjs.L.X.O/am=AAAAAIABQQBsGA/d=0/rs=ABnK5FLnOCL0J6Hr-MypqOa20PTL6dTSDQ"]}	2026-07-18	HSTS, HTTP/3, Favicon, YouTube, Open Graph, Priority Hints, Google Site Verification, Facebook Domain Verification	0.00483818	25,770,158	2005-02-15	2027-02-15
linkedin.com	com	com	ICANN	HTTP 200	130.211.32.14	US	{"linkedin":["https://linkedin.com/legal/cookie-policy","https://linkedin.com/mypreferences/g/guest-cookies","https://linkedin.com/legal/user-agreement"]}	2026-05-18	HSTS, Java, Azure, HTTP/3, DigiCert, DocuSign, Cloudflare, Open Graph, Naver Analytics, Cloudflare Bot Management	0.00380516	24,467,486	2002-11-02	2026-11-02
wordpress.org	org	org	ICANN	HTTP 200	66.6.42.252	US	{"tiktok":["https://tiktok.com/@wordpress"],"bluesky":["https://bsky.app/profile/wordpress.org"],"threads":["https://threads.net/@wordpress"],"youtube":["https://youtube.com/wordpress"],"facebook":["https://facebook.com/WordPress"],"linkedin":["https://linkedin.com/company/wordpress"],"instagram":["https://instagram.com/wordpress"],"x-twitter":["https://x.com/WordPress"]}	2026-07-08	PHP, RSS, HSTS, MySQL, Nginx, HTTP/2, Favicon, hreflang, Gutenberg 23.5.0, WordPress 7.1	0.00191729	21,394,334	2003-03-28	2035-03-28
gravatar.com	com	com	ICANN	HTTP 200	192.0.80.239	US	{"github":["https://github.com/automattic/gravatar"]}	2026-05-11	PHP, HSTS, MySQL, Nginx, HTTP/3, Zendesk, WordPress, Google Analytics GA4	0.0018309	22,145,546	2004-07-15	2027-07-15
…	…	…	…	…	…	…	…	…	…	…	…	…	…

