Total Rows: 941009 

Security Headers Grades:
A 20,363
A+ 1,505
B 12,718
C 30,177
D 126,573
E 15,749
F 733,858
R 66

Sites using strict-transport-security:
128,921

Sites using content-security-policy:
39,038

Sites using content-security-policy-report-only:
6,127

Sites using x-webkit-csp:
548

Sites using x-content-security-policy:
1,525

Sites using public-key-pins:
679

Sites using public-key-pins-report-only:
3,605

Sites using x-content-type-options:
155,386

Sites using x-frame-options:
140,639

Sites using x-xss-protection:
128,119

Sites using x-download-options:
20,096

Sites using x-permitted-cross-domain-policies:
19,293

Sites using access-control-allow-origin:
35,431

Sites using referrer-policy:
28,974

Sites using feature-policy:
1,082

Sites redirecting to HTTPS:
524,033

Sites using Let's Encrypt certificate:
187,097

Top 10 Server headers:
Apache 198,827
nginx 173,003
cloudflare 108,132
Microsoft-IIS/8.5 28,643
LiteSpeed 25,505
nginx/1.14.1 25,114
GSE 22,390
Microsoft-IIS/7.5 18,643
openresty 16,524
Microsoft-IIS/10.0 16,241

Top 10 TLDs:
.com 476,727
.org 46,614
.ru 40,221
.net 37,686
.de 26,637
.br 20,591
.uk 14,201
.pl 13,071
.ir 11,939
.in 11,939

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 187,097
C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Domain Validation Secure Server CA 61,449
C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO ECC Domain Validation Secure Server CA 2 52,280
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 31,302
C = US, ST = CA, L = San Francisco, O = "CloudFlare, Inc.", CN = CloudFlare Inc ECC CA-2 17,057
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 16,331
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 15,406
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL RSA CA 2018 14,322
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 High Assurance Server CA 12,016
C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA 11,687

Top 10 Protocols:
TLSv1.2 311,637
TLSv1 3,879
TLSv1.1 77

Top 10 Cipher Suites:
ECDHE-RSA-AES256-GCM-SHA384 137,971
ECDHE-RSA-AES128-GCM-SHA256 106,556
ECDHE-ECDSA-AES128-GCM-SHA256 43,211
ECDHE-RSA-AES256-SHA384 11,180
DHE-RSA-AES256-GCM-SHA384 2,958
ECDHE-RSA-AES256-SHA 1,986
0 1,719
AES256-SHA 1,394
DHE-RSA-AES256-SHA 1,300
AES256-GCM-SHA384 1,091

Top 10 PFS Key Exchange Params:
ECDH, P-256, 256 bits 289,733
ECDH, P-384, 384 bits 8,793
ECDH, P-521, 521 bits 4,717
DH, 1024 bits 3,360
DH, 2048 bits 1,217
DH, 4096 bits 138
ECDH, B-571, 570 bits 61
DH, 3072 bits 10
ECDH, secp256k1, 256 bits 1

Top Key Sizes:
2048 bit 246,666
256 bit 43,906
4096 bit 22,739
1024 bit 197
384 bit 183
3072 bit 153
8192 bit 13
4056 bit 2
4086 bit 1
3248 bit 1

Sites using CAA:
12,432