Total Rows: 880124 

Security Headers Grades:
A 21,134
A+ 1,696
B 13,167
C 33,819
D 125,708
E 14,311
F 670,214
R 75

Sites using strict-transport-security:
122,748

Sites using content-security-policy:
40,432

Sites using content-security-policy-report-only:
2,551

Sites using x-webkit-csp:
472

Sites using x-content-security-policy:
1,212

Sites using public-key-pins:
558

Sites using public-key-pins-report-only:
18

Sites using x-content-type-options:
158,396

Sites using x-frame-options:
127,249

Sites using x-xss-protection:
131,968

Sites using x-download-options:
20,964

Sites using x-permitted-cross-domain-policies:
19,606

Sites using access-control-allow-origin:
32,059

Sites using referrer-policy:
31,380

Sites using feature-policy:
1,736

Sites redirecting to HTTPS:
528,564

Sites using Let's Encrypt certificate:
200,975

Top 10 Server headers:
Apache 163,553
nginx 158,764
cloudflare 130,354
LiteSpeed 37,922
GSE 33,723
Microsoft-IIS/8.5 22,724
Microsoft-IIS/10.0 13,703
Microsoft-IIS/7.5 12,501
nginx-reuseport/1.13.4 11,996
Apache/2 11,747

Top 10 TLDs:
.com 451,534
.ru 83,216
.net 33,245
.org 33,113
.ua 17,970
.ir 17,319
.in 15,979
.br 9,115
.au 8,294
.uk 7,985

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 200,973
C = US, ST = CA, L = San Francisco, O = "CloudFlare, Inc.", CN = CloudFlare Inc ECC CA-2 55,686
C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO ECC Domain Validation Secure Server CA 2 40,638
C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Domain Validation Secure Server CA 34,040
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 28,978
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 26,353
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 21,557
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 14,244
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL RSA CA 2018 13,098
C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA 9,864

Top 10 Protocols:
TLSv1.2 333,561
TLSv1 2,376
TLSv1.1 47

Top 10 Cipher Suites:
ECDHE-RSA-AES256-GCM-SHA384 132,719
ECDHE-RSA-AES128-GCM-SHA256 117,473
ECDHE-ECDSA-AES128-GCM-SHA256 65,299
ECDHE-RSA-AES256-SHA384 8,799
DHE-RSA-AES256-GCM-SHA384 1,778
ECDHE-RSA-AES256-SHA 1,477
0 1,440
ECDHE-ECDSA-AES256-GCM-SHA384 1,024
AES256-SHA 1,005
DHE-RSA-AES256-SHA 761

Top 10 PFS Key Exchange Params:
ECDH, P-256, 256 bits 314,096
ECDH, P-384, 384 bits 10,291
ECDH, P-521, 521 bits 3,447
DH, 1024 bits 2,041
DH, 2048 bits 692
DH, 4096 bits 73
ECDH, B-571, 570 bits 34
DH, 3072 bits 7
ECDH, brainpoolP512r1, 512 bits 1
ECDH, secp256k1, 256 bits 1

Top Key Sizes:
2048 bit 244,646
256 bit 65,748
4096 bit 23,115
384 bit 579
3072 bit 356
1024 bit 83
8192 bit 10
521 bit 1
2480 bit 1
3112 bit 1

Sites using CAA:
16,673