Domain	TLD suffix	TLD	Domain type	HTTP status	IP address	Country by IP	Social networks	Technologies last data checked	Technologies	DNS last data checked	DNS Status	DNS records	PR value	Harmonic value	RDAP/WHOIS last data checked	RDAP/WHOIS method	Domain creation date	Domain expiration date	Domain last changed	Registrar	RDAP/WHOIS Record	Response Status RDAP/WHOIS
instagram.com	com	com	ICANN	HTTP 200	157.240.0.174	DE	{"facebook":["https://developers.facebook.com/docs/instagram","https://facebook.com/help/instagram/261704639352628","https://facebook.com/help/cancelcontracts?source=instagram.com"],"instagram":["https://instagram.com/data/manifest.json","https://instagram.com/accounts/password/reset","https://instagram.com/accounts/emailsignup?next="]}	2026-05-14	PWA, HSTS, HTTP/3, DigiCert, Open Graph	2026-07-22	TRUE	{"A":["157.240.0.174"],"MX":[{"host":"mxa-00082601.gslb.pphosted.com","priority":10},{"host":"mxb-00082601.gslb.pphosted.com","priority":10}],"NS":["a.ns.instagram.com","b.ns.instagram.com","c.ns.instagram.com","d.ns.instagram.com"],"CAA":[{"tag":"issue","flags":0,"value":"digicert.com; account=271b0beda0771d006aa3a6c11b05187d456d6c239b46cb5241196095b09c92af"}],"SOA":{"mname":"a.ns.instagram.com","retry":1800,"rname":"dns.facebook.com","expire":604800,"serial":4207849484,"minimum":3600,"refresh":14400},"TXT":["4cbb1b68-601f-4801-8e7f-e8f68a4a41dd","_yvfspgyfwcjnwgopowc9qjme14c32od","adobe-idp-site-verification=367fda82-a8bb-46cf-9cff-0062d452d229","facebook-domain-verification=hksvhmzcutq39t1kgpmlx11kt8314q","google-site-verification=GGtId51KFyq0hqX2xNvt1u0P9Xp0C7k6pp9do49fCNw","google-site-verification=_iQgLr68Rdg7YnN2PqOljSG5dnWOFUUXISF9R77fs5c","hyWdekepiNsp/V9b1JCR+wZDdzbESurl4GqY+FLMfiN+7aeFaway0Art+kNDHeL5OnGZipNeV/iIC+lOONSQVQ==","ms=ms86975275","nEXgIFIbDifAKlSMQvAhly5SA-vpsAkm5wiOdwdkrzY","v=spf1 include:facebookmail.com include:_spf.fb.com -all"],"AAAA":["2a03:2880:f276:1e9:face:b00c:0:4420"],"HTTPS":[{"params":["alpn=h2,h3"],"target":"","priority":1},{"params":["alpn=h2,h3"],"target":"z-p42-instagram.fallback.c10r.facebook.com","priority":2}]}	0.0062957	26,877,164	2025-07-06	RDAP	2004-06-04	2034-06-04	2025-07-06	RegistrarSafe, LLC	{"raw_response":{"links":[{"rel":"self","href":"https://rdap.verisign.com/com/v1/domain/INSTAGRAM.COM","type":"application/rdap+json","value":"https://rdap.verisign.com/com/v1/domain/INSTAGRAM.COM"},{"rel":"related","href":"https://rdap.registrarsafe.com/domain/INSTAGRAM.COM","type":"application/rdap+json","value":"https://rdap.registrarsafe.com/domain/INSTAGRAM.COM"}],"events":[{"eventDate":"2004-06-04T13:37:18Z","eventAction":"registration"},{"eventDate":"2034-06-04T13:37:18Z","eventAction":"expiration"},{"eventDate":"2025-06-25T19:12:42Z","eventAction":"last changed"},{"eventDate":"2025-07-06T08:10:01Z","eventAction":"last update of RDAP database"}],"handle":"121748357_DOMAIN_COM-VRSN","status":["client delete prohibited","client transfer prohibited","client update prohibited","server delete prohibited","server transfer prohibited","server update prohibited"],"ldhName":"INSTAGRAM.COM","notices":[{"links":[{"rel":"terms-of-service","href":"https://www.verisign.com/domain-names/registration-data-access-protocol/terms-service/index.xhtml","type":"text/html","value":"https://rdap.verisign.com/com/v1/domain/instagram.com"}],"title":"Terms of Service","description":["Service subject to Terms of Use."]},{"links":[{"href":"https://icann.org/epp","type":"text/html"}],"title":"Status Codes","description":["For more information on domain status codes, please visit https://icann.org/epp"]},{"links":[{"rel":"help","href":"https://icann.org/wicf","type":"text/html","value":"https://rdap.verisign.com/com/v1/domain/instagram.com"}],"title":"RDDS Inaccuracy Complaint Form","description":["URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf"]}],"entities":[{"links":[{"rel":"about","href":"http://www.registrarsafe.com","type":"text/html","value":"https://rdap.registrarsafe.com/"}],"roles":["registrar"],"handle":"3237","entities":[{"roles":["abuse"],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text",""],["tel",{"type":"voice"},"uri","tel:+1-650-308-7004"],["email",{},"text","abusecomplaints@registrarsafe.com"]]],"objectClassName":"entity"}],"publicIds":[{"type":"IANA Registrar ID","identifier":"3237"}],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text","RegistrarSafe, LLC"]]],"objectClassName":"entity"}],"secureDNS":{"delegationSigned":false},"nameservers":[{"ldhName":"A.NS.INSTAGRAM.COM","objectClassName":"nameserver"},{"ldhName":"B.NS.INSTAGRAM.COM","objectClassName":"nameserver"},{"ldhName":"C.NS.INSTAGRAM.COM","objectClassName":"nameserver"},{"ldhName":"D.NS.INSTAGRAM.COM","objectClassName":"nameserver"}],"objectClassName":"domain","rdapConformance":["rdap_level_0","icann_rdap_technical_implementation_guide_1","icann_rdap_response_profile_1"]}}	Domain is active
