Total Rows: 269601 

Security Headers Grades:
A 16,782
A+ 1,852
B 12,492
C 12,570
D 53,687
E 8,253
F 163,922
R 43

Sites using strict-transport-security:
76,458

Sites using content-security-policy:
37,702

Sites using content-security-policy-report-only:
2,367

Sites using x-webkit-csp:
220

Sites using x-content-security-policy:
1,077

Sites using public-key-pins:
211

Sites using public-key-pins-report-only:
6

Sites using x-content-type-options:
72,216

Sites using x-frame-options:
87,364

Sites using x-xss-protection:
51,566

Sites using x-download-options:
11,319

Sites using x-permitted-cross-domain-policies:
13,290

Sites using access-control-allow-origin:
16,606

Sites using referrer-policy:
48,506

Sites using feature-policy:
1,727

Sites using permissions-policy:
16,575

Sites using report-to:
74,178

Sites using nel:
73,527

Sites using security.txt:
2,684

Sites redirecting to HTTPS:
200,702

Sites using Let's Encrypt certificate:
74,867

Sites using EV Certificates:
1,875

Top 10 Server headers:
cloudflare 94,685
nginx 44,158
Apache 26,852
LiteSpeed 7,197
Microsoft-IIS/10.0 6,139
openresty 5,712
nginx/1.18.0 (Ubuntu) 3,507
AmazonS3 2,938
Vercel 1,443
CloudFront 1,383

Top 10 TLDs:
.com 123,455
.net 12,598
.ru 12,589
.org 11,331
.br 5,286
.de 5,195
.top 4,526
.uk 3,788
.jp 3,655
.in 3,253

Top 10 Certificate Issuers:
C = US, O = Google Trust Services, CN = WE1 62,495
C = US, O = Let's Encrypt, CN = R11 29,647
C = US, O = Let's Encrypt, CN = R10 29,170
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 8,626
C = US, O = Let's Encrypt, CN = E5 7,937
C = US, O = Let's Encrypt, CN = E6 7,925
C = US, O = Amazon, CN = Amazon RSA 2048 M03 6,099
C = US, O = Amazon, CN = Amazon RSA 2048 M02 6,095
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 3,944
C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1 3,161

TLS Protocol Versions:
TLSv1.3 120,261
TLSv1.2 28,122
TLSv1.0 77

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 102,688
TLS_AES_128_GCM_SHA256 16,712
ECDHE-RSA-AES256-GCM-SHA384 13,673
ECDHE-RSA-AES128-GCM-SHA256 9,949
ECDHE-RSA-CHACHA20-POLY1305 1,681
TLS_CHACHA20_POLY1305_SHA256 861
ECDHE-ECDSA-AES256-GCM-SHA384 747
ECDHE-RSA-AES256-SHA384 685
ECDHE-ECDSA-CHACHA20-POLY1305 586
ECDHE-ECDSA-AES128-GCM-SHA256 300

Top 10 PFS Key Exchange Params:
X25519, 253 bits 126,610
ECDH, P-256, 256 bits 17,159
ECDH, P-384, 384 bits 2,899
ECDH, P-521, 521 bits 1,365
DH, 1024 bits 136
DH, 2048 bits 100
X448, 448 bits 4
DH, 4096 bits 3

Top Key Sizes:
2048 bit 76,066
256 bit 58,417
4096 bit 11,171
384 bit 1,802
3072 bit 795
1024 bit 18
8192 bit 6
3112 bit 1

Sites using CAA:
10,255

HTTP Protocol Versions:
http/2.0 164,995
http/1.1 104,224
http/1.0 368