Total Rows: 827890 

Security Headers Grades:
A 36,538
A+ 4,015
B 35,994
C 39,556
D 158,819
E 20,855
F 531,984
R 129

Sites using strict-transport-security:
213,101

Sites using content-security-policy:
91,344

Sites using content-security-policy-report-only:
5,704

Sites using x-webkit-csp:
771

Sites using x-content-security-policy:
2,857

Sites using public-key-pins:
454

Sites using public-key-pins-report-only:
36

Sites using x-content-type-options:
206,101

Sites using x-frame-options:
217,925

Sites using x-xss-protection:
143,531

Sites using x-download-options:
22,916

Sites using x-permitted-cross-domain-policies:
23,960

Sites using access-control-allow-origin:
43,608

Sites using referrer-policy:
105,571

Sites using feature-policy:
5,738

Sites using permissions-policy:
46,939

Sites using report-to:
189,651

Sites using nel:
186,964

Sites using security.txt:
9,514

Sites redirecting to HTTPS:
615,544

Sites using Let's Encrypt certificate:
261,350

Sites using EV Certificates:
7,785

Top 10 Server headers:
cloudflare 227,678
nginx 147,950
Apache 121,207
LiteSpeed 24,394
Microsoft-IIS/10.0 16,706
openresty 15,520
Microsoft-IIS/8.5 8,377
Pepyaka/1.19.10 7,032
AmazonS3 6,923
nginx/1.18.0 (Ubuntu) 6,753

Top 10 TLDs:
.com 398,220
.ru 49,382
.org 45,336
.net 44,592
.de 18,859
.uk 14,758
.jp 8,938
.xyz 8,268
.nl 8,014
.br 7,554

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = R3 231,279
C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 115,989
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 34,566
C = US, O = Let's Encrypt, CN = E1 29,993
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 27,306
C = US, O = Google Trust Services LLC, CN = GTS CA 1P5 23,617
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 18,052
C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1 17,129
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 14,766
C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G2 6,117

TLS Protocol Versions:
TLSv1.3 425,676
TLSv1.2 168,779
TLSv1.0 435

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 373,155
ECDHE-RSA-AES256-GCM-SHA384 83,833
ECDHE-RSA-AES128-GCM-SHA256 62,496
TLS_AES_128_GCM_SHA256 46,812
ECDHE-RSA-CHACHA20-POLY1305 7,818
ECDHE-RSA-AES256-SHA384 6,809
TLS_CHACHA20_POLY1305_SHA256 5,709
ECDHE-ECDSA-CHACHA20-POLY1305 2,196
ECDHE-ECDSA-AES256-GCM-SHA384 1,644
DHE-RSA-AES256-GCM-SHA384 1,087

Top 10 PFS Key Exchange Params:
X25519, 253 bits 468,977
ECDH, P-256, 256 bits 105,234
ECDH, P-384, 384 bits 14,312
ECDH, P-521, 521 bits 3,781
DH, 1024 bits 906
DH, 2048 bits 619
DH, 4096 bits 14
X448, 448 bits 11
DH, 3072 bits 2

Top Key Sizes:
2048 bit 389,601
256 bit 154,365
4096 bit 39,461
384 bit 7,347
3072 bit 2,898
1024 bit 155
8192 bit 21
521 bit 2
3112 bit 2
2408 bit 1

Sites using CAA:
40,599

HTTP Protocol Versions:
http/2.0 485,220
http/1.1 341,503
http/1.0 1,146