youtube.com	com	com	ICANN	HTTP 200	142.251.13.136	US	{"youtube":["https://youtube.com/static/favicon.ico","https://youtube.com/s/_/ytmweb/_/ss/k=ytmweb.c3_base_cow_tracing.Osf9qbBmtjs.L.X.O/am=AAAAAIABQQBsGA/d=0/rs=ABnK5FLnOCL0J6Hr-MypqOa20PTL6dTSDQ"]}	2026-07-18	HSTS, HTTP/3, Favicon, YouTube, Open Graph, Priority Hints, Google Site Verification, Facebook Domain Verification	2026-07-17	TRUE	{"A":["142.251.13.136","142.251.13.190","142.251.13.91","142.251.13.93"],"MX":[{"host":"smtp.google.com","priority":0}],"NS":["ns1.google.com","ns2.google.com","ns3.google.com","ns4.google.com"],"CAA":[{"tag":"issue","flags":0,"value":"pki.goog"}],"SOA":{"mname":"ns1.google.com","retry":900,"rname":"dns-admin.google.com","expire":1800,"serial":949468770,"minimum":60,"refresh":900},"TXT":["facebook-domain-verification=64jdes7le4h7e7lfpi22rijygx58j1","google-site-verification=QtQWEwHWM8tHiJ4s-jJWzEQrD_fF3luPnpzNDH-Nw-w","v=spf1 include:google.com mx -all"],"AAAA":["2a00:1450:4001:c13::5b","2a00:1450:4001:c13::5d","2a00:1450:4001:c13::88","2a00:1450:4001:c13::be"],"HTTPS":[{"params":[],"target":"","priority":1}]}	0.00483818	25,770,158	2026-01-17	RDAP	2005-02-15	2027-02-15	2026-01-17	MarkMonitor Inc.	{"raw_response":{"links":[{"rel":"self","href":"https://rdap.verisign.com/com/v1/domain/YOUTUBE.COM","type":"application/rdap+json","value":"https://rdap.verisign.com/com/v1/domain/YOUTUBE.COM"},{"rel":"related","href":"https://rdap.markmonitor.com/rdap/domain/YOUTUBE.COM","type":"application/rdap+json","value":"https://rdap.markmonitor.com/rdap/domain/YOUTUBE.COM"}],"events":[{"eventDate":"2005-02-15T05:13:12Z","eventAction":"registration"},{"eventDate":"2027-02-15T05:13:12Z","eventAction":"expiration"},{"eventDate":"2026-01-14T10:29:14Z","eventAction":"last changed"},{"eventDate":"2026-01-17T00:46:36Z","eventAction":"last update of RDAP database"}],"handle":"142504053_DOMAIN_COM-VRSN","status":["client delete prohibited","client transfer prohibited","client update prohibited","server delete prohibited","server transfer prohibited","server update prohibited"],"ldhName":"YOUTUBE.COM","notices":[{"links":[{"rel":"terms-of-service","href":"https://www.verisign.com/domain-names/registration-data-access-protocol/terms-service/index.xhtml","type":"text/html","value":"https://rdap.verisign.com/com/v1/domain/youtube.com"}],"title":"Terms of Service","description":["Service subject to Terms of Use."]},{"links":[{"href":"https://icann.org/epp","type":"text/html"}],"title":"Status Codes","description":["For more information on domain status codes, please visit https://icann.org/epp"]},{"links":[{"rel":"help","href":"https://icann.org/wicf","type":"text/html","value":"https://rdap.verisign.com/com/v1/domain/youtube.com"}],"title":"RDDS Inaccuracy Complaint Form","description":["URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf"]}],"entities":[{"links":[{"rel":"about","href":"http://www.markmonitor.com","type":"text/html","value":"https://rdap.markmonitor.com/rdap/"}],"roles":["registrar"],"handle":"292","entities":[{"roles":["abuse"],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text",""],["tel",{"type":"voice"},"uri","tel:+1.2086851750"],["email",{},"text","abusecomplaints@markmonitor.com"]]],"objectClassName":"entity"}],"publicIds":[{"type":"IANA Registrar ID","identifier":"292"}],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text","MarkMonitor Inc."]]],"objectClassName":"entity"}],"secureDNS":{"delegationSigned":false},"nameservers":[{"ldhName":"NS1.GOOGLE.COM","objectClassName":"nameserver"},{"ldhName":"NS2.GOOGLE.COM","objectClassName":"nameserver"},{"ldhName":"NS3.GOOGLE.COM","objectClassName":"nameserver"},{"ldhName":"NS4.GOOGLE.COM","objectClassName":"nameserver"}],"objectClassName":"domain","rdapConformance":["rdap_level_0","icann_rdap_technical_implementation_guide_1","icann_rdap_response_profile_1"]}}	Domain is active
