Total Rows: 870591 

Security Headers Grades:
A 20,618
A+ 3,172
B 17,197
C 29,993
D 114,317
E 13,758
F 671,418
R 118

Sites using strict-transport-security:
120,547

Sites using content-security-policy:
46,520

Sites using content-security-policy-report-only:
2,220

Sites using x-webkit-csp:
630

Sites using x-content-security-policy:
1,806

Sites using public-key-pins:
648

Sites using public-key-pins-report-only:
40

Sites using x-content-type-options:
141,442

Sites using x-frame-options:
153,590

Sites using x-xss-protection:
111,992

Sites using x-download-options:
16,876

Sites using x-permitted-cross-domain-policies:
15,595

Sites using access-control-allow-origin:
36,450

Sites using referrer-policy:
31,844

Sites using feature-policy:
3,105

Sites using report-to:
11,184

Sites using nel:
11,046

Sites using security.txt:
1,589

Sites redirecting to HTTPS:
508,780

Sites using Let's Encrypt certificate:
169,185

Sites using EV Certificates:
17,078

Top 10 Server headers:
Apache 193,197
nginx 139,748
cloudflare 139,119
Microsoft-IIS/7.5 30,695
Microsoft-IIS/8.5 25,875
LiteSpeed 17,205
Microsoft-IIS/10.0 15,803
openresty 10,513
Apache/2 9,265
nginx/1.14.1 8,449

Top 10 TLDs:
.com 486,529
.org 62,971
.net 40,637
.ru 30,487
.de 15,440
.uk 14,657
.cn 12,268
.br 8,941
.jp 8,755
.in 7,211

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 169,185
C = US, ST = CA, L = San Francisco, O = "CloudFlare, Inc.", CN = CloudFlare Inc ECC CA-2 46,742
C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO ECC Domain Validation Secure Server CA 2 44,144
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 35,805
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 27,090
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 21,461
C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Domain Validation Secure Server CA 21,438
C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA 16,242
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 16,242
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL RSA CA 2018 11,567

Top 10 Protocols:
TLSv1.2 312,656
TLSv1 2,964
TLSv1.1 51

Top 10 Cipher Suites:
ECDHE-RSA-AES256-GCM-SHA384 129,820
ECDHE-RSA-AES128-GCM-SHA256 102,996
ECDHE-ECDSA-AES128-GCM-SHA256 54,281
ECDHE-RSA-AES256-SHA384 11,891
DHE-RSA-AES256-GCM-SHA384 2,641
0 2,355
ECDHE-RSA-AES256-SHA 1,779
ECDHE-ECDSA-AES256-GCM-SHA384 1,475
AES256-SHA 1,343
AES256-GCM-SHA384 1,168

Top 10 PFS Key Exchange Params:
ECDH, P-256, 256 bits 288,554
ECDH, P-384, 384 bits 9,886
ECDH, P-521, 521 bits 5,251
DH, 1024 bits 2,938
DH, 2048 bits 984
DH, 4096 bits 113
ECDH, B-571, 570 bits 34
DH, 3072 bits 11
ECDH, secp256k1, 256 bits 3
ECDH, brainpoolP256r1, 256 bits 1

Top Key Sizes:
2048 bit 236,505
256 bit 55,208
4096 bit 20,439
384 bit 548
3072 bit 420
1024 bit 162
8192 bit 16
4056 bit 5
512 bit 2
2255 bit 2

Sites using CAA:
15,044