Total Rows: 764767 

Security Headers Grades:
A 42,257
A+ 7,658
B 60,835
C 44,919
D 149,060
E 16,560
F 442,480
R 998

Sites using strict-transport-security:
218,034

Sites using content-security-policy:
110,104

Sites using content-security-policy-report-only:
7,354

Sites using x-webkit-csp:
596

Sites using x-content-security-policy:
3,100

Sites using public-key-pins:
624

Sites using public-key-pins-report-only:
12

Sites using x-content-type-options:
241,691

Sites using x-frame-options:
254,111

Sites using x-xss-protection:
156,739

Sites using x-download-options:
40,699

Sites using x-permitted-cross-domain-policies:
48,133

Sites using access-control-allow-origin:
46,048

Sites using referrer-policy:
162,379

Sites using feature-policy:
4,530

Sites using permissions-policy:
83,355

Sites using report-to:
208,631

Sites using nel:
206,479

Sites using security.txt:
8,423

Sites redirecting to HTTPS:
575,475

Sites using Let's Encrypt certificate:
213,586

Sites using EV Certificates:
4,421

Top 10 Server headers:
cloudflare 272,838
nginx 161,953
Apache 66,401
LiteSpeed 21,895
Microsoft-IIS/10.0 13,920
AmazonS3 7,836
nginx/1.18.0 (Ubuntu) 6,639
openresty 6,198
Vercel 5,819
CloudFront 4,733

Top 10 TLDs:
.com 327,417
.cn 54,070
.net 33,104
.ru 30,993
.org 29,174
.de 15,957
.br 13,893
.uk 13,422
.jp 9,387
.in 9,020

Top 10 Certificate Issuers:
C = US, O = Google Trust Services, CN = WE1 206,187
C = US, O = Let's Encrypt, CN = R13 79,196
C = US, O = Let's Encrypt, CN = R12 78,842
C = US, O = Let's Encrypt, CN = E8 27,271
C = US, O = Let's Encrypt, CN = E7 26,879
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 12,480
C = US, O = Amazon, CN = Amazon RSA 2048 M03 10,243
C = US, O = Amazon, CN = Amazon RSA 2048 M02 10,173
C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA DV R36 9,432
C = US, O = Amazon, CN = Amazon RSA 2048 M04 9,233

TLS Protocol Versions:
TLSv1.3 476,587
TLSv1.2 77,270
TLSv1.0 146

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 404,217
TLS_AES_128_GCM_SHA256 69,124
ECDHE-RSA-AES256-GCM-SHA384 35,890
ECDHE-RSA-AES128-GCM-SHA256 25,426
ECDHE-ECDSA-CHACHA20-POLY1305 5,266
ECDHE-RSA-CHACHA20-POLY1305 3,703
TLS_CHACHA20_POLY1305_SHA256 3,246
ECDHE-ECDSA-AES256-GCM-SHA384 2,996
ECDHE-RSA-AES256-SHA384 1,634
ECDHE-ECDSA-AES128-GCM-SHA256 1,175

Top 10 PFS Key Exchange Params:
X25519, 253 bits 491,913
ECDH, P-256, 256 bits 43,495
ECDH, P-384, 384 bits 12,744
ECDH, P-521, 521 bits 4,874
DH, 1024 bits 296
DH, 2048 bits 204
X448, 448 bits 19
DH, 4096 bits 17

Top Key Sizes:
2048 bit 257,873
256 bit 246,989
4096 bit 37,571
384 bit 7,907
3072 bit 3,139
1024 bit 64
8192 bit 16
2056 bit 1
512 bit 1

Sites using CAA:
50,992

HTTP Protocol Versions:
http/2.0 492,328
http/1.1 271,767
http/1.0 636