Total Rows: 815832 

Security Headers Grades:
A 43,483
A+ 7,776
B 66,678
C 47,376
D 172,835
E 20,337
F 456,055
R 1,292

Sites using strict-transport-security:
243,331

Sites using content-security-policy:
117,892

Sites using content-security-policy-report-only:
9,119

Sites using x-webkit-csp:
700

Sites using x-content-security-policy:
3,634

Sites using public-key-pins:
928

Sites using public-key-pins-report-only:
12

Sites using x-content-type-options:
268,566

Sites using x-frame-options:
284,613

Sites using x-xss-protection:
175,850

Sites using x-download-options:
40,145

Sites using x-permitted-cross-domain-policies:
47,915

Sites using access-control-allow-origin:
53,468

Sites using referrer-policy:
168,221

Sites using feature-policy:
5,372

Sites using permissions-policy:
83,378

Sites using report-to:
233,060

Sites using nel:
229,287

Sites using security.txt:
9,553

Sites redirecting to HTTPS:
648,348

Sites using Let's Encrypt certificate:
240,000

Sites using EV Certificates:
5,455

Top 10 Server headers:
cloudflare 302,920
nginx 128,963
Apache 76,132
LiteSpeed 23,763
Microsoft-IIS/10.0 16,943
AmazonS3 9,306
nginx/1.18.0 (Ubuntu) 8,309
openresty 6,217
Vercel 6,087
CloudFront 5,034

Top 10 TLDs:
.com 370,685
.net 36,861
.ru 35,469
.org 35,427
.de 18,071
.br 15,072
.uk 14,767
.jp 10,625
.in 9,379
.nl 8,468

Top 10 Certificate Issuers:
C = US, O = Google Trust Services, CN = WE1 223,805
C = US, O = Let's Encrypt, CN = R10 91,483
C = US, O = Let's Encrypt, CN = R11 90,410
C = US, O = Let's Encrypt, CN = E6 29,027
C = US, O = Let's Encrypt, CN = E5 28,829
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 23,417
C = US, O = Amazon, CN = Amazon RSA 2048 M02 17,083
C = US, O = Amazon, CN = Amazon RSA 2048 M03 16,799
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 10,810
C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1 9,432

TLS Protocol Versions:
TLSv1.3 538,542
TLSv1.2 99,384
TLSv1.0 209

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 455,221
TLS_AES_128_GCM_SHA256 79,521
ECDHE-RSA-AES256-GCM-SHA384 47,230
ECDHE-RSA-AES128-GCM-SHA256 32,806
ECDHE-ECDSA-CHACHA20-POLY1305 6,238
ECDHE-RSA-CHACHA20-POLY1305 4,771
TLS_CHACHA20_POLY1305_SHA256 3,800
ECDHE-ECDSA-AES256-GCM-SHA384 3,207
ECDHE-RSA-AES256-SHA384 2,274
ECDHE-ECDSA-AES128-GCM-SHA256 1,345

Top 10 PFS Key Exchange Params:
X25519, 253 bits 555,479
ECDH, P-256, 256 bits 59,750
ECDH, P-384, 384 bits 15,600
ECDH, P-521, 521 bits 6,042
DH, 1024 bits 389
DH, 2048 bits 276
DH, 4096 bits 22
X448, 448 bits 19
DH, 3072 bits 1

Top Key Sizes:
2048 bit 308,798
256 bit 273,788
4096 bit 42,099
384 bit 8,983
3072 bit 3,790
1024 bit 96
8192 bit 22
2056 bit 1
521 bit 1

Sites using CAA:
59,289

HTTP Protocol Versions:
http/2.0 550,928
http/1.1 264,095
http/1.0 764