Total Rows: 410588 

Security Headers Grades:
A 22,730
A+ 2,779
B 18,764
C 18,130
D 76,188
E 11,700
F 260,239
R 58

Sites using strict-transport-security:
107,389

Sites using content-security-policy:
52,138

Sites using content-security-policy-report-only:
3,755

Sites using x-webkit-csp:
372

Sites using x-content-security-policy:
1,506

Sites using public-key-pins:
344

Sites using public-key-pins-report-only:
10

Sites using x-content-type-options:
101,545

Sites using x-frame-options:
123,354

Sites using x-xss-protection:
74,399

Sites using x-download-options:
13,173

Sites using x-permitted-cross-domain-policies:
15,725

Sites using access-control-allow-origin:
23,554

Sites using referrer-policy:
64,826

Sites using feature-policy:
2,648

Sites using permissions-policy:
22,102

Sites using report-to:
126,608

Sites using nel:
125,759

Sites using security.txt:
3,618

Sites redirecting to HTTPS:
294,186

Sites using Let's Encrypt certificate:
137,876

Sites using EV Certificates:
3,429

Top 10 Server headers:
cloudflare 153,085
nginx 63,338
Apache 39,009
LiteSpeed 9,740
Microsoft-IIS/10.0 8,834
nginx/1.14.0 (Ubuntu) 6,733
openresty 5,085
nginx/1.18.0 (Ubuntu) 4,572
AmazonS3 3,696
nginx/1.24.0 2,329

Top 10 TLDs:
.com 179,822
.ru 18,177
.net 17,465
.cn 15,898
.org 14,562
.top 9,004
.de 7,988
.br 7,355
.jp 6,541
.uk 5,322

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = R3 105,127
C = US, O = Google Trust Services LLC, CN = GTS CA 1P5 52,742
C = US, O = Let's Encrypt, CN = E1 32,738
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 13,341
C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 9,757
C = US, O = Amazon, CN = Amazon RSA 2048 M02 7,995
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 6,252
C = US, O = Amazon, CN = Amazon RSA 2048 M03 6,071
C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1 4,861
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 3,185

TLS Protocol Versions:
TLSv1.3 189,350
TLSv1.2 51,893
TLSv1.0 106

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 161,098
TLS_AES_128_GCM_SHA256 26,871
ECDHE-RSA-AES256-GCM-SHA384 25,418
ECDHE-RSA-AES128-GCM-SHA256 18,467
ECDHE-RSA-CHACHA20-POLY1305 3,483
ECDHE-RSA-AES256-SHA384 1,421
TLS_CHACHA20_POLY1305_SHA256 1,381
ECDHE-ECDSA-AES256-GCM-SHA384 1,110
ECDHE-ECDSA-CHACHA20-POLY1305 582
ECDHE-ECDSA-AES128-GCM-SHA256 515

Top 10 PFS Key Exchange Params:
X25519, 253 bits 201,081
ECDH, P-256, 256 bits 31,907
ECDH, P-384, 384 bits 4,931
ECDH, P-521, 521 bits 2,691
DH, 1024 bits 226
DH, 2048 bits 169
X448, 448 bits 9
DH, 4096 bits 6
DH, 3072 bits 1

Top Key Sizes:
2048 bit 175,207
256 bit 45,327
4096 bit 16,275
384 bit 2,942
3072 bit 1,216
1024 bit 45
8192 bit 7
3000 bit 1
3112 bit 1

Sites using CAA:
16,092

HTTP Protocol Versions:
http/2.0 239,517
http/1.1 170,510
http/1.0 537