Total Rows: 717714 

Security Headers Grades:
A 22,240
A+ 3,535
B 17,849
C 23,515
D 93,603
E 11,344
F 545,455
R 173

Sites using strict-transport-security:
113,063

Sites using content-security-policy:
45,559

Sites using content-security-policy-report-only:
2,454

Sites using x-webkit-csp:
517

Sites using x-content-security-policy:
1,416

Sites using public-key-pins:
502

Sites using public-key-pins-report-only:
25

Sites using x-content-type-options:
126,652

Sites using x-frame-options:
133,922

Sites using x-xss-protection:
99,344

Sites using x-download-options:
16,721

Sites using x-permitted-cross-domain-policies:
15,356

Sites using access-control-allow-origin:
29,097

Sites using referrer-policy:
34,489

Sites using feature-policy:
4,573

Sites using report-to:
119,443

Sites using nel:
119,150

Sites using security.txt:
3,734

Sites redirecting to HTTPS:
416,787

Sites using Let's Encrypt certificate:
153,022

Sites using EV Certificates:
10,099

Top 10 Server headers:
Apache 177,207
cloudflare 137,298
nginx 115,744
LiteSpeed 16,931
Microsoft-IIS/8.5 14,448
Microsoft-IIS/10.0 14,152
openresty 12,138
Microsoft-IIS/7.5 10,893
nginx/1.16.1 8,388
Apache/2 6,660

Top 10 TLDs:
.com 367,601
.org 48,890
.net 36,085
.ru 26,503
.de 18,615
.uk 12,246
.cn 10,198
.buzz 9,405
.jp 8,612
.info 7,227

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 153,021
C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 83,619
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 31,579
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 20,697
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 18,492
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 13,869
C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA 10,268
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL RSA CA 2018 6,450
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018 6,215
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = Encryption Everywhere DV TLS CA - G1 4,375

TLS Protocol Versions:
TLSv1.3 215,569
TLSv1.2 180,755
TLSv1.0 837

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 194,593
ECDHE-RSA-AES256-GCM-SHA384 91,386
ECDHE-RSA-AES128-GCM-SHA256 63,608
TLS_AES_128_GCM_SHA256 19,100
ECDHE-RSA-AES256-SHA384 9,749
ECDHE-RSA-CHACHA20-POLY1305 7,374
TLS_CHACHA20_POLY1305_SHA256 1,876
ECDHE-ECDSA-CHACHA20-POLY1305 1,763
DHE-RSA-AES256-GCM-SHA384 1,744
ECDHE-ECDSA-AES256-GCM-SHA384 1,235

Top 10 PFS Key Exchange Params:
X25519, 253 bits 255,156
ECDH, P-256, 256 bits 119,609
ECDH, P-384, 384 bits 14,403
ECDH, P-521, 521 bits 4,242
DH, 1024 bits 1,629
DH, 2048 bits 597
DH, 4096 bits 86
X448, 448 bits 10
DH, 3072 bits 7

Top Key Sizes:
2048 bit 283,310
256 bit 81,890
4096 bit 26,686
384 bit 2,088
3072 bit 1,560
1024 bit 169
8192 bit 21
4056 bit 6
3112 bit 2
2024 bit 1

Sites using CAA:
16,076

HTTP Protocol Versions:
http/1.1 423,238
http/2.0 292,173
http/1.0 2,291