Total Rows: 239138 

Security Headers Grades:
A 15,141
A+ 1,656
B 11,269
C 11,302
D 48,407
E 7,528
F 143,806
R 29

Sites using strict-transport-security:
67,956

Sites using content-security-policy:
33,891

Sites using content-security-policy-report-only:
2,213

Sites using x-webkit-csp:
217

Sites using x-content-security-policy:
893

Sites using public-key-pins:
192

Sites using public-key-pins-report-only:
5

Sites using x-content-type-options:
63,485

Sites using x-frame-options:
76,018

Sites using x-xss-protection:
44,898

Sites using x-download-options:
8,726

Sites using x-permitted-cross-domain-policies:
10,489

Sites using access-control-allow-origin:
14,589

Sites using referrer-policy:
41,658

Sites using feature-policy:
1,484

Sites using permissions-policy:
14,699

Sites using report-to:
65,897

Sites using nel:
65,297

Sites using security.txt:
2,387

Sites redirecting to HTTPS:
177,689

Sites using Let's Encrypt certificate:
65,762

Sites using EV Certificates:
1,674

Top 10 Server headers:
cloudflare 84,028
nginx 40,044
Apache 23,917
LiteSpeed 6,033
Microsoft-IIS/10.0 5,275
openresty 5,192
nginx/1.18.0 (Ubuntu) 3,118
AmazonS3 2,621
Vercel 1,260
CloudFront 1,187

Top 10 TLDs:
.com 108,662
.ru 11,052
.net 10,992
.org 10,546
.jp 6,204
.de 5,019
.br 4,432
.uk 3,362
.in 2,565
.io 2,354

Top 10 Certificate Issuers:
C = US, O = Google Trust Services, CN = WE1 57,483
C = US, O = Let's Encrypt, CN = R10 25,540
C = US, O = Let's Encrypt, CN = R11 25,270
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 7,562
C = US, O = Let's Encrypt, CN = E6 7,461
C = US, O = Let's Encrypt, CN = E5 7,368
C = US, O = Amazon, CN = Amazon RSA 2048 M02 5,263
C = US, O = Amazon, CN = Amazon RSA 2048 M03 5,170
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 3,357
C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1 2,862

TLS Protocol Versions:
TLSv1.3 101,658
TLSv1.2 24,659
TLSv1.0 52

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 86,719
TLS_AES_128_GCM_SHA256 14,210
ECDHE-RSA-AES256-GCM-SHA384 11,639
ECDHE-RSA-AES128-GCM-SHA256 8,384
ECDHE-ECDSA-CHACHA20-POLY1305 1,375
ECDHE-RSA-CHACHA20-POLY1305 1,370
TLS_CHACHA20_POLY1305_SHA256 729
ECDHE-ECDSA-AES256-GCM-SHA384 631
ECDHE-RSA-AES256-SHA384 570
ECDHE-ECDSA-AES128-GCM-SHA256 283

Top 10 PFS Key Exchange Params:
X25519, 253 bits 107,775
ECDH, P-256, 256 bits 14,609
ECDH, P-384, 384 bits 2,480
ECDH, P-521, 521 bits 1,178
DH, 1024 bits 105
DH, 2048 bits 70
X448, 448 bits 5
DH, 4096 bits 3

Top Key Sizes:
2048 bit 64,558
256 bit 51,057
4096 bit 8,310
384 bit 1,570
3072 bit 702
1024 bit 23
8192 bit 4
2056 bit 1

Sites using CAA:
8,482

HTTP Protocol Versions:
http/2.0 146,005
http/1.1 92,779
http/1.0 342