linkedin.com	com	com	ICANN	HTTP 200	130.211.32.14	US	{"linkedin":["https://linkedin.com/legal/cookie-policy","https://linkedin.com/mypreferences/g/guest-cookies","https://linkedin.com/legal/user-agreement"]}	2026-05-18	HSTS, Java, Azure, HTTP/3, DigiCert, DocuSign, Cloudflare, Open Graph, Naver Analytics, Cloudflare Bot Management	2026-07-26	TRUE	{"A":["130.211.32.14"],"MX":[{"host":"mail-a.linkedin.com","priority":10},{"host":"mail-c.linkedin.com","priority":10},{"host":"mail-d.linkedin.com","priority":10},{"host":"mail.linkedin.com","priority":20}],"NS":["dns1.p09.nsone.net","dns2.p09.nsone.net","dns3.p09.nsone.net","dns4.p09.nsone.net","ns1-42.azure-dns.com","ns2-42.azure-dns.net","ns3-42.azure-dns.org","ns4-42.azure-dns.info"],"CAA":[{"tag":"contactemail","flags":0,"value":"caarecordaware@microsoft.com"},{"tag":"contactemail","flags":0,"value":"tls-alerts@linkedin.com"}],"SOA":{"mname":"ns1-42.azure-dns.com","retry":300,"rname":"hostmaster.linkedin.com","expire":604800,"serial":1,"minimum":60,"refresh":3600},"TXT":["448e0dc03e935ecf66d81f1ce3c26b2f2fea13756c031ffc4be91749107f3a79","AFDVALIDATION=LinkedIn","_cthqqp5zj8g86qf3h97heqitg2zc32b","apple-domain-verification=Hp7LihDNsREwfHX9","atlassian-domain-verification=dDed2VFvlDajBX8X22w52Jx/W/YLHR81SxUuraa9zNdz4aLjDS/RpfN11w2bxpRc","atlassian-domain-verification=juKdSE4GGphSmzPkhmnRJUNIn0ALdb0vsP7VSPM8TmTP7WgbgUQPLFdNicP7bF58","atlassian-sending-domain-verification=3bdb0597-814d-4e10-a552-5cf78f92ab3c","bf5fl8sny79w4c70jxp6cp3crkqtr7qk","bluebeam-verification=02px6k8snlrzd6gx3b3oqkeatbzawd","docusign=11f01284-dffc-40f9-8d56-57e5261ede3f","elevenlabs=hRLt8nemUjAWJSL_xhBIsKFyK4yYV089AvwkOB0cxYY","google-site-verification=0Vs9yf1V6RGkuzow85OzIXKEnjpRswpDkI6RgDVspMg","google-site-verification=8LaIeBMwr6K8qWeaGa4CEmfPKiZDwaT38t5mIrtaroI","google-site-verification=VE9BWhjbPPNmbr3ZJcwn5hLTsz7c5KPt3zXdYyaSnSQ","google-site-verification=X0LoSQsAMzR-TK4o-ULrYAwLi_fyopfRLkm_C-4N4Ts","google-site-verification=anx3jpa6VKkTWRJKnglUIzm7UEn-ZCT2WqAfG7h-xOg","google-site-verification=mMV_EnYaB52OhMo-jbNowf8QVIKcXV3WpXreynLFFEo","google-site-verification=oJFWbtlKRblXs4smNibcoJkTJqwT6gd3XMI80VjBihE","google-site-verification=vfmYHwjzUIFPzxFcyuwEToh_1kG9wvcpGgJnB-MhQn8","google-site-verification=xAGz495k8RbGclhamQx1TkZSHDxOaEd95fOjc8xpbTA","liveramp-site-verification=yQ2nkwhqszpGRQg_J38S60KHInPVs-dclgyNRtRrlBA","miro-verification=260f00146b6d2ad1bb70d6dc07a077b672badd28","v=spf1 ip4:199.101.162.0/25 ip4:108.174.3.0/24 ip4:108.174.6.0/24 ip4:108.174.0.0/24 ip6:2620:109:c00d:104::/64 ip6:2620:109:c006:104::/64 ip6:2620:109:c003:104::/64 ip6:2620:119:50c0:207::/64 ip4:199.101.161.130 mx mx:docusign.net ~all","vmware-cloud-verification-f4d7c1c7-ad66-450f-82fa-c17b9ee79459"],"AAAA":["2600:1901:0:d5ad::"]}	0.00380516	24,467,486	2025-10-04	RDAP	2002-11-02	2026-11-02	2025-10-03	MarkMonitor Inc.	{"raw_response":{"links":[{"rel":"self","href":"https://rdap.verisign.com/com/v1/domain/LINKEDIN.COM","type":"application/rdap+json","value":"https://rdap.verisign.com/com/v1/domain/LINKEDIN.COM"},{"rel":"related","href":"https://rdap.markmonitor.com/rdap/domain/LINKEDIN.COM","type":"application/rdap+json","value":"https://rdap.markmonitor.com/rdap/domain/LINKEDIN.COM"}],"events":[{"eventDate":"2002-11-02T15:38:11Z","eventAction":"registration"},{"eventDate":"2026-11-02T15:38:11Z","eventAction":"expiration"},{"eventDate":"2025-10-01T12:53:37Z","eventAction":"last changed"},{"eventDate":"2025-10-03T23:42:59Z","eventAction":"last update of RDAP database"}],"handle":"91818680_DOMAIN_COM-VRSN","status":["client delete prohibited","client transfer prohibited","client update prohibited","server delete prohibited","server transfer prohibited","server update prohibited"],"ldhName":"LINKEDIN.COM","notices":[{"links":[{"rel":"terms-of-service","href":"https://www.verisign.com/domain-names/registration-data-access-protocol/terms-service/index.xhtml","type":"text/html","value":"https://rdap.verisign.com/com/v1/domain/linkedin.com"}],"title":"Terms of Service","description":["Service subject to Terms of Use."]