Total Rows: 836048 

Security Headers Grades:
A 33,280
A+ 2,900
B 35,034
C 40,046
D 146,326
E 9,669
F 568,717
R 76

Sites using strict-transport-security:
195,430

Sites using content-security-policy:
83,441

Sites using content-security-policy-report-only:
5,137

Sites using x-webkit-csp:
779

Sites using x-content-security-policy:
2,239

Sites using public-key-pins:
482

Sites using public-key-pins-report-only:
26

Sites using x-content-type-options:
192,533

Sites using x-frame-options:
208,061

Sites using x-xss-protection:
143,906

Sites using x-download-options:
22,797

Sites using x-permitted-cross-domain-policies:
22,003

Sites using access-control-allow-origin:
42,621

Sites using referrer-policy:
73,418

Sites using feature-policy:
5,568

Sites using permissions-policy:
34,642

Sites using report-to:
182,715

Sites using nel:
181,693

Sites using security.txt:
9,767

Sites redirecting to HTTPS:
612,461

Sites using Let's Encrypt certificate:
237,574

Sites using EV Certificates:
8,850

Top 10 Server headers:
cloudflare 228,086
nginx 151,318
Apache 131,011
LiteSpeed 27,117
Microsoft-IIS/10.0 17,804
openresty 16,109
Microsoft-IIS/8.5 10,885
AmazonS3 6,435
Apache/2 5,744
nginx/1.20.2 5,653

Top 10 TLDs:
.com 415,006
.org 47,787
.net 42,547
.ru 40,885
.de 16,828
.uk 14,813
.xyz 12,149
.jp 9,637
.in 7,932
.cn 7,869

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = R3 216,936
C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 146,198
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 39,306
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 29,961
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 21,279
C = US, O = Let's Encrypt, CN = E1 20,541
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 17,356
C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1 12,782
C = US, O = DigiCert Inc, CN = RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1 8,455
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = Encryption Everywhere DV TLS CA - G1 5,936

TLS Protocol Versions:
TLSv1.3 392,375
TLSv1.2 186,569
TLSv1.0 521

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 349,423
ECDHE-RSA-AES256-GCM-SHA384 94,300
ECDHE-RSA-AES128-GCM-SHA256 67,962
TLS_AES_128_GCM_SHA256 40,277
ECDHE-RSA-AES256-SHA384 8,264
ECDHE-RSA-CHACHA20-POLY1305 7,536
TLS_CHACHA20_POLY1305_SHA256 2,675
ECDHE-ECDSA-CHACHA20-POLY1305 2,418
ECDHE-ECDSA-AES256-GCM-SHA384 1,857
DHE-RSA-AES256-GCM-SHA384 1,280

Top 10 PFS Key Exchange Params:
X25519, 253 bits 441,972
ECDH, P-256, 256 bits 112,974
ECDH, P-384, 384 bits 17,592
ECDH, P-521, 521 bits 3,983
DH, 1024 bits 1,138
DH, 2048 bits 570
DH, 4096 bits 19
X448, 448 bits 10
DH, 3072 bits 2

Top Key Sizes:
2048 bit 364,073
256 bit 167,138
4096 bit 36,145
384 bit 8,019
3072 bit 2,709
1024 bit 154
8192 bit 15
2096 bit 2
3112 bit 2
3096 bit 1

Sites using CAA:
36,445

HTTP Protocol Versions:
http/2.0 474,125
http/1.1 360,630
http/1.0 1,269