Total Rows: 867168 

Security Headers Grades:
A 31,670
A+ 669
B 30,560
C 37,789
D 131,423
E 11,037
F 623,937
R 83

Sites using strict-transport-security:
171,148

Sites using content-security-policy:
70,551

Sites using content-security-policy-report-only:
4,149

Sites using x-webkit-csp:
747

Sites using x-content-security-policy:
1,924

Sites using public-key-pins:
509

Sites using public-key-pins-report-only:
29

Sites using x-content-type-options:
182,064

Sites using x-frame-options:
189,156

Sites using x-xss-protection:
141,050

Sites using x-download-options:
23,170

Sites using x-permitted-cross-domain-policies:
21,798

Sites using access-control-allow-origin:
40,253

Sites using referrer-policy:
57,783

Sites using feature-policy:
7,576

Sites using permissions-policy:
2,220

Sites using report-to:
152,831

Sites using nel:
152,287

Sites using security.txt:
3,151

Sites redirecting to HTTPS:
588,250

Sites using Let's Encrypt certificate:
221,246

Sites using EV Certificates:
12,089

Top 10 Server headers:
Apache 195,519
cloudflare 177,106
nginx 149,856
LiteSpeed 21,408
Microsoft-IIS/10.0 18,225
Microsoft-IIS/8.5 15,207
openresty 14,151
Microsoft-IIS/7.5 9,751
nginx/1.16.1 9,014
Apache/2 7,765

Top 10 TLDs:
.com 448,492
.org 62,097
.net 40,755
.ru 30,654
.de 23,593
.uk 16,460
.jp 10,606
.cn 10,089
.in 8,781
.nl 8,737

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = R3 220,911
C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 125,453
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 43,998
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 26,767
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 26,515
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 20,332
C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA 10,465
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018 6,909
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = Encryption Everywhere DV TLS CA - G1 6,286
C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", OU = http://certs.starfieldtech.com/repository/, CN = Starfield Secure Certificate Authority - G2 5,177

TLS Protocol Versions:
TLSv1.3 329,333
TLSv1.2 236,219
TLSv1.0 1,030

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 297,695
ECDHE-RSA-AES256-GCM-SHA384 119,854
ECDHE-RSA-AES128-GCM-SHA256 82,772
TLS_AES_128_GCM_SHA256 28,702
ECDHE-RSA-AES256-SHA384 11,485
ECDHE-RSA-CHACHA20-POLY1305 8,966
ECDHE-ECDSA-AES256-GCM-SHA384 3,777
TLS_CHACHA20_POLY1305_SHA256 2,936
ECDHE-ECDSA-CHACHA20-POLY1305 2,290
DHE-RSA-AES256-GCM-SHA384 2,239

Top 10 PFS Key Exchange Params:
X25519, 253 bits 388,127
ECDH, P-256, 256 bits 146,987
ECDH, P-384, 384 bits 21,747
ECDH, P-521, 521 bits 5,202
DH, 1024 bits 2,012
DH, 2048 bits 754
DH, 4096 bits 105
X448, 448 bits 12
DH, 3072 bits 8

Top Key Sizes:
2048 bit 394,180
256 bit 126,284
4096 bit 37,276
384 bit 4,398
3072 bit 2,561
1024 bit 213
8192 bit 25
512 bit 2
3112 bit 2
2408 bit 2

Sites using CAA:
25,433

HTTP Protocol Versions:
http/1.1 434,150
http/2.0 430,015
http/1.0 2,986