Total Rows: 792966 

Security Headers Grades:
A 48,812
A+ 9,232
B 59,840
C 51,698
D 164,840
E 18,764
F 438,599
R 1,181

Sites using strict-transport-security:
241,056

Sites using content-security-policy:
125,106

Sites using content-security-policy-report-only:
8,669

Sites using x-webkit-csp:
607

Sites using x-content-security-policy:
3,329

Sites using public-key-pins:
626

Sites using public-key-pins-report-only:
15

Sites using x-content-type-options:
281,680

Sites using x-frame-options:
292,279

Sites using x-xss-protection:
163,221

Sites using x-download-options:
38,150

Sites using x-permitted-cross-domain-policies:
47,899

Sites using access-control-allow-origin:
50,138

Sites using referrer-policy:
195,839

Sites using feature-policy:
4,848

Sites using permissions-policy:
95,094

Sites using report-to:
257,427

Sites using nel:
255,088

Sites using security.txt:
9,636

Sites redirecting to HTTPS:
642,119

Sites using Let's Encrypt certificate:
238,790

Sites using EV Certificates:
4,558

Top 10 Server headers:
cloudflare 328,631
nginx 111,609
Apache 69,207
LiteSpeed 23,612
Microsoft-IIS/10.0 14,680
AmazonS3 8,691
openresty 8,249
Vercel 7,088
nginx/1.18.0 (Ubuntu) 6,189
CloudFront 5,760

Top 10 TLDs:
.com 353,331
.net 35,294
.org 33,992
.ru 31,370
.de 21,991
.uk 19,934
.br 14,018
.jp 10,389
.in 9,548
.nl 8,967

Top 10 Certificate Issuers:
C = US, O = Google Trust Services, CN = WE1 240,499
C = US, O = Let's Encrypt, CN = R12 83,647
C = US, O = Let's Encrypt, CN = R13 83,517
C = US, O = Let's Encrypt, CN = E8 35,722
C = US, O = Let's Encrypt, CN = E7 35,431
C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA DV R36 15,896
C = US, O = Amazon, CN = Amazon RSA 2048 M04 15,716
C = US, O = Amazon, CN = Amazon RSA 2048 M01 10,476
C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1 8,785
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 8,617

TLS Protocol Versions:
TLSv1.3 552,935
TLSv1.2 77,767
TLSv1.0 114

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 470,460
TLS_AES_128_GCM_SHA256 78,632
ECDHE-RSA-AES256-GCM-SHA384 35,675
ECDHE-RSA-AES128-GCM-SHA256 25,302
ECDHE-ECDSA-CHACHA20-POLY1305 6,304
TLS_CHACHA20_POLY1305_SHA256 3,843
ECDHE-RSA-CHACHA20-POLY1305 3,556
ECDHE-ECDSA-AES256-GCM-SHA384 2,959
ECDHE-RSA-AES256-SHA384 1,607
ECDHE-ECDSA-AES128-GCM-SHA256 1,185

Top 10 PFS Key Exchange Params:
X25519, 253 bits 569,364
ECDH, P-256, 256 bits 42,033
ECDH, P-384, 384 bits 13,273
ECDH, P-521, 521 bits 5,177
DH, 1024 bits 280
DH, 2048 bits 209
DH, 4096 bits 18
X448, 448 bits 18
DH, 3072 bits 1

Top Key Sizes:
256 bit 302,815
2048 bit 274,614
4096 bit 40,682
384 bit 8,570
3072 bit 3,613
1024 bit 63
8192 bit 11
2056 bit 4

Sites using CAA:
56,782

HTTP Protocol Versions:
http/2.0 556,873
http/1.1 235,410
http/1.0 652