},{"links":[{"href":"https://icann.org/epp","type":"text/html"}],"title":"Status Codes","description":["For more information on domain status codes, please visit https://icann.org/epp"]},{"links":[{"rel":"help","href":"https://icann.org/wicf","type":"text/html","value":"https://rdap.verisign.com/com/v1/domain/linkedin.com"}],"title":"RDDS Inaccuracy Complaint Form","description":["URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf"]}],"entities":[{"links":[{"rel":"about","href":"http://www.markmonitor.com","type":"text/html","value":"https://rdap.markmonitor.com/rdap/"}],"roles":["registrar"],"handle":"292","entities":[{"roles":["abuse"],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text",""],["tel",{"type":"voice"},"uri","tel:+1.2086851750"],["email",{},"text","abusecomplaints@markmonitor.com"]]],"objectClassName":"entity"}],"publicIds":[{"type":"IANA Registrar ID","identifier":"292"}],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text","MarkMonitor Inc."]]],"objectClassName":"entity"}],"secureDNS":{"delegationSigned":false},"nameservers":[{"ldhName":"DNS1.P09.NSONE.NET","objectClassName":"nameserver"},{"ldhName":"DNS2.P09.NSONE.NET","objectClassName":"nameserver"},{"ldhName":"DNS3.P09.NSONE.NET","objectClassName":"nameserver"},{"ldhName":"DNS4.P09.NSONE.NET","objectClassName":"nameserver"},{"ldhName":"NS1-42.AZURE-DNS.COM","objectClassName":"nameserver"},{"ldhName":"NS2-42.AZURE-DNS.NET","objectClassName":"nameserver"},{"ldhName":"NS3-42.AZURE-DNS.ORG","objectClassName":"nameserver"},{"ldhName":"NS4-42.AZURE-DNS.INFO","objectClassName":"nameserver"}],"objectClassName":"domain","rdapConformance":["rdap_level_0","icann_rdap_technical_implementation_guide_1","icann_rdap_response_profile_1"]}}	Domain is active
wordpress.org	org	org	ICANN	HTTP 200	66.6.42.252	US	{"tiktok":["https://tiktok.com/@wordpress"],"bluesky":["https://bsky.app/profile/wordpress.org"],"threads":["https://threads.net/@wordpress"],"youtube":["https://youtube.com/wordpress"],"facebook":["https://facebook.com/WordPress"],"linkedin":["https://linkedin.com/company/wordpress"],"instagram":["https://instagram.com/wordpress"],"x-twitter":["https://x.com/WordPress"]}	2026-07-08	PHP, RSS, HSTS, MySQL, Nginx, HTTP/2, Favicon, hreflang, Gutenberg 23.5.0, WordPress 7.1	2026-07-22	TRUE	{"A":["66.6.42.252"],"MX":[{"host":"smtp1-dca.wordpress.org","priority":10},{"host":"smtp2-dca.wordpress.org","priority":10}],"NS":["ns1.wordpress.org","ns2.wordpress.org","ns3.wordpress.org","ns4.wordpress.org"],"CAA":[{"tag":"issue","flags":0,"value":"letsencrypt.org;validationmethods=dns-01;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/53691143"},{"tag":"iodef","flags":0,"value":"mailto:caa@wordpress.org"}],"SOA":{"mname":"ns1.wordpress.org","retry":7200,"rname":"hostmaster.wordpress.org","expire":1209600,"serial":20123417,"minimum":86400,"refresh":7200},"TXT":["google-site-verification=UL0sGJ1dZbCT4J7pGrLW3hqM_I1LJ8pUi2WBEI_98kI","google-site-verification=t8FjG1vzC4OFZJ8qL4SkR8xxtLyKldXKbswyeemQS5w","v=spf1 ip4:66.6.42.0/24 ip4:66.155.40.0/24 include:helpscoutemail.com -all"],"AAAA":["2620:109:b00a::4206:2afc"]}	0.00191729	21,394,334	2026-03-29	RDAP	2003-03-28	2035-03-28	2025-07-06	MarkMonitor Inc.	{"raw_response":{"links":[{"rel":"related","href":"https://rdap.markmonitor.com/rdap/domain/wordpress.org","type":"application/rdap+json","value":"https://rdap.publicinterestregistry.org/rdap/domain/wordpress.org"},{"rel":"self","href":"https://rdap.publicinterestregistry.org/rdap/domain/wordpress.org","type":"application/rdap+json","value":"https://rdap.publicinterestregistry.org/rdap/domain/wordpress.org"}],"events":[{"eventDate":"2013-01-02T15:36:40.665Z","eventAction":"transfer"},{"eventDate":"2035-03-28T01:07:35.665Z","eventAction":"expiration"},{"eventDate":"2003-03-28T01:07:35.665Z","eventAction":"registration"},{"eventDate":"2025-07-06T19:49:16.247Z","eventAction":"last changed"},{"eventDate":"2026-03-29T15:08:42.158Z","eventAction":"last update of RDAP database"}],"status":["client delete prohibited","client transfer prohibited","client update prohibited"],"ldhName":"wordpress.org","notices":[{"links":[{"rel":"terms-of-service","href":"https://thenew.org/org-people/about-pir/policies/","type":"text/html","value":"https://rdap.publicinterestregistry.org/rdap/domain/wordpress.org"}],"title":"Terms