Total Rows: 720305 

Security Headers Grades:
A 18,282
A+ 3,001
B 16,382
C 22,206
D 91,913
E 11,909
F 556,519
R 93

Sites using strict-transport-security:
102,398

Sites using content-security-policy:
39,155

Sites using content-security-policy-report-only:
1,885

Sites using x-webkit-csp:
504

Sites using x-content-security-policy:
1,427

Sites using public-key-pins:
518

Sites using public-key-pins-report-only:
26

Sites using x-content-type-options:
119,135

Sites using x-frame-options:
127,228

Sites using x-xss-protection:
94,898

Sites using x-download-options:
14,448

Sites using x-permitted-cross-domain-policies:
13,135

Sites using access-control-allow-origin:
28,821

Sites using referrer-policy:
30,641

Sites using feature-policy:
4,017

Sites using report-to:
8,959

Sites using nel:
8,780

Sites using security.txt:
1,557

Sites redirecting to HTTPS:
404,328

Sites using Let's Encrypt certificate:
146,000

Sites using EV Certificates:
10,847

Top 10 Server headers:
Apache 151,613
cloudflare 121,227
nginx 117,037
Microsoft-IIS/7.5 42,160
Microsoft-IIS/8.5 21,406
LiteSpeed 16,087
Microsoft-IIS/10.0 13,214
nginx/1.16.1 8,757
openresty 8,620
Apache/2 6,948

Top 10 TLDs:
.com 379,864
.org 47,975
.net 33,691
.ru 23,076
.cn 19,311
.de 15,430
.uk 13,183
.jp 8,261
.br 8,075
.in 6,972

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 146,000
C = US, ST = CA, L = San Francisco, O = "CloudFlare, Inc.", CN = CloudFlare Inc ECC CA-2 75,204
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 28,136
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 22,596
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 16,823
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 12,729
C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA 11,025
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL RSA CA 2018 8,091
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018 6,587
C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Domain Validation Secure Server CA 6,206

TLS Protocol Versions:
TLSv1.2 210,368
TLSv1.3 170,650
TLSv1.0 1,547

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 159,304
ECDHE-RSA-AES256-GCM-SHA384 109,374
ECDHE-RSA-AES128-GCM-SHA256 74,009
ECDHE-RSA-AES256-SHA384 10,393
TLS_AES_128_GCM_SHA256 10,080
ECDHE-RSA-CHACHA20-POLY1305 7,254
DHE-RSA-AES256-GCM-SHA384 2,228
ECDHE-ECDSA-CHACHA20-POLY1305 1,743
TLS_CHACHA20_POLY1305_SHA256 1,266
ECDHE-ECDSA-AES256-GCM-SHA384 1,198

Top 10 PFS Key Exchange Params:
X25519, 253 bits 222,048
ECDH, P-256, 256 bits 138,282
ECDH, P-384, 384 bits 13,301
ECDH, P-521, 521 bits 4,476
DH, 1024 bits 2,268
DH, 2048 bits 844
DH, 4096 bits 108
X448, 448 bits 12
DH, 3072 bits 7

Top Key Sizes:
2048 bit 277,776
256 bit 75,284
4096 bit 25,787
3072 bit 1,209
384 bit 1,052
1024 bit 199
8192 bit 22
4056 bit 4
512 bit 2
2408 bit 2

Sites using CAA:
13,984

HTTP Protocol Versions:
http/1.1 445,127
http/2.0 272,801
http/1.0 2,358