Total Rows: 830263 

Security Headers Grades:
A 64,252
A+ 7,539
B 46,167
C 52,928
D 170,492
E 19,126
F 468,529
R 1,230

Sites using strict-transport-security:
270,849

Sites using content-security-policy:
140,555

Sites using content-security-policy-report-only:
8,909

Sites using x-webkit-csp:
836

Sites using x-content-security-policy:
3,895

Sites using public-key-pins:
750

Sites using public-key-pins-report-only:
16

Sites using x-content-type-options:
273,815

Sites using x-frame-options:
285,035

Sites using x-xss-protection:
177,304

Sites using x-download-options:
36,890

Sites using x-permitted-cross-domain-policies:
44,716

Sites using access-control-allow-origin:
55,558

Sites using referrer-policy:
154,035

Sites using feature-policy:
5,843

Sites using permissions-policy:
59,566

Sites using report-to:
136,359

Sites using nel:
132,754

Sites using security.txt:
9,511

Sites redirecting to HTTPS:
671,661

Sites using Let's Encrypt certificate:
252,419

Sites using EV Certificates:
5,923

Top 10 Server headers:
cloudflare 298,081
nginx 125,748
Apache 82,994
LiteSpeed 23,991
Microsoft-IIS/10.0 18,906
nginx/1.18.0 (Ubuntu) 10,302
AmazonS3 9,732
openresty 6,080
Vercel 6,000
CloudFront 4,754

Top 10 TLDs:
.com 375,786
.org 39,244
.net 38,824
.ru 38,485
.de 19,403
.br 15,428
.uk 14,868
.jp 10,673
.nl 9,249
.in 8,827

Top 10 Certificate Issuers:
C = US, O = Google Trust Services, CN = WE1 224,534
C = US, O = Let's Encrypt, CN = R10 97,475
C = US, O = Let's Encrypt, CN = R11 96,366
C = US, O = Let's Encrypt, CN = E6 29,148
C = US, O = Let's Encrypt, CN = E5 29,127
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 27,555
C = US, O = Amazon, CN = Amazon RSA 2048 M02 18,894
C = US, O = Amazon, CN = Amazon RSA 2048 M03 18,843
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 12,193
C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1 9,944

TLS Protocol Versions:
TLSv1.3 549,518
TLSv1.2 109,789
TLSv1.0 244

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 463,972
TLS_AES_128_GCM_SHA256 81,269
ECDHE-RSA-AES256-GCM-SHA384 51,673
ECDHE-RSA-AES128-GCM-SHA256 36,423
ECDHE-ECDSA-CHACHA20-POLY1305 7,397
ECDHE-RSA-CHACHA20-POLY1305 5,087
TLS_CHACHA20_POLY1305_SHA256 4,277
ECDHE-ECDSA-AES256-GCM-SHA384 3,365
ECDHE-RSA-AES256-SHA384 2,747
ECDHE-ECDSA-AES128-GCM-SHA256 1,410

Top 10 PFS Key Exchange Params:
X25519, 253 bits 568,824
ECDH, P-256, 256 bits 65,225
ECDH, P-384, 384 bits 17,506
ECDH, P-521, 521 bits 6,553
DH, 1024 bits 425
DH, 2048 bits 314
X448, 448 bits 24
DH, 4096 bits 21
DH, 3072 bits 1

Top Key Sizes:
2048 bit 328,283
256 bit 273,172
4096 bit 44,068
384 bit 9,248
3072 bit 3,992
1024 bit 99
8192 bit 26
2056 bit 1
521 bit 1

Sites using CAA:
58,810

HTTP Protocol Versions:
http/2.0 567,198
http/1.1 262,149
http/1.0 862