of Service","description":["Public Interest Registry provides this RDAP service for informational purposes only, and to assist persons in obtaining information about or related to a domain name registration record. Public Interest Registry does not guarantee its accuracy. Users accessing the Public Interest Registry RDAP service agree to use the data only for lawful purposes, and under no circumstances may this data be used to: a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the registrar's own existing customers and b) enable high volume, automated, electronic processes that send queries or data to the systems of Public Interest Registry or any ICANN-accredited registrar, except as reasonably necessary to register domain names or modify existing registrations. When using the Public Interest Registry RDAP service, please consider the following: the RDAP service is not a replacement for standard EPP commands to the SRS service. RDAP is not considered authoritative for registered domain objects. The RDAP service may be scheduled for downtime during production or OT&E maintenance periods. Queries to the RDAP services are throttled. If too many queries are received from a single IP address within a specified time, the service will begin to reject further queries for a period of time to prevent disruption of RDAP service access. Abuse of the RDAP system through data mining is mitigated by detecting and limiting bulk query access from single sources. Where applicable, the presence of a [Non-Public Data] tag indicates that such data is not made publicly available due to applicable data privacy laws or requirements. Should you wish to contact the registrant, please refer to the RDAP records available through the registrar URL listed above. Access to non-public data may be provided, upon request, where it can be reasonably confirmed that the requester holds a specific legitimate interest and a proper legal basis for accessing the withheld data. Access to this data can be requested by submitting a request to WHOISrequest@pir.org. Public Interest Registry Inc. reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy."]},{"links":[{"rel":"glossary","href":"https://icann.org/epp","type":"application/rdap+json","value":"https://rdap.publicinterestregistry.org/rdap/domain/wordpress.org"}],"title":"Status Codes","description":["For more information on domain status codes, please visit https://icann.org/epp"]},{"links":[{"rel":"help","href":"https://icann.org/wicf","type":"application/rdap+json","value":"https://rdap.publicinterestregistry.org/rdap/domain/wordpress.org"}],"title":"RDDS Inaccuracy Complaint Form","description":["URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf"]}],"entities":[{"links":[{"rel":"self","href":"https://rdap.publicinterestregistry.org/rdap/entity/292","type":"application/rdap+json","value":"https://rdap.publicinterestregistry.org/rdap/entity/292"},{"rel":"about","href":"https://rdap.markmonitor.com/rdap","type":"application/rdap+json","value":"https://rdap.markmonitor.com/rdap"}],"roles":["registrar"],"handle":"292","entities":[{"roles":["abuse"],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text",""],["tel",{"type":"voice"},"uri","tel:+1.2083895740"],["email",{},"text","abusecomplaints@markmonitor.com"]]],"objectClassName":"entity"}],"publicIds":[{"type":"IANA Registrar ID","identifier":"292"}],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text","MarkMonitor Inc."]]],"objectClassName":"entity"}],"redacted":[{"name":{"type":"Registry Domain ID"},"method":"removal","prePath":"$.handle","pathLang":"jsonpath"}],"secureDNS":{"maxSigLife":1,"delegationSigned":false},"nameservers":[{"handle":"8762d875ae20413e8d163a675d4352bd-LROR","status":["associated"],"ldhName":"ns1.wordpress.org","ipAddresses":{"v4":["198.181.116.10"],"v6":["2a04:fa87:ffff::c6b5:740a"]},"unicodeName":"ns1.wordpress.org","objectClassName":"nameserver"},{"handle":"4924af5cccc248ef95578d28bd2aecea-LROR","status":["associated"],"ldhName":"ns2.wordpress.org","ipAddresses":{"v4":["198.181.117.10"],"v6":["2a04:fa87:ffff::c6b5:750a"]},"unicodeName":"ns2.wordpress.org","objectClassName":"nameserver"},{"handle":"ea40ea0d84a74b1eb625f5969bbc9b6c-LROR","status":["associated"],"ldhName":"ns3.wordpress.org","ipAddresses":{"v4":["192.0.74.10"],"v6":["2620:115:c00f::c000:4a0a"]},"unicodeName":"ns3.wordpress.org","objectClassName":"nameserver"},{"handle":"5da8386f5172440da1e6ded76476d6f3-LROR","status":["associated"],"ldhName":"ns4.wordpress.org","ipAddresses":{"v4":["192.0.75.10"],"v6":["2620:115:c00f::c000:4b0a"]},"unicodeName":"ns4.wordpress.org","objectClassName":"nameserver"}],"unicodeName":"wordpress.org","objectClassName":"domain","rdapConformance":["rdap_level_0","icann_rdap_response_profile_1","icann_rdap_technical_implementation_guide_1","redacted"]}}	Domain is active
