Total Rows: 367977 

Security Headers Grades:
A 10,463
A+ 1,666
B 8,927
C 12,025
D 47,743
E 5,515
F 281,591
R 47

Sites using strict-transport-security:
55,266

Sites using content-security-policy:
22,063

Sites using content-security-policy-report-only:
1,139

Sites using x-webkit-csp:
283

Sites using x-content-security-policy:
765

Sites using public-key-pins:
253

Sites using public-key-pins-report-only:
19

Sites using x-content-type-options:
63,944

Sites using x-frame-options:
66,909

Sites using x-xss-protection:
50,039

Sites using x-download-options:
8,044

Sites using x-permitted-cross-domain-policies:
7,333

Sites using access-control-allow-origin:
14,670

Sites using referrer-policy:
16,604

Sites using feature-policy:
2,289

Sites using report-to:
5,023

Sites using nel:
4,900

Sites using security.txt:
1,447

Sites redirecting to HTTPS:
213,347

Sites using Let's Encrypt certificate:
77,694

Sites using EV Certificates:
5,586

Top 10 Server headers:
Apache 79,473
cloudflare 75,240
nginx 59,369
Microsoft-IIS/7.5 9,759
Microsoft-IIS/8.5 9,584
LiteSpeed 8,372
Microsoft-IIS/10.0 6,835
openresty 6,438
nginx/1.16.1 4,277
Apache/2 3,292

Top 10 TLDs:
.com 190,616
.org 24,367
.net 17,085
.ru 12,811
.de 7,440
.uk 6,462
.cn 6,392
.live 4,664
.jp 4,054
.br 3,928

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 77,694
C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 35,145
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 15,501
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 11,447
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 8,967
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 7,169
C = US, ST = CA, L = San Francisco, O = "CloudFlare, Inc.", CN = CloudFlare Inc ECC CA-2 6,802
C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA 5,285
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL RSA CA 2018 4,010
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018 3,334

TLS Protocol Versions:
TLSv1.2 106,243
TLSv1.3 93,573
TLSv1.0 508

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 87,127
ECDHE-RSA-AES256-GCM-SHA384 55,231
ECDHE-RSA-AES128-GCM-SHA256 37,385
TLS_AES_128_GCM_SHA256 5,727
ECDHE-RSA-AES256-SHA384 5,131
ECDHE-RSA-CHACHA20-POLY1305 3,891
DHE-RSA-AES256-GCM-SHA384 984
ECDHE-ECDSA-CHACHA20-POLY1305 870
TLS_CHACHA20_POLY1305_SHA256 719
ECDHE-ECDSA-AES128-GCM-SHA256 671

Top 10 PFS Key Exchange Params:
X25519, 253 bits 120,144
ECDH, P-256, 256 bits 68,752
ECDH, P-384, 384 bits 7,147
ECDH, P-521, 521 bits 2,150
DH, 1024 bits 962
DH, 2048 bits 334
DH, 4096 bits 43
X448, 448 bits 6
DH, 3072 bits 3

Top Key Sizes:
2048 bit 144,163
256 bit 40,037
4096 bit 13,766
384 bit 785
3072 bit 669
1024 bit 97
8192 bit 11
4056 bit 4
2408 bit 2
2304 bit 1

Sites using CAA:
7,837

HTTP Protocol Versions:
http/1.1 220,500
http/2.0 146,283
http/1.0 1,188