Total Rows: 938916 

Security Headers Grades:
A 20,548
A+ 1,808
B 13,934
C 33,908
D 128,355
E 15,288
F 724,994
R 81

Sites using strict-transport-security:
128,790

Sites using content-security-policy:
41,164

Sites using content-security-policy-report-only:
2,780

Sites using x-webkit-csp:
619

Sites using x-content-security-policy:
1,635

Sites using public-key-pins:
701

Sites using public-key-pins-report-only:
84

Sites using x-content-type-options:
156,381

Sites using x-frame-options:
143,041

Sites using x-xss-protection:
128,009

Sites using x-download-options:
19,668

Sites using x-permitted-cross-domain-policies:
18,782

Sites using access-control-allow-origin:
36,093

Sites using referrer-policy:
28,303

Sites using feature-policy:
1,432

Sites redirecting to HTTPS:
553,390

Sites using Let's Encrypt certificate:
204,093

Top 10 Server headers:
Apache 200,374
nginx 171,246
cloudflare 110,987
Microsoft-IIS/8.5 28,940
LiteSpeed 26,658
nginx/1.14.1 23,950
GSE 20,342
Microsoft-IIS/7.5 17,962
Microsoft-IIS/10.0 17,921
openresty 13,613

Top 10 TLDs:
.com 453,980
.org 44,968
.ru 40,850
.net 37,062
.de 29,032
.br 22,613
.uk 15,558
.pl 14,166
.in 12,699
.ir 11,503

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 204,092
C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Domain Validation Secure Server CA 57,621
C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO ECC Domain Validation Secure Server CA 2 51,092
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 31,187
C = US, ST = CA, L = San Francisco, O = "CloudFlare, Inc.", CN = CloudFlare Inc ECC CA-2 23,788
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 18,443
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 16,562
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL RSA CA 2018 14,614
C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA 12,340
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018 9,554

Top 10 Protocols:
TLSv1.2 329,962
TLSv1 3,884
TLSv1.1 71

Top 10 Cipher Suites:
ECDHE-RSA-AES256-GCM-SHA384 146,535
ECDHE-RSA-AES128-GCM-SHA256 111,406
ECDHE-ECDSA-AES128-GCM-SHA256 46,984
ECDHE-RSA-AES256-SHA384 11,942
DHE-RSA-AES256-GCM-SHA384 3,131
ECDHE-RSA-AES256-SHA 2,075
0 1,834
AES256-SHA 1,374
DHE-RSA-AES256-SHA 1,335
AES256-GCM-SHA384 1,085

Top 10 PFS Key Exchange Params:
ECDH, P-256, 256 bits 306,759
ECDH, P-384, 384 bits 9,477
ECDH, P-521, 521 bits 5,051
DH, 1024 bits 3,426
DH, 2048 bits 1,388
DH, 4096 bits 139
ECDH, B-571, 570 bits 66
DH, 3072 bits 11
ECDH, secp256k1, 256 bits 2

Top Key Sizes:
2048 bit 258,943
256 bit 47,694
4096 bit 24,779
384 bit 243
3072 bit 207
1024 bit 182
8192 bit 16
4056 bit 3
2560 bit 3
2049 bit 2

Sites using CAA:
13,185