gravatar.com	com	com	ICANN	HTTP 200	192.0.80.239	US	{"github":["https://github.com/automattic/gravatar"]}	2026-05-11	PHP, HSTS, MySQL, Nginx, HTTP/3, Zendesk, WordPress, Google Analytics GA4	2026-07-24	TRUE	{"A":["192.0.80.239","192.0.80.240","192.0.80.241","192.0.80.242"],"MX":[{"host":"mx1.dfw.automattic.com","priority":10},{"host":"mx2.ams.automattic.com","priority":10}],"NS":["ns1.automattic.com","ns2.automattic.com","ns3.automattic.com"],"CAA":[{"tag":"issue","flags":0,"value":"letsencrypt.org;validationmethods=dns-01;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/36334489"}],"SOA":{"mname":"ns1.automattic.com","retry":7200,"rname":"hostmaster.automattic.com","expire":604800,"serial":2023101216,"minimum":86400,"refresh":28800},"TXT":["google-site-verification=EnpZ3Ws1zod-yJk1A56dmmybRJuaFJS5pC5ufe7fY08","google-site-verification=zcrh49pTocv2U39W4cjPWiyphok2YMYy6qGrqKCiU9k","v=spf1 include:_spf.automattic.com include:mail.zendesk.com -all","vontbyjxrq"]}	0.0018309	22,145,546	2025-06-28	RDAP	2004-07-15	2027-07-15	2025-06-28	MarkMonitor Inc.	{"raw_response":{"links":[{"rel":"self","href":"https://rdap.verisign.com/com/v1/domain/GRAVATAR.COM","type":"application/rdap+json","value":"https://rdap.verisign.com/com/v1/domain/GRAVATAR.COM"},{"rel":"related","href":"https://rdap.markmonitor.com/rdap/domain/GRAVATAR.COM","type":"application/rdap+json","value":"https://rdap.markmonitor.com/rdap/domain/GRAVATAR.COM"}],"events":[{"eventDate":"2004-07-15T20:57:48Z","eventAction":"registration"},{"eventDate":"2027-07-15T20:57:48Z","eventAction":"expiration"},{"eventDate":"2025-06-13T09:59:00Z","eventAction":"last changed"},{"eventDate":"2025-06-28T14:40:19Z","eventAction":"last update of RDAP database"}],"handle":"124897858_DOMAIN_COM-VRSN","status":["client delete prohibited","client transfer prohibited","client update prohibited"],"ldhName":"GRAVATAR.COM","notices":[{"links":[{"rel":"terms-of-service","href":"https://www.verisign.com/domain-names/registration-data-access-protocol/terms-service/index.xhtml","type":"text/html","value":"https://rdap.verisign.com/com/v1/domain/gravatar.com"}],"title":"Terms of Service","description":["Service subject to Terms of Use."]},{"links":[{"href":"https://icann.org/epp","type":"text/html"}],"title":"Status Codes","description":["For more information on domain status codes, please visit https://icann.org/epp"]},{"links":[{"rel":"help","href":"https://icann.org/wicf","type":"text/html","value":"https://rdap.verisign.com/com/v1/domain/gravatar.com"}],"title":"RDDS Inaccuracy Complaint Form","description":["URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf"]}],"entities":[{"links":[{"rel":"about","href":"http://www.markmonitor.com","type":"text/html","value":"https://rdap.markmonitor.com/rdap/"}],"roles":["registrar"],"handle":"292","entities":[{"roles":["abuse"],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text",""],["tel",{"type":"voice"},"uri","tel:+1.2086851750"],["email",{},"text","abusecomplaints@markmonitor.com"]]],"objectClassName":"entity"}],"publicIds":[{"type":"IANA Registrar ID","identifier":"292"}],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text","MarkMonitor Inc."]]],"objectClassName":"entity"}],"secureDNS":{"delegationSigned":false},"nameservers":[{"ldhName":"NS1.AUTOMATTIC.COM","objectClassName":"nameserver"},{"ldhName":"NS2.AUTOMATTIC.COM","objectClassName":"nameserver"},{"ldhName":"NS3.AUTOMATTIC.COM","objectClassName":"nameserver"}],"objectClassName":"domain","rdapConformance":["rdap_level_0","icann_rdap_technical_implementation_guide_1","icann_rdap_response_profile_1"]}}	Domain is active
…	…	…	…	…	…	…	…	…	…	…	…	…	…	…	…	…	…	…	…	…	…	…

