Total Rows: 838422 

Security Headers Grades:
A 32,488
A+ 1,244
B 31,641
C 37,840
D 133,496
E 9,562
F 592,060
R 91

Sites using strict-transport-security:
175,808

Sites using content-security-policy:
74,280

Sites using content-security-policy-report-only:
4,410

Sites using x-webkit-csp:
762

Sites using x-content-security-policy:
1,924

Sites using public-key-pins:
464

Sites using public-key-pins-report-only:
26

Sites using x-content-type-options:
186,436

Sites using x-frame-options:
190,366

Sites using x-xss-protection:
141,523

Sites using x-download-options:
23,848

Sites using x-permitted-cross-domain-policies:
22,922

Sites using access-control-allow-origin:
39,970

Sites using referrer-policy:
59,361

Sites using feature-policy:
5,875

Sites using permissions-policy:
18,145

Sites using report-to:
155,135

Sites using nel:
154,524

Sites using security.txt:
3,344

Sites redirecting to HTTPS:
586,504

Sites using Let's Encrypt certificate:
227,092

Sites using EV Certificates:
10,717

Top 10 Server headers:
cloudflare 182,033
Apache 167,877
nginx 149,978
LiteSpeed 23,361
Microsoft-IIS/10.0 18,272
openresty 14,983
Microsoft-IIS/8.5 13,661
Microsoft-IIS/7.5 8,028
Apache/2 6,783
nginx/1.16.1 6,452

Top 10 TLDs:
.com 434,605
.org 61,881
.net 36,696
.ru 29,819
.de 24,929
.uk 17,662
.jp 10,600
.nl 9,387
.cn 8,511
.in 7,750

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = R3 226,902
C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 125,140
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 41,902
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 27,548
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 25,880
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 19,927
C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA 8,963
C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1 7,684
C = US, O = DigiCert Inc, CN = RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1 6,508
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018 5,967

TLS Protocol Versions:
TLSv1.3 341,845
TLSv1.2 216,694
TLSv1.0 810

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 308,041
ECDHE-RSA-AES256-GCM-SHA384 112,186
ECDHE-RSA-AES128-GCM-SHA256 75,635
TLS_AES_128_GCM_SHA256 30,953
ECDHE-RSA-AES256-SHA384 10,234
ECDHE-RSA-CHACHA20-POLY1305 8,176
TLS_CHACHA20_POLY1305_SHA256 2,851
ECDHE-ECDSA-CHACHA20-POLY1305 2,354
ECDHE-ECDSA-AES256-GCM-SHA384 1,926
ECDHE-ECDSA-AES128-GCM-SHA256 1,759

Top 10 PFS Key Exchange Params:
X25519, 253 bits 399,309
ECDH, P-256, 256 bits 130,838
ECDH, P-384, 384 bits 20,853
ECDH, P-521, 521 bits 4,613
DH, 1024 bits 1,637
DH, 2048 bits 566
X448, 448 bits 10
DH, 4096 bits 9
DH, 3072 bits 2

Top Key Sizes:
2048 bit 383,077
256 bit 130,646
4096 bit 36,510
384 bit 4,645
3072 bit 2,696
1024 bit 230
8192 bit 21
512 bit 3
3112 bit 2
2024 bit 1

Sites using CAA:
28,010

HTTP Protocol Versions:
http/2.0 439,122
http/1.1 397,120
http/1.0 2,166