Total Rows: 878335 

Security Headers Grades:
A 22,054
A+ 3,481
B 18,551
C 31,041
D 118,794
E 13,257
F 671,016
R 141

Sites using strict-transport-security:
128,153

Sites using content-security-policy:
49,473

Sites using content-security-policy-report-only:
2,285

Sites using x-webkit-csp:
647

Sites using x-content-security-policy:
1,854

Sites using public-key-pins:
658

Sites using public-key-pins-report-only:
41

Sites using x-content-type-options:
149,328

Sites using x-frame-options:
157,753

Sites using x-xss-protection:
118,984

Sites using x-download-options:
18,296

Sites using x-permitted-cross-domain-policies:
16,896

Sites using access-control-allow-origin:
37,995

Sites using referrer-policy:
33,893

Sites using feature-policy:
3,753

Sites using report-to:
12,042

Sites using nel:
11,875

Sites using security.txt:
1,689

Sites redirecting to HTTPS:
523,281

Sites using Let's Encrypt certificate:
178,829

Sites using EV Certificates:
17,019

Top 10 Server headers:
Apache 193,325
cloudflare 146,732
nginx 141,868
Microsoft-IIS/7.5 27,503
Microsoft-IIS/8.5 25,578
LiteSpeed 17,227
Microsoft-IIS/10.0 16,391
openresty 11,388
Apache/2 9,096
nginx/1.16.1 7,302

Top 10 TLDs:
.com 492,966
.org 63,763
.net 39,855
.ru 29,836
.de 16,337
.uk 15,460
.cn 10,485
.jp 8,791
.br 8,789
.in 7,286

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 178,829
C = US, ST = CA, L = San Francisco, O = "CloudFlare, Inc.", CN = CloudFlare Inc ECC CA-2 56,553
C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO ECC Domain Validation Secure Server CA 2 35,445
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 35,371
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 31,145
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 22,458
C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Domain Validation Secure Server CA 17,929
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 17,004
C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA 16,626
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL RSA CA 2018 11,690

Top 10 Protocols:
TLSv1.2 320,712
TLSv1 2,782
TLSv1.1 50

Top 10 Cipher Suites:
ECDHE-RSA-AES256-GCM-SHA384 133,732
ECDHE-RSA-AES128-GCM-SHA256 108,221
ECDHE-ECDSA-AES128-GCM-SHA256 54,001
ECDHE-RSA-AES256-SHA384 11,519
DHE-RSA-AES256-GCM-SHA384 2,571
0 2,353
ECDHE-RSA-AES256-SHA 1,681
ECDHE-ECDSA-AES256-GCM-SHA384 1,581
AES256-SHA 1,285
DHE-RSA-AES256-SHA 980

Top 10 PFS Key Exchange Params:
ECDH, P-256, 256 bits 296,492
ECDH, P-384, 384 bits 10,568
ECDH, P-521, 521 bits 5,055
DH, 1024 bits 2,771
DH, 2048 bits 1,035
DH, 4096 bits 107
ECDH, B-571, 570 bits 29
DH, 3072 bits 10
ECDH, brainpoolP512r1, 512 bits 3
ECDH, brainpoolP256r1, 256 bits 1

Top Key Sizes:
2048 bit 243,952
256 bit 54,989
4096 bit 20,961
384 bit 594
3072 bit 526
1024 bit 137
8192 bit 20
4056 bit 4
521 bit 1
2024 bit 1

Sites using CAA:
15,864