Showing 5 of 47,293,039 rows · Technologies · Full website tech stack per site — CMS, payments, analytics, frameworks.

↓ Download preview (20 rows, free) Buy Technologies — €159 / month

HSTS sites by country

Country	Sites	Share
🇺🇸 United States	29,627,119	65.1%
🇩🇪 Germany	3,947,330	8.7%
🇨🇦 Canada	3,070,348	6.8%
🇭🇰 Hong Kong	1,136,581	2.5%
🇳🇱 Netherlands	737,609	1.6%

HSTS sites by TLD

TLD	Sites	Share
.com	24,492,637	51.8%
.org	1,586,183	3.4%
.de	1,375,551	2.9%
.uk	1,310,665	2.8%
.net	1,213,416	2.6%

Which websites are using HSTS?

webatla detects every site using HSTS and exports them as one downloadable list, so you can see who relies on this technology and what else runs alongside it.

Open the HSTS technology dataset to break adoption down by country and TLD, compare it with a competing technology, and track new domains over time.

Frequently asked questions

How many websites use HSTS?

webatla detects HSTS on 47.3M websites, refreshed daily — each with its domain, DNS, WHOIS, IP, country and ranking.

Can I download the list of websites using HSTS?

Yes, as structured JSONL. Grab a free sample first.

What's included for each site, and how fresh is it?

Domain, DNS, RDAP/WHOIS, the full technology stack, IP & country, PageRank and Harmonic — re-detected and re-exported daily.

How do I find the websites using HSTS?

Buy the technology dataset, then download the complete list of domains we detect using HSTS — re-exported every day.

What else is in the HSTS technology data?

Each row places HSTS next to the other technology on the same site, plus DNS, WHOIS, IP, country and ranking.

Can I download just the sites using HSTS, or the whole database?

Both. Every site running HSTS comes in the Technologies dataset, one downloadable file. Or buy All data for the entire database: technologies plus identity, ranking, DNS and RDAP/WHOIS for every domain, combined in one file. Daily fresh export.

How do I download the list of websites using HSTS?

Three steps: (1) grab the free 10,000-row sample to inspect the schema, (2) buy the Technologies dataset, (3) download the full list of every domain we detect running HSTS as a JSON Lines file. It is re-exported daily, so you can re-download the freshest list any time inside your access window. Each row carries the domain plus DNS, WHOIS, IP, hosting country and rank.