Total Rows: 938298 

Security Headers Grades:
A 21,954
A+ 1,861
B 14,835
C 36,410
D 135,213
E 16,017
F 711,926
R 82

Sites using strict-transport-security:
137,526

Sites using content-security-policy:
42,819

Sites using content-security-policy-report-only:
2,812

Sites using x-webkit-csp:
567

Sites using x-content-security-policy:
1,492

Sites using public-key-pins:
658

Sites using public-key-pins-report-only:
40

Sites using x-content-type-options:
169,225

Sites using x-frame-options:
143,487

Sites using x-xss-protection:
142,135

Sites using x-download-options:
20,295

Sites using x-permitted-cross-domain-policies:
19,073

Sites using access-control-allow-origin:
35,659

Sites using referrer-policy:
31,538

Sites using feature-policy:
1,783

Sites redirecting to HTTPS:
566,408

Sites using Let's Encrypt certificate:
206,610

Top 10 Server headers:
Apache 195,099
nginx 162,269
cloudflare 140,513
LiteSpeed 33,841
GSE 31,409
Microsoft-IIS/8.5 25,527
openresty 15,345
Microsoft-IIS/10.0 14,391
Microsoft-IIS/7.5 14,315
Apache/2 11,625

Top 10 TLDs:
.com 469,210
.ru 49,400
.org 42,041
.net 38,426
.de 23,156
.ir 18,935
.in 15,614
.uk 12,610
.br 12,028
.au 10,897

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 206,609
C = US, ST = CA, L = San Francisco, O = "CloudFlare, Inc.", CN = CloudFlare Inc ECC CA-2 52,101
C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO ECC Domain Validation Secure Server CA 2 48,885
C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Domain Validation Secure Server CA 42,408
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 25,710
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 22,706
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 20,187
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 16,077
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL RSA CA 2018 14,387
C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA 11,223

Top 10 Protocols:
TLSv1.2 344,082
TLSv1 2,964
TLSv1.1 56

Top 10 Cipher Suites:
ECDHE-RSA-AES256-GCM-SHA384 137,448
ECDHE-RSA-AES128-GCM-SHA256 120,321
ECDHE-ECDSA-AES128-GCM-SHA256 65,256
ECDHE-RSA-AES256-SHA384 9,653
DHE-RSA-AES256-GCM-SHA384 2,789
0 1,744
ECDHE-RSA-AES256-SHA 1,522
AES256-SHA 1,147
ECDHE-ECDSA-AES256-GCM-SHA384 1,055
DHE-RSA-AES256-SHA 1,002

Top 10 PFS Key Exchange Params:
ECDH, P-256, 256 bits 322,581
ECDH, P-384, 384 bits 9,901
ECDH, P-521, 521 bits 4,027
DH, 1024 bits 2,852
DH, 2048 bits 1,189
DH, 4096 bits 109
ECDH, B-571, 570 bits 62
DH, 3072 bits 11
ECDH, brainpoolP512r1, 512 bits 2
ECDH, secp256k1, 256 bits 2

Top Key Sizes:
2048 bit 252,930
256 bit 65,817
4096 bit 25,597
384 bit 497
3072 bit 341
1024 bit 150
8192 bit 12
4056 bit 3
2432 bit 2
2480 bit 1

Sites using CAA:
13,972