Total Rows: 356382 

Security Headers Grades:
A 12,458
A+ 2,064
B 10,036
C 13,106
D 50,623
E 5,099
F 262,947
R 49

Sites using strict-transport-security:
63,196

Sites using content-security-policy:
25,251

Sites using content-security-policy-report-only:
1,462

Sites using x-webkit-csp:
276

Sites using x-content-security-policy:
736

Sites using public-key-pins:
202

Sites using public-key-pins-report-only:
17

Sites using x-content-type-options:
68,068

Sites using x-frame-options:
71,555

Sites using x-xss-protection:
53,593

Sites using x-download-options:
9,042

Sites using x-permitted-cross-domain-policies:
8,233

Sites using access-control-allow-origin:
15,646

Sites using referrer-policy:
20,939

Sites using feature-policy:
2,622

Sites using report-to:
58,563

Sites using nel:
58,360

Sites using security.txt:
2,026

Sites redirecting to HTTPS:
224,170

Sites using Let's Encrypt certificate:
83,363

Sites using EV Certificates:
5,010

Top 10 Server headers:
Apache 86,119
cloudflare 68,619
nginx 60,180
LiteSpeed 8,246
Microsoft-IIS/10.0 7,377
Microsoft-IIS/8.5 6,756
openresty 6,059
Microsoft-IIS/7.5 4,829
nginx/1.16.1 3,900
Apache/2 3,204

Top 10 TLDs:
.com 185,227
.org 25,133
.net 17,618
.ru 12,742
.de 9,063
.uk 6,598
.cn 4,606
.jp 4,213
.in 3,618
.nl 3,119

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = R3 59,108
C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 46,453
C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 24,254
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 17,136
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 10,740
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 9,894
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 7,733
C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA 4,701
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018 2,999
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL RSA CA 2018 2,642

TLS Protocol Versions:
TLSv1.3 117,666
TLSv1.2 92,465
TLSv1.0 403

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 106,399
ECDHE-RSA-AES256-GCM-SHA384 47,402
ECDHE-RSA-AES128-GCM-SHA256 31,983
TLS_AES_128_GCM_SHA256 10,253
ECDHE-RSA-AES256-SHA384 4,687
ECDHE-RSA-CHACHA20-POLY1305 3,766
TLS_CHACHA20_POLY1305_SHA256 1,014
ECDHE-ECDSA-CHACHA20-POLY1305 982
DHE-RSA-AES256-GCM-SHA384 907
ECDHE-ECDSA-AES256-GCM-SHA384 765

Top 10 PFS Key Exchange Params:
X25519, 253 bits 138,507
ECDH, P-256, 256 bits 60,173
ECDH, P-384, 384 bits 7,917
ECDH, P-521, 521 bits 2,034
DH, 1024 bits 845
DH, 2048 bits 300
DH, 4096 bits 36
DH, 3072 bits 4
X448, 448 bits 4

Top Key Sizes:
2048 bit 148,563
256 bit 44,758
4096 bit 14,166
384 bit 1,288
3072 bit 947
1024 bit 83
8192 bit 7
4086 bit 1
3096 bit 1
3112 bit 1

Sites using CAA:
8,797

HTTP Protocol Versions:
http/1.1 194,941
http/2.0 160,200
http/1.0 1,238